last executing test programs: 4.222579844s ago: executing program 5 (id=79): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0x7f, 0x80, 0xffffffff}, {0x7, 0x81, 0x4, 0x6}, {0x8016, 0x7e, 0x0, 0x800ee68}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000300)=ANY=[]) syz_emit_ethernet(0x4a, &(0x7f0000000d40)={@broadcast, @local, [], {@ipv6={0x86dd, {0x9, 0x6, "8fcec6", 0x14, 0x50, 0x8, @empty, @loopback, {[], @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xf, 0x0, 0x100}}}}}}}) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f0000000180)="b96ab02cac", 0x5) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6, 0xfe, 0x80, 0xfffff800}, {0x7, 0x30, 0x86, 0xd}, {0x54, 0xc, 0xff, 0x8}]}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000412000/0x2000)=nil) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000001c0)) (async) shmat(r4, &(0x7f0000107000/0x2000)=nil, 0x3000) (async) shmat(r4, &(0x7f00004d6000/0x1000)=nil, 0x3000) (async) shmat(r4, &(0x7f000039e000/0x3000)=nil, 0x0) (async) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4) connect$unix(r5, 0x0, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000001ac0)=ANY=[]) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) kqueue() (async) write(r6, &(0x7f0000000080)="c30516845e", 0xff55) 4.216928362s ago: executing program 5 (id=81): r0 = semget(0x1, 0x3, 0x228) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00002a1000/0x3000)=nil, 0x200007fffffffffd}, {&(0x7f0000e4e000/0x4000)=nil, &(0x7f0000417000/0x3000)=nil, 0x80000001}, {&(0x7f00003d9000/0x2000)=nil, &(0x7f0000aa5000/0x2000)=nil}, {&(0x7f0000318000/0x2000)=nil, &(0x7f00000d6000/0x1000)=nil, 0x1}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x9}, {&(0x7f0000034000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0x8001}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00000bf000/0x3000)=nil, 0x8}, {&(0x7f0000791000/0x1000)=nil, &(0x7f0000e4d000/0x3000)=nil, 0x403}, {&(0x7f000032e000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00004e5000/0x7000)=nil, &(0x7f0000632000/0x4000)=nil, 0x10000}, {&(0x7f0000196000/0x4000)=nil, &(0x7f00004e6000/0x3000)=nil, 0xf}, {&(0x7f0000074000/0x4000)=nil, &(0x7f0000688000/0x4000)=nil, 0xffffffff}, {&(0x7f000055e000/0x2000)=nil, &(0x7f0000689000/0x2000)=nil, 0x6}, {&(0x7f00001c8000/0x2000)=nil, &(0x7f000053a000/0x1000)=nil, 0xfffffffffffffffa}, {&(0x7f0000318000/0x3000)=nil, &(0x7f000068b000/0x2000)=nil, 0x2000001000039f7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000073000/0x7000)=nil, 0x4}], './file0\x00', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000480)="b3", 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) read(r2, &(0x7f0000000200)=""/255, 0xff) semop(r0, &(0x7f0000000000)=[{0x2, 0x4, 0x1000}], 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) fcntl$getown(r2, 0x5) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) 4.116894845s ago: executing program 0 (id=87): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) write(r0, &(0x7f0000000700)="d9", 0x1) (async) ioctl$TIOCCDTR(r0, 0x20007478) 4.063302712s ago: executing program 0 (id=91): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) setuid(0xffffffffffffffff) ktrace(0x0, 0x1, 0x4000040e, 0xffffffffffffffff) r0 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffe}, {0x6112, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x0, 0x7fff}, {0xf, 0x6, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) close(r2) openat(r1, &(0x7f0000000040)='./file0\x00', 0x8000, 0x100) poll(&(0x7f0000000000), 0x35, 0x0) close(r0) 3.934681104s ago: executing program 0 (id=94): mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000a00)) r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000280067000000f09078ac1400bbdfffffff4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="4b1f8c92d5abd8e0"]) shmget(0x2, 0x1000, 0x755, &(0x7f0000ffd000/0x1000)=nil) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b100050460000000000000000041", 0xe, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x3, &(0x7f0000000000)={0x0, 0xa4b0}) setrlimit(0x3, &(0x7f0000000000)={0x100000, 0x100000}) ioctl$VNDIOCSET(r1, 0xc0285108, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)=[&(0x7f00000003c0)='\x1f1[\xe5\xbe\x0e\x81K\xc3\xca\x92\xe4\xff\xfe\xd7@P\"3\xec\xec{\xf3\x99}c\x16\xf7\xa4m\x89\x8fp\xc8]+\xf5S\xa4\x97\x92\xea4f\xdf[\xab\xae\x05m\xbeJv\x9c\xfe\x19~\x04\xbc\xe7\xbd\xc08\v\x12\xe2N\x1ci\xd9\x02T$\x14\xeaS\x97\xc1U\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000000c0)='(\'\xca\xe6\xbf3\xb6\x1a[-!%%((+\x00', &(0x7f00000001c0)='\t\x10 \x00\xd4\xa0\xcd0\xb7\xa1\xa8\xaf\xa1dKM\xd0\x00\x00'], &(0x7f0000000300)=[&(0x7f0000000280)='\\\xcf\xc4H\x8c\xa59n\xdf\x1f\xc1@n\x04\x9fa\xe2\xcc\xadM\x90\xec)u@\xbc\xf5Z\xc6\xa0]\xcaN\xccj\xc0v\xf6\xa7$\x02\xa0\x8a\xf9\x05\x1a\b\xe8\xeaho\xedB\xe4q\xf2\xa3\x1bt\xe6', &(0x7f0000000340)='\x80\x00\xcb\x95\xe5\xea\xc7\f\xfe\x1bL2#\xa7\xa4\x94v\xf02tHd\xdcxctg\xc8\xa5\xbe\xd8\xd0T\x0f\xc6\x9b\xee\xef\x90\xaf\xf1\xbf\x93\x02\xb8\xd9\x8aN\xd8h]\'Ut\xc3d=\x7f\b\xda\x94kt\xd4F\xc1\xd5\xcb\xbaf\xe4c\x1d\xcc\x1d\xf4\x18\xd3\xab\xa5u\xb4\x9c\x96\xf4\xb35!\xcc', &(0x7f0000000440)='\n2\x18\x90\xc2\xb3d\xde\x1f\x00\x8f\x9c\xaa\xd4]\xd2\xb9X\x15\xa65\xb8;\x18v\xf8\\\xedf\xaa\xd8J\xc7\x8f\xb2U\b\xee\xbcZy3\x80\xfd\x1c\x8e\xa7&\xd4l\xe3B\xbe\x05\xf1\xe6z\xa3\x05\xd6Y\x11;\xd2b}\xd3t\xd2j{,3\xf3\xec\x92r\xbbm\xc3\xca[\xc9I\xe9^\x88\x91\xd5\xb2\x96\xc8:\x92\x8c\xbe\xb5\xdf\xea\xd8\xa5\xbc\x96\v\xad\xc2D\x92\xc6Z\x8034\xaf\xb4\x02CE\x81\xdd\xd9\xe17ce\x05\x95\xe5^E\x19\x80\x111\xea\xd7\x87\xa5\r\xae<\xa4\xc3\xd2\x94\a\x7f\xdd\"i83\x87r\x81\x13\x03\xaec-\xeaxv\xcd\xcc\xf5\xf1Q{5\xad\x19C>/\x0eh\x02\xdb\xebW&Y\xcb\xab`\xfe\x19\xdfp7\x91\xbe\xec0\xefi\xa3*|\xd6.\xc332e5\xcfxy\x12f%\xe7\xf4\xaa\xb7\xda\xaa\xfbq\xa6\x1bo']) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) 3.932613166s ago: executing program 0 (id=97): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) (async) r0 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 64) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000300)={0x3, &(0x7f0000000200)=[{0xa4, 0xf, 0x3, 0x200000}, {0x30, 0x5, 0x5a, 0x61b0b}, {0x406, 0x5, 0x9, 0xfffffff1}]}) (async, rerun: 64) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) symlink(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00') (async) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x2, 0x0}) (async, rerun: 32) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async, rerun: 32) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) execve(0x0, 0x0, 0x0) 3.837849758s ago: executing program 0 (id=100): r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) listen(r1, 0xfff) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000380)={0x3f6, 0x4b, 0xd, 0xa, "03ec0009007f8800", 0x1108a, 0x6}) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000580)='\x00', 0x10, 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) unlink(&(0x7f0000000100)='./file0\x00') ioctl$TIOCSETVERAUTH(r1, 0x8004741c, &(0x7f00000000c0)=0x1ff) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r2, 0x20000000) close(r2) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) r4 = syz_open_pts() accept4(r1, 0x0, &(0x7f0000000080), 0x2000) ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000040)={0x2, 0x0, 0x0, 0xfff, "fc4c15f66860c490cf1dc87382037f18b3c0bad3", 0x46c, 0x7}) 3.837176952s ago: executing program 0 (id=102): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KDDISABIO(r0, 0x20004b3d) (async) r1 = syz_open_pts() ioctl$TIOCEXCL(r1, 0x2000740d) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="5e3b5b5c3661d631641b4c6729a69a44fae84a34b88cb244d82948f76f678f280c9cd19492f5464e851f53af13dd815ff4eb82c56b37676ad34178c84b0654f4729a", 0x42}], 0x1) (async) chmod(&(0x7f0000000100)='./file0\x00', 0xe1) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0xc0) (async, rerun: 32) r2 = kqueue() (rerun: 32) ioctl$DIOCKILLSTATES(0xffffffffffffffff, 0x0, &(0x7f0000000180)={{0x8000000000000000, 0x40, 0x2}, 0x6, '\x00', 0x2, {@table={'./file0\x00', 0x0, 0x3, 0x7}, [0x1, 0x8065], 0xe6, 0x7, 0x6}, {@table={'./file0\x00', 0x0, 0x3, 0x1}, [0x7, 0x7], 0x4, 0x7, 0x8}, './file0\x00', './file0\x00', 0x7cd4, 0x1ff}) (async, rerun: 64) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x1, 0x2) (rerun: 64) faccessat(r3, &(0x7f00000002c0)='./file0\x00', 0x100, 