last executing test programs: 1.983617857s ago: executing program 0 (id=181): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0xff, 0x0, 0x0, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000080)={0x2, 0x1, 0x20000000, 0x1ffffffff}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c5000016", 0x79, 0x406, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x40, 0x3, 0x17, 0x7e000002}, {0x4, 0x1, 0xcd, 0x7}, {0xa, 0x4, 0x53, 0x800207fc}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504", 0x4, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x406, 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x1, 0x2, 0x7fffffffff800002, 0x200000004, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0xfffffffffffffffe}}, 0x2) close(r2) fcntl$dupfd(r0, 0xa, r2) 1.858511701s ago: executing program 0 (id=185): r0 = semget$private(0x0, 0x0, 0xb) semop(r0, &(0x7f0000000000)=[{0x2, 0x4, 0x800}, {0x3, 0xbff}, {0x4, 0x9, 0x1000}, {0x4, 0x280, 0x1000}], 0x4) (async) r1 = semget(0x2, 0x0, 0x303) getgroups(0x1, &(0x7f0000000040)=[0x0]) (async, rerun: 64) r3 = getuid() (rerun: 64) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000100)={{0x7, 0xffffffffffffffff, r2, r3, r5, 0x100, 0x7fff}, 0x80, 0x3ff, 0xfffffffffffffff2}) (async) r6 = getuid() setuid(r6) semctl$IPC_RMID(r1, 0x0, 0x0) (async) r7 = socket(0x18, 0x4, 0xce) r8 = socket$inet6(0x18, 0x8000, 0x54) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) (async) setsockopt$sock_linger(0xffffffffffffff9c, 0xffff, 0x80, &(0x7f0000000200)={0x6, 0x7f}, 0x8) (async) socket$inet6(0x18, 0x4007, 0x6) (async, rerun: 32) r11 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) (rerun: 32) fchown(r11, r9, r2) (async) sendmsg$unix(r7, &(0x7f0000000480)={&(0x7f0000000280)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000440)=[{&(0x7f00000002c0)="b87602e3a7bca7727c36dd53884522ebff48a1b37354d424580cb7ebd6904c290aabe5da0c77d85666fbec0e5525618266312e37b254f30cba62361f3ec48971f29e2ae12722e3d117f35203bd9627658737442d7067fb9bf30150e3cd5b2fbbe122708ac46e3efea15a36719a1acff4905c53a43217894619f0fea718e6ce6f7f782a1daa509a4f8b29121634cb8efa27919212d6ec67a719bbb43c36fef483f7c4bec3baaea769617cde2ba9f74acb7ce20931fb1333934f62b9c7b6", 0xbd}, {&(0x7f0000000380)="9fe5043665bec06f25b87c2a0034c9a7725b1ada39624b8b7a2c64d7f60434a12c500f933b060781c8249b2857ebf99595a4a37263ae1020d00cf61d2992f5d93439dc12f91745c9063d37335ac4bf77e4586f0977d630416481304106bbc40e3fde83fdf9af45f3e92eff075e52860748f4835a39c6", 0x76}, {&(0x7f0000000400)="a0f74b5b7b65ab97f690ca0d3b26057fcfd9c5ccef456e0053924c8f57742666600a95589917146d36bf16a4075f661cebf5", 0x32}], 0x3, 0x0, 0x0, 0x8}, 0x5) getpid() getgid() (async) execve(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), &(0x7f0000000580)=[&(0x7f0000000540)=':\x00']) mkdir(&(0x7f00000005c0)='./file0\x00', 0x24) (async) getgroups(0x6, &(0x7f0000000600)=[r5, r5, r10, r10, r5, r10]) r13 = getpgrp() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000640)={{0xf, r3, r2, r9, r12, 0x0, 0x7}, 0x5a1e, 0x8000000000000001, r4, r13, 0xff, 0x6f7, 0x51a, 0x9}) (async) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f00000006c0), 0xc) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01064c1, &(0x7f0000000700)={0x0, 0x0, r8}) setsockopt(r14, 0x6, 0x5, &(0x7f0000000740)="644406747a9b9ed90c800fa561107fdd470a5665ff15730d6f385828e8f1aa7788ee5d7bc37c9c975fe775455875aecced30024fb737284ae6871b2b53f002a0446830d015c28e92d6f65149fd5f5a2be3666697bcb6adf67e2159e07ed221069b", 0x61) r15 = openat$null(0xffffffffffffff9c, &(0x7f00000007c0), 0x10000, 0x0) ioctl$FIOGETOWN(r15, 0x4004667b, &(0x7f0000000800)) 1.841127106s ago: executing program 0 (id=190): sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f0000000500)={'./file0\x00', 0xc1, 0x0, 0x7}) r1 = syz_open_pts() r2 = socket(0x2, 0x3, 0x11) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, &(0x7f0000000040)="55fdb050ab5b45d498800a61e87d2c7d43d937d1ff", 0x15) getpeername(r1, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0x0, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x3, 0x4000000, 0x8000, 0x90000000], [{0x0, 0x0, 0x0, 0x7d06}, {0x9, 0xff, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x9, 0xfffffffffffdffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x20009, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0xfe, 0x1, 0xb}], {0x3, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) getrlimit(0x0, &(0x7f0000000380)) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000f40)={0x0, [{0x2}, {0x0, 0x10000}, {0x3, 0x2}, {}, {0x0, 0xfffffff9}, {0x2}, {0x1, 0x9}, {0x0, 0x2}, {0x0, 0x3678}, {0x2, 0x1}, {}, {0x1, 0xfffffffe}, {0x0, 0x6cb}, {0x2, 0x4}, {}, {0x2}, {0x0, 0x34a}, {0x0, 0x200000}, {0x0, 0xffffdcf3}, {0x2, 0x10000}, {0x0, 0xfffffff9}, {0x3}, {0x2}, {}, {0x3}, {0x0, 0x400000}, {0x2, 0x3}, {0x1}, {0x3, 0x4}, {}, {}, {0x0, 0x80}]}) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r4 = socket(0x2, 0x3, 0x0) setsockopt(r4, 0x0, 0x2, 0x0, 0x0) kqueue() r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TIOCSETA(r5, 0xc0884450, &(0x7f0000000000)={0x0, 0x2, 0xfffffffe, 0x0, "01d04b0a0047c1d100", 0x7, 0x6}) r6 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCWRITE(r6, 0xc00c7006, &(0x7f0000000300)={{0x0, 0x5}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r7, 0xffff, 0x2000, &(0x7f0000000080)=0x4, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) 1.815711851s ago: executing program 4 (id=199): ktrace(0x0, 0x0, 0x510, 0x0) wait4(0x0, 0x0, 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x81, 0xf0, 0xff, 0x81}]}) r0 = socket$inet(0x18, 0x3, 0x102) close(r0) fchflags(r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36e, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/876]) sendmsg$unix(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x8}, 0x40a) recvmmsg(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x9}, 0x10, 0x0, 0x0) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000200), 0x20, 0x0) ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f0000000280)={0x10, 0x40005, [{&(0x7f0000376000/0x8000)=nil, &(0x7f00005ca000/0x1000)=nil, 0x2}, {&(0x7f000073c000/0x3000)=nil, &(0x7f0000019000/0xf000)=nil, 0x7}, {&(0x7f0000117000/0x4000)=nil, &(0x7f000046c000/0x1000)=nil, 0x7}, {&(0x7f0000675000/0x4000)=nil, &(0x7f0000014000/0x4000)=nil, 0x4}, {&(0x7f00001e6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x9}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000567000/0x3000)=nil, 0x100}, {&(0x7f00000b9000/0x1000)=nil, &(0x7f0000698000/0x2000)=nil, 0x4}, {&(0x7f00003e0000/0x4000)=nil, &(0x7f00006db000/0x2000)=nil, 0x2}, {&(0x7f00006d7000/0x2000)=nil, &(0x7f00007a6000/0x3000)=nil, 0x9}, {&(0x7f000023e000/0x3000)=nil, &(0x7f0000268000/0x3000)=nil, 0x3da}, {&(0x7f00007ab000/0x1000)=nil, &(0x7f0000113000/0x3000)=nil, 0x77e3}, {&(0x7f0000467000/0x3000)=nil, &(0x7f00004d7000/0x3000)=nil, 0x2ed8}, {&(0x7f000055d000/0x1000)=nil, &(0x7f0000247000/0x1000)=nil, 0x6}, {&(0x7f00007dd000/0x3000)=nil, &(0x7f0000018000/0x3000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f00001f2000/0x3000)=nil, 0x100000000}], './file0\x00', 0x1}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x10, 0x0, 0x9, 0x4, 0x210, 0x400000d414, 0x1000000000003}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9c) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) r5 = open(&(0x7f0000000240)='./file0\x00', 0x10, 0x24) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000480)=0xffffffff) sysctl$kern(&(0x7f00000000c0)={0x1, 0x56}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$inet(0x2, 0x2, 0x0) select(0x40, &(0x7f0000000000)={0x1e, 0x1, 0x40000000006, 0xfffffffffffffffe, 0xedc, 0x180000001, 0x7ff9, 0x8}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x44}, 0x6, 0x0, 0x0, 0x0, 0x0) r7 = dup(r6) setsockopt$inet_opts(r7, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) r8 = socket(0x2, 0x3, 0x20) r9 = dup(r7) r10 = dup2(r9, r8) connect$unix(r10, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) 1.814955811s ago: executing program 2 (id=201): socket$unix(0x1, 0x1, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0xc000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r0, 0xc0284408, &(0x7f00000001c0)={0x0, 0x8000000000000000, 0x0}) r1 = socket(0x18, 0x1, 0x0) getsockopt(r1, 0x29, 0x27, 0x0, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) shutdown(r2, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r2, &(0x7f0000000000), 0x10) (async) sendto$unix(r2, &(0x7f0000000280)='L', 0x1, 0x401, 0x0, 0x0) (async) getgid() openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') readlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x7c110232708317ba) open(&(0x7f0000000040)='./bus\x00', 0x200, 0x8c) 1.8145626s ago: executing program 5 (id=202): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000040)={0x8, 0x15ae, 0xb, 0x81, "5d4830530af625275c38cd9b9489203d298fcac1", 0x6}) (async) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) poll(&(0x7f0000000100)=[{r0, 0x1}, {r0, 0x4}, {r1, 0x10}, {r0, 0x8}, {r0, 0xb}, {r0, 0x4c}], 0x6, 