last executing test programs: 4.270626106s ago: executing program 6 (id=17010): r0 = socket$unix(0x1, 0x1, 0x0) msgget(0x0, 0x6c4) mkdir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) getpeername$unix(r0, &(0x7f0000000000)=@file={0x0, ""/508}, &(0x7f0000000200)=0x1fe) pwrite(r0, &(0x7f0000000240)="c7fbf4a5515c9c0dd710fb688d5184fefcee979a26913a7a5330997bedaf8c554de0881c16fb80881b6ff48e7cc9e59dde11ae8eda1be25601074545c1558ceb2fc90a50b92e06df0c91a28f18e383b656419092a92696da7d3c71cf0a484c64e204bfbeea9c8dc45c3768dd005ac251bf220f08d546e36b68de0c59fb4c0a9d7fe473c13982bdbb40e4d1805a36081546f174ba68c42fc87a8a02fb7842c7125174d41eaf8a10cf3350400cf1f3d7beb8048c5eec0fc69230519c6b847dbdc513cc4b8201e9d4f6176db3382877cf4125c40cb3e38299172f7779f58658a033", 0xe0, 0x1cd) 4.122633263s ago: executing program 2 (id=17011): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/238, 0xee}, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket(0x2, 0x1, 0x0) (async) r3 = socket$inet(0x2, 0x3, 0x102) dup2(r3, r2) bind(r2, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) (async) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=""/244, 0xf4}, 0x0) sendmsg(r4, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) (async) socket(0x18, 0x1, 0x0) 4.116602809s ago: executing program 6 (id=17013): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f0000000040)=0x3ff) r1 = getpid() setpgid(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r1}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) dup2(r0, r0) ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r3 = getppid() setpgid(0x0, r3) 4.115357351s ago: executing program 2 (id=17015): setuid(0xffffffffffffffff) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSDISPLAYIO_SMODE(r1, 0x8004574c, &(0x7f0000000180)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffdc9, &(0x7f0000000680)=""/100, 0x64}, 0x80003fae}, 0x10, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000080)={0x0, 0x4}, 0x10, 0x400) shutdown(r2, 0x2) read(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{}, {0x1}, {0x6, 0x0, 0x0, 0xff}]}) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0xa) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047470, &(0x7f0000000140)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) ioctl$TIOCCDTR(r3, 0x20007478) sysctl$vm_swapencrypt(&(0x7f0000000140)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000001400), &(0x7f00000001c0), 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) socket$inet6(0x18, 0x1, 0x29) 3.992757859s ago: executing program 6 (id=17016): unveil(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='c\x00') mkdir(&(0x7f0000000080)='./file0\x00', 0x0) sysctl$net_inet_ip(&(0x7f0000000380)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000000480)="05e09fcf", 0x4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000200)={&(0x7f0000000100)='./file0\x00', 0x7, &(0x7f0000000140)='./file0/file0\x00', 0xe}) r3 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080)=0x83, 0x4) recvfrom$unix(r3, 0x0, 0x0, 0x802, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) open(&(0x7f00000002c0)='./file0\x00', 0x710, 0x0) mknod(&(0x7f00000000c0)='./file0/file0\x00', 0x20, 0x1e5f) 3.987425844s ago: executing program 2 (id=17019): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000040)=0x10) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)=""/239, 0xef}], 0x301, 0x0}, 0x40) writev(r2, &(0x7f0000000400)=[{&(0x7f00000003c0)="b1", 0x1}], 0x1) open(&(0x7f0000000280)='./file0\x00', 0x280, 0x0) r3 = socket(0x18, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) chroot(&(0x7f0000000740)='.\x00') sendmsg(r5, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000003}}) r7 = socket(0x18, 0x2, 0x0) setsockopt(r7, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r7, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3, 0x9e}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) close(r0) accept$inet6(r7, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 3.844722974s ago: executing program 6 (id=17020): ioctl$WSKBDIO_COMPLEXBELL(0xffffffffffffffff, 0x80105702, &(0x7f0000000000)={0x1ff, 0x1, 0x3, 0x3}) (async) ioctl$WSKBDIO_COMPLEXBELL(0xffffffffffffffff, 0x80105702, &(0x7f0000000000)={0x1ff, 0x1, 0x3, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000080)=0x5) (async) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000080)=0x5) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f00000000c0)=0xb) (async) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f00000000c0)=0xb) syz_emit_ethernet(0xe5, &(0x7f0000000100)={@empty, @broadcast, [{[{0x88a8, 0x5, 0x1}], {0x8100, 0x0, 0x1, 0x2}}], {@ipv4={0x800, {{0x11, 0x4, 0x2, 0x7, 0xcf, 0x67, 0x2, 0x3, 0x2b, 0x0, @empty, @remote={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0xf, 0xd7, [@local={0xac, 0x14, 0x0}, @multicast2, @loopback]}, @ssrr={0x89, 0x1f, 0x7, [@loopback, @empty, @broadcast, @remote={0xac, 0x14, 0x0}, @multicast2, @empty, @multicast1]}]}}, @generic="0460fc4a52f382c55c0d4118276e3f843254e3f145224892c527b504d5413c56e19cf5c2a5824794980ab3d1af1cf333bb6b1763dd6654f44f5681bbed701fe08bb97bca3e1b6013bdc8001c9adb9b918e510552fc1bb05301ae558b1303bb89e3543633755f66ef95b002cea99291ef6e29f5909d0e44bac4729550680c612be66d41f3ab5539fe9b6c33"}}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$WSKBDIO_GETDEFAULTBELL(r4, 0x40105706, &(0x7f0000000240)) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000280)={0x6, 0x7, 0x1f, 0x101, "5c15fd912d2c01247a633d0f0b04894c8e0df8a3", 0x68, 0x9}) unveil(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='r\x00') ioctl$WSKBDIO_SETENCODING(r4, 0x80045710, &(0x7f0000000340)=0x40) ioctl$WSKBDIO_SETKEYREPEAT(r4, 0x800c5707, &(0x7f0000000380)={0x1ff, 0x4, 0x2}) (async) ioctl$WSKBDIO_SETKEYREPEAT(r4, 0x800c5707, &(0x7f0000000380)={0x1ff, 0x4, 0x2}) setsockopt(r0, 0x0, 0x4, &(0x7f00000003c0)="76374ec83938bc4947fa6152615d1566ea6eb596b2fe073bf792b950672bdd05fa363a2de5", 0x25) ioctl$VNDIOCCLR(r4, 0x80384601, &(0x7f0000000480)={&(0x7f0000000400)='./file0\x00', 0x3, &(0x7f0000000440)='./file0\x00', 0x8}) ioctl$TIOCGFLAGS(r4, 0x4004745d, &(0x7f00000004c0)) (async) ioctl$TIOCGFLAGS(r4, 0x4004745d, &(0x7f00000004c0)) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) flock(r5, 0x8) openat$vmm(0xffffffffffffff9c, &(0x7f0000000540), 0x20, 0x0) (async) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000540), 0x20, 0x0) ioctl$VMM_IOC_RUN(r6, 0xc0205602, &(0x7f0000000800)={0x5, 0x9, 0xa, 0x3, &(0x7f0000000580)={{0x0, 0x3, 0x4, 0x4, 0x0, 0xa28, 0xee2}, {[0xe, 0x0, 0x7, 0xff, 0x6, 0x6, 0x7, 0x1, 0x7, 0x0, 0x0, 0x2, 0x2, 0x6, 0x2, 0x200, 0x2, 0x6], [0x10001, 0x85, 0x7fffffff, 0x5, 0x2, 0x4, 0xf, 0xd, 0x2, 0x7], [0x7, 0x0, 0x1, 0x1, 0x8, 0xfffffffffffffff2, 0x345b41ef], [0x5, 0x74, 0x0, 0x4, 0x4, 0xffffffff], [{0x2, 0x18d, 0x2, 0x10001}, {0xff, 0x200, 0x0, 0x4}, {0x1, 0x5, 0xfffffffe}, {0xa42f, 0x0, 0x4, 0x1}, {0x7, 0xfffffae3, 0x5, 0x3}, {0x3, 0x6, 0x6, 0x2}, {0x8, 0x802, 0x9, 0x1}, {0x553, 0x20000000, 0xffffffff, 0x7}], {0x4808, 0x81, 0xb977, 0xfc}, {0x0, 0xfff, 0x0, 0x2}}}, 0xfff9, 0x8}) (async) ioctl$VMM_IOC_RUN(r6, 0xc0205602, &(0x7f0000000800)={0x5, 0x9, 0xa, 0x3, &(0x7f0000000580)={{0x0, 0x3, 0x4, 0x4, 0x0, 0xa28, 0xee2}, {[0xe, 0x0, 0x7, 0xff, 0x6, 0x6, 0x7, 0x1, 0x7, 0x0, 0x0, 0x2, 0x2, 0x6, 0x2, 0x200, 0x2, 0x6], [0x10001, 0x85, 0x7fffffff, 0x5, 0x2, 0x4, 0xf, 0xd, 0x2, 0x7], [0x7, 0x0, 0x1, 0x1, 0x8, 0xfffffffffffffff2, 0x345b41ef], [0x5, 0x74, 0x0, 0x4, 0x4, 0xffffffff], [{0x2, 0x18d, 0x2, 0x10001}, {0xff, 0x200, 0x0, 0x4}, {0x1, 0x5, 0xfffffffe}, {0xa42f, 0x0, 0x4, 0x1}, {0x7, 0xfffffae3, 0x5, 0x3}, {0x3, 0x6, 0x6, 0x2}, {0x8, 0x802, 0x9, 0x1}, {0x553, 0x20000000, 0xffffffff, 0x7}], {0x4808, 0x81, 0xb977, 0xfc}, {0x0, 0xfff, 0x0, 0x2}}}, 0xfff9, 0x8}) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000840), 0x80, 0x0) ioctl$FIOSETOWN(r7, 0x8004667c, &(0x7f0000000880)=0x7) fchflags(r7, 0x10000) ioctl$WSKBDIO_GETENCODING(r4, 0x4004570f, &(0x7f00000008c0)) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f0000000900)=0x7) fchmod(r7, 0x28) readv(r1, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/52, 0x34}, {&(0x7f0000000980)=""/70, 0x46}], 0x2) ioctl$WSKBDIO_GETMAP(r3, 0xc010570d, &(0x7f0000000a80)={0x5, &(0x7f0000000a40)=[{0x0, 0x6, 0x8000, 0x2, 0x5}, {0x0, 0x4, 0x5, 0x0, 0x1}, {0x3, 0x9, 0xf, 0x5, 0x7}, {0x4, 0x6, 0x64c6, 0xfffa, 0x9}, {0xe9, 0xeb36, 0x8, 0x4000, 0x4}]}) (async) ioctl$WSKBDIO_GETMAP(r3, 0xc010570d, &(0x7f0000000a80)={0x5, &(0x7f0000000a40)=[{0x0, 0x6, 0x8000, 0x2, 0x5}, {0x0, 0x4, 0x5, 0x0, 0x1}, {0x3, 0x9, 0xf, 0x5, 0x7}, {0x4, 0x6, 0x64c6, 0xfffa, 0x9}, {0xe9, 0xeb36, 0x8, 0x4000, 0x4}]}) writev(r5, &(0x7f0000000b00)=[{&(0x7f0000000ac0)="e3e0ba06dc860536c47aeeea4c760ef2d40034e50f9415b50ae2e8e19b5594f207", 0x21}], 0x1) writev(r6, &(0x7f0000000d00)=[{&(0x7f0000000b40)="a94210c82ecf771eed199adf147ab9588938275033f2ba5084ea41102f685b14361c1e27b1a4affbbb30b0d0d2b8f0c2973b156fee8e9dfa2f52c5af0ae68fe163d856c8eb3fe17abd8ed1e2e5aaa5c64e7a28602247952f681e539c0f427709724289aa0400c7c1a413ba725a58eafe57a217e511ea59bfa8921998366aa715fa9f7810a228b2acf99fc65c31b3c6c141db04605ce0df9725c67903f8a137e48f7f3d2b97be6369a096f5fc0ed0488f20f42d24c619061d6a63cd8619f03dbf7fe2ff381974c0338656c115dd67c9b97395f8a7c4df884d6e4206c83625", 0xde}, {&(0x7f0000000c40)="c88c39abcf5c2c56b52c0c8db90feefe53240cda22c2f656f520006f2c3495511d5d782fb64f66245c7a7e766011774f4c7166cd3291160b9a80d86d838261061c3ac6902a81c2c4edf67b7dd349c7cc348d5d006cf551d3c8deb50f35153ea4863092e2246d08ee708dabafa3eec7168a4073ad1f08e0661c2de803db875af1b9c68a6847d11c", 0x87}], 0x2) ioctl$VT_GETACTIVE(0xffffffffffffffff, 0x40047607, &(0x7f0000000d80)) 3.147985277s ago: executing program 2 (id=17052): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) setuid(0xee01) r0 = msgget$private(0x0, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = getegid() r3 = getuid() getsockname(0xffffffffffffff9c, &(0x7f0000000140)=@in, &(0x7f0000000180)=0xc) setreuid(0x0, r3) r4 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0x3, r4}) r5 = getpgid(0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x7, r1, r2, r3, 0x0, 0x2, 0x9}, 0x5, 0x62, r4, r5, 0x8, 