0x2) (async) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) symlinkat(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') (async, rerun: 32) ioctl$DIOCRDELADDRS(0xffffffffffffff9c, 0xc4504444, &(0x7f00000003c0)={{'\x00', './file0\x00', 0x10, 0x4}, &(0x7f0000000380)=[{@multicast1, '\x00', './file0\x00', 0x0, 0xfff, 0x18, 0x40, 0x4, 0x7, 0x5}], 0x80, 0x1, 0x4, 0xb9, 0x1, 0xd95, 0x16, 0xfffffff8}) (async, rerun: 32) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000840), 0x208, 0x0) ioctl$DIOCGETTIMEOUT(r4, 0xc008441e, &(0x7f0000000880)={0xb, 0x2}) (async) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) (async) mkdir(&(0x7f00000008c0)='./file0\x00', 0x0) (async, rerun: 32) symlink(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)='./file0\x00') (rerun: 32) getdents(r3, &(0x7f0000000980)=""/130, 0x82) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, &(0x7f0000000a80)={&(0x7f0000000a40)='./file1\x00', r0, 0x1}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2, 0x8812, r2, 0x3) (async) ioctl$DIOCRCLRASTATS(r4, 0xc4504448, &(0x7f0000000c80)={{'./file1\x00', './file1\x00', 0x19, 0x3}, &(0x7f0000000ac0)=[{@multicast2, '\x00', './file0\x00', 0x9, 0x5, 0x0, 0x7, 0x0, 0x6, 0x9}, {@multicast1, '\x00', './file0\x00', 0x9, 0x40, 0x1a, 0x1, 0x6, 0x7, 0x1}, {@broadcast, '\x00', './file2\x00', 0x0, 0xe, 0x0, 0x8, 0x7, 0x7, 0x9}, {@empty, '\x00', './file0\x00', 0x8, 0x100, 0x1a, 0x41, 0xa, 0x2}, {@empty, '\x00', './file1\x00', 0x7, 0x6, 0x0, 0x5, 0x9, 0x81, 0xff}, {@broadcast, '\x00', './file1\x00', 0x81, 0x6, 0x1b, 0x0, 0x80, 0x6, 0xe}, {@broadcast, '\x00', './file1\x00', 0x80000001, 0x5, 0x1a, 0x5, 0x81, 0x7, 0x40}, {@multicast2, '\x00', './file1\x00', 0x9, 0xbdaf, 0x2, 0x2, 0x40, 0x80, 0x3}], 0x1ff, 0x8, 0xe660, 0x8, 0x9, 0x5, 0x30, 0x80000000}) execve(&(0x7f0000001100)='./file0\x00', &(0x7f0000001180)=[&(0x7f0000001140)='/dev/pf\x00'], &(0x7f0000001400)=[&(0x7f00000011c0)='\x00', &(0x7f0000001200)='\x00', &(0x7f0000001240)='.,\x00', &(0x7f0000001280)='\x00', &(0x7f00000012c0)='\x00', &(0x7f0000001300)=':]\'/-\x89-.\x00', &(0x7f0000001340)='[]Z.}]\x00', &(0x7f0000001380)='-\xa4\x00', &(0x7f00000013c0)='/dev/ttyCcfg\x00']) (async) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9) sysctl$kern(&(0x7f0000001480)={0x1, 0x29}, 0x2, &(0x7f00000014c0)="fa7b16e9cd7180dd7e444d5aac3ba5bf1120441b1a846807e8f72e7a057d1c74ee1ef35052cd0cbe50e976a7a97c47db99169d4a1e98f571f4158e77b3a61b", &(0x7f0000001500)=0x3f, &(0x7f0000001540)="3124161f3b8e7cad21418efc2d8bbfbeacdac3a29f6b105e6be5e6cd69303b98b5186ebf95c7d2ae1c3f7ff26f4e1b0f838fb6603735348057a47b049a4f0c1074304e8084bcca2f8c7d071e08916aed58bae67e03dcb8c5ab25876fa89fc34342c2eeab7210cbd2b375f3108233e25e9727206b7ffe197bd9d12947583f306009c379c9fbdfe8b5e02e100c27710e922f65357f7b312bf5c31d75d70fdb45a747b816b13fe04ea27af86545e061", 0xae) (async) ioctl$DIOCGETRULESETS(0xffffffffffffff9c, 0xc444443a, &(0x7f0000001600)={0xb61, './file1\x00', './file2\x00'}) (async) ioctl$TIOCSBRK(r1, 0x2000747b) (async) socket(0x10, 0x4, 0x6) utimes(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)={{0xe838, 0x40}, {0x4, 0x4}}) 3.28725956s ago: executing program 5 (id=117): socket(0x2, 0x2, 0x0) (async) r0 = socket(0x2, 0x2, 0x0) socket(0x18, 0x2, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) connect(r1, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x8f38, '\x00', 0x1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0xc9e, "000000000000000000000000ffff00ff", 0x1}, 0x1c) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {}, {0x1}, {0x1}, {0x3}, {0x2}, {}, {}, {0x2}, {0x1, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) (async) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) r4 = socket(0x2, 0x2, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) (async) connect$unix(r4, &(0x7f0000000000), 0x10) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x4) r5 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) 3.280470664s ago: executing program 5 (id=120): r0 = kqueue1(0x4) (async, rerun: 32) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) (async, rerun: 32) execve(&(0x7f00000007c0)='./file0\x00', &(0x7f00000008c0)=[&(0x7f0000000800)=':!#,+{.]*#@X$\x00', &(0x7f0000000840)=']\']{%{\x00', &(0x7f0000000880)='!-]\x00'], &(0x7f0000000940)=[&(0x7f0000000900)='\x00']) (async) r2 = getsid(0x0) ktrace(0x0, 0x0, 0x2004, r2) (async) r3 = getegid() (async) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000280)={0x0}, 0xc) (async, rerun: 32) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000440)) (async) r8 = getppid() getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000480)={0x0, 0x0}, &(0x7f00000004c0)=0xc) (async) fstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0) getresgid(&(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)=0x0) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000780)={r4, r5, r10}, 0xc) r11 = socket(0x18, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) (async) lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) (async) setsockopt(r11, 0x1000000000029, 0xa, &(0x7f0000000280)='\x00\"\x00\x00', 0x4) sendmsg$unix(r1, &(0x7f0000000680)={&(0x7f0000000100)=@abs={0x2, 0x0, 0x0, 0x1}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000140)="6fd9c5d245e5015f2a8fb6e6a09ac5275949b7c05e63718edaf4e80441493fde992bea80f15bb5dd33db53b434ca57eb4025271d984c70399ba21bc8fea1623c59ff5c87b8dd4c280357a12f397bfb6f16bafa972001052fba3f11b1971164fb2f734910b10864ed345e4d7e17f7b5f1b8d2306cf3e8653c5d83fe8812c11beb184a5fe2b06c7178672e50f8c0ca4d000eab3d75e5bb8da4f2b79fc91ce3b2d70374697f8006a5496b28b935d32cb55634766f57be8edbd98782b04e986017a8bd11fd453dc52cc447d50b19fa0b992b317245ad4bb80a32da7b2a606657cf861ece5e", 0xe3}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffff000000000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=r3, @ANYBLOB="18000000ffff000000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="10000000ffff000001000000", @ANYRES32=r0, @ANYBLOB="14000d0000003d0001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="14000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="24000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB="18000000ffff000000000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r3], 0xa4, 0x404}, 0x0) pwrite(r0, &(0x7f0000000000)="02498bbfc07ea0102d80931c488f7e964d8178a84b32a9462800cd3fa73503ae30b1c1034d9af08be2303ba1016f174d", 0x30, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000040)={0x7, 0x2, 0x2, 0xa0000217}, 0x4, 0x0, 0x0, 0x0, 0x1e) 3.229032127s ago: executing program 5 (id=126): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$unix(0x1, 0x5, 0x0) pselect(0x40, &(0x7f0000000240)={0x8, 0x5, 0x400, 0x40, 0x9bf, 0xfffffffffffffffe, 0x837, 0x8}, &(0x7f0000000280)={0x5, 0x6, 0xd, 0x3, 0x0, 0x3, 0x8000000000000000}, &(0x7f00000002c0)={0x3, 0x7, 0x5, 0x3, 0x88, 0x8, 0x2, 0x299c}, 0x0, &(0x7f0000000300)={0x3}) ioctl$FIONREAD(r0, 0x8028698c, &(0x7f0000000100)) setsockopt(r0, 0x1, 0x215, &(0x7f00000000c0)="5fc3be14d5e0d13df4243c3512a04b0827d9d21646d4297cba8dd28cdc4b824883af97eb78be676315db182a8da30431b68088fbd702f7564486559d4844bb6177a13d0d3324414406650344520e48d157d3d9caa4776c1d00534d9877da41961b32e4e7bd031677475831941d40193b1badf4593c97309c7ea4cd925ee43e54b6daf0f5f02641b3b724ef9ac8191a6c73c276b33d4b27517254f9578b3af8caf80a64073b829ed850fa748ca8a937fc4a15d1aa9388ccdaea0bc7ae782cc9c777f0c27776421c2a78fbbd2ab93377a4f41819", 0xd3) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x1, 0x0) bind(r1, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) sysctl$kern(&(0x7f00000001c0)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000000200)="00e049a27daebcea7cb496c8980000000000", 0x12) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$WSMOUSEIO_GTYPE(r2, 0x40045720, &(0x7f0000000080)) 3.086432374s ago: executing program 5 (id=130): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x7ffffffe, 0x401, 0x8001, 0x861, "b44e81198cd41f7b00", 0x1}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="b3", 0x1}], 0x1) (async) read(r1, &(0x7f0000000200)=""/255, 0xff) (async) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) (async) r2 = socket(0x18, 0x1, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x46}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) (async) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) (async) chroot(&(0x7f0000000740)='.