0x1) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000140)=0x9) (async) r2 = semget$private(0x0, 0x3, 0x8) semctl$GETVAL(r2, 0x4, 0x5, &(0x7f0000000180)=""/196) (async) r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) poll(&(0x7f00000002c0)=[{r3, 0x100}, {r0, 0x4}, {r0, 0x20}, {0xffffffffffffff9c, 0x2}], 0x4, 0xfffff085) ftruncate(r1, 0x1000000000000000) (async) writev(r1, &(0x7f00000005c0)=[{&(0x7f0000000300)="1fe46e1495e54cd38f869d839a5c61477889ab60dc50aecc7c9cdbc6474f6b379de00ffef70a34a4e452c13ef44e70203e5d6081df4abb4cd58062e02bfb9e24474ab2b445aae4ddf55b61d8f12458055c9bff9a1d1864bd7f2d27272a3e35d9e4fd7e2d8f2080fcc7cbcfb1eb7585c7e6be5fa211efda3cf373e2727fd9e51707e12429c19e8a55040c705059e2ab7d70bed6b773c5b4bea5a70e75caadd177c6e52cf8ff06f5b03e36641d406f145bfc9d096ccd994e0244170990eb", 0xbd}, {&(0x7f00000003c0)="3cb089cc768cd5abd15e1480c85847338749c9ac7c708ad14c034ece88c8d9b33acb0f612240010fba5a8433d568062a345ca8d5bb77eca0c216f269bdc388b0060e046380a9194104468a6002f2a410709dcadb16cc9767b4b010e4f25dd4d3eb0d36", 0x63}, {&(0x7f0000000440)="624fd0be454a0b48cfa656affa4c0e671b2890d389e88ce90db98e6d317808d2cee9af68ef85cf760a106965c1dcdcbfbff80340736307c8be82362d38b55fde51e7ac3e78eb66ff82b342679d4a9bec58223e80bcada55d07dcbf31de916c6b4c236c477dd997a6351de4a275ad49fec7191fc504d0cb42aa7f9e330874c4e0d0f5811f419f31577f0f3db7dbc48a9d422a48d55298078f0a3c3b5a5f6e1f130b7453e3dbbf4813dbda592588cab7d27c89dc3ec68e43da579d18038ffb69d2951f4cd0213218ce081b2d45726da23b19a12b5b67cf599dc9cf654784f31f9d50ef7e6792cd4b63402c296fbb5ec64f6ed9115b5d", 0xf5}, {&(0x7f0000000540)="1d84bbde180d8e1bfed9820d0bc7d25c498650172af8854388c2301c5fe1ff5b", 0x20}, {&(0x7f0000000580)="ef1cf35be223b5c3216f79c9e0119f2587472c3f6da4d13e14b17441e7342af4d87956c129934e7fa1c30ec0690f37", 0x2f}], 0x5) (async) recvmsg(r1, &(0x7f0000000a40)={&(0x7f0000000640)=@un=@file={0x0, ""/247}, 0xf9, &(0x7f0000000980)=[{&(0x7f0000000740)=""/207, 0xcf}, {&(0x7f0000000840)=""/116, 0x74}, {&(0x7f00000008c0)=""/177, 0xb1}], 0x3, &(0x7f00000009c0)=""/125, 0x7d}, 0x840) symlink(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='./file0\x00') (async) ioctl$TIOCSTART(r0, 0x2000746e) bind$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x2, 0x2}, 0xc) setsockopt$sock_timeval(r1, 0xffff, 0x3, &(0x7f0000000b40)={0x6, 0x7}, 0x10) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x5) semctl$GETALL(r2, 0x0, 0x6, &(0x7f0000000b80)=""/4096) r4 = openat$dri(0xffffffffffffff9c, &(0x7f0000001b80)='/dev/dri/renderD128\x00', 0x80, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000001bc0)={0x0, 0xd, 0x3, 0x20203844, 0x6, [], [0x33, 0x80000001, 0x9, 0x280], [0x5, 0x0, 0x4, 0x800], [0xf, 0x10001, 0xa, 0x2]}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000001c40)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000001c80)={r5, 0xf, 0x4, 0x10000, 0x77, 0x6, r6}) (async) semctl$GETPID(r2, 0x2, 0x4, &(0x7f0000001cc0)=""/138) (async) shmget$private(0x0, 0x4000, 0x407, &(0x7f0000ffa000/0x4000)=nil) (async) semctl$SETALL(r2, 0x0, 0x9, &(0x7f0000001d80)=[0x5, 0x7f, 0x7, 0x2, 0x1ff]) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r4, 0xc01064c2, &(0x7f0000001dc0)={0x0, 0x0, 0xffffffffffffff9c}) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000001e00)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r4, 0xc01064c4, &(0x7f0000001e80)={&(0x7f0000001e40)=[r7, 0x0, r8], 0x3}) link(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)='./file0\x00') (async) accept$unix(r1, &(0x7f0000001f40)=@file={0x0, ""/93}, &(0x7f0000001fc0)=0x5f) 1.812317346s ago: executing program 2 (id=204): r0 = socket(0x18, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000)=""/223, &(0x7f0000000100)=0xfffffffffffffd60) getsockopt(r0, 0x7, 0x3f, 0x0, 0x0) 1.778022944s ago: executing program 2 (id=205): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x2, 0x1, 0x200000000, 0x8000000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xf8bdf27, &(0x7f0000000000)="ebffcbff3c0dcc5d35da7213b9fd812eaa4e7130", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) 1.777610882s ago: executing program 5 (id=206): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) r1 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000002f80)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x102, 0x2}, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x8, 0xa, 0x200000000000000}) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r0, 0xf3) setuid(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e50000b9", 0x4) sysctl$net_inet_carp(&(0x7f0000000100)={0x4, 0x2, 0x70, 0x1}, 0x4, &(0x7f0000000280)="0c52eafdcaa651195208a01af6b63dc1febabed205f22c20e5e2183ec598f1043bc4a5738545e0ee129b08973d", &(0x7f00000002c0)=0x2d, &(0x7f0000000380)="949e4d32d9113fe9c3b88c8061fbfe3cc9c967c77364fe040445fdb10fe88a6e8b315d678ecc7639b11c9e12854772c822f11c0313ff5c2e4f8d6704483162dd6bdda4172c047ac04df5ad8f9bc6426d4743351fabffa8fc94ea59d70269944f2ac0215202c0e1413ead6f6a9bb65af6b6aa11be9329ced38363c1abff2554", 0x7f) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xfff, 0xc180, 0xfff4, 0x0, 0x7ff, 0xa59, 0x1, 0x1, 0x2, 0x0, 0xfd}) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc028698a, &(0x7f00000001c0)) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r5, 0x0) clock_settime(0x100000000000000, &(0x7f0000000040)={0x8000000000000807, 0x7}) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) close(r3) 1.768017025s ago: executing program 6 (id=208): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x44, 0xf0, 0xff, 0x1}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="a7464f0919d7aacd6865959cb3e86f1447c0fb3363a099a1ab37c6891e74eaaf1aa6caad332ccacb", &(0x7f0000000000)=0x28, 0x0, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) sysctl$kern(&(0x7f0000000180)={0x1, 0x9}, 0x2, &(0x7f00000001c0)="604d29847bb4e19a53ab25a09e6fbd1be5974590d4fd8dec9b946c4b4f6a446187f7778afc9f4c3d1c97169529e40f0d5f08f75580d1509169ae2287f5e2f0abf42731e0910bb892f56f819c24bf2967", &(0x7f0000000240)=0x50, &(0x7f0000000400)="73df1cecae724f1683b373f0d4b510c7b7a7d479f2636fc819922ca54eb99790030cae48fccc1b4e1f1d210e04aac8b9552e51dfa8a813513b171c79bb8b16b8b51d988eb74f16184f7cf9b83bf8212a8abd7e9eadc5957817de486a5ed92bf182dd0813c09391761825be9616ff3d19dd8cd73515d93e728d6b0f368136c55da4b757f03a7e4a2949588163b89664fa59d03b3473e49e38727d3e1fccbe650c0aeec85f26d50a05fb85f89abb375e156cb672162efd94caf34f67df1fe2c5", 0xbf) ioctl$WSKBDIO_SETENCODING(r1, 0x80045710, &(0x7f00000000c0)=0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 667.660294ms ago: executing program 2 (id=211): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x800009, 0xb3f, {[0xfffffbfffffffff8, 0xfffffffffffff000, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x4, 0x6, 0x4, 0x3, 0x1000000000000038, 0x0, 0x0, 0x2, 0x3, 0xfffffffffffffffa], [0xfffffffffffffffa, 0x80000000, 0xf, 0x9c7, 0x5b, 0x1, 0x1fe, 0x0, 0x0, 0xffffffffffffffff], [0xfffffffe, 0x2, 0x0, 0x4, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffa, 0x80000000], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xfffc, 0xf1, 0x9}, {0x6, 0x2, 0xfffffffc}, {0x4009, 0x5, 0x5, 0xffffffffffffffff}, {0x6, 0x3ff, 0x1004, 0x8}, {0x0, 0x2007, 0x9, 0x2000000000000000}, {0x9}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0xffff, 0x3}, {0x2, 0x80000000, 0x7, 0x2}}}) (async) r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r1, &(0x7f00000005c0)=@file={0x0, ""/7}, &(0x7f0000000600)=0x9) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) poll(0x0, 0x0, 0xb8) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x1}, {0x16, 0x7e, 0x0, 0x800ee68}]}) (async) sysctl$vm(&(0x7f0000000740)={0x2, 0x9}, 0x2, &(0x7f0000000780)="3ba06354317d65896fecb736a073ab0c9e7de0b011d35ec07ffa6b57458068c38d6e44817813d5a1894191bc4e58f42391b6fd3842ea6a1efafd8b2479d3276c198e68f2a1fcd34083a7b097", &(0x7f0000000800)=0x4c, &(0x7f0000000840)="3c0dde1cc4d8f14af2ee8647c2508e2d12939350525efc3922ccb638a875c77e04ffb09e1db89870103706e299fc4372777ed187d518280a45433e7e907eb71574dcc557c076c43c9a07bcc988f734bf114328ad0ed0f5cccbda3de20285c881285f06f74c279ed04121f8243830d97d6b3f3a0d5a3bd34fb36350fdb865dc6d257f3128d925791c53895ccc1504c5cfaf668371284d30bb177f69ce54d88b2016b4c8992146ad7686e1859ce5d59765d5301ddc1eb897ca5bbb971208ddb96be716b58a39e1c50cdc1e7bd64679432161eba32d8835ffdd8e789cff4ef6d311b77356b550caeb077e88f95b6b0d8946a861aa", 0xf3) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="3b2aa7b97e647c6cb381fe18923c1efec059c43c", 0x14}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x3, 0x5, 0xda) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000640)="3c4c1ea8c66edf3dd2b9799d3381f7b98befc5ef210563a2a37145854c2fba22bb2d879b89a226182cacba5d9cfb7166cd088f04566e82712900afbac704fd0f240b17edc22c09d1a19bafcb89225823b9c0ab1c28859740234c68ab940498ce8586f752faf79d6c08dfd28b196e142fefef3adab3479f3b5f16fb8c58aa1b33d6374ae4b96e5cc42a33aa3c40d522d66fd46f735e1c6b65315b599e10694bf5f14c8d4df7e31f84345ee25780141af71f8d18770747b24972ae5fc3144ab234bd6776d40e7d875c4439222578269776332442826b7ba0983c6adaacb1db526118f6ccfd91d7a9586663d944e7b2c754e96c857decd365", 0xf7) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6076520301000000000000000000000000000000000000dafe8000000000000000000000000000aa4e214e2200089078"]) (async) ioctl$VMM_IOC_READREGS(0xffffffffffffff9c, 0xc2485607, &(0x7f0000000340)) (async) r4 = geteuid() chown(&(0x7f0000000340)='./file0\x00', r4, 0xffffffffffffffff) (async) seteuid(r4) 440.177851ms ago: executing program 4 (id=218): kqueue() (async) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000002b00fe8000000000000000000000000000bb0000000000000004000000000000"]) (async, rerun: 32) socket(0x18, 0x2, 0x0) (async, rerun: 32) chmod(&(0x7f00000001c0)='.