0x7, 0x4, 0x1ff8}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r6, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) 2.964186635s ago: executing program 2 (id=17053): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='x\x00') open(&(0x7f0000000140)='./file0\x00', 0x2, 0x8) mkdirat(r0, &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4d) 2.96372356s ago: executing program 2 (id=17054): r0 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000007c0), 0x10, 0x0) close(r1) (async) fchdir(r1) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSKBDIO_GETMODE(r2, 0x40045714, &(0x7f0000000040)) (async, rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5, 0x0, 0xfffc, 0x1, 0x2, 0x0, @multicast2, @rand_addr=0x8}, @tcp={{0x3, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}}}}}}) (async, rerun: 32) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x293, 0x807, 0x4, 0x400, "2c7f88d112afd4f3bfed0f274ca9576eb663855b", 0x2000794, 0xfffe}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="735310a81412a43e464e1b3737f3662088ea6e5053fdfdd756321c410a675bf3a57175103b152009", 0x28}, {0x0}], 0x2) 2.963486597s ago: executing program 6 (id=17055): socket(0x18, 0x2, 0x0) (async) r0 = socket(0x18, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) (async) connect$unix(r1, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) write(r1, 0x0, 0x0) r2 = socket(0x2, 0x3, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) 2.962906467s ago: executing program 6 (id=17056): setrlimit(0x1, &(0x7f0000000000)={0xe}) r0 = syz_open_pts() (async) r1 = socket(0x18, 0x4001, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_open_pts() (async) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="33f5ebe67b96abcc9815f01b7384118224bac83d23d3f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb033f1caefe5fbe2357f162165a18ec7a8361", 0x48}], 0x1) (async) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$WSKBDIO_SETBELL(r2, 0x80105703, &(0x7f0000000100)={0x8, 0x9c, 0x80000000, 0x80}) 1.674798346s ago: executing program 3 (id=17118): setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x74, 0x81, 0x7, 0xad5e}, {0x4006, 0x19, 0x0, 0x7ff}]}) syz_emit_ethernet(0x36, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x2000, 0x4, 0x0, 0x0, @rand_addr}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xf3}}}}}}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)="33f5ebe67b96abcc9815f01b7384118224bac83d23d3f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb033f1caefe5fbe2357f162165a18ec7a8361", 0x48}], 0x1) 1.583842582s ago: executing program 3 (id=17120): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = socket(0x10, 0x4, 0x4) dup2(r1, r2) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040)=0xffffffff, 0x4) r4 = shmget(0x2, 0x2000, 0x222, &(0x7f0000ffe000/0x2000)=nil) shmat(r4, &(0x7f00002c7000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket(0x2, 0x4001, 0x0) (async) dup(r0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) socket(0x10, 0x4, 0x4) (async) dup2(r1, r2) (async) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040)=0xffffffff, 0x4) (async) shmget(0x2, 0x2000, 0x222, &(0x7f0000ffe000/0x2000)=nil) (async) shmat(r4, &(0x7f00002c7000/0x2000)=nil, 0x2000) (async) 1.582341579s ago: executing program 3 (id=17123): mknod(&(0x7f0000000080)='./file0\x00', 0x2950, 0x13d4) r0 = getpgid(0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0) (async) mknod(&(0x7f0000000500)='./file0\x00', 0x1000, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$FIOSETOWN(r1, 0x8004667c, &(0x7f0000000240)=0xd) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) (async) ioctl$TIOCSETA(r2, 0xc0504417, &(0x7f0000000740)={0x0, 0xfffffffc, 0x0, 0x1000020, '\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x6, 0x1000a}) (async) getsockopt(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) (async) ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000001a40)={'./file2\x00', 0xffffae53, 0x3ff, 0xff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) (async) r4 = semget$private(0x0, 0x0, 0x41) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5904) utimes(0x0, 0xffffffffffffffff) r5 = socket(0x18, 0x3, 0x3a) (async) r6 = getegid() chown(&(0x7f00000003c0)='./file1\x00', 0x0, r6) (async) getsockopt(r5, 0x5, 0x1b, 0x0, 0x0) (async) r7 = openat$pf(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) fchmodat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x2) (async) sendmsg$unix(r3, &(0x7f0000000400)={&(0x7f0000000180)=@file={0x1, './file1\x00'}, 0xa, &(0x7f00000019c0)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f0000000240)="0db2eedb688137f36e", 0x9}, {&(0x7f0000000280)="9e1a314ed3423a2ce3a5e9f26cbec8e2dddc2a2b1c1d3d429f8945143dc4c0be73fdf0d67fe0cf9ee31371f1b15e8982185a55610dfc53ed3fa6f81a4334781eeeb2ceea936cf324274044eece5e98b99c1ea8b1ee842064ba105164e63be3235783eb82bbd16c106e56784b480dd360e8702c4a5877bb722fc31fdcc1dd0ca1e64c247c1fac9afc0efab6da6d2d76c083fd1de854b463f5487dfd3b6c15d47d61d2514fa611a8e7c09178bc64d17e63f2b3f874d37b659523eefa1fbb02cea80d10c7e51e9eaf6b03bb19", 0xcb}, {&(0x7f00000017c0)="3f2cab50bb6803c4c65971bb074ffaf379c98a410e0ffda1ddde0b69c2dd831cf6c0cbc346a46ab7a091f6e4d294ae51340a02868dea079865770b2e59783433c089b857558bbe0e4f8e645fdbef47928191aceb3ac6ab76372d068553d737053afa6af85ac76a1ad973b48b06cce0de1ab5e32577261d31c33aa0e37fd6de9a42d4e665587c0b483465c0b06ee34ed95bf3dc1ae4dcee22719fc734888c1f87def562722d3166c05512cb95cd2596279c2d777a1c09fb1746d008acbe7572e1e3e31c112b376d84680a579e896f389a5e74d948bf9c2bee8f0f772717fcadb9fa14580be713861c4e7569beee0bb050bd16001d24", 0xf5}, {&(0x7f0000000380)="154fa81f225ded22da88", 0xa}, {&(0x7f00000003c0)}, {&(0x7f00000018c0)="748758cbcfe1c4324831e7881656d5df3975a570e796f9b08486fc17689e83d67a1bc35eff66b65d6b8fefbfa61a3345135ce34d17fc39dd45d6a2384a6a1139864f4c1beffe71e9c2ce140e2764d18b635dc99b40be157022c783fd7705959c549a011eabadf309dd0f2fe1531e5e9e98023d21f512c206e19bcaf82e84d90b0d2bbcd8d7eebb4a66e0ef17b42cbe4675170ba9a2daa117bb38d0064501fa2c6410280c49c651e04651f35249ad12355e38263c867e8420aab587ccdc29064e04867700c601aaeaffd295ebfcbea460a9904a9b8c57ced154fb9281f9ae204c524920c88bfe3890dd5198448ea3e5f22cbccce209371983b0", 0xf9}], 0x7}, 0x4) ioctl$TIOCSETA(r7, 0xc0504417, 0x0) r8 = getuid() setuid(r8) (async) semget(0x0, 0x1, 0x0) (async) semctl$SETVAL(r4, 0x0, 0x8, 0x0) (async) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000040)='./file1\x00', r3, 0x1}) 1.513758566s ago: executing program 0 (id=17127): mknod(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6009, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async, rerun: 32) r1 = syz_open_pts() poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) execve(0x0, 0x0, 0x0) (async) close(r1) (async, rerun: 32) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x8, 0x50) (rerun: 32) mknodat(r2, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0xffff) (async, rerun: 32) syz_open_pts() (async, rerun: 32) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) (async) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1004, 0x0, 0x0) (async, rerun: 32) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x803, 0x8018, 0x2000007, 0x1, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x200727, 0x4002802, 0x7}, {0x1, 0x650, 0x200, 0x99}, {0xce1, 0x0, 0xfff, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8005, 0xd17, 0x4}, {0x1cc, 0x10005, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0xfffffffd, 0x1, 0xfff, 0x30004}]}) (async, rerun: 32) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r4, 0x41406474, &(0x7f0000000500)={0x0, 0x0, 0x0}) (async) ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0xfffffffc) (async) openat(r0, &(0x7f0000000200)='./file0\x00', 0x80, 0x82) (async) read(r1, &(0x7f0000000a00)=""/189, 0xbd) (async) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000900)="617b875eec46fd6df4f7c3118b30abd85a1f00000000153af90e81fec2dde98f208d50365bba22c338297e5e9e96aa79977fc2a6f45b5f5e1879b92a0678eca2487320afdddec8afba05d4f1c443aef1bef27a69f534001153a7d8e453b2b30d8f866bb863e5c83b816f7e1cfdd97ade7925e1a5f5763100c13fc94fe38d934f54b607a7d4c840429dc0a9d916d7d1a464c95170cbfc9974e3fffa1c2bc23eb5451e72be7f7353a03dab5ab48e365a231abfca8c8fca8b7ed9b140b9d6f39b55c11f42408627fa30024dddca3c1994c9e32d1a27", 0xd4}, {&(0x7f0000000240)="b962121c72327a1ad302003570e3890700f3000b9ca6393ab0d9", 0x1a}, {&(0x7f0000000b80)="4c103bce35d630237268daa79026869c25f037f00138628064a8b2744ec13cf26508caccbf37ae7b8e5c2fd04dc11d8f0d53493c75b9f4264c78d61c3a66d787f1ebdfac02660cb82ede0806e1829087fbf427d509000000a493b154f8719f61d7e9b6d827bb0521638e3030f42257f1f3e9d6a82c92bdf9c1286c84e7d65246714933d7189f73b075e134bf6c0c06f228a22f5f834227559a7260c2f024e55363882c0db2db944612b82515d1422cf1fa02d10f47ab55d95b9a9a375e2ac893320805ff00da0900000000000000d9a8f455fb3c8e02ecc3ccaffe3d5a36461fae175b25fb701802285cc9f0cd447e7a2fb79ee05216a869c37dad4799810112f226f5046dd78071b957e7a0660558e84a5d6f80bdfb89377bb1da0300000000000000263f32880ade03c2eea16e273393e201edbb0737d776e6e44e32293343355eb2e2fc104c41af202da05cb3b650a72521b10d71c669c6c4f8da6b", 0x15d}, {&(0x7f00000006c0)="e05f5c584860b8df53096f0d9bc0f0f2a9140dd203de6de567a4d29ba3f9463f14e5e8bdded4b78901b53bc0c14b2fa666d8ede1d898aa8539ae3201783ae7960697338e188f93d7f080045b1dc217c0943d1db416b182776c7d1f60730f88a76d29825f192176ab516d4a21b8724df4e14f6b4774041113ac91d8d09d9ce729034277a1d0048073b3426eb2aaa4345cdac8053420f9664f5b017be71d950f2995a635126626345ba049b189073901026c07665aaf2ceb6d4034677eee89446a6b549b4637a305a5acdb04957d96f27b0892bbdd995f", 0xd6}, {&(0x7f00000007c0)="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", 0x107}, {&(0x7f0000000140)="2950c2aa09a08ef7d772155cc6d2de2ec3670551c41c49c27ce5ca5926d7e57d00"/47, 0x2f}, {&(0x7f0000000100)="2dd125708ffa3bbcec66d893910e47ae4d4538", 0x13}, {&(0x7f0000000540)="5213da9e7dd09db1c993c0cea9ef06fc1a9eefaaf994deece9a6193da33a7659a7a2605ace4e910892e261f259e3c33d4692c233f519a45bc0de20e12e8632784ac5e403000000fe8a1622e0f688890d489ab586374c14805e15367e31294f5131e74366aea2dfdcbaefd9dfd35e037b8a7abb82c9fc781f47630e11eaab", 0x7e}], 0x8) (async) link(&(0x7f0000000340)='./bus\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.354012196s