\x00') (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r6 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) lseek(r6, 0x2, 0x2) setuid(0xffffffffffffffff) (async) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) 1.757020721s ago: executing program 7 (id=172): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f00002cf000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f00003d5000/0x11000)=nil, &(0x7f000049e000/0x3000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f000036f000/0x2000)=nil, 0x2}, {&(0x7f000054a000/0x1000)=nil, &(0x7f000028b000/0x3000)=nil, 0xa04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffdffbfffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000281000/0x4000)=nil, &(0x7f0000463000/0x1000)=nil, 0x3ffffffffffff}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00'}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f0000000140)) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='o', 0x1}], 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) getrlimit(0x8, &(0x7f0000000040)) 1.725303925s ago: executing program 7 (id=177): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) nanosleep(&(0x7f0000000000)={0x4}, &(0x7f0000000080)) unveil(0x0, &(0x7f00000004c0)='c\x00') r1 = kqueue() kevent(r1, 0x0, 0xfffffffe, 0x0, 0x76c, 0x0) close(r1) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000500)={&(0x7f0000000440)='./file0\x00', 0x2, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000140)=@file={0x4, 0x1, './file0\x00'}, 0xa) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) dup3(r3, r2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) execve(0x0, 0x0, 0x0) 1.635701288s ago: executing program 3 (id=181): setuid(0xffffffffffffffff) (async) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$FIONREAD(r0, 0x8028698c, &(0x7f0000000100)) (async) r1 = socket(0x18, 0x3, 0x0) syz_emit_ethernet(0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="ddd279cbaaaaaaaaaaaaa9aa8863"]) (async) r2 = socket(0x24, 0x2, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000000080)) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r3 = socket(0x1, 0x2, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045000028002f74c1ee66000000069078e0007f01ac1400aa4e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50027fff9078fffc"]) mknod(0x0, 0x2000, 0x45448) r4 = semget(0x0, 0x2, 0x2d1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$audioctl(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504444, &(0x7f0000000740)={0x0, 0x0, 0x5, 0x7fffffff, "97a2224ff1c1d949eb050000008fdf9d7573c1d1", 0x80007ff, 0x22}) (async, rerun: 64) recvmsg(r5, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218}, {&(0x7f00000002c0)=""/70}, {&(0x7f0000000340)=""/106}], 0x100000000000039d, 0x0}, 0x0) (rerun: 64) semop(r4, &(0x7f0000000000), 0x23) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f0000000000)="9b1809", 0x0, 0x0, 0x0) semctl$SETALL(r4, 0x0, 0x9, &(0x7f0000000000)) (async) syz_emit_ethernet(0x36, &(0x7f00000007c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x28, 0x66, 0x0, 0x6, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8200, 0x0, 0xfffc}}}}}}) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="e5", 0x1}, {&(0x7f0000000080)}], 0x2, 0x0, 0x0, 0x400}, 0x402) (async, rerun: 64) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) (async, rerun: 64) r7 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) (async) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000080)="0f8f5df8da212c1c9bcb30474b9c8b9674448d6c57bbced2a3b031ade8b1412e7fe49c0d803a462335", 0x29}], 0x1) (async) execve(0x0, 0x0, 0x0) (async) connect(r6, &(0x7f00000003c0)=@in={0x10, 0x2, 0x1, 0xfffff000}, 0x10) (async) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 1.568486365s ago: executing program 3 (id=183): kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x1, 0x3, 0x6ea}], 0x0, 0x0, 0xffffffff, 0x0) r0 = semget$private(0x0, 0x4, 0x680) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000009340)=0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) dup2(0xffffffffffffffff, r1) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) 1.566313665s ago: executing program 3 (id=185): r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/95, 0x5f}, {&(0x7f0000000100)=""/167, 0xa7}, {&(0x7f00000001c0)=""/137, 0x89}, {&(0x7f0000000280)=""/115, 0x73}], 0x4, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000) 1.505867239s ago: executing program 1 (id=187): sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0x2, &(0x7f00000003c0)="6c6f545fedadaeeab98902000000352ee25c277f7ae307710e55", 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) flock(r0, 0x1) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r1 = open(&(0x7f0000000200)='./file0\x00', 0x40000, 0x80) rmdir(&(0x7f00000000c0)='./file0\x00') ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000240)={0x3, 0x2, 0x6c, 0x8e, "685180d51aa0aeb2395d19576b75b36701f66dde", 0x5, 0x1}) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, &(0x7f0000000040), 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000000040)={0x2, 0x1c}) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="b100050300000400000008b307000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b67404d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002022fbfe0c2300008abfba0900000008e371a3f834", 0x9d, 0x40e, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x2, 0x3, 0x0) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000, 0x0) r6 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0x11, 0x3, 0xfffffff5}, {0x54, 0xf0, 0x9}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffddb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000700)=ANY=[]) pread(r6, &(0x7f0000000240)="7b9c59", 0x3, 0x2) ioctl$WSMOUSEIO_GETPARAMS(r5, 0x80105727, &(0x7f0000000b00)={&(0x7f0000000ac0)=[{0x5, 0x3}, {0x5}], 0x2}) ioctl$FIONREAD(r4, 0x80286987, &(0x7f00000001c0)) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f00000001c0)={0x3}) 1.489770902s ago: executing program 2 (id=190): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0xc, 0x2a3, 0x0, 0xfffffffffffffffe, 0xc, 0x800000000000013, 0x0, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x13, 0x0, 0x37) r0 = syz_open_pts() ioctl$TIOCSCTTY(r0, 0x20007461) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x6) r1 = socket$inet(0x2, 0x3, 0x0) r2 = syz_open_pts() setsid() chmod(&(0x7f0000000040)='.\x00', 0x35f) setuid(0xee01) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$TIOCSCTTY(r2, 0x20007461) r3 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCCHKVERAUTH(r3, 0x2000741e) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0x8) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) setsockopt(r1, 0x487309fd, 0x6, &(0x7f0000000140)="46c998c25fc63b558a4fbeb92c13c510d562dad52f5d216ce23e3e08b3fc5c9e3e4df42158bc27e151e82f19ed5de96a668730abfbee1434fa90b973ed56570704e5903d6888b6947b60f092aa9c1ead07b8f34ea1532df91602dbc0e05d71e597f6fd56d91b64fa58", 0x69) ioctl$VMM_IOC_RESETCPU(r4, 0x82405605, &(0x7f0000000280)={0x3, 0x5, {[0x9, 0x8000000000000000, 0x5, 0x4, 0x4, 0xf0a4, 0xfffffffffffffe01, 0x40, 0x400, 0x3ff, 0x7fffffff, 0x9, 0x6, 0x1, 0x31, 0xd, 0xffffffffffffffff, 0x9be2], [0x4, 0x100000000, 0x5, 0x8, 0x401, 0xffffffffffffffff, 0x6, 0x0, 0x10, 0x8], [0x380000000, 0x8, 0x2, 0x3, 0xb, 0x2, 0x2], [0x3, 0x1, 0xd, 0x1, 0x4, 0xfff], [{0x7, 0x9, 0x8, 0x3}, {0x9, 0x7, 0x8, 0x2}, {0x8, 0xfffffffe, 0x4, 0x3}, {0xc396, 0x2, 0x5}, {0x9, 0x9, 0xfffffffd}, {0x3, 0x8, 0x0, 0x3}, {0x523, 0xfff, 0x4, 0x10001}, {0x9, 0x7e681ab0, 0xd379, 0x100000000}], {0x4, 0x1000, 0x4, 0x3}, {0x3, 0x8, 0xd7d5, 0x8}}}) 1.421073573s ago: executing program 1 (id=191): unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') (async) r0 = kqueue() fcntl$setstatus(r0, 0x4, 0x80) (async) r1 = open(&(0x7f0000000240)='./file0\x00', 0x80, 0x4) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) (async) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f00000000c0)=0x7) (async) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') 1.419822714s ago: executing program 3 (id=192): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f0000000100)={{'./file0\x00', './file0\x00', 0x12, 0x1}, &(0x7f0000000040)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x8, 0x9, 0x2, 0x4, 0xc, 0x3, 0xb2}, {@multicast1, '\x00', './file0\x00', 0x7, 0x4, 0x19, 0x5, 0x8, 0x9, 0x7}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x5, 0x721, 0x18, 0x40, 0x2, 0x2, 0x65}], 0x2, 0x3, 0x2, 0x0, 0x1000, 0x3, 0x2, 