\x00', 0xfc) setuid(0xee01) select(0x40, &(0x7f0000000080)={0xc2, 0x9, 0xa7d1, 0x2, 0x9, 0xfefffffffffffffe, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0, 0x0) (async) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x14, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/250, 0xfa}], 0x1, 0x0}, 0x840) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x3, [{0x1, 0x7}, {0x3, 0x7}, {0x1, 0x7fff}, {0x2, 0x1}, {0x0, 0x10000008}, {0x0, 0x4}, {0x3, 0x20000007}, {0x3, 0x4}, {0x0, 0x3}, {0x2, 0xd}, {0x1, 0xbf4}, {0x3, 0x6}, {0x2, 0x1}, {0x0, 0x100}, {0x3, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x3, 0xa}, {0x3, 0x100}, {0x2, 0x20}, {0x3, 0x7}, {0x3, 0xfffffffe}, {0x2, 0x7fff}, {0x2, 0xfff}, {0x3, 0x204}, {0x2, 0x440}, {0x3}, {0x1, 0x3}, {0x2, 0x1}, {0xf09cd1324a03d9c0, 0x210000}, {0x3, 0xfffffe01}, {0x0, 0x2bd8}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, &(0x7f00000003c0)="0341d86c71a30018bc5a91505d9230cca32a2b4b71b59c7acd912c34eb86", 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async, rerun: 32) r3 = socket(0x18, 0x2, 0x20) (rerun: 32) close(r3) (async) socket(0x18, 0x3, 0x3a) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) (async, rerun: 32) r4 = socket(0x18, 0x3, 0x0) (rerun: 32) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async, rerun: 64) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async, rerun: 64) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r5 = socket(0x11, 0x3, 0x0) socket(0x11, 0x3, 0x0) (async) sendto$unix(r5, &(0x7f0000000280)="b1000501600000000100000007000000201c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e4b2fff040ff00"/177, 0xb1, 0x0, 0x0, 0x0) 412.7689ms ago: executing program 0 (id=220): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x8, 0x7, 0xc, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x4}, {0x7, 0x3, 0x4, 0x7}, {0x5, 0x40009, 0x8100, 0xaf5}, {0x9e, 0x8, 0xc, 0x2}, {0x2000001, 0xfffffffb, 0xfffffff7, 0x9}, {0x20000002, 0xa, 0xffffffff, 0x9c}, {0x80000cdc, 0xffffffff, 0x10, 0x71}, {0x7fff, 0x800, 0x14, 0x8}, {0xfffffffd, 0x81, 0x1, 0x9}, {0x3ff, 0x8001, 0xc7, 0x53c91534}, {0x5, 0x5, 0xd, 0x10aeb}, {0x805, 0x40, 0x2, 0x5}, {0xe3, 0x4, 0x80005, 0x401}, {0x29a7171a, 0x8, 0x3, 0x100006}, {0x4, 0x9, 0x7}, {0x0, 0x3, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x9, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x1, 0xcb, 0x800007a, 0x0, 0x1, 0xd87, 0x8000000c, 0x1, 0x1, 0xaf, 0x8000005d5}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2000, 0xa) rename(&(0x7f0000004d40)='.\x00', &(0x7f0000004d80)='./file0\x00') ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0xc, 0x4, 0x1}, {0x16, 0x7e, 0x0, 0xffff}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "765203", 0x8, 0x0, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x1, 0x2, 0x8}}}}}}}) 411.128473ms ago: executing program 4 (id=221): r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{}, 0x1, 0x8003, 0x2}) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9c) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x101) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{}, 0x1, 0x8003, 0x2}) (async) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9c) (async) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x101) (async) 339.170934ms ago: executing program 6 (id=223): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1012, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000004c0)={0x3, &(0x7f00000000c0)=[{}, {0x2, 0x0, 0x0, 0x1}, {0x83, 0x0, 0x0, 0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x5, 0xa, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x0, 0x6cb9, 0x8, 0x9}, {0x104, 0xf88, 0xfffffffd, 0xd}, {0x6, 0x802, 0x800b, 0x5}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0xe}, {0xce1, 0xffffffff, 0x4f4, 0x6d}, {0x6, 0xd78d, 0x14, 0x2}, {0x2, 0x82, 0x1000001, 0x5}, {0x6a75, 0x8001, 0x1003, 0xb}, {0x2, 0x10001, 0x6, 0x3}, {0x200008, 0x0, 0x8, 0x2}, {0x10b94, 0x1000006, 0x4, 0x21}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x4000, 0x1, 0xffe, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x40000000, 0x0}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) close(r0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chroot(&(0x7f0000000080)='./file0\x00') 336.862011ms ago: executing program 2 (id=225): syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xf, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}}}}}) r0 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb2618f4df72f3cf1fcb35d7de2b086a46a52ad7f4601faa903493e33986e77f0f22", 0x3d}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b"], 0x20, 0x401}, 0x0) sysctl$net_inet_gre(&(0x7f0000000100), 0xb, &(0x7f0000000140)="b1904dafec59a7020b8701ab", &(0x7f0000000300)=0xc, &(0x7f00000001c0)="b3ec1747e9b6ccd50c640969ea4e0af98258ff93e2786b628cb8b79c18f4044d5aa55d0d7529853f433c3212359ea5a366376bbfec1ad9d13ee04cac8ba55681f7625ab699e9629749ef05efe45c699ef4958189661c694dd7089ef7ffc5612379a7488c1a061c6a4566680bcf5cef322c11e063a52072023a85d7aaf2cc9bd1fd1fd354261500353f165f9e103899db41c37f436050c1f537ec9542b44bbd91f9e7917ff57d2f751cb69b5e83317316c243c44899fe14398a3ea970989a8277cedacd2b239da45aa6fc18b7f52b558da19fefc86df5946586ad45ffb38099f02084a332073cc8b657", 0xe9) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x2, 0x0}) syz_emit_ethernet(0x96, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60db0905e80000000000000000009e61cd0c535a98000000ff0200000000000000000000000000012c05000000000000000800bd", @ANYRES16=0x0, @ANYRES32, @ANYRES8=r1]) r2 = syz_open_pts() syz_emit_ethernet(0x26, &(0x7f0000000180)={@random="a50a1b311724", @random="b000", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x18, 0xfffd, 0x0, 0x7, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@generic={0x9, 0xdf}}}}}) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000000)="5851f984adc598b23acb5ca49093b7efcb86f0fe74e4464b7838da51d3fd9ebebf679f798831319d8f74c162bcf4357036976258facf6afa3dcc51b3e0422d6844758c134a8cb2db9ef70cee69ba34c5b4d3df13f48bfc1dc4529ea193fbf49ae298d71ad435a75643930858d668", 0x6e}, {&(0x7f0000000080)="f3e2cc1d855108c243db943d92328cc8af4eae4afff9973d97e97b79053f6772998f7286ce8d577b53ed9f26", 0xfffffebd}, {&(0x7f0000000540)="eb6ea90abaf2b872f870ff28c64853af3a87a14b66b946d24c423381e2d291a8916dcc4745832f80b805a43b536c08570bbcbac936be7149343d7f1dccdf19", 0x3d}, {&(0x7f0000000100)="8641b81e5e821370d52a3b69a6b9e3221571b2f3bec4ebbd9d117c06a0393e535c9e961758933d00b21cba4d1ad39cd2d62fe797b1e8775e39bf5c8f30b292e4c988e14bde822347e73d2085e9a23d7cfa3bfaa98338bd7d3eae2467c219cba3c8c4bf56aa295167881c83d9d25de207d34ad1a5bbc6605b9f102b2cfe20a731c5c9d181c87b4b3b443208e62444ce8da96a4944c4a3f7a24910a109082f64123bb3dff62e14e51cfdb2fd487fcd345d0f587d4e8adac04a4511f42a45514dc0f01890416d4b28b1ef74b749d357d16c83caece486e7863c57a313f62905ad00f6db4a74b0a8", 0xe6}, {&(0x7f0000000200)="ebbfb9e79de5da1ac813e068ad7083ec438cb8", 0x13}, {&(0x7f0000000240)="0ced92783dfe382ec1a8a6b9400be076625abfa1b3e4642c00e11e36c36d4a599149084978b7ad2f2a4ef579ed5e7df6420ef7095b8382f52392c33244f615", 0x3f}, {&(0x7f0000000280)="57fdb67f86463b4e928855a2a117bd38fb5086ddaa1bef1377cb45fe037c724cd5be5ba5cc7b81041993daf9f380a166931bb3f0e57c0f897e67a9ca5ccc3b58ccce7f6a54789a26fbb4bcc0b50f72b7b6c746660ec7c3741f842f1dfb84714b3f23d176f64186160b725efe3ea09aa99d0bdac6980f23", 0x77}, {&(0x7f0000000300)="de8bad3579d39c6cc8da3cb55f4251ff5ee479160194d02c85cd6968f2048d154a44c8f1b4d3d06b59192e3dcacf5ffbea5ea674d9f3d9a767fa00008df0ee7ffc4c1a2aae8a69775de06245ad1ad5be06bdfccab1a5fc04fe0a8c8fa9159545df57ed1e61", 0x65}, {&(0x7f0000000380)="5ba59cd624716146fd0bc1fa9419eb54b032fe7f7c6d82775bc0ef2688b0db3f4fdeb302af2935d1f27e521e6ed46207760f6407eb76a2ff91ee1e879efef019af09f11bf1194fe171ffe12591e4ffc97d1f918a1992801f3414372bdd40fcab73472de62f2c44cc827c662ea26a3f648067e1b2b25a7d8be56e5299d9fb9901a6c88955ae0195a46d7e2140fdcaeff26709337480353b733577cae1695e69f4b503180097406c28383b6db409c4a541288e3a98556f6d7dfd7f8caadccb6552f40018a5ad1f0c743a8e", 0xca}], 0x9) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000480)={0x2, 0x1}, 0x10) r3 = socket(0x2, 0x3, 0x11) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, &(0x7f0000000040)="55fdb050ab5b45d498800a61e87d2c7d43d937d1ff1992f871f120faaaf19dfd65118ba2b91afc99b80dc008d8890450b0d47ee3c49ee701f238beeb638dfa089b2e0763d43ceed09e2eea8303021e48a0e722619b9ba94b709d2d27571345239ca73815167971edcbdb20667e360e957bf872267add0f7eb527e4d67bdd5388b2123e7b0374e3bfcb93c111d59549a2bf", 