ago: executing program 3 (id=17129): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000300)=0x4) write(r0, &(0x7f0000000000)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0xfffffffffffffe8e, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) readv(r1, &(0x7f0000000600)=[{0x0}], 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x70c3, 0x7, 0x7, 0x106, 0x80000001, 0x133a, 0x10005, 0x10, [{0x7, 0x4, 0x4, 0x71004}, {0x7, 0x4, 0x8, 0xfffffff8}, {0x8, 0x4, 0x0, 0xaf9}, {0xfffffffd, 0x800, 0x7}, {0x10001, 0x5, 0xd, 0x7}, {0x2, 0x8, 0x3, 0x99}, {0x1cdf, 0x1, 0x4f8, 0x6d}, {0xa, 0x3, 0x14, 0x8}, {0x70000, 0x81, 0x1, 0xb}, {0x6, 0x8001, 0x4df6, 0x8c}, {0xf88, 0x10001, 0x6, 0xaeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x2, 0x6}, {0x1009, 0x7, 0x1, 0x6}, {0x4, 0x7, 0x2008, 0x400}, {0x200, 0x1, 0x4, 0x2fffd}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x8000, 0x100) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x7, 0x101, 0x80000001, 0x80000001, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x40000003}, {0x6, 0xf86, 0x0, 0xaf9}, {0x4, 0x800, 0x7}, {0x1, 0x80000003, 0xe, 0x7}, {0x2, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x88}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) 1.340420744s ago: executing program 0 (id=17132): kqueue() open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106) r0 = open(&(0x7f0000000240)='./file0\x00', 0x200, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x100000001}) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a001c0630fe8000000000000000000000400000bbfe00000000000000000000000000aa4e234e2014458aa8821d62fe1a6fdd"]) r1 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000080)={0x400000000000000c, 0x0, 0x8000000000000}, 0x0, 0x0) 723.838956ms ago: executing program 1 (id=17150): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000240)=@file={0xd570d0466b6018f, '.\x00'}, 0x4) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x8, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003, 0xfffffffffffffffe], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x40000000, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x101}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2007, 0x40000, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x9}], {0x2000, 0x6, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) r1 = kqueue() r2 = fcntl$getown(r1, 0x5) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x3, 0x1, 0xa5e6, 0x3, r2}) sysctl$fs(&(0x7f0000000000), 0x2, &(0x7f0000000340)="8ed23eda6385d258cf8ee192bd8fcec3ef1c5d99009de81153bf40f105b87194306c8a2553d7b8a99879593f9378c0735339b0deaa3026faf4d4e5f057840b19b297a23b759b6b2d5a23f0513ca97da5008bdef708827ea609ec20ddf427e35637e904804c70840f05c30689151c0db31be7d1eb6d08502ff67618b187c18d8f37d16835047b032b2b37312e16a9182659276c7bfeecb73060c832df16a1f1ec23cade34c4a147afb05b9eca9bdc1def1f587233fc182df38b795c7bea5e6d975b2717c5273fff358b215237bcdbc3b5e32a4c8ce4be5bfb8c", &(0x7f0000000040)=0xd9, &(0x7f0000000080)="6406b1042c45e7", 0x7) kevent(r1, &(0x7f00000001c0), 0x84, 0x0, 0x9319, 0x0) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 722.305238ms ago: executing program 1 (id=17151): chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) r0 = socket$inet(0x2, 0x3, 0x0) close(r0) (async) r1 = socket(0x2, 0x1, 0x0) listen(r0, 0x424) (async) setsockopt$sock_int(r1, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) (async) sysctl$hw(&(0x7f00000000c0)={0x6, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) lstat(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)) (async) setuid(0xee01) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0x100) (async) chmod(&(0x7f0000000080)='./file1\x00', 0x80) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="258b300ad1711569138b48aec40000004a0c6c457db9b8a773693867ea9ed92904831d11a558caba3b584cd83056bd29bc1b35a93750169c1283e16145ec8bf08ea63a11f36bd2956578ba565d26f8357d35393973c1fcb45b66f682a162d87e", 0x60}], 0x1, 0x0, 0x0, 0xc2d839217c176b29}, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="71cfc29698f2bba06e09ef3c2d5a340000089d5c22", &(0x7f0000000080)=0x15, 0x0, 0x0) mknod(0x0, 0x2000, 0x1e5f) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x803, 0x8018, 0x2000007, 0x1, 0x80000001, 0x81ac, 0x80010001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x3, 0xa, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x200727, 0x4002802, 0x807}, {0x1, 0x650, 0x200, 0x99}, {0xce1, 0x0, 0xfff, 0x6d}, {0x6, 0x7, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8005, 0xd17, 0x4}, {0x1cc, 0x10005, 0xc, 0x3}, {0x10000008, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0xfffffffd, 0x1, 0xfff, 0x30004}]}) (async) r3 = open(0x0, 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3}, {0x3, 0x0, 0x0, 0xfffffffd}, {0x5, 0x0, 0x0, 0x20}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x0, 0xffff63de, 0x5, 0x2, 0x8, 0x8, 0x40, 0x10, [{0x5, 0x400, 0xfffff115, 0x3}, {0x8, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x8}, {0x88, 0x80000e2, 0xf, 0x100}, {0x6, 0x7, 0xf14, 0xe8a5}, {0x788c, 0xffff, 0x8}, {0x4000004, 0xf8bd, 0x1, 0x3}, {0x9, 0xc, 0x28001, 0xffffe2e9}, {0x2000007, 0x1000, 0xb, 0x77ff}, {0x3, 0xfffffffc, 0x6, 0x8bfd}, {0x0, 0x9, 0x8, 0x6}, {0x1010000, 0x0, 0x800000, 0xa6a}, {0x401, 0x82, 0x9, 0x4}, {0x80000000, 0x106e2, 0x2, 0x6f5fc48e}, {0x4, 0x101, 0x3, 0x9}, {0x4, 0xfffffffd, 0x2, 0x4}]}) 610.358103ms ago: executing program 1 (id=17152): r0 = semget(0x0, 0x1, 0x48) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) socketpair(0x10, 0x1, 0x7, &(0x7f0000000000)) setsockopt(r1, 0x1000000029, 0x4, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa5fbb8af09d7c86dd66e2294500543308fe8000000000000000000000000000aa0000000000ebffffffffffffff0000000601000000000000c2040000000001010000000000000000640400000000000004010300010005020005c2040000000705020008010100040106c204000000034e234e21d7d25773ec9627b3604a79c40bb5b48d8d33ed83bdb3faca9e1252af4b9d33d5f406c9dbea249c9432342e7e2188fc13cd03546b70c0c9cc321bc57add3c2a86875689f8552f3dbf704ff2e20c265099d0b15476c108b32433ef5bf1e1f59dfae9f2a52d44d4ec743468b2428260885769c7981b187492cd10895eebc1f09a10337356aa0a8b8ee8fba6be1e569ce56f24574171bdd569a4af96a85ebf24441b440e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5080000490780004"]) 609.473169ms ago: executing program 1 (id=17153): symlink(&(0x7f00000000c0)='./file0/file0/../file0/file0/file0/file0\x00', &(0x7f0000000080)='./file0\x00') (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', 0x10, 0x90) (async) acct(&(0x7f0000000100)='./file0\x00') (async) r2 = getpgid(0xffffffffffffffff) r3 = geteuid() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, r5, 0x10, 0x4004}, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x1ff, 0x204000000000, 0x6, 0x5}) r6 = getpgid(0x0) r7 = getuid() (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setregid(0x0, r9) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000300)={0x0}, &(0x7f0000000340)=0xc) (async) r11 = geteuid() r12 = getgid() r13 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) r14 = getpid() (async) r15 = geteuid() (async) r16 = getgid() setregid(0x0, r16) (async) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa, &(0x7f00000002c0)=[{&(0x7f0000000180)="d593f5aed998a37062a146e34a0c6de641e073ed6cd3c0bf7c49480721feecd959e6838988c2c49dd37308dd440bbfdfd96b6db9883a0e09d3b35a5893c0c706ad9aadeb1a28bd9c908bd148cccf6af93baf4a9078f0248716187d2f06de53239811a665b2f778a95d788289b84911dddcc188de050b3bf69e7193e1ae255cebbe65cc42f8f4ba943cdf55a8dca3adf6cd60c433b30e651c5f930d8af1f87d547e47fb5252d886af6ae4cc6630d56141423ed9dbadde667a3c19717fd92670124adcd0ff491000ed7bdbf15df3a3831af82972666ee508097b350fac5b3c975465a23b1897088137cdeecdad577a87ed0db55de2d94f8492bb79ea3da6d2", 0xfe}, {&(0x7f0000000280)="55ed1def4ad4fb0a15efe82cee", 0xd}], 0x2, &(0x7f00000003c0)=[@cred={0x20, 0xffff, 0x0, r2, r3, r5}, @cred={0x20, 0xffff, 0x0, r6, r7, r9}, @cred={0x20, 0xffff, 0x0, r10, r11, r12}, @rights={0x20, 0xffff, 0x1, [r1, r1, r0, r13]}, @cred={0x20, 0xffff, 0x0, r14, r15, r16}, @rights={0x20, 0xffff, 0x1, [r0, r0, r1, r0]}], 0xc0, 0x8}, 0x6) 604.078648ms ago: executing program 1 (id=17154): r0 = syz_open_pts() (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000040)={0x0}, 0x10, 0x40e) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000280)=[{0x87, 0x1, 0x0, 0x1915}, {0x7, 0xc, 0xa8, 0x7}, {0x6, 0x4, 0x3, 0x800}]}) (async) write(r3, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (async) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/51, 0x33}], 0x1, 0x0}, 0x1002) r4 = kqueue() kevent(r4, &(0x7f00000001c0)=[{{}, 0xfffffffffffffffb, 0x0, 0x20, 0x2, 0x1}, {{r0}, 0xfffffffffffffffe, 0x5d, 0x10, 0xb, 0xe93}, {{}, 0xfffffffffffffff9, 0xbfe7f146e349ee4f, 0xf0000000, 0xf39, 0x8001}, {{r0}, 0xfffffffffffffffe, 0x2, 0x1, 0x7, 0x4bd5}, {{r0}, 0xfffffffffffffffa, 0x43, 0x1, 0x0, 0x40}], 0xd3, 0x0, 0x3, 0x0) 603.5539ms ago: executing program 1 (id=17155): r0 = socket$inet(0x2, 0x8003, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r1, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) flock(r1, 0x2) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/76, 0x4c}, 0x800) setsockopt(r0, 0x0, 0x1e, &(0x7f0000000340)="15337ac0", 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0x0, 0x16, 0x0, @multicast2}, @udp={{0x0, 0x0, 0x8}}}}}}) 547.661772ms ago: executing program 7 (id=17159): sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSHDRCMPLT(0xffffffffffffffff, 0x80044275, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d) r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffffe, 0x29, 0x80, 0x2, 0xc}, {{r0}, 0xfffffffffffffffe, 0x10a, 0x10, 0x4, 0x8000000000000000}], 0x8, 0x0, 0x15, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x1e, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) 544.253443ms ago: executing program 5 (id=17160): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="73b9ccc300", @random="00f7000400", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x18, 0x3a, 0x7d, @mcast1, @mcast2, {[], @generic="8284e355429be5bdc951666267f59f248a8c000dc6b1f639"}}}}}) 