0xd}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0xffffffffffffffff) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f0000000100)={{'./file0\x00', './file0\x00', 0x12, 0x1}, &(0x7f0000000040)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x8, 0x9, 0x2, 0x4, 0xc, 0x3, 0xb2}, {@multicast1, '\x00', './file0\x00', 0x7, 0x4, 0x19, 0x5, 0x8, 0x9, 0x7}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x5, 0x721, 0x18, 0x40, 0x2, 0x2, 0x65}], 0x2, 0x3, 0x2, 0x0, 0x1000, 0x3, 0x2, 0xd}) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0xffffffffffffffff) (async) 1.419324665s ago: executing program 2 (id=193): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) setpgid(0x0, 0x0) (async) setpgid(0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000780)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000780)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0x11, 0x3, 0xfffffff5}, {0x40, 0xf0, 0x9}, {0x6, 0x80, 0x12, 0xfffff802}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="a7a6d61de4a10909926243003b47915d8156c41f", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000780)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0x11, 0x3, 0xfffffff3}, {0x3c, 0xf0, 0x9}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="a7a6d61de4a10909926243003b47915d8156c41f83d57d6801f6d333", &(0x7f0000000000)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[]) (async) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[]) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x3a, 0x29, @rand_addr="000000000000000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x11, 0xc, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@dstopts={0x29}]}}}}}}}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@remote, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @local, @empty, @local, @rand_addr=0x5}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x201, 0x0) ioctl$WSKBDIO_SETMAP(r4, 0x8004667c, &(0x7f0000000180)={0x0, 0x0}) (async) ioctl$WSKBDIO_SETMAP(r4, 0x8004667c, &(0x7f0000000180)={0x0, 0x0}) connect$unix(r3, &(0x7f0000000140)=@abs, 0x8) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x7, 0x2, 0x0, 0x20000003}, {0x60, 0xe, 0x18}, {0x3c56, 0x3, 0x6, 0x80000007}]}) syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x20, 0x18, 0x0, 0x0, 0x80, 0x1, 0x0, @broadcast, @rand_addr=0xdfffffff}, @icmp=@generic={0x21}}}}}) (async) syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x20, 0x18, 0x0, 0x0, 0x80, 0x1, 0x0, @broadcast, @rand_addr=0xdfffffff}, @icmp=@generic={0x21}}}}}) 1.416637161s ago: executing program 1 (id=195): ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0xd137, 0xa, 0xffffffffffffffff}) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x10, 0x38) r2 = fcntl$dupfd(r0, 0xc, r1) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) closefrom(r2) setsockopt$sock_int(r0, 0xffff, 0x1024, &(0x7f00000000c0)=0x80000001, 0x4) sysctl$net_inet_carp(&(0x7f0000000100)={0x4, 0x2, 0x70, 0x2}, 0x4, &(0x7f0000000140)="d53f835883551a55419f5d5af46859d05cb5a9d5ae234f548700e398c3f7f732378c3d2693d77b5f4c5005bf0caf464300b54533732e12f98b4c8aa86ece0786bd0bd2f6a76ca58adb36a256a170a622d6505b62b8ea5a0b0dd7842d8f730ecccb4112d446afd3d0c37095e339d1b49c2c560f7b4a401fee82dc1ab0870d193876f620a10ee45cc9d0cba7926706470ba2409408e9b8b5ae656008ba21f31bd6", &(0x7f0000000200)=0xa0, &(0x7f0000000240)="330589ddfeb36cb5deafccfc5baa956a20c1394cd7f696b6dacae12e838bc26535572b1c12c6d07768f0901267fe2be45935d1b699ad36f458c86465e5f371c643022ebe2e61a96ea7741b535fda304e8d0b01e8f3e1e26acb4c16d0db383ec52ced84ae01af3e8807c27e5233db4468c713eca695d144c43deae748b570a0e78a3e2f89c66f5093351faf494601081dc054cd103356a9aa2ea2a9196f10babc555366c94480ff5e0a5073783be2f586e54daa4767f95f0ec9dc5b20de65de5bdd46a3dc1a9f9b35d7d9e6276d053087f4ac", 0xd2) sysctl$net_inet_carp(&(0x7f0000000340)={0x4, 0x2, 0x70, 0x4}, 0x4, &(0x7f0000000380)="90b87de0c9e03628a2596a2589519b04fd5fc5a16efd709766f5ed7e77f7d17c25a4", &(0x7f00000003c0)=0x22, &(0x7f0000000400)="9805f7d8acbd43c98bda97cb98e11afda59a94f3d5fdf80bbecf38bd0b42adc6fdc4d3ed7d977208b2a01f52c61e105d24bd146d2b3a57b72c741f3a397cabeba126ad55a5469cff645737324a801e51a0e374eff0c38a246d356c8274a043e03133c6e8030e2d51e013548fcdd558fa3e2f72bba8f2c9756b0a16c30061283d506065cbcfe08348b83eb0c5440162dbb35afb2397d33e5670a1562f82ac3014c2b67015039b", 0xa6) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) bind$unix(r1, &(0x7f00000004c0)=@abs={0x3, 0x0, 0x0, 0x2}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000500)={0x7, 0x9, r3}) mquery(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x10, r4, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1004, &(0x7f0000000540)=0x101, 0x4) truncate(&(0x7f0000000580)='./file0\x00', 0x1) r5 = semget$private(0x0, 0x4, 0x0) semop(r5, &(0x7f00000005c0)=[{0x0, 0x200, 0x1800}, {0x1, 0x1000, 0x1800}, {0x4, 0x7032}, {0x2, 0xc, 0x1000}, {0x2, 0x7, 0xc00}], 0x5) ioctl$AUDIO_SETPAR(r0, 0xc0404125, &(0x7f0000000600)={0x0, 0x1, 0x8, 0x3, 0x1, 0x2b110, 0x8, 0x5, 0x39, 0x8663}) sysctl$kern(&(0x7f0000000640)={0x1, 0x54}, 0x2, &(0x7f0000000680)="80402085771924190286751d23197f13bc06eb82105518aca54af19d5cd854dc8d5fd206488574b94578330033", &(0x7f00000006c0)=0x2d, &(0x7f0000000700)="b4520bbffc4007f37d99fd7461bec540b1ec8bf11b000b5fb7c8cd5c94d12c98c3eb3348", 0x24) r6 = socket$unix(0x1, 0x5, 0x0) sendto(r6, &(0x7f0000000740)="4c2952df7e115f16b298ca5f48dadb24b962ec4e97a562eb804eaf96e4472527c6ac4f57b8d5", 0x26, 0x2, &(0x7f0000000780)=@in6={0x1c, 0x18, 0x0, 0x7, "2b247b4faf4ffca46e77c821d5058353", 0xe}, 0x1c) symlinkat(&(0x7f00000007c0)='./file0\x00', r1, &(0x7f0000000800)='./file0\x00') r7 = open$dir(&(0x7f0000000840)='\x00', 0x10000, 0x0) faccessat(r7, &(0x7f0000000880)='./file0\x00', 0x140, 0x3) kqueue() sysctl$net_inet_carp(&(0x7f00000008c0)={0x4, 0x2, 0x70, 0x1}, 0x4, &(0x7f0000000900)="09c3f5086fefd54ec2909da61a43fbf70f0a", &(0x7f0000000940)=0x12, &(0x7f0000000980)="1638d8f8c87324255ac0a821711bff6d8cb2923d1100b18a69eccb4d25a828c5c1d4d1cb8e1c7ed70c610417", 0x2c) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f00000009c0)={'./file0\x00', 0x800, 0x3, 0xffff, 0x0, 0x0, 0x8, 0x1, 0x0, 0x1, 0x3ff, 0x9}) getpeername(r2, &(0x7f0000000a40)=@in, &(0x7f0000000a80)=0x10) r8 = setsid() ktrace(&(0x7f0000000ac0)='./file0\x00', 0x1, 0x1000, r8) writev(0xffffffffffffff9c, &(0x7f0000000d00)=[{&(0x7f0000000b00)="2553a9d296bedcb07493f9707d1e902507164c506bda6976fdaa8967368573acf3876f196911028f3b4b350533bc09a0179cf8ad91aefcb5c4598af504a048b17615c689cf533e89988c4e0ccd22353593cf8c16d9c4ca3c084d1d967bfe1aa2d6cfb5a1375d1c2e1a592f2ea2017f30869eacb6991f138399936e335760489eac2d43f8e8c9e4a04565f0b1da01510baea1f5f1307b079de7df42a5791c439a849e878c142d7c58dc91e148659336295399f3d5f169905d2a74ea6c118684009e45a9698302e44791b6b0667570e01cfc50b87874d83813ac329201af4f15af30e47bb88aac128fd0", 0xe9}, {&(0x7f0000000c00)="f0ef402143fae8ef9486f8bd272db63b7bf87382bbb20f0f83", 0x19}, {&(0x7f0000000c40)="2e286c5ac69ab2b7cd6d78d099420d34694a6a13c079f5e4b01e5d6086427c656bbc46633db7aaa5cd66b29395b9c0528bdfbaaccd55910e246bd8996d27583c1ba454821b9d704b307b0af3df00af05ac66d3930d3b0181041f6c76247a569e0bab5fa2951beca227cba043c9e92e32690256b8586c1b85ce0f9816ca2137bd96", 0x81}], 0x3) 1.355550042s ago: executing program 6 (id=196): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0xc, 0x3, 0x86, 0xb}, {0xc, 0x3, 0xa2, 0xffffffff}, {0x6, 0x2, 0x8, 0x100cfa}]}) r1 = socket(0x18, 0x1, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1007, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES8=r0]) 1.353839336s ago: executing program 6 (id=197): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x9) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x3) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r0, 0x20000000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x7, &(0x7f0000000080)="c5f5d915", 0x4) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') 1.353496062s ago: executing program 2 (id=198): r0 = syz_open_pts() ioctl$TIOCSTART(r0, 0x2000746e) ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000000)) r1 = syz_open_pts() fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x2, 0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff}) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f0000000080)) r2 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r3 = dup2(r2, r1) close(r0) r4 = fcntl$getown(r3, 0x5) ioctl$TIOCSBRK(r0, 0x2000747b) ioctl$WSMUXIO_LIST_DEVICES(r3, 0xc1045763, &(0x7f0000000140)={0x8, [{0x1, 0x2}, {0x3, 0x8000}, {0x3}, {0x2, 