0x91) close(r2) execve(0x0, 0x0, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000080)) 334.927192ms ago: executing program 3 (id=227): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x1, 0x54, 0x27, 0x2}, {0x4c, 0x0, 0x10, 0x8}, {0x6, 0xa9, 0x2, 0x4000008}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000001500)=ANY=[]) 329.346035ms ago: executing program 5 (id=229): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0xff, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0xa00, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x5, 0xffffe2e8}, {0x9, 0x1000, 0x4, 0x7fff}, {0x3, 0x1, 0x1, 0x12}, {0x82, 0x0, 0x4, 0xfffffff7}, {0x10000, 0xfffffffe, 0x1, 0xffffff88}, {0x401, 0x0, 0x400809, 0xa1}, {0x3, 0x2, 0x2, 0x4}, {0x1, 0x101, 0x8000003, 0x80000003}, {0x89be2, 0x1, 0x2, 0x400}]}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f00000004c0)="c2435fa9ac6d", &(0x7f0000000280)=0x6, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x34, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x8200, 0x0, 0xfffc, {[@nop, @nop, @timestamp={0x8, 0xa, 0x8, 0x7fffffff}]}}}}}}}) (async) syz_emit_ethernet(0x3f, &(0x7f0000000500)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "09cea6", 0x9, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@routing={0x62, 0x0, 0x0, 0x10}], @generic="92"}}}}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x11, 0x3, 0x0) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x1700) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x1}, {0x5, 0x0, 0x40}, {0x6}]}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (rerun: 32) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7, 0x17, 0x2000007, 0x104, 0x80000001, 0x80000081, 0x4, 0x10, [{0x0, 0x101, 0x3, 0x71000}, {0x7, 0x88, 0x1, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0x12}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f6, 0x3, 0x99}, {0x7, 0x4, 0x4f8, 0x6d}, {0xc, 0x3, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x7fe, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x5, 0x2}, {0x29a7171a, 0x3, 0x1, 0x5}, {0xc, 0x7, 0x4, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x2, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01064c2, &(0x7f0000000240)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r1, 0xc01064c1, &(0x7f00000002c0)={r3, 0x0, r1}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) (async) r5 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) (async) close(r1) (async) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) 328.102411ms ago: executing program 3 (id=231): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) r0 = open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000, 0x0) mkdir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x51) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0xffffffffffffff7c, 0x0, 0xfffffffffffffe31, &(0x7f0000000040)=""/54, 0x36}, 0x1801) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file2\x00') r1 = socket(0x18, 0x2, 0x0) r2 = getuid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xc) r4 = getuid() chown(&(0x7f0000000200)='./file0\x00', r4, 0xffffffffffffffff) utimensat(r0, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)={{0x8000, 0x40}, {0xb, 0xc}}, 0x2) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) r7 = fcntl$getown(r1, 0x5) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000440)={{0x80000001, r2, r3, r4, r5, 0x80, 0x4}, 0x6, 0x5, r6, r7, 0xffff, 0x10, 0x81}) fcntl$lock(r1, 0x9, 0x0) rename(&(0x7f0000000200)='./file2\x00', &(0x7f0000000600)='./file0\x00') 292.871798ms ago: executing program 0 (id=233): r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0115, '\x00'}, 0x2) sysctl$hw(&(0x7f0000000200)={0x6, 0xf}, 0x2, &(0x7f00000005c0)="b6640f306ce52477e8955e3ef59574e56b3761c049b9", &(0x7f0000000240)=0x16, &(0x7f00000006c0), 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc4504448, &(0x7f0000000740)={0x6, 0x3, 0x0, 0x0, "000001e3bb4e3447c1d100", 0x4, 0xffff2bd9}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x2, 0x2, 0x9, 0x80000000, "9e833ef2829fcbda50e6e509c548a783fdfaf350", 0x162, 0x9}) 289.69828ms ago: executing program 7 (id=235): r0 = semget(0x0, 0x1, 0x281) setgid(0xffffffffffffffff) r1 = getgid() mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000001300)={{0x902c, 0x0, r1, 0x0, 0x0, 0x180, 0xfffd}, 0x7, 0x2000099, 0x8000}) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x4) open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) close(r2) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) link(&(0x7f0000000340)='./bus\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semctl$GETZCNT(r0, 0x3, 0x7, &(0x7f0000000240)=""/160) 285.961369ms ago: executing program 0 (id=236): r0 = socket(0x24, 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x1, 0x71000}, {0x200007, 0x88, 0x8008, 0x7}, {0x101, 0x9, 0x0, 0x9}, {0x9, 0xd, 0xe}, {0x4, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x5}, {0xce3, 0x4, 0x4f5, 0x2}, {0xe, 0x801, 0xc, 0x8b}, {0x2, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd1a, 0x11088}, {0x1e9, 0x5, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0x10001, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x7}, {0xc, 0x7, 0x1, 0x8001}, {0x0, 0x1, 0x1001, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x47ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x902, 0x10, [{0x0, 0x9, 0x2, 0x71002}, {0x2, 0xfff, 0x8, 0xfffffff7}, {0x110, 0xfffff4a1, 0x0, 0x9}, {0x1, 0x803, 0x8007, 0xb6b}, {0xa, 0x200727, 0x9f7, 0x800007}, {0x1, 0x650, 0x5, 0xcb}, {0xce1, 0xffffffff, 0x1, 0x6d}, {0xffe, 0x7ff, 0x14, 0xc}, {0x2, 0x200083, 0x8000005, 0x5}, {0x6a76, 0x8003, 0x8001, 0x4}, {0x1, 0x10001, 0xe, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x555981a7, 0x3, 0x6}, {0x29a71717, 0xfffffff6, 0xffffffff, 0x7}, {0xd, 0x3, 0x5, 0x10000000}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) getsockname$inet6(r0, 0x0, &(0x7f00000002c0)) socket(0x24, 0x2, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x1, 0x71000}, {0x200007, 0x88, 0x8008, 0x7}, {0x101, 0x9, 0x0, 0x9}, {0x9, 0xd, 0xe}, {0x4, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x5}, {0xce3, 0x4, 0x4f5, 0x2}, {0xe, 0x801, 0xc, 0x8b}, {0x2, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd1a, 0x11088}, {0x1e9, 0x5, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0x10001, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x7}, {0xc, 0x7, 0x1, 0x8001}, {0x0, 0x1, 0x1001, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x47ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x902, 0x10, [{0x0, 0x9, 0x2, 0x71002}, {0x2, 0xfff, 0x8, 0xfffffff7}, {0x110, 0xfffff4a1, 0x0, 0x9}, {0x1, 0x803, 0x8007, 0xb6b}, {0xa, 0x200727, 0x9f7, 0x800007}, {0x1, 0x650, 0x5, 0xcb}, {0xce1, 0xffffffff, 0x1, 0x6d}, {0xffe, 0x7ff, 0x14, 0xc}, {0x2, 0x200083, 0x8000005, 0x5}, {0x6a76, 0x8003, 0x8001, 0x4}, {0x1, 0x10001, 0xe, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x555981a7, 0x3, 0x6}, {0x29a71717, 0xfffffff6, 0xffffffff, 0x7}, {0xd, 0x3, 0x5, 0x10000000}, {0x0, 0x1, 0x1002, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) getsockname$inet6(r0, 0x0, &(0x7f00000002c0)) (async) 285.195631ms ago: executing program 1 (id=237): mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1000c) ioctl$WSDISPLAYIO_LDFONT(r1, 0x8058574d, &(0x7f0000000080)={'./file0/file0/../../file0\x00', 0x6, 0x4e, 0x8973, 0x1, 0xff, 0x6a6b, 0x2, 0x0, 0x1, 0x1, 0x1}) syz_emit_ethernet(0xf9, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]) r2 = socket(0x1, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000001c0)="33fdd4623b69191a20b44928e7b4c4f13131bab0cc6165dec03852739eb8", 0x1e}], 0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffdff, 0x0, 0x0, 0x0, 0x0, 0xf8, 0x4000}, 0xfffffffffffffff6, 0x8000000000001, 0x0, 0x0, 0x80000009, 0x2008004, 0x400000000000a8, 0xd}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r4, 0x82485608, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) socket(0x18, 0x3, 0x3a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x80, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x7fff, 0x80000201}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x2}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x800, 0xffbf, 0x80cf}, {0x1, 0x5, 0x85, 0x2}, {0x0, 0x1, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x17fff}, {0x3, 0x0, 0x5, 0x7}, {0x8, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x9}, {0x200003, 0xee2, 0x4, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x7fff}, {0xffffffff, 0x8003, 0x6, 0x69}]}) r5 = syz_open_pts() close(r5) poll(&(0x7f0000000000), 0x35, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb9, 0x842, &(0x7f0000000300)={0x2, 0x3}, 0xc) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) poll(&(0x7f0000000200)=[{r4, 0x40}], 0x1, 0x6) ioctl$FIONREAD(r2, 0xc028698d, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x9, 0x200, 0x2, 0x6, 0x7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000440)={0x0, 0x9, 0x8, 0x2, 0x4, 0xcdc, r6}) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0/../../file0\x00') unveil(&(0x7f0000000300)='./file0/file0/..