544.061142ms ago: executing program 0 (id=17161): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x112, 0x0) (async) r0 = socket(0x18, 0x1, 0x0) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) (async) getsockopt(r0, 0x29, 0x31, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) mknod(0x0, 0x8, 0x0) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet(0x2, 0x0, 0x0) socket(0x11, 0x0, 0x0) (async) getpid() (async) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x800000018, 0x2, 0x0) (async) r2 = socket(0x18, 0x1, 0x0) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x800) r3 = open(&(0x7f0000000040)='./bus\x00', 0x10, 0xb3) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000080)={0x3, 0x7, 0xe150, 0xffe, "0000000000008471050000000010000447ff00"}) (async) close(r3) (async) setsockopt(r2, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4) (async) sendto$unix(r0, &(0x7f0000000100)="8c91b100050460010000000000", 0xd, 0x2, 0x0, 0x0) (async) mprotect(&(0x7f00000ea000/0x1000)=nil, 0x1000, 0x0) (async) setrlimit(0x3, &(0x7f0000000000)={0x0, 0xa4b0}) setrlimit(0x3, &(0x7f0000000000)={0x100000, 0x100000}) 490.432528ms ago: executing program 5 (id=17162): mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4) (async) r0 = semget(0x3, 0x3, 0x10) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/81) (async) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$VMM_IOC_INTR(r1, 0x800c5606, &(0x7f00000000c0)={0x6, 0x8, 0x93b}) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000100)={0x10, 0x9, [{&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x9}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x10001}, {&(0x7f0000002000/0x3000)=nil, &(0x7f0000ff6000/0x7000)=nil, 0x4}, {&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x59ce6a6}, {&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000004000/0x4000)=nil, 0x7fffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x89}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5}, {&(0x7f0000006000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xc}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xd000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5}, {&(0x7f0000003000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x5}, {&(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x1ad}, {&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xfffffffffffffc00}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000006000/0x1000)=nil, 0x2}], './file0\x00', 0xb389}) r2 = open$dir(&(0x7f0000000300)='./file0\x00', 0x819a631e095c5ac3, 0x8) unlinkat(r2, &(0x7f0000000340)='./file0\x00', 0x8) (async) r3 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x1000)=nil, 0x2000) shmdt(r3) shmget(0x0, 0x2000, 0x109, &(0x7f0000ffc000/0x2000)=nil) (async) minherit(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x3) (async) r4 = geteuid() (async) r5 = getuid() setreuid(r4, r5) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) fchown(r2, r4, r7) (async) r8 = geteuid() setreuid(r8, r5) (async) seteuid(r6) r9 = getuid() setreuid(r9, r6) (async) r10 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000400), &(0x7f0000000440)=0xc) listen(r10, 0xfffffe00) (async) unveil(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='x\x00') (async) r11 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$WSKBDIO_GETBACKLIGHT(r11, 0x400c5711, &(0x7f0000000540)) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000580), 0x10, 0x0) getsockopt$SO_PEERCRED(r10, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0}, 0xc) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000600)={{0x7, r12, 0x0, r9, r7, 0x88, 0x9}, 0x8000000000000000, 0x6, 0x1}) 490.027122ms ago: executing program 3 (id=17163): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) accept(r0, 0x0, &(0x7f0000000040)) (async) accept(r0, 0x0, &(0x7f0000000040)) ioctl$FIONBIO(r0, 0x82907003, &(0x7f00000000c0)=0x40000) 489.547645ms ago: executing program 7 (id=17164): r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x6811, r0, 0x0) ftruncate(r0, 0x8531) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x8, 0x2, 0x23, 0xb3}, {0x3, 0x2, 0x20, 0x5}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) read(r1, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x60) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000140)=""/173) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) 393.312752ms ago: executing program 0 (id=17166): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x1ff, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f0000000540)={'./bus/file0\x00', 0xfffefffe, 0x7ff, 0x20000000005}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xb, 0x8013ea, 0xfff6, 0x1, 0x9, 0x25, 0x8, 0x2, 0x0, 0x640, 0x4000000000f19}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000080)=[{0x84, 0x80, 0xee, 0xb}, {0x7c, 0x9, 0x2, 0x80004a}, {0x6, 0x1, 0x5a, 0xfffff000}]}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) syz_emit_ethernet(0x26, &(0x7f0000000300)={@broadcast, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x66, 0x0, 0x0, 0xff, 0x0, @broadcast, @rand_addr=0xac14ffff, {[@end]}}}}}}) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r4 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x2, 0x1, 0x0) connect$unix(r5, &(0x7f0000000100)=@abs={0x1, 0x0, 0x0}, 0x8) shutdown(r5, 0x2) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) close(r3) 392.802178ms ago: executing program 3 (id=17167): r0 = openat$tty(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000400)=0x9) r1 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0xa, r1) select(0x40, &(0x7f0000000180)={0x40, 0x8, 0xffffffffffffffff, 0x2, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0xb2) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x27fffffffffffffd, 0x5, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0x2, 0x6, 0xfff0, 0x1, 0x5, 0x0, 0x5, 0x0, 0x0, 0x6, 0x100000000}) mknod(&(0x7f00000000c0)='./file1\x00', 0x1000, 0x637d) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6380) select(0x0, 0x0, 0x0, 0x0, 0x0) r4 = kqueue() kevent(r4, 0x0, 0x8, 0x0, 0x19, 0x0) r5 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) ioctl$WSDISPLAYIO_USEFONT(r5, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x258f, 0xc0, 0xfff6, 0x1, 0x7ff, 0xffffffff, 0x1, 0x1, 0x2, 0x6, 0x101}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x14c2, 0xffff, 0x1, 0x39, 0xe4e, 0x4000001, 0x2, 0x2, 0x1, 0x6}) r6 = open(&(0x7f00000001c0)='./file0\x00', 0x40, 0xf2) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r6, 0x82907003, 0x0) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="258b34f9d92d15867fdb7b3ea6c26149654d3094b5ab47240700000087f85465688b453d5b6535a805142c2eacb15498a3675a8dd5", 0x35}], 0x1, 0x0, 0x0, 0x2}, 0xe) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="71bb7d6ecfc294315f06a05c42762bd6bcdc602f5460bf17ad25f3df3695c7530d1815777282752c91862873aff57b086f6e66ae89578b5f511d9dce6db8077a597ad221b7", &(0x7f0000000080)=0x45, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 391.061351ms ago: executing program 7 (id=17168): mkdir(&(0x7f0000000100)='./file0\x00', 0x7) (async) r0 = geteuid() setreuid(0xee00, 0xffffffffffffffff) r1 = getuid() chown(&(0x7f0000000200)='./file0\x00', r1, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa06aaaa0800254500001c0000000000019078e0000001e00000011000907800800d"]) setreuid(0xee00, r1) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000002c0)={&(0x7f0000000240)='./file0/file0\x00', 0x2000000000000000, &(0x7f0000000280)='./file0/file0\x00', 0xe}) (async, rerun: 64) seteuid(r0) (rerun: 64) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x3, 0x400101, 0xffff, 0x81ac, 0x10001, 0x10, [{0x0, 0x3, 0x4, 0x4}, {0x6, 0x9, 0x7, 0x9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2803, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0x3ff, 0x4f8, 0x69}, {0x6, 0x803, 0x14, 0x8}, {0x5, 0x82, 0x5, 0x100005}, {0x6a74, 0x6, 0xd3b, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x5, 0x2}, {0x3, 0x7, 0x8, 0x4}, {0x9eda, 0xeffffffa, 0x1, 0x6}, {0xc, 0x5, 0x8, 0x10200000}, {0x0, 0x1, 0xfff, 0x30004}]}) (async) ioctl$WSKBDIO_SETMAP(r2, 0x8010570e, &(0x7f00000000c0)={0x7, &(0x7f0000000040)=[{0x100, 0x90, 0x9, 0xed6, 0x6}, {0xff4c, 0x3, 0x2, 0x90c, 0x101}, {0x7d7f, 0x0, 0x0, 0x5, 0x35a0}, {0x8001, 0x1000, 0xd, 0x6, 0x4}, {0x3, 0x4, 0x4c0, 0x8e4, 0x2}, {0x6, 0x4, 0x6, 0x1, 0x8}, {0xffff, 0x2e4, 0x2, 0xc8, 0x101}]}) (async) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') 390.725923ms ago: executing program 7 (id=17169): sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, &(0x7f0000000180), 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1007, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x98}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0xf0}, {0x3, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0x7, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb8e, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0xaf7, 0xfff, 0x30004}]}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r2, &(0x7f0000001480)=[{&(0x7f0000000100)="cc60d3d7", 0x4}], 0x1) fcntl$setstatus(r2, 0x4, 0xc) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) r3 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2e5, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x9, 0xfffffffffffffff9, 0x55, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x2, 0xfffffffffffffffb, 0x11003, 0xfffffffffffffffe], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x9, 0x8}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x9}], {0x2000, 0x6, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) connect$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet6(0x18, 0x3, 0x0) getsockopt$sock_int(r4, 0xffff, 0x800, &(0x7f0000000000), &(0x7f0000000080)=0x4) openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0xd7ccee7a25bdb27c, 0x0) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x5, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(0x0, 0x11, 0x0) setuid(0xffffffffffffffff) r5 = shmget$private(0x0, 0x1000, 0x20a, &(0x7f0000fff000/0x1000)=nil) shmat(r5, &(0x7f0000ffe000/0x1000)=nil, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, 