0x6fc}, {0x2, 0x2}, {0x1, 0x1}, {0x3, 0xa0}, {0x3}, {0x1, 0xac58}, {0x2, 0x9}, {0x1, 0x81}, {0x3, 0x9}, {0x3, 0x4}, {0x1, 0x9}, {0x2, 0xb4}, {0x1, 0x400}, {0x3, 0xe}, {0x2, 0x4}, {0x1, 0xd5}, {0x1, 0x4}, {0x3, 0x1}, {0x1, 0x4e}, {0x1, 0x6}, {0x1, 0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0x7}, {0x3, 0x8000}, {0x1, 0xbb}, {0x3, 0x2d9b4489}, {0x2, 0x5}, {0x1, 0x9}]}) fcntl$setown(r1, 0x6, r4) read$audio(r3, &(0x7f0000000280)=""/243, 0xf3) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000380)={0x6, 0x9, 0x5, 0x5, "fe7dbf1ad3ac186f8627b6408375826ffe6ee3ec", 0x1, 0x1}) ioctl$VT_GETSTATE(r3, 0x40067664, &(0x7f00000003c0)) ioctl$BIOCGBLEN(r3, 0x40044266, &(0x7f0000000400)) fcntl$getown(r0, 0x5) ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000440)=0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000500)={0x0, 0x0, 0x1d, 0x0, 0xb}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0xfffffff7, 0x1e03, 0xc3b, 0x5, 0x10000, 0x330b, 0xf1, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000580)={r5, r6, r7, 0x4, 0x7ff, 0x5, 0xa, 0xf, 0xac2, 0x0, 0x29d000, 0x1}) ioctl$TIOCSDTR(r1, 0x20007479) closefrom(r3) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000680)={&(0x7f00000005c0)="e8a3dea84fd16106ef2345a70cf2f2bae733da7da9134a4300e46da9f724eba99d77e4d72c6bf45281a1045dfad8df8a60d8c8fe032f3020a502d0b67765e0550fbb0db68946d9a0c568ff4a36a17ea0335b675ffd1456f8436e66e4cd019fbd9b2bc81ac80db9203786398029705e0ff57a7010a5181fb922f16ef2e4ff8164464805592114d02995331ac602af5ec4b44a09babecb77521893bb3068b95c8e9494937ae5c0151f751de150ceca2863d8b17bb7cd7e", 0xb6}) futimens(r1, &(0x7f00000006c0)=[{0x2, 0x100000001}, {0x0, 0xdeb}]) ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000000700)={0x837, 0x7}) kqueue() ioctl$KDDISABIO(r3, 0x20004b3d) 1.353192119s ago: executing program 3 (id=199): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DIOCRCLRTABLES(r0, 0xc450443c, &(0x7f0000000040)={{'./file0\x00', './file0\x00', 0xbbe752c52a801ca0, 0xb}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7ff, 0x101, 0x0, 0x1}) fsync(0xffffffffffffffff) ioctl$DIOCGETSYNFLWATS(r0, 0xc0084463, &(0x7f00000004c0)) r1 = openat$dri(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dri/renderD128\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffff9c, 0xc01c64a3, &(0x7f0000000540)={0x2, 0x2000000, 0x3, 0x7, 0x7fffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000580)={r2}) fcntl$getflags(r1, 0x3) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000005c0)={r2}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000640)=0x1c) recvmmsg(r4, &(0x7f0000000840)={{&(0x7f0000000680)=@in6, 0x1c, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/45, 0x2d}], 0x2, &(0x7f0000000800)=""/47, 0x2f}, 0x4}, 0x38, 0x3, &(0x7f0000000880)={0xe8e, 0x9}) closefrom(r0) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$WSKBDIO_GETENCODING(r5, 0x4004570f, &(0x7f0000000900)) ioctl$DIOCRGETTSTATS(r0, 0xc4504440, &(0x7f0000001a00)={{'./file0\x00', './file0\x00', 0x0, 0x6}, &(0x7f0000000940)=[{'./file0\x00', './file0/file0\x00', 0xc}, {'./file0\x00', './file0\x00', 0x44, 0x8}, {'./file0\x00', './file0\x00', 0x4, 0x6b}, {'.\x00', './file0\x00', 0x42, 0x8}], 0xfffffffc, 0x4, 0x7, 0x4, 0x0, 0xff, 0x58, 0x9}) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000001e80), 0x10408, 0x0) ioctl$DIOCIGETIFACES(r6, 0xc0284457, &(0x7f0000001fc0)={'./file0/file0\x00', &(0x7f0000001ec0)=""/218, 0x0, 0x4, 0x2bde, 0x1}) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000002000)={r3}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x3810, r0, 0x2) r7 = openat$dri(0xffffffffffffff9c, &(0x7f0000002040)='/dev/dri/renderD128\x00', 0x10, 0x0) ioctl$DRM_IOCTL_MODE_CLOSEFB(r7, 0xc00864d0, &(0x7f0000002080)) r8 = accept(r4, &(0x7f00000020c0)=@in6, &(0x7f0000002100)=0x1c) sendmsg$unix(r8, &(0x7f0000002340)={&(0x7f0000002140)=@abs={0x3, 0x0, 0x0, 0x0}, 0x8, &(0x7f00000022c0)=[{&(0x7f0000002180)="b9136783da10ab0a7a25c82462fd2ab99f685ec8600f35c2c1e6bbc7672ad162eb9f30554b684831e3d230f94d2cf6c38229f52de52d8819f5c252ee3bbf91e909400dfec1a936cea8be0323c8432a0c235fea21607ed59fb3881abb83f87682d54c44cf89e0c925", 0x68}, {&(0x7f0000002200)="9b48802bce030537820d62c6e17c284c0212a44811d378a42e533b50359224f53aead2afee186feed5e35303e112d27b8d3bda9205af0c166caabc", 0x3b}, {&(0x7f0000002240)="ff6139f6b2eb8133e49c5930ae2ad4fba65e572476f5d2ff4d04e7c9a1198ed70cdf8d3a5ee7a450bb8770b6146306e9cdd5ec1a4b7dd22baa74f3d2afe9719bf1ec031f38ce544869d792369f45fd8de89a5f22a83b20b066b67b639dccc11dcd771a4c6790fff366ec5e4cda42259ba7358435e82129d47960c286", 0x7c}], 0x3, &(0x7f0000002300), 0x0, 0x5}, 0x2) open$dir(&(0x7f0000002380)='./file0\x00', 0x410, 0x88) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, &(0x7f00000026c0)={&(0x7f00000023c0)=[0x0, 0x0], &(0x7f0000002400)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000002640)=[0x0, 0x0], &(0x7f0000002680)=[0x0, 0x0, 0x0], 0x8, 0x2, 0x2, 0x0, 0x0, 0x11, 0x1, 0x7, 0x0, 0xfffffffb, 0xff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000002840)={&(0x7f0000002740)=[0x0], &(0x7f0000002780)=[0x0, 0x0, 0x0], &(0x7f00000027c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002800)=[0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x4, 0x4, 0x262e, 0x7, 0xfffffffa, 0xffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000002c40)={&(0x7f0000002a40)=[0x0, r9, 0x0, r10, 0x0, 0x0], 0x6, 0x0, 0x0, 0x5, 0x3b, 0x2, 0x6, {0x7, 0xb, 0x6, 0x1000, 0x9, 0xfff, 0x5, 0x8001, 0x400, 0x1ff, 0x8, 0x6, 0x0, 0x68, "00a40980e1303c93d80a2891d108e798984c7ea5443d42b0c3b70bb13241b4e5"}}) 1.352538831s ago: executing program 1 (id=200): mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6dc) r0 = open(&(0x7f0000000380)='./file0\x00', 0x40000, 0x4ebfac6bbaf7929) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff}) getsockopt(r1, 0xfffffff7, 0x4, 0x0, 0x0) open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$DIOCRTSTADDRS(r0, 0xc4504449, &(0x7f00000004c0)={{'./file0\x00', './file0\x00', 0x26}, &(0x7f00000003c0)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0/file0\x00', 0xff, 0x2, 0x18, 0xff, 0xff, 0x7, 0x2}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0/file0\x00', 0x2, 0x8000, 0x0, 0x7, 0x4, 0x7, 0xa}, {@broadcast, '\x00', './file0\x00', 0xffffffff, 0x5, 0x2, 0x8, 0x1, 0xd3, 0x9}, {@broadcast, '\x00', './file0/file0\x00', 0x2, 0x6, 0x2a, 0x0, 0x8, 0x7, 0x4}], 0x8, 0x4, 0x9, 0x5, 0x8, 0xa, 0x74, 0x80}) socket$inet(0x2, 0x3, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) fcntl$setown(r2, 0x6, 0x0) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000100)) r3 = socket(0x2, 0x8002, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, 0x0) fstat(r2, &(0x7f0000000180)) openat$null(0xffffffffffffff9c, 0x0, 0x20, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) closefrom(r4) syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000140)=0xc097) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000340)='x\x00') 206.694061ms ago: executing program 7 (id=201): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000000000000"], 0x3, 0x5}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x23, 0x0) (async) shutdown(r1, 0x0) 206.031618ms ago: executing program 6 (id=202): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="7c2aa7b97e647c6cb381fe18e59f710b899d6ad6dd6815426ed79d8aef4ecb88", 0x20}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x40, 0x6, 0x6, 0x3, 0x8000, 0x6, 0x40000000000, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0xd3, 0x76, 0xffffffffffffbff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x0, 0x5, 0x3], [{0x0, 0x7, 0xfffffbfb, 0x5}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x4, 0x3, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0x401, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206916, &(0x7f00000001c0)) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r3 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x0) fcntl$getown(r3, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x41, &(0x7f00000002c0)=ANY=[]) 205.721715ms ago: executing program 6 (id=203): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f0000000080)=0x9) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x64, 0x2, 0x5, 0x1}, {0x48, 0xf0, 0x25, 0x900}, {0x6, 0x24, 0x0, 0xc5}]}) ioctl$BIOCLOCK(r0, 0x20004276) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) 205.487137ms ago: executing program 6 (id=204): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000300)={{0x1c, 