\x00', &(0x7f0000000400)='r\x00') 271.564513ms ago: executing program 5 (id=238): sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x32, 0x1}, 0x4, &(0x7f0000000100)="2fb40e7c0ddb7bd0be0672c551cc5471a801d2909ac731e7981c6c7c1e54208f3933710374d20c", &(0x7f0000000200)=0x27, &(0x7f0000000240)="24034f8a2909b6c87bad89f165d0b89a815221b672ec4718090d1b63b2ec7f1c109793c4fd1383eaea030c", 0x2b) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x2f9}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() sysctl$kern(&(0x7f0000000280)={0x1, 0x30}, 0x2, &(0x7f0000000340)="5d93a3b78d829daec09d0deb019e3352c031cab0df5cd067ed836e065bd1bff11874daaf0cc8d142e2fbe2740c78434de877173109d500518e3d7028fb428c7423b788bf21250413b3361bb9b35104974f9441b8ff776f66b0e68bb60da750", &(0x7f00000003c0)=0x5f, &(0x7f0000000400)="fd8f2967c2f65681f4e1bba24943bde4617710f93cd98bc1b62d03c993b08fbd037774918655d651eaf7d3f587f98d5311fdb4ef4f4703e206a1f4ebd229f79eaca864bbf56047f907d9895ebf7f43d87e9b20d5e1eafe923ef78c4b7ebb", 0x5e) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/139, 0x8b}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x80027ffb, 0x2, 0x1, 0x21d8b789, "07000200", 0x5}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="648c667393a368cc8b469c9ecf9cd6a8853580b610be0b390ec4bfda9e1ec00d6a8aebcbc3812242e165d94337b21ff9b53c7c5b5975b69dba75f45f2fb2ef2df0fce79145a86a09a48cb973fab68075329ce1d02b1dc7c64b2c57387a00cab256965af576a86990fd682446d7199025567d126761b9e41282", 0x79}], 0x1) sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x32, 0x1}, 0x4, &(0x7f0000000100)="2fb40e7c0ddb7bd0be0672c551cc5471a801d2909ac731e7981c6c7c1e54208f3933710374d20c", &(0x7f0000000200)=0x27, &(0x7f0000000240)="24034f8a2909b6c87bad89f165d0b89a815221b672ec4718090d1b63b2ec7f1c109793c4fd1383eaea030c", 0x2b) (async) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x2f9}) (async) syz_open_pts() (async) close(r0) (async) syz_open_pts() (async) sysctl$kern(&(0x7f0000000280)={0x1, 0x30}, 0x2, &(0x7f0000000340)="5d93a3b78d829daec09d0deb019e3352c031cab0df5cd067ed836e065bd1bff11874daaf0cc8d142e2fbe2740c78434de877173109d500518e3d7028fb428c7423b788bf21250413b3361bb9b35104974f9441b8ff776f66b0e68bb60da750", &(0x7f00000003c0)=0x5f, &(0x7f0000000400)="fd8f2967c2f65681f4e1bba24943bde4617710f93cd98bc1b62d03c993b08fbd037774918655d651eaf7d3f587f98d5311fdb4ef4f4703e206a1f4ebd229f79eaca864bbf56047f907d9895ebf7f43d87e9b20d5e1eafe923ef78c4b7ebb", 0x5e) (async) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/139, 0x8b}], 0x1) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x80027ffb, 0x2, 0x1, 0x21d8b789, "07000200", 0x5}) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="648c667393a368cc8b469c9ecf9cd6a8853580b610be0b390ec4bfda9e1ec00d6a8aebcbc3812242e165d94337b21ff9b53c7c5b5975b69dba75f45f2fb2ef2df0fce79145a86a09a48cb973fab68075329ce1d02b1dc7c64b2c57387a00cab256965af576a86990fd682446d7199025567d126761b9e41282", 0x79}], 0x1) (async) 271.267557ms ago: executing program 7 (id=239): sysctl$kern(&(0x7f0000000000)={0x1, 0x3e}, 0x2, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe553433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127071f36a8e2d20eae20bd0d8298fcaf8e7fedf42102b1bb2dc5869c7e281eb816ecc4fd8034c699aa423448feef7614241a65e72861334d5c88c41ce4772006f5a8d3933c73ee7be39eee4fd11203811fd5555e19bbf19fc6fdaf4ac8b44f801583f2b4d038c23c41d4dc26409b1b21bf613677802e5a47f2c65109faeae632", &(0x7f0000000080)=0x10d, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e4cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xe7) 267.28608ms ago: executing program 3 (id=240): syz_emit_ethernet(0x4d, &(0x7f0000002100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa08004838003f006400036c709078ac1400bb000000099406fffffff007030200001e4e204e20000890785bda8d57bbcee42a055b3638a392ee1ec4572c7d178cff"]) (async) r0 = socket$inet(0x2, 0x4, 0x2) setsockopt$sock_int(r0, 0xffff, 0x1008, &(0x7f0000000080)=0x1, 0x4) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') getsockname(r0, &(0x7f00000000c0)=@in, &(0x7f0000000100)=0xc) 241.685095ms ago: executing program 3 (id=241): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$hw(&(0x7f0000000280)={0x6, 0x1}, 0x2, &(0x7f0000001040)="06c7a681d330", &(0x7f00000000c0)=0x6, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f00000004c0)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000500)="4a5321ed59", &(0x7f00000005c0)=0x5, 0x0, 0x0) (async) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x4}, 0x4, &(0x7f0000000180)="7a69f65adc4c7a8d89c6f07748914c80710e03d8a916e08baa287c2922d78b9c3c720eae24ea2b59c78b97a511c0597748b26a4f7593cdfa620d729a31b38f570c888873abd3886348bba618aef07238f8e8626857d2712183e259c1a6980d9acbbf2a8627371bb97b114d337db4c243d110743ac1397318fcac8965be0258cd74d7feaeb3f227925d3cf3abc1f91e49fbeca0eb6c28470fbf5469627ea0f771c45099de8704e9f1d86f56a744de1e0c132724f1f94bec30a99ee547f6a068fe8d568f56225e18796797ad274dbd9f66b72a3f1b12fb51c2b23f01390f97a15ae25f20b753b73b5b5fefca", &(0x7f00000002c0)=0xeb, &(0x7f0000000300)="5feb6db79b3d0546f0183264d869818ebfb6e458492a9f00b8ddd87c58213910f3c703db583aabd80e225de4aafe5c6344174623dc9d6871d5c9d03c85c8f99fe2ff90da09a1ac0752b8587d2890f96dec9433e98063a5dee8d8f9a014f4a5e284f6ab422eee33f13e0fc620443a0e020273ae2eaf10aaf30384", 0x7a) (async) sysctl$vfs_ffs(&(0x7f0000000000)={0x4, 0x1, 0x7}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) (async) r1 = getpid() setreuid(0xee00, 0x0) (async) ktrace(&(0x7f0000000300)='./file0\x00', 0x0, 0x1518, r1) (async) setuid(0xffffffffffffffff) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='W\x00') (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}, 0x0) (async) getsockname$unix(r2, 0x0, &(0x7f0000000080)) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{}, {0x1, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x0, 0x8}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) r3 = syz_open_pts() ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x5) 238.576502ms ago: executing program 1 (id=242): r0 = syz_open_pts() writev(r0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="847b62e2e20a84c89393834af0fa176af136f1733716977b6c187c3f8f9fb40f461c29991227f9f59fbc289c9e3f6e0d22a020802cb677bd349cdab6ebb0815abb78705ac553ba32a10988605dad8a7d88c2f0cdd7b9c635b9ce3fcab9899993", 0x60}, {&(0x7f0000000100)="1e5b4ae902", 0x5}], 0x2) syz_open_pts() sysctl$kern(&(0x7f00000007c0)={0x1, 0x2d}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x2, 0xfffffff9, 0x7c6, 0x7, "eda756c19277edb9a68cc0ae00e67f253c0ea9e5", 0x9, 0x8}) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="c820ac81b0767588a45401067fe9fd7ada9714645fff973ebf80b981f98f01bd5d33bb42a01da72827a36bb908ee2bffe14ba2456d89ab5fdad8c0185dfaa0cb873669b20aa0158e7048d5c2da7db2", 0x4f, 0x0, &(0x7f00000000c0)={0x2, 0x2}, 0xc) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7) execve(0x0, 0x0, 0x0) 237.261551ms ago: executing program 6 (id=243): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0xc0) (async) r2 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0xe5, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r2, 0x0, 0x2000000000, 0x0, 0x1}) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async, rerun: 32) r4 = msgget$private(0x0, 0x0) (rerun: 32) msgsnd(r4, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) (async) msgsnd(r4, 0x0, 0x401, 0x0) msgrcv(r4, 0x0, 0x0, 0x3, 0x1000) (async, rerun: 32) msgsnd(r4, &(0x7f0000000080)={0x2}, 0x8, 0x800) (async, rerun: 32) msgctl$IPC_RMID(r4, 0x0) r5 = fcntl$getown(r3, 0x5) setreuid(0x0, 0xee01) (async, rerun: 64) fcntl$setown(r1, 0x6, r5) (rerun: 64) setuid(0xee01) close(r1) (async) fcntl$lock(r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x7}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) 201.222588ms ago: executing program 1 (id=244): r0 = syz_open_pts() close(r0) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) r1 = socket(0x18, 0x3, 0x20) close(r1) r2 = socket(0x18, 0x3, 0x3a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) execve(0x0, &(0x7f0000000000)=[&(0x7f0000000100)='//\x00'], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x48, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="c2a6d6000000005ae39d73988d800f00ecfe746fc6d602ff1a1e9f612b158f09acc9ae4e6a9981d7", &(0x7f0000000000)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x8, 0x1}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x2, 0x0) bind(r4, &(0x7f0000000000), 0x10) write(r3, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000340)="b10005010000009f05003f01130000001e1c13fecea79c5dfaf66e8d0300000000000000fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32618210000720fd38bdb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f834371205050052fbe03f49b11b7aaeb70000fca65361ba84913f0100000000000006000000", 0xb1, 0x408, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000010c0)=ANY=[@ANYBLOB="0180c20000000180c200000086dd6001012000283aff0000000000000000000000000000000000000000000000000001"]) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8) getpeername$unix(r2, 