0x0, 0x0) 386.403613ms ago: executing program 5 (id=17171): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x0, [{&(0x7f00000a0000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil, 0xfffffffffffffffe}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil, 0x200000000000000}, {&(0x7f00000a3000/0x2000)=nil, &(0x7f000009e000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000091000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f000009d000/0x4000)=nil, &(0x7f00000a6000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f000079c000/0x3000)=nil}, {&(0x7f00002ef000/0x3000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00003cf000/0x3000)=nil}, {&(0x7f00000a1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f000009c000/0x3000)=nil, &(0x7f00000a4000/0x2000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000099000/0x1000)=nil}, {&(0x7f000009a000/0x4000)=nil, &(0x7f0000090000/0x2000)=nil}, {&(0x7f000009a000/0x2000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00', 0x6}) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x1510, r1) setgid(0xffffffffffffffff) r2 = getpid() ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0x40000010, r2) poll(&(0x7f0000000180)=[{r0, 0x91cbd8417f6167d9}], 0x1, 0x8) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x4a) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) sysctl$kern(&(0x7f00000000c0)={0x1, 0x16}, 0x2, &(0x7f0000000180)="6e040001a85a0dcec706d0b5772d0e42d71da78b5db2ffbe782dae4f1de1574c0906c1d23c0c6396a37ca8d8c433d81f11de595bc0f1dc91f7500657df5441d3d1ff9aae3766e3aff4ee7321dce4773f61bf9a35d3ea2602de9f69b07e56da336c1824865e7f1a0b18e57e895ac361e53abb42ac2f464138d581b7b0608588cc168ad480230f8a45fdcd77d7f24bdd", &(0x7f0000000040)=0x52, &(0x7f0000000100)="03001d7ecd6897c9f2e950ae000000002e00fc0000007447b407533db8fd0f9114be246fab6ba7b251c7a32306", 0xfffffffffffffdf6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x1, 0x8000, 0x0) ioctl$FIONREAD(r4, 0x821869de, &(0x7f00000001c0)) r5 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r5, 0xc2c04200, &(0x7f00000001c0)) 378.895307ms ago: executing program 4 (id=17172): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000080)="ea", 0x1) setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000b40)={0x2db57365, 0xfffffffe, 0xd, 0xffffffdc, "23030003be0a00817dd8910bb864d3c3a3c900", 0x9c}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000b80)="c451c737bca15968971a90c21cdaa60732d6240f88bc12a23facdc6f54201d56eaf5931167c5b9d0ea24af42fd5c0a94a23ba9f77a5d7c4c20efaf1d1d3f316fa49dd541e6978367155596b2924488911e6da7b746c72d0317e8894abbb416fc88acdcbbd7cd4a858b3d4ae0f4236585e721e09ad4711745d35a4e4dde80c5f6dcaf8df254d9bd7391c505b3d54d276c2db5e241f832dd85cbb3cffe587373f8507e3667b46690e6c6f60344a599a4864d0f69e10f6f01c3c9010c36086a4b5fdaafed26ea8294961172e4a2445ec2c90b7893d2c953a925f81eb86870a4cce1b7df23d4802647afbee60b19e7509c26dd863474d5ad924d9f29d3de309d268e4518ad9a627543972d6398b927583e2a04bd495168c0a139bb09c67ac7c0a49bf6bddbf7203f13357e547580674e6deff5722ddb85de468037812bd48f41cd7dff1dc8a71243940e7b0c4f6247973ab06f7ec25107af47f22b608fe63e6b89e4f50a530ae59dde2b866cebc6037a053e1c988b78c30000a37673cee865db8f6cd67a5041991b52efb3ac9b0eb400ccdc6970f07765f1d0266f9d871cc6d8fb722efba06aed929355708fc5bf9f2f098bde9ad24b899e1ded2334103b43ed46770f56c19f2f711ba6c80565c0b5dbbf4587b31822f510659602572b95758ab63da2fd9dd3379be3d336d4668826e0a43fbc5d4bcd1dc677879250fa8cc23665708108ab562be2eff32a12443d9603faea3f762def73bef1065fede847d1b8b2506e5ae804381c4f72775db1a6cdb9afc40b824d6a077b4d06f8579b0a6ff58532f00b02edb572eb85bbb82e9a5e311265130a06689e0c33a5a20e4ada6c35efff0136b57ef26117df0cbb22abc0e473bcba1919dcc6f73f1dd763db3fe721d0f033b0a9f23e7cd0ebc725b6cb44706f31a77f72ca9e166873df63c9b84de67070793fb1d60fe858e57b055019614e691ae0d5b2e7321b95aa3df9da8074b62b9137bb55aa19d324a82b6e14055fa8722d98f0f1951046b6ee00165344407bd19bf514a66cfcb383f65b080b00e29df6e3f2843f96061420af8605d2befb9ad8f4bef3c40033aead3d7d96949f2567bcb27feaeabbc52da5b9f537494ca8e163d59a2d9d18710855037944902da59381bec9022db258e24247902fc5224a999a67a32f57ce914e2b0ced0370825b0c1c62b82580d79a47c08baf8e975f3784bf587ec0a469dde1a460093bc77233aa5ff3bd4b871d3f949ad3e8d236ea6b6580697a96113a1bd92cbd714ce4428e5511c662618b2ed185fd076cf3fa460c11ed6f4e6f26850e3224e47f2fc511508896dfee3c90b98556da83", 0x3b8}], 0x1) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000000000) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) ioctl$TIOCCDTR(r1, 0x20007478) r2 = syz_open_pts() writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)='#!', 0x2}, {&(0x7f0000000080)}], 0x2) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$WSKBDIO_GETBELL(r3, 0x40105704, &(0x7f0000000100)) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000240)={0x800f66a, 0xfffffffb, 0x800, 0xc100, "9cdc001871444def08075e6cdd015edd0400", 0x147a, 0x8}) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0x9}], 0xbde, 0x0, 0x2, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x5, 0x0, 0x0, &(0x7f00000001c0)="21007c323fee01c24c68495c241b8efa7ce8c04d13fe4e00fd88ff12d38acc1e1b9749f986f9385e4a908a12a93fe2af746c8fc36c1aefb8e5831d0dc22a4dc5d35ea319f29bd959c4b7d25bcf7d0f7264f138b5f0cfa818dca3a50bbca323f676af51783744b98611bc47c1c0bdf068ab6af6d74e7f7cd0972a8b750910573ac3c225835f6c337d5da9879e97f7a79100"/154, 0x3) setrlimit(0x0, &(0x7f0000000140)={0x4, 0x4}) writev(r3, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x2cd}], 0x1) ioctl$TIOCSETVERAUTH(r0, 0x8004741c, &(0x7f0000000180)=0x6) 279.491821ms ago: executing program 4 (id=17173): connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x8, &(0x7f0000000180)=[{0x1, 0x9, 0x7a, 0x9}, {0x0, 0x3, 0xe0, 0x80}, {0x0, 0x0, 0x16, 0x1}, {0x1be, 0xa, 0x81, 0x8}, {0xfffa, 0x9, 0x57, 0x6}, {0x7, 0x3}, {0x8, 0x7f, 0x8}, {0x73c8, 0x5, 0x7, 0x5}]}) write(r0, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) r1 = socket(0x2, 0x4001, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) close(r1) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0x4}) r2 = socket(0x18, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x870c3, 0x7, 0x7, 0x102, 0x5, 0x33a, 0x210002, 0x10, [{0x1, 0x7, 0x4, 0x71004}, {0x7, 0x4, 0x8, 0xfffffff8}, {0x8, 0xfa6, 0x0, 0xaf9}, {0x1, 0x800, 0x9}, {0x7dab, 0x1831ee74, 0xd, 0x4}, {0x2, 0x6, 0x3, 0x99}, {0x8, 0x1, 0x4f8, 0x6d}, {0xa, 0x803, 0xa2, 0x8}, {0x2, 0x82, 0x1, 0x8}, {0x6, 0x7fff, 0xc7, 0x88}, {0x2b, 0x50001, 0x9, 0x5}, {0x7ff, 0x9, 0x4c91, 0x2}, {0xb8c, 0x4, 0x101, 0x6}, {0x29a71717, 0x4, 0xc6, 0x9}, {0x10000, 0x7, 0x2006, 0x400}, {0x0, 0x1, 0x4, 0x10001}]}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) accept$unix(r1, &(0x7f0000000040)=@file={0x0, ""/68}, &(0x7f00000000c0)=0x46) connect$unix(r1, &(0x7f0000000000), 0x10) 279.247509ms ago: executing program 4 (id=17174): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r0, 0x0) getsockname$inet(r0, &(0x7f0000000000), &(0x7f00000000c0)=0xc) (async) r1 = kqueue() (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a52ad7", 0x65}], 0x10000000000000de) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = kqueue() (async, rerun: 32) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f13630b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be3898718e85a774dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180", 0x7f) kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) r3 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) (async) kevent(r1, 0x0, 0x2, 0x0, 0x2, &(0x7f0000000080)={0x1, 0x4}) (async) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='r\x00') 273.640091ms ago: executing program 5 (id=17175): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) (async) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000040)=0xc) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETBACKLIGHT(r1, 0x800c5712, &(0x7f0000000180)={0x0, 0x1, 0x2}) (async) r2 = getpgrp() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0}, 0xc) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (rerun: 32) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setregid(0x0, r5) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0}, 0xc) r7 = getegid() (async) r8 = getppid() ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xb1c, r8) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xc) (async) r11 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000240)=[{&(0x7f0000000080)="c69d9e67026e9148945bd181dda81d81d97d9a6a9dd1627bfc61ab17477104ecf09e43f329f7a69a559228be8b5f96fb3da1146c0ea4ca5c25311d4319", 0x3d}, {&(0x7f0000000140)="bab86b8c7e264f262c3a76ae639fabdd92d6654b69d29a5862403a7c3bee042b69e1602084b6c021f403ced9788a56ed5ed99d7f3843492c71eb7f7edbbbfb0f60a40302638a156bc85f2654d5df7eb0c4b2b4041919f400c3b2aeb3cd374dee7422482ba512712d836d8f91a7009938eda5e56644b74227c679caa5541deb49d17b327e5096937f7851cc39aeeae4d58a574037b6c91af2a85f1892317d9bdaa3d79212c4f2843531c2f39e31f03e1e52a5a9a597bf652b4eadc4c8c8be3ee670d372b7337482a3beb709e884be764d0933dec5aac78b14acd70b14f4a84b4e3a2c0120170f", 0xe6}], 0x2, &(0x7f00000003c0)=[@cred={0x20, 0xffff, 0x0, r2, r3, r5}, @cred={0x20, 0xffff, 0x0, 0x0, r6, r7}, @cred={0x20, 0xffff, 0x0, r8, r9, r10}, @rights={0x20, 0xffff, 0x1, [r0, r11, r0, r0]}], 0x80, 0x17}, 0x6) 273.218393ms ago: executing program 7 (id=17176): symlink(&(0x7f00000000c0)='./file1/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file1\x00') open(&(0x7f0000000580)='./file1\x00', 0x20, 0x133) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 222.477965ms ago: executing program 5 (id=17177): r0 = socket(0x18, 0x2, 0x0) close(r0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x0, 0xfa, 0x0, 0x81}, {0x3, 0x0, 0x0, 0xa3}]}) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x3e, &(0x7f0000000080)="6700d6e5", 0x4) r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) write(r2, &(0x7f0000000180)="092020090900db0000ff4278ad535c2a415642000000005624b77b6a0a", 0x1d) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1) setsockopt(r1, 0x3, 