0x18, 0x0, 0x5, "657a0f149c68eccee5b465122720d881", 0xbed3}, {0x1c, 0x18, 0x2, 0x0, "1063b494965a4538e32dcc87191274f6"}, 0x1, [0x7ff, 0xfffffffd, 0x8, 0xfffffffa, 0x3, 0x8, 0xfbf, 0xfc]}, 0x5c) select(0x40, &(0x7f0000000180)={0xffffffffdffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x200, 0x181c, 0x8, 0x2000000000000044}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x2, 0x44809e9d, 0x7, 0xfffffffffffffffd, 0x6, 0xd, 0x8, 0x8c0d}, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r4 = socket(0x11, 0x3, 0x3) sendto$unix(r4, &(0x7f0000000080)="b1000504000001010000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896466a421020000ed710fd18bfbb670baf5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfdf82300008abfba0900000008e371a3f8343732051ed6b71d89e0000405f8fffff0e0000000", 0xb1, 0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x35}, 0x3, &(0x7f00000011c0)="71f91e5a91501d94a34bdf536647f49a902027647169000000000000", &(0x7f0000000000)=0xfe10, 0x0, 0x33) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="02004022024acc004e0000007f3ab55ec47012f31500000000acb12464", 0x1d}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3ff}, 0x400, 0x9, 0x0, 0x0, 0x4, 0x1, 0xffffffffffffffff, 0x7ff}) pledge(0x0, &(0x7f0000000080)='-{\x00') sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x18}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a35f41ef9ed8297aaf7566f396ec", &(0x7f0000000080)=0x1c, 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x3, 0x10, 0x9}, {0xc, 0x1, 0xd, 0x8000000}, {0x9, 0x5, 0x6, 0x8}]}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r3, &(0x7f00000001c0)="f81ad30100060000000100000000802847c8633158d8fb1b5c9c868d4529b07951e79d6c3d414afcf6df068ed1c264b9053530511021ccd57016e9e89713385b81b2d100"/77, 0x4d) closefrom(r2) 90.032606ms ago: executing program 1 (id=205): r0 = socket$inet(0x2, 0x3, 0x12) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt(r0, 0x0, 0x4, 0x0, 0x0) 83.725325ms ago: executing program 2 (id=206): mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) sysctl$vm(&(0x7f0000000a40)={0x2, 0xc}, 0x2, &(0x7f0000000a80)="4cf8a847996d", &(0x7f0000000b40)=0x6, &(0x7f0000000040), 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) ioctl$VNDIOCSET(r1, 0x80045102, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$DIOCGETRULESETS(r1, 0xc444443a, &(0x7f0000000000)={0x9, './file0\x00', './file0\x00'}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r0, 0x0) 80.058385ms ago: executing program 3 (id=207): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)={{0x0, 0x0, &(0x7f0000004f80)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0}, 0x8}, 0x38, 0x400, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x12) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') write(r0, &(0x7f0000000000)="5d48b700", 0x33) 77.316397ms ago: executing program 1 (id=208): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0x2, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x3, 0x1, 0x84, 0x7}, {0x48, 0xee, 0xff, 0xc05}, {0x6, 0x2, 0x9, 0x5}]}) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaa0200000000000000dd684498fb00002c0bfe8000000000000000000000000000aaff020000000000000000000000000001"]) (async) syz_emit_ethernet(0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaa0200000000000000dd684498fb00002c0bfe8000000000000000000000000000aaff020000000000000000000000000001"]) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f0000000140)=@in6={0x1c, 0x18, 0x0, 0x5, "fea8d409c6e56c2ebb9cb040c9244294", 0x2}, 0x1c) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000000140)="53183374", 0xffffffba) (async) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000000140)="53183374", 0xffffffba) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x3, 0x40000006, 0x100001, 0x0, 0x5, 0xd87, 0x1, 0x1, 0x0, 0x6, 0xcb9}) mknod(&(0x7f00000000c0)='./file0\x00', 0x40, 0x8) open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) (async) r4 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x8000) (async) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x8000) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2000009, 0x1, 0x7, 0xd4, 0xa, 0x1, 0x0, 0x10, [{0xfe5, 0x7, 0x0, 0x1}, {0x39, 0x7, 0x1000, 0x9}, {0x10000008, 0x0, 0x0, 0x40004}, {0x5, 0x9a13, 0xb, 0x1}, {0x2, 0x1000002, 0x810, 0xfffc}, {0x6, 0x0, 0x0, 0x5}, {0x4, 0xfffffffb, 0xfffffffc, 0x10000071}, {0xa, 0x20000000, 0x5, 0x8}, {0x3, 0x81, 0x1, 0x80000009}, {0x6, 0x0, 0x5, 0x2}, {0x81, 0xfffb, 0x80000004}, {0xfffffffd, 0x40, 0x8, 0x4}, {0xe0, 0x4, 0x3, 0x6}, {0x10, 0xfffff956, 0x4, 0x5}, {0xfffffffd, 0x6, 0xb, 0x1ffffffd}, {0x10000000, 0x1, 0x4, 0xc3}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2000009, 0x1, 0x7, 0xd4, 0xa, 0x1, 0x0, 0x10, [{0xfe5, 0x7, 0x0, 0x1}, {0x39, 0x7, 0x1000, 0x9}, {0x10000008, 0x0, 0x0, 0x40004}, {0x5, 0x9a13, 0xb, 0x1}, {0x2, 0x1000002, 0x810, 0xfffc}, {0x6, 0x0, 0x0, 0x5}, {0x4, 0xfffffffb, 0xfffffffc, 0x10000071}, {0xa, 0x20000000, 0x5, 0x8}, {0x3, 0x81, 0x1, 0x80000009}, {0x6, 0x0, 0x5, 0x2}, {0x81, 0xfffb, 0x80000004}, {0xfffffffd, 0x40, 0x8, 0x4}, {0xe0, 0x4, 0x3, 0x6}, {0x10, 0xfffff956, 0x4, 0x5}, {0xfffffffd, 0x6, 0xb, 0x1ffffffd}, {0x10000000, 0x1, 0x4, 0xc3}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xc, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x100000000008, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b40)="00000000c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b1400000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x2) ioctl$TIOCSETA(r5, 0xc4504446, &(0x7f0000000740)={0x2f, 0x2, 0x2, 0x5, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x810}) (async) ioctl$TIOCSETA(r5, 0xc4504446, &(0x7f0000000740)={0x2f, 0x2, 0x2, 0x5, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x810}) 76.553467ms ago: executing program 6 (id=209): r0 = socket(0x800000018, 0x3, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r1 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000140)="b100050300000400000008b307000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b67404d335c223e7d0c032bfa896443a4211e000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002022fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d1889e000040700000000130000", 0xb1, 0x40e, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) ktrace(&(0x7f00000001c0)='./file0\x00', 0x1, 0x40002344, 0x0) dup2(r0, r1) poll(&(0x7f0000004a80)=[{0xffffffffffffff9c, 0x20}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$DIOCSETSYNCOOKIES(r3, 0xc0014462, &(0x7f0000000080)=0x2) futimes(r3, &(0x7f0000000040)=[{0x80000001, 0x7}]) unveil(0x0, &(0x7f0000000200)='r\x00') 72.917745ms ago: executing program 7 (id=210): fstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) stat(&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{r0, r1, r0, 0xffffffffffffffff, 0x20, 0x1ff, 0x6, 0x0, 0xfffffffffffffffa}, 0x6, 0xfffffffffffffffd, 0x4, 0x4000, 0x200000000000, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x10000001000}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x637d}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f0000209000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdf7fffffffff7fa}, {&(0x7f00004c0000/0x4000)=nil, &(0x7f0000180000/0x4000)=nil, 0x7}, {&(0x7f0000786000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f000056a000/0x2000)=nil, &(0x7f0000688000/0x2000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f00001d2000/0x3000)=nil, 0x5}, {&(0x7f0000242000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x7fffdffffffffff9}, {&(0x7f0000476000/0x4000)=nil, &(0x7f00007ce000/0x1000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x8}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x5}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000108000/0x3000)=nil, 0x238}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffff7}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x3}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x7, 0x0, 0xfffffffe, 0x8, "210d0000000200000006000000000200", 0x2000000, 0xb}) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100400086dd6880058000303b03356d0140558d3dfd766d0a62aab10b9bfe4d1aafbaf5c2c66da2acf4faeb1e580100907828"]) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r3 = open(&(0x7f0000000600)='./file0\x00', 0x0, 0x62) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000140)={0x0, 0x525, 