0x0, &(0x7f0000000080)) open(&(0x7f00000003c0)='./file0\x00', 0x2, 0x0) 198.167132ms ago: executing program 6 (id=245): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x2}, {0x0, 0x1}, {0x2, 0x3}, {}, {0x1}, {0x3}, {0x2, 0x20000000}, {0x1, 0xffffffff}, {}, {0x6}, {}, {0xa5f106c73ed9828f}, {0x0, 0x3b6}, {0x3, 0x400000}, {}, {0x2, 0x3}, {0x3, 0x800}, {0x1}, {0x0, 0x7ff}, {0x5, 0x1af0}, {0x2, 0x7}, {0x3}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0xfffffffd}, {}, {0x2}, {}, {0x1, 0xa}, {0x1, 0x4}]}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff}) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) r1 = socket(0x11, 0x3, 0x40) setsockopt$sock_int(r1, 0xffff, 0x1004, 0x0, 0x0) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x2}, {0x0, 0x1}, {0x2, 0x3}, {}, {0x1}, {0x3}, {0x2, 0x20000000}, {0x1, 0xffffffff}, {}, {0x6}, {}, {0xa5f106c73ed9828f}, {0x0, 0x3b6}, {0x3, 0x400000}, {}, {0x2, 0x3}, {0x3, 0x800}, {0x1}, {0x0, 0x7ff}, {0x5, 0x1af0}, {0x2, 0x7}, {0x3}, {0x3, 0x9}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0xfffffffd}, {}, {0x2}, {}, {0x1, 0xa}, {0x1, 0x4}]}) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff}) (async) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) (async) socket(0x11, 0x3, 0x40) (async) setsockopt$sock_int(r1, 0xffff, 0x1004, 0x0, 0x0) (async) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) (async) 194.354472ms ago: executing program 7 (id=246): r0 = socket(0x2, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@in, 0xc, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/126, 0x7e}, {&(0x7f0000000140)=""/198, 0xc6}, {&(0x7f0000000780)=""/4096, 0x1000}], 0x3, &(0x7f0000000280)=""/31, 0x1f}, 0x3) (async) recvmmsg(r0, &(0x7f0000000740)={0x0, 0x5}, 0x10, 0x0, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f0000000040)=r0) 192.798752ms ago: executing program 7 (id=247): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) open(0x0, 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000280)={0x3, &(0x7f0000000000)=[{0x6, 0x11, 0xff, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0x8}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r2 = socket(0x18, 0xc003, 0x3a) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x7, 0x3}]}) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1}, 0xc) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setuid(0xffffffffffffffff) ktrace(0x0, 0x5, 0x40000500, 0xffffffffffffffff) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGDLTLIST(r1, 0xc010427b, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919d7aacdfaffffffffffffff46c0fbde0346df012e786031d4b86fc1f36e5250f6d2b982fd3883a8b58c1af70800000000000000b5fe1448533302cf7069ee14085a11c77d5527f60000000000", &(0x7f0000000000)=0x64, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 181.741263ms ago: executing program 1 (id=248): syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "15f2ff", 0xffc2, 0x0, 0x0, @rand_addr="eee21f0000003c00000500004c58053b", @local={0xfe, 0x80, '\x00', 0x0}}}}}) (async) symlink(0x0, &(0x7f0000000040)='./file0\x00') (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) setsockopt$sock_int(r0, 0xffff, 0x8, &(0x7f00000000c0)=0x2, 0x4) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000040)=0x9, 0x4) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) (async) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r3, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) (async) getsockopt(r3, 0x0, 0x6d, 0x0, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0x4, 0x8, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x8, 0x88, 0x8008, 0x7}, {0x101, 0x8, 0x1, 0x9}, {0x9, 0x900, 0xe, 0x1}, {0x401, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x80}, {0xce3, 0x4, 0x4f5, 0x2}, {0x6, 0x801, 0xc, 0x8b}, {0x2, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0x10001, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x8}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x4}, {0xc, 0x8, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r4 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffc, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, &(0x7f0000000100), 0x0) (async) bind(r2, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f0000000000), 0x10) (async) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) (async) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) 181.181948ms ago: executing program 7 (id=249): mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) acct(&(0x7f0000000080)='./file0\x00') setgid(0x0) 177.726986ms ago: executing program 1 (id=250): readv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047470, &(0x7f00000000c0)=0x400) r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCREAD(r0, 0xc0187009, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4002}, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)='#', 0x1}, {&(0x7f0000000040)="2187", 0x2}], 0x2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000280)='#!', 0x2}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f00000002c0)="20c609af00", 0x5}], 0x1) write(r3, &(0x7f0000000280)="0900000000009be2e79448e0daced9a4a1a603e890c337f09ad5f40696c29d0a", 0x20) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) sysctl$kern(&(0x7f0000000240)={0x1, 0x52}, 0x2, 0x0, 0x0, &(0x7f0000000300), 0x0) r5 = shmget$private(0x0, 0x2000, 0x561, &(0x7f0000412000/0x2000)=nil) shmctl$IPC_SET(r5, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x119, 0x400}, 0x4, 0x1, 0x0, 0x0, 0xfffd, 0xa, 0x9}) shmctl$IPC_STAT(r5, 0x2, 0x0) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x1000) sendmmsg(r2, &(0x7f0000000080)={0x0, 0x8001}, 0xfffffffffffffead, 0x404) close(r1) 177.376248ms ago: executing program 6 (id=251): select(0x11, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0xc89, 0x210, 0x5, 0x7}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x10, 0x96) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) write(r1, &(0x7f0000000100)="a32c314393f165d7c152b9e5", 0xc) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mquery(&(0x7f00001cf000/0x3000)=nil, 0x3000, 0x0, 0xeda9be564859340e, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) sysctl$hw(0x0, 0x0, &(0x7f0000000200)="00061b00c4cc534dae0653f55d012c000001003d0829cb3c5240b5bf5010", &(0x7f0000000000)=0x1e, 0x0, 0x0) r3 = socket$inet6(0x18, 0x4000, 0x0) listen(r3, 0xe) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r4, 0x29, 0x37, 0x0, 0x0) 176.721891ms ago: executing program 7 (id=252): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x20, 0x0) r1 = getpid() sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x70, 0x4}, 0x4, &(0x7f0000000500)="24ecb86e0c232ec35208679e1ea281cc797fe4bd6d1c44fadf08026427e5787463a66c4c9ce394e1cd12c9af54649f3aac9169ccc82b3fd4fe9a08a3b345d101557d0800f7c1610f00000000303807029ddb8fa5357c899bbb7f7d926f393282b12da2a6d38c18dd02a3683c386fe0ea", &(0x7f00000000c0)=0xfffffffffffffe8d, 0x0, 0xffffffffffffffcb) r2 = msgget(0x0, 0x208) msgsnd(r2, &(0x7f0000001040)={0x0, "a25eb688ba74a2623b229fa6"}, 0x14, 0x800) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) pwrite(r3, &(0x7f0000000580)="98c30283ab2c3094841b174d4cc5417f5d8c7a4bd03f71f1db7801c2357700290c4e8ed961ff1383a19dfcb2dce76a", 0x2f, 0x8) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) fcntl$setown(r0, 0x6, r1) (async) fcntl$setown(r0, 0x6, r1) socket(0x1, 0x4000, 0x4) (async) r4 = socket(0x1, 0x4000, 0x4) close(r4) socket(0x2, 0x3, 0x0) (async) r5 = socket(0x2, 0x3, 0x0) close(r5) r6 = socket(0x2, 0x3, 0x0) close(r6) (async) close(r6) socket(0x18, 0x3, 0x3a) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0) (async) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) setsockopt(0xffffffffffffffff, 0x1000000000029, 0xb, 0x0, 0x0) connect$unix(r6, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) write(r4, &(0x7f0000000180)="85e2f3e96cc781ba", 0x8) close(r0) (async) close(r0) open$dir(&(0x7f0000000000)='./file0\x00', 0x10, 0xb8) 171.786099ms ago: executing program 3 (id=253): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async, rerun: 32) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x0, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x8, 0x88, 0x8008, 0x7}, {0x101, 0x8, 0xffffffff, 0x3}, {0x9, 0x8, 0xe}, {0x481, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x4}, {0xce7, 0x4, 0x4f5, 0x2}, {0x6, 0x801, 0xc}, {0x2, 0x82, 0x3, 0x9}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0x10001, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x809}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x4}, {0x0, 0x7, 0x1, 0xfffffffe}, {0x0, 0x0, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000040)=0x8) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r3 = syz_open_pts() (async) syz_open_pts() ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x9) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x9) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5012, 0xffffffffffffffff, 0xfffffffffffffffd) (async) sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async, rerun: 64) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ftruncate(r5, 