0xa0, &(0x7f0000000100)="c23c2d18817eb5541b9eb1d3e896a12f9279b3aa08d4c03bc5ad66db82cc140d4991db1552474b4c14c946f1f9417815eecf5ebb99ae039525b2c24d82c120034b00444ba6b8c9805bf5a750af8aaf38d860b7926af98247fe0c022e72c4978f21d20d13d4310ec50d2e52bbf40eb01c027d1bd17e5739915d2dcc422e2feb150f2ecc4062205a4092d149835133b56cfca4c05210661c19611011dac85715064dc22512ed621cd13cb5811acd788696f516e30df8428f011d2de2cc7a19112b7f7b5cc0979a7a6105e1d4839d6393d20f0ea0903d9c8c84672b94a5788c30610c237283", 0xe4) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x5, 0x0, 0xffffffffffffffd, 0x1, 0xe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1], [0x63, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x80000000], [0x6], [0x4, 0x0, 0x0, 0x165, 0x0, 0xa], [{0x0, 0x10, 0x0, 0x8000000000000}, {0x0, 0x0, 0xfffffff9}, {0x1000, 0x6, 0x0, 0xfffffffffffffffc}, {0x0, 0x1000, 0xfffd}, {0x0, 0x0, 0xc8, 0x7ffffffffffffffe}, {0x0, 0x5, 0x0, 0x1}, {}, {0x0, 0xfffffff5}], {0x0, 0xfffffffd, 0x3}, {0x0, 0x5}}}) r3 = kqueue() r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r4, 0x0, 0x64, &(0x7f0000000180)="01000000", 0x4) setsockopt(r4, 0x0, 0x65, 0x0, 0x0) kevent(r3, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r3, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) ioctl$TIOCSETA(r5, 0xc0284414, &(0x7f0000000040)={0x1, 0x101, 0x100, 0x80, "561a8ebd00000000000000000000000700", 0x5, 0xe62}) ioctl$BIOCLOCK(r5, 0x20004276) 220.666754ms ago: executing program 0 (id=17178): setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x3, 0x4, 0x8a38, 0x4000003, "07160a009cef01098b748200"}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="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", 0xc01}], 0x1) r2 = dup2(r1, r0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000140)={0xffffffff, 0xfffffeff, 0xf, 0x7ff, "2ced8a2af9a9e34c08a300010400202100005fd3", 0x6, 0xa9}) poll(&(0x7f0000000000)=[{r2, 0x40}], 0x1, 0x0) sysctl$hw(&(0x7f0000000040)={0x7, 0x5}, 0x2, &(0x7f0000000200)="a4896071", &(0x7f00000001c0)=0x4, 0x0, 0x0) syz_emit_ethernet(0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa030000000000000000a1040066ffffffef9078aa4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700200029078fffd0502020404000000d8b6d4b2748b257b2db3feafa3cd58eac356810000000000000000"]) 218.188213ms ago: executing program 4 (id=17179): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0}, 0xf0ffffffffffffff, 0x1}) r0 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x25, 0x0, 0x8, 0x7fffffe}]}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0xfffffffc, 0xffffff49, 0x7, 0x5bc, "000000000400009b22c1e01000", 0x0, 0x5}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000007", 0xd, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x11, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1002, &(0x7f0000000080), 0x4) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x9, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x7, 0x3, 0x71000}, {0x7, 0x8, 0xdf8, 0xfffffff9}, {0x7, 0x200, 0xffffff7c, 0x9}, {0x9d38, 0x8800, 0x2}, {0x401, 0x400002, 0x2802, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0xa, 0x80b, 0x14, 0xb}, {0x2, 0x82, 0x4, 0x9}, {0x4, 0x8101, 0x1000d1b, 0x1ff}, {0xb, 0x10001, 0x7ff, 0x3}, {0x7fd, 0x9, 0x9, 0x5}, {0xb8c, 0xc3b, 0x3, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x3, 0x4}, {0xfffffffd, 0x9, 0x400, 0x30005}]}) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) 217.705794ms ago: executing program 0 (id=17180): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x2, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3}, {0x0, 0xcb}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3}, {0x3, 0xfffffffd}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x3}, {}, {0x1, 0xfffffffc}, {0x2}, {}, {}, {0x2}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0x57fd}]}) setitimer(0x0, &(0x7f0000000080)={{0x100000000, 0x4}, {0x6f, 0xe}}, 0x0) r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x10090, 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') ioctl$PCIOCREAD(r0, 0xc0107002, &(0x7f0000000080)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4}, 0x2, 0x0, 0x0, &(0x7f00000002c0), 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000001c0)={0x2, &(0x7f0000000080)=[{0x7c, 0x9, 0x2, 0x80004a}, {0x6, 0x1, 0x5a, 0xfffff000}]}) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}}) r2 = dup(r0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x20) fcntl$dupfd(r3, 0x0, r0) ioctl$WSKBDIO_BELL(r2, 0x20005701) 914.939µs ago: executing program 4 (id=17181): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000001180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) dup2(r2, r4) accept$unix(r3, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000800005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000440)="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"/488, &(0x7f0000000000)=0x41, &(0x7f0000000180)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a3cb47323189ba3cc1200000000000000ba3246d6a4997c233524c8af17516e4557f61ad20180000000000000125f168ca7d339010057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567a6ea12ae3a110160df245fd14878a349ae89cfd2ae3d08f27575bf39badefdee5e48f0f76cc6a1edde84fa33fbaef777a66192ed094ab914a079a807900a8d42d2ef3258ade124824b60d5597cdf67a72acf40232038d4c48c94737b08e457ad28e6027e5041096ad99baae20878f25ffd8f97c2152e153933ef8fdafa2716f5ccac67256d3e1e1b714bc2162dfc854140d51b58ae1df", 0x98) syz_emit_ethernet(0x32, &(0x7f0000000280)={@random="724bdb0acce3", @broadcast, [], {@arp={0x806, @generic={0x1, 0x5a68, 0x6, 0x0, 0x9, @random="0887f8f700", "", @empty, "18cd91271fa5ec22cf2e970c14a6a5cb"}}}}) syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900301d0000000000ffff0000000000000001fe8000000000000000c4"]) 639.604µs ago: executing program 7 (id=17182): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000000040)=0x1) ioctl$KDENABIO(r0, 0x20004b3c) ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f0000000080)={'./file0\x00', 0x6, 0x6, 0x6, 0x1, 0x9, 0xbba0, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0xfffffffffffffffc}) getrlimit(0x1, &(0x7f0000000100)) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$WSDISPLAYIO_SETSCREEN(r1, 0x80045756, &(0x7f0000000180)=0xfff) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r2, 0x80105702, &(0x7f0000000200)={0x1, 0x7ff, 0x5, 0xb}) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) ioctl$WSDISPLAYIO_GETSCREEN(r4, 0xc0245755, &(0x7f0000000280)={0xffff, './file0\x00', './file0\x00'}) ioctl$WSDISPLAYIO_GETSCREEN(r3, 0xc0245755, &(0x7f00000002c0)={0x3, './file0\x00', './file0\x00'}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$FIOSETOWN(r5, 0x8004667c, &(0x7f0000000340)=0x721c) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000380)=0x9) ioctl$WSKBDIO_COMPLEXBELL(r2, 0x80105702, &(0x7f00000003c0)={0x6, 0xf00, 0x4, 0x2}) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000400), 0x10, 0x0) ioctl$VT_GETACTIVE(r6, 0x40047607, &(0x7f0000000440)) read(r1, &(0x7f0000000480)=""/113, 0x71) r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000500), 0x20000, 0x0) ioctl$WSKBDIO_GETENCODING(r7, 0x4004570f, &(0x7f0000000540)) openat$vmm(0xffffffffffffff9c, &(0x7f0000000580), 0x20, 0x0) r8 = socket(0x6, 0x4000, 0xb) open(&(0x7f00000005c0)='./file0\x00', 0x20, 0xc3) pipe2(&(0x7f0000000600), 0x20000) socket(0x18, 0x4, 0x7) ioctl$FIOSETOWN(r6, 0x8004667c, &(0x7f0000000640)=0x1) getpeername$inet6(r8, &(0x7f0000000680), &(0x7f00000006c0)=0xc) ioctl$WSDISPLAYIO_GMODE(r4, 0x4004574b, &(0x7f0000000700)) openat(r3, &(0x7f0000000740)='./file0\x00', 0x0, 0x102) 226.031µs ago: executing program 4 (id=17183): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x0, [{&(0x7f0000ca1000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000b7b000/0x3000)=nil}, {&(0x7f0000e03000/0x2000)=nil, &(0x7f000091c000/0x4000)=nil, 0x3}, {&(0x7f0000ca2000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f93000/0x2000)=nil}, {&(0x7f0000c20000/0x4000)=nil, &(0x7f00008fb000/0x2000)=nil, 0x7fffffff}, {&(0x7f0000e4c000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000eb0000/0x2000)=nil, &(0x7f0000a73000/0x3000)=nil, 0x2}, {&(0x7f0000ca4000/0x1000)=nil, &(0x7f0000b7c000/0x2000)=nil, 0x6}, {&(0x7f00008fb000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000a75000/0x2000)=nil, &(0x7f0000c66000/0x2000)=nil, 0x3}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f0000d93000/0x3000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c22000/0x2000)=nil}], './file0\x00'}) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x18a) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r2, 0x821869de, &(0x7f00000001c0)) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x20000000000001df, &(0x7f0000000040)=[{0x1, 0x0, 0x7, 0x7}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r3, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = openat$pci(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) mmap(&(0x7f00002c0000/0x4000)=nil, 0x4000, 0x4, 0x1012, r4, 0x3) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x0, [{&(0x7f0000ca1000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000b7b000/0x3000)=nil}, {&(0x7f0000e03000/0x2000)=nil, &(0x7f000091c000/0x4000)=nil, 0x3}, {&(0x7f0000ca2000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f93000/0x2000)=nil}, {&(0x7f0000c20000/0x4000)=nil, &(0x7f00008fb000/0x2000)=nil, 0x7fffffff}, {&(0x7f0000e4c000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000eb0000/0x2000)=nil, &(0x7f0000a73000/0x3000)=nil, 0x2}, {&(0x7f0000ca4000/0x1000)=nil, &(0x7f0000b7c000/0x2000)=nil, 0x6}, {&(0x7f00008fb000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000a75000/0x2000)=nil, &(0x7f0000c66000/0x2000)=nil, 0x3}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f0000d93000/0x3000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c22000/0x2000)=nil}], './file0\x00'}) (async) open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x18a) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) socket(0x18, 0x1, 0x0) (async) ioctl$FIONREAD(r2, 0x821869de, &(0x7f00000001c0)) (async) openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x20000000000001df, &(0x7f0000000040)=[{0x1, 0x0, 0x7, 0x7}]}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$VNDIOCSET(r3, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) openat$pci(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) (async) mmap(&(0x7f00002c0000/0x4000)=nil, 0x4000, 0x4, 0x1012, r4, 0x3) (async) 0s ago: executing program 5 (id=17184): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000100)=[{0x2}], 0x1}) sysctl$hw(&(0x7f0000000040)={0x6, 0x6}, 0x2, &(0x7f0000000240)="01000000", &(0x7f0000000080)=0x4, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0x7, 0xa, 0x9, 0x5fffff61, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x400, 0x2081}) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="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", 0x290}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.248' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pmap_unwire: wiring for pmap 0xfffffd806b94b500 va 0x200000001000 didn't change! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error vnd0: sloppy read from proc 12802 (syz-executor): blkno 0 bcount 15 pckbd_enable: command error fuse: Cannot find fusebuf pckbd_enable: command error uvn_flush: obj=0xfffffd805d7ce4b0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost!     OpenBSD/amd64 (!co{BX ;`Ȃ`'wfQoK3 ꞛ0ߥ%T5c?-*GȼNl{[mmY-43wR`uy= pF7r08K) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd805ecee540, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error wskbd0: can't attach mux (error=5) uvn_flush: obj=0xfffffd8076350bf8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pmap_unwire: wiring for pmap 0xfffffd806b94b300 va 0x200000001000 didn't change! sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code uvn_flush: obj=0xfffffd8061443ba0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 210453397505 ,/!$: 7.34 ./4 ! #/.42/,,).' 4%2-).!, $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 210453397505 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 127, 3):% = 4762072176 OpenBSD/amd64 ("806lP+EքCo]͡ L-2HY۸{DMBws>&EI. EQd`JM.1Y3'7v.^` mp\؁=n#) (tty00) login: OpenBSD/amd64 ("806lP+EքCo]͡ L-2HY۸{DMBws>&EI. EQd`JM.1Y3'7v.^` mp\؁=n#) (tty00) login: malloc(): allocation too large, type = 127, size = 4762072176 OpenBSD/amd64 ("806lP+EքCo]͡ L-2HY۸{DMBws>&EI. EQd`JM.1Y3'7v.^` mp\؁=n#) (tty00) login: fuse: Cannot find fusebuf denied attempt to set clock back -9223372032717175653 seconds fuse: Cannot find fusebuf pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock forward to 13622315181289262 denied attempt to set clock back 33554481 seconds pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock back 53 seconds pmap_unwire: wiring for pmap 0xfffffd806b94be00 va 0x200000001000 didn't change! sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pppx: unable to set addresses for pppx1, error=17 fuse: Cannot find fusebuf denied attempt to set clock forward to 210453397505 denied attempt to set clock back 31458390 seconds malloc(): allocation too large, type = 127, size = 4762072176 fuse: Cannot find fusebuf denied attempt to set clock back 33554533 seconds denied attempt to set clock back 4137602288 seconds OpenBSD/amd64 (nsgk&:"Bh G+~^}oǹ%@D) (tty00) login: $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 13622315181289262 OpenBSD/amd64 (nsgk&:"Bh G+~^}oǹ%@D) (tty00) login: OpenBSD/amd64 (n) (tty00) login: pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 denied attempt to set clock back 31458458 seconds OpenBSD/amd64 (n) (tty00) login: denied attempt to set clock back 4137602358 seconds uvn_flush: obj=0xfffffd805ae11708, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! OpenBSD/amd64 (n) (tty00) login: pppx: unable to set addresses for pppx1, error=17 WARNING: thread `nfsio' (408027) exits with status -1 WARNING: thread `nfsio' (221958) exits with status -1 WARNING: thread `nfsio' (64645) exits with status -1 WARNING: thread `nfsio' (291188) exits with status -1 WARNING: thread `nfsio' (381576) exits with status -1 WARNING: thread `nfsio' (57474) exits with status -1 WARNING: thread `nfsio' (287609) exits with status -1 WARNING: thread `nfsio' (128421) exits with status -1 WARNING: thread `nfsio' (60515) exits with status -1 WARNING: thread `nfsio' (127524) exits with status -1 WARNING: thread `nfsio' (147766) exits with status -1 WARNING: thread `nfsio' (119935) exits with status -1 WARNING: thread `nfsio' (295881) exits with status -1 WARNING: thread `nfsio' (273744) exits with status -1 WARNING: thread `nfsio' (247684) exits with status -1 WARNING: thread `nfsio' (515910) exits with status -1 WARNING: thread `nfsio' (331291) exits with status -1 WARNING: thread `nfsio' (6672) exits with status -1 WARNING: thread `nfsio' (202486) exits with status -1 WARNING: thread `nfsio' (25866) exits with status -1 OpenBSD/amd64 (n) (tty00) login: sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700                             OpenBSD/amd64 (n) (tty00) login: malloc(): allocation too large, type = 127, size = 4762072176 denied attempt to set clock back 4137602491 seconds malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 33554753 seconds fuse: Cannot find fusebuf denied attempt to set clock back 0 seconds malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 OpenBSD/amd64 (n) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 fuse: Cannot find fusebuf malloc(): allocation too large, type = 29, size = 16796513700 $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 8243129037239968815 $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 8243129037239968815          OpenBSD/amd64 () (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 uvn_flush: obj=0xfffffd80635c6bf8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock back 134217770 seconds malloc(): allocation too large, type = 29, size = 16796513700 ,:2?1%>0 %?8-0:$7;*% 56.&,53(: /"*=08&&&&&$806&$376&0, /&&3%4=080. %22/2 $52).' 0!'%/54. 56.&,53(:  : #(!.'%3 4/ 0!'% -!9 "% ,/34! -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 4263431344 3%#/.$3 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 6, 3):% = 287762939904 0-!05.7)2%: 7)2).' &/2 0-!0 08&&&&&$806"94"!00 6! 08200000001000 $)$.'4 #(!.'%! $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 157287483 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 210453397505 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 159383624 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 4263431367 3%#/.$3 $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 210453397505 -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 3$0(6)/3#3)0:1:0): (%#+ /.$)4)/. (%22/2 0870) /. /0#/$% 081%  : ,,%'!, %15%34 /: .6!,)$ /--!.$ 0%2!4)/. /$% 0-!05.7)2%: 7)2).' &/2 0-!0 08&&&&&$806"94"600 6! 08200000001000 $)$.'4 #(!.'%! &53%: !../4 &).$ &53%"5& $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 157287503 3%#/.$3 malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 90 seconds denied attempt to set clock back 90 seconds pppx: unable to set addresses for pppx1, error=17 fuse: Cannot find fusebuf fuse: Cannot find fusebuf malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 4263431391 seconds OpenBSD/amd64 (Amnesiac) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 537395301 seconds denied attempt to set clock back 537395301 seconds denied attempt to set clock back 4263431398 seconds denied attempt to set clock back 4263431398 seconds j| malloc(): allocation too large, type = 29, size = 16796513700 fuse: Cannot find fusebuf malloc(): allocation too large, type = 29, size = 16796513700 kSpRU;҂b+iS!$;abY>TB+&'걬Āv?DKJpZJYqs&:;!u_,ήcVXsFX*K][W5'1Mةh 't1l("}!ȾƯ=d,A1Q$!w\0@vC{M֑[5F~cffM.L "%mXjmͪtP q5#\$Q.ˀ 2uac(|GWkH/T%/UNxpYΒd}7GK:ߟ\5T˷nKnGQWV;@Fz= denied attempt to set clock back -9223372032591346441 seconds uvn_flush: obj=0xfffffd805f2b17d8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700 sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code denied attempt to set clock back -9223372032591346434 seconds malloc(): allocation too large, type = 29, size = 16796513700 uvn_flush: obj=0xfffffd805dab0648, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 134217872 seconds OpenBSD/amd64 (Amnesiac) (tty00) login: sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code OpenBSD/amd64 (Amnesiac) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 uvm_fault(0xfffffd806baea028, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff82376fa8 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80002a3a9030 gsbase 0xffff8000299edff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff82376fa8 Starting stack trace... panic(ffffffff8339d546) at panic+0x1d0 kerntrap(ffff80002a3a8f80) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800001850000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,81,2000,ffff80002a345a48) at dtclose+0x109 spec_close(ffff80002a3a9130) at spec_close+0x466 VOP_CLOSE(fffffd805e84d718,81,fffffd80097fb4e0,ffff80002a345a48) at VOP_CLOSE+0x132 vn_closefile(fffffd8075bc6c68,ffff80002a345a48) at vn_closefile+0x12b fdrop(fffffd8075bc6c68,ffff80002a345a48) at fdrop+0x121 closef(fffffd8075bc6c68,ffff80002a345a48) at closef+0x192 fdfree(ffff80002a345a48) at fdfree+0x116 exit1(ffff80002a345a48,0,0,1) at exit1+0x576 sys_exit(ffff80002a345a48,ffff80002a3a94a0,ffff80002a3a93f0) at sys_exit+0x1a syscall(ffff80002a3a94a0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d5d385bdd10, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON TRAP EXIT 4 0 Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *184583 52035 0 0 0 1 syz-executor 488123 36558 0 0 0 0 syz-executor proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x79fb9260eb00, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806baea028, 0x0, 0, 1) -> e ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x79fb9260eb00, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff800035007f50 rbx 0 rdx 0 rcx 0xffff80002a344058 rax 0x2a r8 0xffff800035007e80 r9 0x1 r10 0x2fd6669eecc6b7c7 r11 0x69693901e2563789 r12 0 r13 0xffffffff82619218 Xdoreti+0x18 r14 0 r15 0 rip 0xffffffff81b0a4c7 proc_trampoline+0xc7 cs 0x8 rflags 0x246 rsp 0xffff800035007ed0 ss 0 proc_trampoline+0xc7: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=184583 pid=52035 tcnt=2 stat=onproc flags process=0 proc=0 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a344588,0xffff80002a344300 