0x0}) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x3) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x800, {{0x21, 0x4, 0x0, 0x17, 0xa0, 0x66, 0x0, 0x3, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @empty, {[@generic={0x1, 0x2}, @rr={0x7, 0x2b, 0x2, [@remote={0xac, 0x14, 0x0}, @rand_addr=0x3, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @rand_addr, @broadcast, @remote={0xac, 0x14, 0x0}, @empty, @multicast1, @multicast2]}, @generic={0x88, 0xa, "d1da08729f26a57a"}, @ra={0x94, 0x4, 0x3}, @generic={0x44, 0x10, "6db580dd821f55416ae31bc644e9"}, @ssrr={0x89, 0x23, 0x7, [@empty, @remote={0xac, 0x14, 0x0}, @empty, @broadcast, @broadcast, @multicast2, @multicast2, @multicast1]}]}}, @icmp=@parameter_prob={0xc, 0x1, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x33, 0xf0, @multicast1, @multicast1}}}}}}) 2.37894ms ago: executing program 2 (id=211): setrlimit(0x8, &(0x7f0000000980)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = kqueue() kevent(r0, 0x0, 0x6, 0x0, 0x2e59158d, &(0x7f0000001680)={0x91, 0x6}) r1 = socket$inet(0x2, 0x1, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6) setrlimit(0x1, &(0x7f00000000c0)={0xda, 0xd}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pread(r2, &(0x7f0000000480)="3cd15db7c3", 0x5, 0xfffffffffffffffd) getrlimit(0x6, &(0x7f0000000040)) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r1, 0x7fff) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6015f2ff00203c00eee21f0000003c00000500004c58053bfe8000000000000000000000000000aa11000000000000008300907800070109e4b72300000000000000000000000001"]) getentropy(0xfffffffffffffffe, 0x0) socket$inet(0x2, 0x1000, 0x7) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}, {"b76bf11d5d4ff88eab4e7d94dcf5288151f250627b0e1fb09303834ed31912d28c8b0c85e066cffa0341de445bbf0423"}}}}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x3, 0x8}, {"e3c4fc107f71ed734b5547194172bf7adeb4d9e8011e314f72d6ee1c78c9623f3ec3a4274c9b8ddaa2"}}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) pipe(0x0) 990.517µs ago: executing program 7 (id=212): open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) r0 = semget(0x0, 0x1, 0x281) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$GETPID(r0, 0x2, 0x4, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x8f, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) kevent(r1, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x28, 0xf27ff7791bbc9c0f, 0xfd, 0x13fff}], 0x1, 0x0, 0xfffffff8, 0x0) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000a86, 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r2, 0x0) futimens(r2, &(0x7f0000000000)=[{0x11d3, 0x9}, {0x9, 0x2}]) chmod(&(0x7f0000000040)='./file0\x00', 0x4) 829.7µs ago: executing program 7 (id=213): poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) sysctl$kern(&(0x7f0000000000)={0x1, 0x50}, 0x2, &(0x7f0000000040)="a68860164a4e33bf0502e2b6926d0e981dadeeced3839e8920b7aef9df776e50343a7886f1583530103669b5bee4e71cca209730e4dfcea0bb96d4", &(0x7f0000000080)=0x3b, &(0x7f00000000c0)="e4c8535f7adebbd98f2fcc29dbc96758f4f7c4710b7f6518ebf4937c206f9843d5dcef592ede0ae18990b550fe9e82d7d962b5bff7f8a7bc3aa64bde8d810574740d0e9f7b228c1198fb81165623bab8ce0b246c08478f193596f4003b0343a73ef39cfa7c2061c9bbbe3dd8a271eb657324c5f29af8138bf6a7b2722e63f293bb1364fcd02400c1a205313ced13e8c78aaa94a84f65c96ae397a96b99588561f4af17c4a3ce79cd6130a0a995d5efecfee2c433f95f4dfcad5b3ec7bbdd69c601e60f0abf7d85ef9a8f56b77011321dc42ffb14c23b10eec8273dca8fa85de4105be8726fef4eca5513a1641786909e59a5fa", 0xf3) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x50}, 0x2, &(0x7f0000000040)="a68860164a4e33bf0502e2b6926d0e981dadeeced3839e8920b7aef9df776e50343a7886f1583530103669b5bee4e71cca209730e4dfcea0bb96d4", &(0x7f0000000080)=0x3b, &(0x7f00000000c0)="e4c8535f7adebbd98f2fcc29dbc96758f4f7c4710b7f6518ebf4937c206f9843d5dcef592ede0ae18990b550fe9e82d7d962b5bff7f8a7bc3aa64bde8d810574740d0e9f7b228c1198fb81165623bab8ce0b246c08478f193596f4003b0343a73ef39cfa7c2061c9bbbe3dd8a271eb657324c5f29af8138bf6a7b2722e63f293bb1364fcd02400c1a205313ced13e8c78aaa94a84f65c96ae397a96b99588561f4af17c4a3ce79cd6130a0a995d5efecfee2c433f95f4dfcad5b3ec7bbdd69c601e60f0abf7d85ef9a8f56b77011321dc42ffb14c23b10eec8273dca8fa85de4105be8726fef4eca5513a1641786909e59a5fa", 0xf3) execve(0x0, 0x0, 0x0) 0s ago: executing program 2 (id=214): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000240)="fa4421374c6fb28778a528036c34d6977e12d27f66cc64acaf2cf3fb0c8cde8bdf5b43c792a6e39524ac8f6101e55dd09919dd2bd484b898baffd78b95932b330a116040d1c201a8bc1d1bf3ff3814ad748dc298287b914b264a48a2f4466bfe716b03975cfe46ce3b44acf26d1887069f79aa522adaace6c7944bc7340dcabc15aecb5c0d00e63e6cc07f7e5e9741530745f6a05db67f2faa740302dfd7ef6f4ef0a09633c024bac8f3b0ef711a625bb618049d23845fd0151c302cf7689243accf7be371b8d6c4fdfa2722e4b60e01f5", 0xd1) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x1}, 0xc) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) unveil(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='x\x00') chroot(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet(0x2, 0x3, 0x9) getsockopt(r1, 0x0, 0x2, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x1, 0xb, "759f5a01005ada388e47a1e7a5446cfe", 0x1}, {0x1c, 0x18, 0x3, 0x4, '\x00', 0x5}, 0x0, [0x3efa, 0x9f72, 0x1, 0x9, 0x8, 0x7f, 0x800, 0x4]}, 0x5c) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f00000001c0)={{0x1c, 0x18, 0x3, 0x800, "0bce2d6c93ff4b99592792761113d30c", 0x6}, {0x1c, 0x18, 0x3, 0x2, "9e9991928719b4b74ec57b7847cd4842", 0xb28d}, 0xf, [0x1, 0xffff, 0x4, 0x9, 0x4, 0xffff, 0x3, 0xbadb]}, 0x5c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error uvm_fault(0xfffffd806a39ad78, 0x98, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff81ab3eb8 cs 8 rflags 10246 cr2 98 cpl 0 rsp ffff800039fd6f20 gsbase 0xffff8000299bdff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff81ab3eb8 Starting stack trace... panic(ffffffff83487d88) at panic+0x1d0 kerntrap(ffff800039fd6e70) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff80003c4782c8,fffffd80636b46d8,ffff800039fd7050) at dovutimens+0x368 sys_futimes(ffff80003c4782c8,ffff800039fd71a0,ffff800039fd70f0) at sys_futimes+0x208 syscall(ffff800039fd71a0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xde624bd4970, count: 250 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 83 -432995440 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND 224312 52522 0 0 0x4000000 0 syz-executor *358350 72048 0 0 0 1 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x7aa51fd98250, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806a39ad78, 0x98, 0, 1) -> e ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7aa51fd98250, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c4a1980 rbx 0 rdx 0 rcx 0xffff8000fffee2b0 rax 0x3b r8 0xffff80003c4a18b0 r9 0x1 r10 0x108cae004830d5f7 r11 0x2e30dc05c1b42300 r12 0 r13 0 r14 0xffff8000fffee2b0 r15 0 rip 0xffffffff817bd3ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80003c4a1900 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=358350 pid=72048 tcnt=3 stat=onproc flags process=0 proc=0 runpri=86, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800039ff2558,0xffff8000fffef4e8 process=0xffff80003c48c4f8 user=0xffff80003c49c000, vmspace=0xfffffd806a39ad78 estcpu=36, cpticks=10, pctcpu=0.0, user=9, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 28022 370215 51953 0 2 0 syz-executor 52522 181948 94089 0 2 0 syz-executor 52522 224312 94089 0 7 0x4000000 syz-executor *72048 358350 38494 0 7 0 syz-executor 72048 303410 38494 0 3 0x4000080 ttyopn syz-executor 72048 115931 38494 0 3 0x4000000 sbar syz-executor 55188 352936 0 0 3 0x14280 nfsidl nfsio 77829 17657 0 0 3 0x14280 nfsidl nfsio 79399 394283 0 0 3 0x14280 nfsidl nfsio 98180 459555 0 0 3 0x14280 nfsidl nfsio 30587 168991 0 0 3 0x14280 nfsidl nfsio 62308 223104 0 0 3 0x14280 nfsidl nfsio 1445 475740 0 0 3 0x14280 nfsidl nfsio 99783 91386 0 0 3 0x14280 nfsidl nfsio 75898 341283 0 0 3 0x14280 nfsidl nfsio 2142 183198 0 0 3 0x14280 nfsidl nfsio 2012 417706 0 0 3 0x14280 nfsidl nfsio 83972 166727 0 0 3 0x14280 nfsidl nfsio 15058 257013 0 0 3 0x14280 nfsidl nfsio 31695 495866 0 0 3 0x14280 nfsidl nfsio 70547 396850 0 0 3 0x14280 nfsidl nfsio 15528 276109 0 0 3 0x14280 nfsidl nfsio 58276 426081 0 0 3 0x14280 nfsidl nfsio 60673 54094 0 0 3 0x14280 nfsidl nfsio 35932 16841 0 0 3 0x14280 nfsidl nfsio 46771 421860 0 0 3 0x14280 nfsidl nfsio 12074 71685 84166 0 3 0x100082 sbwait ndp 84166 366822 17094 0 3 0x10008a sigsusp