0x8531) (async, rerun: 32) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff}) (async, rerun: 32) mmap(&(0x7f00000ad000/0x3000)=nil, 0x3000, 0x2, 0x11, r4, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async, rerun: 64) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f0000000000)={&(0x7f00000000c0)='./file0\x00', r6}) 44.535901ms ago: executing program 6 (id=254): mkdir(&(0x7f0000000280)='./file1\x00', 0xd7) (async) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') 43.759028ms ago: executing program 3 (id=255): r0 = socket(0x2, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, r0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x1600) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) sysctl$net_inet_ah(&(0x7f0000000080)={0x4, 0x2, 0x33, 0x1}, 0x4, &(0x7f00000000c0)="2533e3001b8874d1ddd965e584c954618229c9031868ffef2ee9c419911c0f4251668df6bce1fdc0696cb5790e804badcc39bbbbe03aec6d4da1699687864e82e395745a4947810e48b5b406bedbf020d2db82290c4fc8e07226830fadf05a38d088560240efac2a468451a2f5a55f65eb55d8c67d6ac314ba22f91cec67b0b5b964bc496df76fc56e040fd1148bb78e00b09524d3ca624314033c6b17680f66d00be508cccf7e2495c329e31d0f7e276604d2e59afb45eb29", &(0x7f0000000180)=0xb9, &(0x7f00000001c0)="dfbd0e7ed4192bcf282ebcab3f312c8cb94d003f5fdff460c1291d22b15deef99abb8b986f65dfb1c56160f4ebf008266219106b96d45afa7f3d4b3ffce803a9a7e7f805ee9694bc915796f5cc9a495265fb2765d7585102c555cff89417485ea7d410001e2f3e4234dddfba1e852a4a51ca2d3cd73c2c54becd202c477394e8505e494b0b31760f2f45722c89e5e11e59c855d0e60062b9abcc27ac529794388810c9b1ca95ebd4dc761392bbd7fee7c669ce2e4ae5dd4524806908fbf76252362d1502125b634f61", 0xc9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) r4 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00') unlinkat(r4, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) r5 = socket(0x2, 0x2, 0x0) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r6, 0x80105705, &(0x7f0000000080)) mmap(&(0x7f000052d000/0x3000)=nil, 0x3000, 0x1, 0x1810, r0, 0xffff) connect$unix(r5, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet_tcp(&(0x7f00000002c0)={0x4, 0x2, 0x6, 0x20}, 0x4, &(0x7f0000000300)="d9f9b80355142b6d5fff03a158439841404d06882bb81e6be1f118b9e133113b5560f69131a4e3814be2eb4518f491df23815bb8a432671fe48eba814bcd18fc963d4aa2e15cc04ceb89f5fab46f5cc452cfd056d2fc2ba0532344df5508e0602e364fd22d4b6e9d3738d6fdbce4d6ed12338356fa30dc13", &(0x7f0000000380)=0x78, &(0x7f00000003c0)="db3959a2ac8e2d8e0379a13b9227ba49d6e1fefadb8529338307add8125b9bdba2460c02e11945ec1be691d6a85d65abfbb128b1de504b2c380d01098c1114aa4d49719a9380ede85fef12ee89b3e61cea2e7caa0112381c5e8dea92f37acdad54d3cca4fc57d4681bf708ba35bb40a2bf42e4ead5bd7505e29de3fa4ebecd3b9d3bcfc27fa2eae6fe53e9a0f23279f685fdb0002d8e0077de4534fe49e12910f120240b68c45db37985f0eef337f359a88d5d57bfa603ec36910aced724a868afdb084c011c9e472054e82184a0d7", 0xcf) r7 = socket(0x2, 0x2, 0x0) r8 = msgget$private(0x0, 0x0) msgsnd(r8, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000"], 0xf0, 0x800) msgrcv(r8, &(0x7f0000000e40)={0x0, ""/158}, 0xa6, 0x0, 0x800) setsockopt$sock_int(r7, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) close(r1) ioctl$FIOASYNC(r5, 0x8004667d, &(0x7f00000004c0)=0x7) 41.784966ms ago: executing program 4 (id=256): r0 = syz_open_pts() ioctl$TIOCSTOP(r0, 0x2000746f) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x8, 0x1, 0x7, 0x4, "ff14e7130b1e586ce6294000", 0x40, 0x103effd}) syz_open_pts() 14.751652ms ago: executing program 5 (id=257): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x2401}, 0x400, 0x200042000010000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x6}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000622000/0x1000)=nil, 0x1000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e50000b9", 0x4) 3.957953ms ago: executing program 4 (id=258): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x3, 0x85) ioctl$FIONREAD(r0, 0x8218694a, &(0x7f00000001c0)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0xa7, 0xfffe, 0x0, 0x0, 0x5, 0x4, 0x1}) r1 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffff9c, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000000080)={r2}) 3.365504ms ago: executing program 5 (id=259): r0 = socket(0x2, 0x3, 0x0) setreuid(0x0, 0xee01) r1 = kqueue() mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) r2 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$VNDIOCSET(r2, 0xc0285108, &(0x7f0000000040)={0x0, 0xffffffffffffffba, 0x0, 0xffffffffffffff99}) kevent(r1, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x19, 0x1, 0xfd, 0x10000}], 0x8, 0x0, 0xd, 0x0) kevent(r1, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x28, 0x40000000, 0xfd, 0x13fff}], 0x1, 0x0, 0xfffffff7, 0x0) ioctl$FIONREAD(r0, 0x8020697a, &(0x7f0000000100)) 3.002538ms ago: executing program 4 (id=260): open(&(0x7f0000000040)='./file1\x00', 0x200, 0x104) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) fchmod(r1, 0x4) r2 = kqueue() kevent(r2, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffffb, 0x45, 0x40000000, 0x8, 0x6}], 0x1006, 0x0, 0x37, 0x0) acct(0x0) acct(&(0x7f0000000280)='./file1\x00') open$dir(&(0x7f0000000000)='./file1\x00', 0x8000, 0x10) kevent(r2, 0x0, 0xffeffff1, &(0x7f00000002c0), 0xb19, 0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x31, &(0x7f0000000040)="ebff", 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r5, &(0x7f0000000780)=""/192, 0xc0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r4, &(0x7f0000000840)="84e2499beed1da935716693e17e5c43333ad2f7f102ab943742c238c45870b6491eb57fe711267e031a65e01fc23ddb311e4fc0ae12c3e29efa408f52e42490af7f5742572c61e2603a6ac15f4d34e1636030f233fff492de47996066322ccf144799999c8c5158a71a7ca519e0fd1927c330995cde2139af77c8105e1157cb9ef62e95993fc2434efd0decbeacf2b055b4b635f8ab1b9485cd6724bb3a9d784bc7131f879a6c1dfa7b41e23339d06e8c456a519e5a0d705405d25ce0ca47f6c18", 0xc1) openat$speaker(0xffffffffffffff9c, 0x0, 0x782, 0x0) 2.302492ms ago: executing program 1 (id=261): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETF(r0, 0x80104267, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x11, 0x84, 0x3}, {0x48, 0xee, 0xff, 0xc05}, {0x6, 0x80, 0x9, 0xfffff7ff}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000340)="25a7bea75e9eeae4e632e800338d030000f0dadddbdbf7d3f744b5f24efb00000000f900007fff0000000000000d255005ae421016c91c57bdb44963b9e72395c43a35e9d4185f72d4e4db362e9a758b1a13e36fc759bc76c1d6fc18c00ac0fc", &(0x7f0000000000)=0x60, 0x0, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000080)=0x2) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000ffffffffffff080045f400280067000000069078ac1400aaac1400aa4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500282009078fffc7135c2d9dc8143e482d05956dda8f18d1dbcf394206d9e96fcffb9a7861dbc8a49ab62b9ac3b2cfc1e55b8bfd4b08e6b1248576d7ab66df66c7a46c4ed29b36b4fee934c3f581d2ff09f84da5e6ff7d2c1bdb61a0395fba46df1c82da1bd3d43139f784163bc54b200000000c2522321ca295164d09386c9fa77d79122fb069ac5c9ab4e57c52911c5c507d7cccb6265255e971d8ccb1f29452269b2c677adb43cbe97230097645776a56151e7dca8c67f4653099a8ea6ca0adadfe3304d65"]) 0s ago: executing program 2 (id=262): sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) fchown(r0, 0x0, 0x0) sysctl$hw(&(0x7f0000001580)={0x6, 0x12}, 0x2, &(0x7f00000015c0)="cbebf097da78b53a37ed067b33c8068cb14fd03377efa2279cdc043556b6a8008832311094", &(0x7f00000016c0)=0x25, &(0x7f00000001c0)="3b8aa7f71323f99daa580000001c000000000000000000000000028eb27396402a8c303c6f52c17f75759a5893401dd98f816d1282fe65955c5a145092f891", 0x3f) r1 = syz_open_pts() ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f0000000340)) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000003780)='\x00', 0x1) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, 0x0, 0x0) write(r2, &(0x7f0000000380)="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", 0x1000) sysctl$hw(&(0x7f0000000000)={0x6, 0x12}, 0x2, &(0x7f0000000040)="3288c8325878165c93e45a76d96b271125dfb53257bf61db4cb384172e8bd28b6d0a1821311bb5cc1fa85a4bcbdc6170855ad1ba50dd90c0e965bd4c2c8c1e2908b25f444da271f26f824382c6d066eec9385c8674522e50af52ec51b4f429563f7cc1f06b413d3229ae0b79f06bf0dffcfdcad8a5cff26666", &(0x7f00000000c0)=0x79, &(0x7f0000000100)="195f0def98995128a3b9258fb5a9f9b03c663c780110b0da731075b60c5fcbd02f2b8317b71c8adf76ce7e9390d3de6236ba1f92c38fdfcf5f90099d6d23718f5c56738c4e8ec6bb255fa57cee0c915b279a5cb036407662193f383d741d4558f7d69dbd16ab92b3a8c37a10ffbb25b4899dd69f12ed03f38a3a82237e1cef97240ccfc58a882afef12b0965536126167dcb5156c7d8c84ae53285070bb5950c34", 0xa1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. pckbd_enable: command error uvn_flush: obj=0xfffffd806a667a10, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvm_fault(0xfffffd806cbd3e78, 0x18, 0, 1) -> e kernel: page fault trap, code=0 Stopped at mtx_enter+0x6e: movq 0(%r14),%r15 TID PID UID PRFLAGS PFLAGS CPU COMMAND mtx_enter(18) at mtx_enter+0x6e clockintr_unbind(ffff800001654630,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001605700) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff80003c908a90) at dtclose+0xd9 