process=0xffff800039c249e0 user=0xffff800035002000, vmspace=0xfffffd806baea9b0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 96171 94013 10217 0 2 0 syz-executor *52035 184583 18204 0 7 0 syz-executor 52035 321508 18204 0 3 0x4000080 rest syz-executor 36558 488123 83634 0 7 0 syz-executor 36558 187653 83634 0 2 0x4000000 syz-executor 49436 329148 88270 0 3 0x80 nanoslp syz-executor 49436 436463 88270 0 3 0x4000080 kqsel syz-executor 49436 130386 88270 0 3 0x4000080 fsleep syz-executor 11430 106809 45226 0 3 0x80 nanoslp syz-executor 11430 93311 45226 0 3 0x4000080 sbwait syz-executor 11430 149583 45226 0 3 0x4000080 fsleep syz-executor 27430 112249 1 0 3 0x100083 ttyin getty 43240 257943 0 0 3 0x14200 acct acct 83634 442591 775 0 2 0x3 syz-executor 88270 136306 775 0 3 0x82 nanoslp syz-executor 33501 45683 775 0 3 0x82 wait syz-executor 35376 39920 775 0 3 0x82 wait syz-executor 14320 201120 0 0 3 0x14280 nfsidl nfsio 55478 65513 0 0 3 0x14280 nfsidl nfsio 20103 379327 0 0 3 0x14280 nfsidl nfsio 48153 269275 0 0 3 0x14280 nfsidl nfsio 89212 118655 0 0 3 0x14280 nfsidl nfsio 3638 92768 0 0 3 0x14280 nfsidl nfsio 24585 331077 0 0 3 0x14280 nfsidl nfsio 35500 329656 0 0 3 0x14280 nfsidl nfsio 93033 110252 0 0 3 0x14280 nfsidl nfsio 1195 259705 0 0 3 0x14280 nfsidl nfsio 38286 28358 0 0 3 0x14280 nfsidl nfsio 32710 405514 0 0 3 0x14280 nfsidl nfsio 58923 344136 0 0 3 0x14280 nfsidl nfsio 34375 40037 0 0 3 0x14280 nfsidl nfsio 2415 315286 0 0 3 0x14280 nfsidl nfsio 58424 141210 0 0 3 0x14280 nfsidl nfsio 3171 123862 0 0 3 0x14280 nfsidl nfsio 37607 458169 0 0 3 0x14280 nfsidl nfsio 58750 436541 0 0 3 0x14280 nfsidl nfsio 85236 50971 0 0 3 0x14280 nfsidl nfsio 10217 160716 775 0 3 0x82 nanoslp syz-executor 45226 11747 775 0 3 0x82 nanoslp syz-executor 18204 124425 775 0 3 0x82 nanoslp syz-executor 79673 420863 775 0 3 0x82 nanoslp syz-executor 56576 215833 0 0 3 0x14200 bored sosplice 775 323143 62190 0 3 0x82 kqread syz-executor 62190 320657 64919 0 3 0x10008a sigsusp ksh 64919 343588 14763 0 3 0x98 kqread sshd-session 14763 29897 37389 0 3 0x92 kqread sshd-session 37389 173489 1 0 3 0x88 kqread sshd 44154 94763 22270 74 3 0x1100092 bpf pflogd 22270 494231 1 0 3 0x80 sbwait pflogd 65372 183208 59061 73 3 0x1100090 kqread syslogd 59061 145742 1 0 3 0x100082 sbwait syslogd 55999 59926 1 0 3 0x100080 kqread resolvd 23845 248438 0 0 3 0x14200 bored smr 19147 163523 0 0 3 0x14200 pgzero zerothread 12931 270773 0 0 3 0x14200 aiodoned aiodoned 45852 523002 0 0 3 0x14200 syncer update 73681 197388 0 0 3 0x14200 cleaner cleaner 61032 214651 0 0 2 0x14200 reaper 92861 204978 0 0 3 0x14200 pgdaemon pagedaemon 75638 195851 0 0 3 0x14200 bored viomb 68998 133798 0 0 3 0x40014200 acpi0 acpi0 40417 391439 0 0 3 0x40014200 idle1 3808 54371 0 0 3 0x14200 bored softnet7 77727 147046 0 0 3 0x14200 bored softnet6 28922 10336 0 0 3 0x14200 bored softnet5 97330 144873 0 0 3 0x14200 bored softnet4 55936 403586 0 0 3 0x14200 bored softnet3 91743 47220 0 0 3 0x14200 bored softnet2 74581 424895 0 0 3 0x14200 bored softnet1 73114 135009 0 0 3 0x14200 netlock softnet0 14576 505231 0 0 2 0x14200 systqmp 24557 216678 0 0 3 0x14200 bored systq 13173 390834 0 0 3 0x14200 tmoslp softclockmp 35906 426580 0 0 3 0x40014200 tmoslp softclock 35657 229967 0 0 3 0x40014200 idle0 1 105583 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 61032 (reaper) thread 0xffff8000ffffc2a0 (214651) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10295 11201K 13688K 166960K 22548 0 pcb 17 20K 26K 166960K 4032 0 rtable 287 20K 21K 166960K 3246 0 pf 50 20K 67489K 166960K 1489 0 ifaddr 54 17K 20K 166960K 916 0 ifgroup 73 3K 3K 166960K 1800 0 sysctl 4 1K 9K 166960K 264 0 counters 76 37K 38K 166960K 2130 0 ioctlops 0 0K 4K 166960K 4917 0 iov 0 0K 32K 166960K 1693 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1721 108K 108K 166960K 14963 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 324K 560K 166960K 134 0 VM map 2 1K 1K 166960K 2 0 sem 22 296K 548K 166960K 633 0 dirhash 12 2K 3K 166960K 375 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 18376 0 sigio 0 0K 0K 166960K 574 0 proc 68 83K 164K 166960K 4180 0 subproc 72 4K 4K 166960K 547 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 4158 0 in_multi 89 6K 7K 166960K 1388 0 ether_multi 1 0K 0K 166960K 277 0 mrt 1 0K 0K 166960K 102 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 265 1182K 1182K 166960K 265 0 exec 0 0K 1K 166960K 4728 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 100 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 223 148K 189K 166960K 161242 0 UVM aobj 164 7K 8K 166960K 188 0 pinsyscall 37 74K 102K 166960K 20674 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 1095 0 NDP 16 0K 1K 166960K 715 0 temp 102 8648K 8904K 166960K 842263 0 kqueue 8 14K 35K 166960K 3475 0 SYN cache 2 0K 16K 166960K 4 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 2412 0 2411 21 20 1 3 0 8 0 rtentry 176 1048 0 951 6 1 5 5 0 8 0 unpcb 144 15680 0 15669 104 103 1 6 0 8 0 syncache 336 22 0 22 12 12 0 1 0 8 0 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 736 6406 0 6400 98 97 1 7 0 8 0 arp 128 164 0 145 1 0 1 1 0 8 0 ipq 40 1 0 1 1 1 0 1 0 8 0 ipqe 40 3 0 3 1 1 0 1 0 8 0 inpcb 328 21926 0 21915 220 216 4 12 0 8 2 nd6 144 182 0 164 1 0 1 1 0 8 0 pkpcb 40 203 0 203 35 34 1 1 0 8 1 kcovpl 48 60 0 52 1 0 1 1 0 8 0 mppekey 1024 11 0 11 8 8 0 1 0 8 0 ppxss 1192 810 0 809 15 14 1 1 0 8 0 pppxif 1504 201 0 201 33 32 1 1 0 8 1 pfstscr 40 9 0 8 2 1 1 1 0 8 0 pffrag 232 130 0 120 2 0 2 2 0 482 0 pffrnode 88 93 0 85 1 0 1 1 0 8 0 pffrent 40 502 0 492 2 1 1 2 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 10 0 10 10 10 0 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pftag 88 4 0 0 1 0 1 1 0 8 0 pfstitem 24 1106 0 960 2 0 2 2 0 8 0 pfstkey 128 1120 0 972 8 2 6 6 0 8 0 pfstate 384 1111 0 968 27 8 19 19 0 8 0 pfrule 1344 38 0 32 2 1 1 2 0 8 0 rttmr 136 5 0 5 3 3 0 1 0 8 0 art_heap8 4096 6 0 2 6 2 4 5 0 8 0 art_heap4 256 3959 0 3543 63 36 27 31 0 8 0 art_table 40 3965 0 3545 5 0 5 5 0 8 0 art_node 32 1034 0 956 1 0 1 1 0 8 0 sysvmsgpl 40 27 0 21 2 1 1 1 0 8 0 semupl 112 3 0 3 3 3 0 1 0 8 0 semapl 112 557 0 537 1 0 1 1 0 8 0 shmpl 112 185 0 24 5 0 5 5 0 8 0 dirhash 1024 259 0 242 3 0 3 3 0 8 0 dino2pl 256 36631 0 34984 105 1 104 104 0 8 0 ffsino 296 36631 0 34984 130 2 128 128 0 8 0 nchpl 144 62193 0 61527 65 39 26 64 0 8 0 rtmask 32 107 0 107 26 25 1 1 0 8 1 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 233934 0 233934 31 28 3 3 0 8 3 percpumem 16 1080 0 1027 1 0 1 1 0 8 0 kstatmem 264 1188 0 1150 6 3 3 3 0 8 0 acpiwqpl 32 8 0 8 1 0 1 1 1 8 1 scsiplug 72 91 0 91 36 35 1 1 0 8 1 scxspl 216 444137 0 444137 44 41 3 7 1 8 3 plimitpl 152 4782 0 4766 1 0 1 1 0 8 0 sigapl 424 18463 0 18390 10 1 9 9 0 8 0 knotepl 120 1135 0 0 29 0 29 29 0 8 0 kqueuepl 224 7737 0 7728 69 66 3 9 0 8 1 pipepl 344 2900 0 2873 82 76 6 12 0 8 3 fdescpl 528 18343 0 18314 3 0 3 3 0 8 0 filepl 160 143199 0 142990 134 119 15 23 0 8 3 lockfpl 104 7323 0 7321 8 7 1 3 0 8 0 lockfspl 48 2419 0 2417 2 1 1 2 0 8 0 sessionpl 144 92 0 84 1 0 1 1 0 8 0 pgrppl 48 596 0 580 1 0 1 1 0 8 0 ucredpl 104 27080 0 27067 1 0 1 1 0 8 0 zombiepl 144 23398 0 23395 5 4 1 1 0 8 0 processpl 1248 18463 0 18390 6 0 6 6 0 8 0 procpl 664 48558 0 48478 12 4 8 9 0 8 0 sosppl 168 129 0 129 31 30 1 1 0 8 1 sockpl 752 41050 0 41027 394 386 8 25 0 8 4 mcl64k 65536 25 0 0 4 0 4 4 0 8 0 mcl16k 16384 13 0 0 2 0 2 2 0 8 0 mcl12k 12288 7 0 0 1 0 1 1 0 8 0 mcl9k 9216 5 0 0 1 0 1 1 0 8 0 mcl8k 8192 15 0 0 2 0 2 2 0 8 0 mcl4k 4096 117 0 0 14 0 14 14 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 216 0 0 15 4 11 12 0 8 0 mtagpl 96 8 0 0 1 0 1 1 0 8 0 mbufpl 256 3510 0 0 215 0 215 215 0 8 0 bufpl 280 183916 0 177773 440 0 440 440 0 8 0 anonpl 32 20251 0 0 159 0 159 159 0 246 0 amapchunkpl 152 602868 0 602286 254 223 31 53 0 158 2 amappl16 200 61939 0 61755 339 308 31 36 0 8 8 amappl15 192 7 0 7 2 2 0 1 0 8 0 amappl14 184 239 0 230 1 0 1 1 0 8 0 amappl13 176 18 0 18 6 6 0 1 0 8 0 amappl12 168 19875 0 19846 3 1 2 2 0 8 0 amappl11 160 55 0 46 1 0 1 1 0 8 0 amappl10 152 11 0 11 7 6 1 1 0 8 1 amappl9 144 253 0 252 2 1 1 1 0 8 0 amappl8 136 22 0 19 1 0 1 1 0 8 0 amappl7 128 236 0 226 1 0 1 1 0 8 0 amappl6 120 765 0 760 1 0 1 1 0 8 0 amappl5 112 357 0 349 1 0 1 1 0 8 0 amappl4 104 452 0 433 1 0 1 1 0 8 0 amappl3 96 122336 0 122226 4 0 4 4 0 8 0 amappl2 88 1493 0 1439 2 0 2 2 0 8 0 amappl1 80 85027 0 84522 16 2 14 15 0 8 0 amappl 88 156201 0 156034 5 0 5 5 0 92 0 dma65536 65536 2 0 2 2 2 0 1 0 8 0 dma32768 32768 8 0 8 7 7 0 1 0 8 0 dma16384 16384 6 0 6 6 6 0 1 0 8 0 dma8192 8192 3 0 3 2 2 0 1 0 8 0 dma4096 4096 4 0 4 4 4 0 1 0 8 0 dma2048 2048 3 0 3 2 2 0 1 0 8 0 dma1024 1024 72 0 71 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 20 0 20 11 11 0 1 0 8 0 dma128 128 279 0 279 21 21 0 1 0 8 0 dma64 64 20 0 20 12 12 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 31 0 30 1 0 1 1 0 8 0 aobjpl 72 187 0 24 4 0 4 4 0 8 0 uaddrrnd 24 18343 0 18314 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 18343 0 18314 1 0 1 1 0 8 0 vmmpekpl 168 119245 0 119171 4 0 4 4 0 8 0 vmmpepl 168 1129173 0 1127269 293 187 106 119 0 357 7 vmsppl 488 18342 0 18314 6 1 5 5 0 8 0 rwobjpl 80 273640 0 266584 166 11 155 157 0 8 1 pdppl 4096 36694 0 36628 254 188 66 86 0 8 0 pvpl 32 29594 0 0 235 3 232 232 0 265 0 pmappl 256 18342 0 18314 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 871 0 411 14 0 14 14 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83823ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839b2a60) at __mp_lock+0x192 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff839b2a60) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x74c947a38bc0, count: 4 ddb{0}> trace x86_ipi_db(ffffffff83823ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839b2a60) at __mp_lock+0x192 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff839b2a60) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x74c947a38bc0, count: -11 ddb{0}> machine ddbcpu 1 Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x79fb9260eb00, count: 14 ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x79fb9260eb00, count: -1