sh 94089 47182 88543 0 3 0x82 nanoslp syz-executor 38494 490330 88543 0 3 0x82 nanoslp syz-executor 21527 172997 88543 0 3 0x82 wait syz-executor 17094 316656 88543 0 3 0x82 wait syz-executor 11819 93490 88543 0 3 0x82 nanoslp syz-executor 51953 10346 88543 0 3 0x82 nanoslp syz-executor 78767 463946 88543 0 3 0x82 nanoslp syz-executor 86663 294350 88543 0 3 0x82 wait syz-executor 88543 220187 78429 0 3 0x82 kqread syz-executor 78429 225363 73929 0 3 0x10008a sigsusp ksh 73929 433135 88133 0 3 0x98 kqread sshd-session 88133 211208 73813 0 3 0x92 kqread sshd-session 67043 157141 1 0 3 0x100083 ttyin getty 73813 227959 1 0 3 0x88 kqread sshd 28018 442519 94923 74 3 0x1100092 bpf pflogd 94923 215243 1 0 3 0x80 sbwait pflogd 26134 127583 91926 73 3 0x1100090 kqread syslogd 91926 345087 1 0 3 0x100082 sbwait syslogd 10542 27549 1 0 3 0x100080 kqread resolvd 80999 392643 13197 77 3 0x100092 kqread dhcpleased 25210 509008 13197 77 3 0x100092 kqread dhcpleased 13197 77750 1 0 3 0x80 kqread dhcpleased 46689 314085 0 0 2 0x40014200 smr 8923 476861 0 0 3 0x14200 pgzero zerothread 7710 173752 0 0 3 0x14200 aiodoned aiodoned 31616 499097 0 0 3 0x14200 syncer update 45923 143050 0 0 3 0x14200 cleaner cleaner 65287 118348 0 0 3 0x14200 reaper reaper 80597 474584 0 0 3 0x14200 pgdaemon pagedaemon 90653 352465 0 0 3 0x14200 bored viomb 63871 329399 0 0 3 0x40014200 acpi0 acpi0 2559 166975 0 0 3 0x40014200 idle1 43806 126248 0 0 3 0x14200 bored softnet1 78945 175316 0 0 3 0x14200 netlock softnet0 33701 152734 0 0 2 0x40014200 systqmp 18420 225135 0 0 3 0x14200 bored systq 47556 26159 0 0 3 0x14200 tmoslp softclockmp 30340 487866 0 0 3 0x40014200 tmoslp softclock 71214 296046 0 0 3 0x40014200 idle0 1 151848 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &kq->kq_lock r = 0 (0xfffffd805f3bb8e0) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 kqueue_register+0x2c6 #3 ppollregister_evts+0xca #4 ppollregister+0x32f #5 doppoll+0x214 #6 sys_poll+0xd8 #7 syscall+0xbd4 #8 Xsyscall+0x128 Process 72048 (syz-executor) thread 0xffff80003c4782c8 (115931) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839d2f80) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11077 12230K 12354K 166960K 12573 0 pcb 18 12K 12K 166960K 53 0 rtable 234 7K 7K 166960K 368 0 pf 40 18K 21K 166960K 81 0 ifaddr 44 7K 8K 166960K 57 0 ifgroup 62 2K 2K 166960K 88 0 sysctl 3 1K 9K 166960K 8 0 counters 76 37K 38K 166960K 92 0 ioctlops 0 0K 4K 166960K 1518 0 iov 0 0K 16K 166960K 73 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1331 84K 84K 166960K 1561 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 16 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 19 69K 93K 166960K 343 0 sigio 1 0K 0K 166960K 4 0 proc 72 115K 180K 166960K 579 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 29 0 in_multi 95 7K 7K 166960K 105 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 8 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 402 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 245 171K 185K 166960K 4819 0 UVM aobj 13 6K 6K 166960K 15 0 pinsyscall 45 90K 108K 166960K 1480 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 8 0 NDP 14 0K 2K 166960K 37 0 temp 42 9080K 9144K 166960K 16584 0 kqueue 14 22K 28K 166960K 58 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 39 0 34 1 0 1 1 0 8 0 rtentry 176 115 0 8 6 0 6 6 0 8 0 unpcb 144 141 0 124 1 0 1 1 0 8 0 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 56 0 52 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 208 0 200 2 0 2 2 0 8 1 nd6 152 26 0 2 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 5 0 3 1 0 1 1 0 8 0 pppxif 1576 2 0 2 1 0 1 1 0 8 1 pffrag 232 5 0 0 1 0 1 1 0 482 0 pffrnode 88 4 0 0 1 0 1 1 0 8 0 pffrent 40 7 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 2 0 2 1 0 1 1 0 8 1 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pfstitem 24 39 0 0 1 0 1 1 0 8 0 pfstkey 128 39 0 0 2 0 2 2 0 8 0 pfstate 448 38 0 0 5 0 5 5 0 8 0 pfrule 1360 25 0 19 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 476 0 22 29 0 29 29 0 8 0 art_table 40 477 0 22 5 0 5 5 0 8 0 art_node 32 115 0 17 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 3 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 12 0 2 1 0 1 1 0 8 0 shmpl 112 12 0 2 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 1956 0 485 93 0 93 93 0 8 0 ffsino 296 1956 0 485 114 0 114 114 0 8 0 nchpl 144 2464 0 758 64 0 64 64 0 8 0 rtmask 32 1 0 0 1 0 1 1 0 8 0 vnodes 216 2172 0 0 121 0 121 121 0 8 0 namei 1024 7991 0 7991 1 0 1 1 0 8 1 percpumem 16 61 0 8 1 0 1 1 0 8 0 kstatmem 264 42 0 12 3 0 3 3 0 8 1 scxspl 216 10612 0 10612 10 2 8 8 1 8 8 plimitpl 152 45 0 27 1 0 1 1 0 8 0 sigapl 424 675 0 606 8 0 8 8 0 8 0 knotepl 120 314 0 0 10 0 10 10 0 8 0 kqueuepl 224 152 0 110 5 0 5 5 0 8 2 pipepl 344 141 0 114 3 0 3 3 0 8 0 fdescpl 528 639 0 606 3 0 3 3 0 8 0 filepl 160 2903 0 2653 13 0 13 13 0 8 1 lockfpl 104 236 0 234 2 0 2 2 0 8 1 lockfspl 48 57 0 55 1 0 1 1 0 8 0 sessionpl 144 34 0 25 1 0 1 1 0 8 0 pgrppl 48 44 0 27 1 0 1 1 0 8 0 ucredpl 104 258 0 244 1 0 1 1 0 8 0 zombiepl 144 610 0 606 1 0 1 1 0 8 0 processpl 1232 675 0 606 6 0 6 6 0 8 0 procpl 664 1050 0 978 8 0 8 8 0 8 1 sosppl 176 4 0 4 1 0 1 1 0 8 1 sockpl 752 398 0 368 5 0 5 5 0 8 2 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 127 0 0 16 0 16 16 0 8 0 mcl2k 2048 27 0 0 4 0 4 4 0 8 0 mtagpl 96 9 0 0 1 0 1 1 0 8 0 mbufpl 256 188 0 0 12 0 12 12 0 8 0 bufpl 280 3815 0 107 265 0 265 265 0 8 0 anonpl 32 7673 0 0 62 0 62 62 0 246 0 amapchunkpl 152 14186 0 13701 28 0 28 28 0 158 3 amappl16 200 1015 0 988 16 4 12 15 0 8 8 amappl15 192 13 0 13 1 1 0 1 0 8 0 amappl14 184 427 0 425 1 0 1 1 0 8 0 amappl13 176 114 0 101 1 0 1 1 0 8 0 amappl12 168 884 0 853 2 0 2 2 0 8 0 amappl11 160 2 0 2 1 1 0 1 0 8 0 amappl10 152 68 0 54 1 0 1 1 0 8 0 amappl9 144 270 0 269 1 0 1 1 0 8 0 amappl8 136 116 0 114 1 0 1 1 0 8 0 amappl7 128 140 0 126 1 0 1 1 0 8 0 amappl6 120 157 0 155 1 0 1 1 0 8 0 amappl5 112 110 0 100 1 0 1 1 0 8 0 amappl4 104 284 0 262 1 0 1 1 0 8 0 amappl3 96 2826 0 2710 4 0 4 4 0 8 1 amappl2 88 512 0 449 2 0 2 2 0 8 0 amappl1 80 10088 0 9456 15 0 15 15 0 8 0 amappl 88 4073 0 3908 5 0 5 5 0 92 0 uvmvnodes 80 107 0 0 3 0 3 3 0 8 0 dma16384 16384 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 14 0 2 1 0 1 1 0 8 0 uaddrrnd 24 639 0 606 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 639 0 606 1 0 1 1 0 8 0 vmmpekpl 168 6993 0 6961 2 0 2 2 0 8 0 vmmpepl 168 46368 0 44382 99 0 99 99 0 357 7 vmsppl 488 638 0 606 5 0 5 5 0 8 0 rwobjpl 80 14724 0 13630 28 0 28 28 0 8 2 pdppl 4096 1285 0 1212 97 24 73 85 0 8 0 pvpl 32 14322 0 0 117 1 116 116 0 265 0 pmappl 256 638 0 606 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 274 0 27 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83940ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839d2780) at __mp_lock+0x192 intr_handler(ffff800037bb7300,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff839d2780) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_acquire_count(ffffffff839d2780,0) at __mp_acquire_count+0x35 msleep_nsec(fffffd805f3bb8d0,fffffd805f3bb8d0,318,ffffffff834b5e03,822b49b80) at msleep_nsec+0x1f8 kqueue_sleep(fffffd805f3bb8d0,ffff800037bb7a58) at kqueue_sleep+0x127 kqueue_scan(ffff800037bb7860,8,ffff800037bb7760,ffff800037bb7a58,ffff80003c479788,ffff800037bb79dc) at kqueue_scan+0x223 end trace frame: 0xffff800037bb7a40, count: 0 ddb{0}> trace x86_ipi_db(ffffffff83940ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839d2780) at __mp_lock+0x192 intr_handler(ffff800037bb7300,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff839d2780) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_acquire_count(ffffffff839d2780,0) at __mp_acquire_count+0x35 msleep_nsec(fffffd805f3bb8d0,fffffd805f3bb8d0,318,ffffffff834b5e03,822b49b80) at msleep_nsec+0x1f8 kqueue_sleep(fffffd805f3bb8d0,ffff800037bb7a58) at kqueue_sleep+0x127 kqueue_scan(ffff800037bb7860,8,ffff800037bb7760,ffff800037bb7a58,ffff80003c479788,ffff800037bb79dc) at kqueue_scan+0x223 doppoll(ffff80003c479788,200000000ac0,d7,ffff800037bb7a58,0,ffff800037bb7ae0) at doppoll+0x35a sys_poll(ffff80003c479788,ffff800037bb7b90,ffff800037bb7ae0) at sys_poll+0xd8 syscall(ffff800037bb7b90) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x86076a0d50, count: -18 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0x7aa51fd98250, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7aa51fd98250, count: -1