spec_close(ffff80003c8f95e0) at spec_close+0x466 VOP_CLOSE(fffffd806df4e1d0,1,fffffd8007ffd680,ffff80003c908a90) at VOP_CLOSE+0x129 vn_closefile(fffffd806d1842e0,ffff80003c908a90) at vn_closefile+0x11d fdrop(fffffd806d1842e0,ffff80003c908a90) at fdrop+0x121 closef(fffffd806d1842e0,ffff80003c908a90) at closef+0x190 fdfree(ffff80003c908a90) at fdfree+0x115 exit1(ffff80003c908a90,0,0,1) at exit1+0x576 sys_exit(ffff80003c908a90,ffff80003c8f9940,ffff80003c8f9890) at sys_exit+0x1a syscall(ffff80003c8f9940) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f4948767700, count: 1 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806cbd3e78, 0x18, 0, 1) -> e ddb> trace mtx_enter(18) at mtx_enter+0x6e clockintr_unbind(ffff800001654630,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001605700) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff80003c908a90) at dtclose+0xd9 spec_close(ffff80003c8f95e0) at spec_close+0x466 VOP_CLOSE(fffffd806df4e1d0,1,fffffd8007ffd680,ffff80003c908a90) at VOP_CLOSE+0x129 vn_closefile(fffffd806d1842e0,ffff80003c908a90) at vn_closefile+0x11d fdrop(fffffd806d1842e0,ffff80003c908a90) at fdrop+0x121 closef(fffffd806d1842e0,ffff80003c908a90) at closef+0x190 fdfree(ffff80003c908a90) at fdfree+0x115 exit1(ffff80003c908a90,0,0,1) at exit1+0x576 sys_exit(ffff80003c908a90,ffff80003c8f9940,ffff80003c8f9890) at sys_exit+0x1a syscall(ffff80003c8f9940) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f4948767700, count: -14 ddb> show registers rdi 0 rsi 0 rbp 0xffff80003c8f9490 rbx 0 rdx 0 rcx 0xffff80003c908a90 rax 0xffff80003c908a00 r8 0x1 r9 0 r10 0x844be0c3a26436d7 r11 0xec23ff0ef88869d7 r12 0x1 r13 0 r14 0x18 r15 0 rip 0xffffffff81149a7e mtx_enter+0x6e cs 0x8 rflags 0x10297 __ALIGN_SIZE+0xf297 rsp 0xffff80003c8f9460 ss 0x10 mtx_enter+0x6e: movq 0(%r14),%r15 ddb> show proc PROC (syz-executor) tid=263287 pid=82551 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c908a90 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff800030cc14d8,0xffff80003c908040 process=0xffff8000ffff9b18 user=0xffff80003c8f4000, vmspace=0xfffffd806cbd3e78 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 82554 372210 64489 0 2 0 syz-executor 82554 56560 64489 0 2 0x4000000 syz-executor 34883 493883 8860 0 2 0 syz-executor 34883 117316 8860 0 3 0x4000080 fsleep syz-executor 64738 139419 49979 0 2 0 syz-executor 64738 367565 49979 0 3 0x4000080 fsleep syz-executor 13349 466410 41447 0 2 0 syz-executor 13349 318622 41447 0 3 0x4000080 fsleep syz-executor 20394 257562 44492 0 2 0 syz-executor 20394 28245 44492 0 3 0x4000080 fsleep syz-executor 41523 95214 45891 0 2 0 syz-executor 41523 234035 45891 0 3 0x4000080 fsleep syz-executor 17638 448518 65936 0 2 0 syz-executor 17638 301084 65936 0 3 0x4000000 smrbar syz-executor 17638 443260 65936 0 3 0x4000080 fsleep syz-executor 17638 297179 65936 0 3 0x4000080 fsleep syz-executor 8860 343257 30089 0 3 0x82 nanoslp syz-executor 39699 369473 0 0 3 0x14280 nfsidl nfsio 96917 63856 0 0 3 0x14280 nfsidl nfsio 52088 373295 0 0 3 0x14280 nfsidl nfsio 28781 378128 0 0 3 0x14280 nfsidl nfsio 2398 57312 0 0 3 0x14280 nfsidl nfsio 5099 197914 0 0 3 0x14280 nfsidl nfsio 71927 170093 0 0 3 0x14280 nfsidl nfsio 21663 378043 0 0 3 0x14280 nfsidl nfsio 92617 317803 0 0 3 0x14280 nfsidl nfsio 73037 508657 0 0 3 0x14280 nfsidl nfsio 81367 243785 0 0 3 0x14280 nfsidl nfsio 71449 503773 0 0 3 0x14280 nfsidl nfsio 54324 78026 0 0 3 0x14280 nfsidl nfsio 92547 33042 0 0 3 0x14280 nfsidl nfsio 58554 348339 0 0 3 0x14280 nfsidl nfsio 82575 88962 0 0 3 0x14280 nfsidl nfsio 89280 165472 0 0 3 0x14280 nfsidl nfsio 50979 179799 0 0 3 0x14280 nfsidl nfsio 53529 433308 0 0 3 0x14280 nfsidl nfsio 23791 366948 0 0 3 0x14280 nfsidl nfsio 55893 219563 0 0 3 0x14200 acct acct 65936 193995 30089 0 3 0x82 nanoslp syz-executor 64489 415588 30089 0 3 0x82 nanoslp syz-executor 44492 392853 30089 0 3 0x82 nanoslp syz-executor 41447 249708 30089 0 3 0x82 nanoslp syz-executor 45891 297263 30089 0 3 0x82 nanoslp syz-executor 49979 161393 30089 0 3 0x82 nanoslp syz-executor 75212 459668 30089 0 3 0x82 nanoslp syz-executor 30089 519915 96146 0 3 0x82 kqread syz-executor 96146 226679 32180 0 3 0x10008a sigsusp ksh 32180 257280 95897 0 3 0x98 kqread sshd-session 95897 224509 17167 0 3 0x92 kqread sshd-session 29338 514649 1 0 3 0x100083 ttyin getty 17167 291440 1 0 3 0x88 kqread sshd 52518 442101 52276 73 3 0x1100090 kqread syslogd 52276 276587 1 0 3 0x100082 sbwait syslogd 4792 288079 1 0 3 0x100080 kqread resolvd 9381 461937 62512 77 3 0x100092 kqread dhcpleased 6349 129950 62512 77 3 0x100092 kqread dhcpleased 62512 287665 1 0 3 0x80 kqread dhcpleased 91841 186329 0 0 3 0x14200 bored smr 39487 31477 0 0 2 0x14200 zerothread 86582 229879 0 0 3 0x14200 aiodoned aiodoned 74572 61613 0 0 3 0x14200 syncer update 7498 415931 0 0 3 0x14200 cleaner cleaner 97673 240645 0 0 3 0x14200 reaper reaper 89509 85027 0 0 3 0x14200 pgdaemon pagedaemon 63043 304897 0 0 3 0x14200 bored viomb 35680 312037 0 0 3 0x40014200 acpi0 acpi0 26068 261691 0 0 2 0x14200 softnet0 901 512523 0 0 3 0x14200 smrbar systqmp 10382 425902 0 0 3 0x14200 bored systq 78688 492900 0 0 3 0x40014200 tmoslp softclock 76474 21934 0 0 3 0x40014200 idle0 1 165581 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11049 12138K 12930K 166960K 12755 0 pcb 19 12K 12K 166960K 88 0 rtable 189 6K 8K 166960K 431 0 pf 28 12K 15K 166960K 48 0 ifaddr 35 6K 7K 166960K 58 0 ifgroup 46 2K 2K 166960K 74 0 sysctl 2 1K 9K 166960K 7 0 counters 32 17K 18K 166960K 45 0 ioctlops 0 0K 4K 166960K 148 0 iov 0 0K 12K 166960K 104 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1388 87K 88K 166960K 1784 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 6 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 24 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 422 0 sigio 0 0K 0K 166960K 104 0 proc 60 59K 108K 166960K 544 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 33 0 in_multi 77 5K 7K 166960K 118 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 11 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 437 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 227 151K 165K 166960K 5313 0 UVM aobj 7 2K 2K 166960K 7 0 pinsyscall 39 78K 96K 166960K 1516 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 15 0 NDP 10 0K 2K 166960K 36 0 temp 74 9076K 9332K 166960K 14753 0 kqueue 14 20K 26K 166960K 66 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 60 0 57 1 0 1 1 0 8 0 rtentry 136 130 0 50 4 0 4 4 0 8 0 unpcb 144 248 0 232 4 0 4 4 0 8 3 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpqe 32 1 0 1 1 0 1 1 0 8 1 tcpcb 736 229 0 223 7 0 7 7 0 8 6 arp 96 20 0 6 1 0 1 1 0 8 0 ipq 40 3 0 0 1 0 1 1 0 8 0 ipqe 40 6 0 1 1 0 1 1 0 8 0 inpcb 328 469 0 457 7 0 7 7 0 8 5 ip6q 72 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 112 31 0 11 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1072 8 0 8 1 0 1 1 0 8 1 pppxif 1384 1 0 1 1 0 1 1 0 8 1 pfstlim 224 1 0 0 1 0 1 1 0 8 0 pfrule 1360 1 0 1 1 0 1 1 0 8 1 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 548 0 184 29 0 29 29 0 8 5 art_table 40 549 0 184 5 0 5 5 0 8 0 art_node 32 129 0 56 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 3 1 0 1 1 0 8 1 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 22 0 12 1 0 1 1 0 8 0 shmpl 112 4 0 0 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 2121 0 666 92 0 92 92 0 8 0 ffsino 256 2121 0 666 92 0 92 92 0 8 0 nchpl 144 2668 0 974 64 0 64 64 0 8 0 rtmask 32 4 0 4 1 0 1 1 0 8 1 vnodes 216 2460 0 0 137 0 137 137 0 8 0 namei 1024 8536 0 8536 2 0 2 2 0 8 2 kstatmem 264 36 0 16 2 0 2 2 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 8599 0 8599 8 0 8 8 1 8 8 plimitpl 152 236 0 220 1 0 1 1 0 8 0 sigapl 424 718 0 654 8 0 8 8 0 8 0 knotepl 120 14146 0 14098 17 7 10 17 0 8 8 kqueuepl 184 126 0 116 3 0 3 3 0 8 2 pipepl 304 138 0 111 3 0 3 3 0 8 0 fdescpl 448 684 0 654 5 0 5 5 0 8 1 filepl 120 3590 0 3372 12 0 12 12 0 8 5 lockfpl 104 299 0 297 2 0 2 2 0 8 1 lockfspl 48 116 0 114 1 0 1 1 0 8 0 sessionpl 144 22 0 14 1 0 1 1 0 8 0 pgrppl 48 32 0 16 1 0 1 1 0 8 0 ucredpl 104 624 0 613 1 0 1 1 0 8 0 zombiepl 144 655 0 654 1 0 1 1 0 8 0 processpl 1152 718 0 654 5 0 5 5 0 8 0 procpl 664 1104 0 1031 7 0 7 7 0 8 0 sosppl 176 2 0 2 1 0 1 1 0 8 1 sockpl 552 790 0 758 8 0 8 8 0 8 5 mcl64k 65536 20 0 19 1 0 1 1 0 8 0 mcl16k 16384 4 0 4 1 0 1 1 0 8 1 mcl8k 8192 7 0 7 1 0 1 1 0 8 1 mcl4k 4096 2790 0 2732 14 0 14 14 0 8 6 mcl2k 2048 382 13 382 1 0 1 1 0 8 1 mtagpl 96 12 0 4 1 0 1 1 0 8 0 mbufpl 256 8474 0 8318 11 0 11 11 0 8 0 bufpl 280 2830 0 102 195 0 195 195 0 8 0 anonpl 24 116033 0 112873 32 0 32 32 0 187 10 amapchunkpl 152 16143 0 15652 27 0 27 27 0 158 7 amappl16 200 1881 0 1857 5 0 5 5 0 8 3 amappl15 192 21 0 21 1 0 1 1 0 8 1 amappl14 184 422 0 421 1 0 1 1 0 8 0 amappl13 176 113 0 103 1 0 1 1 0 8 0 amappl12 168 923 0 894 2 0 2 2 0 8 0 amappl11 160 1 0 1 1 0 1 1 0 8 1 amappl10 152 61 0 51 1 0 1 1 0 8 0 amappl9 144 255 0 255 1 0 1 1 0 8 1 amappl8 136 113 0 112 1 0 1 1 0 8 0 amappl7 128 141 0 130 1 0 1 1 0 8 0 amappl6 120 164 0 163 1 0 1 1 0 8 0 amappl5 112 111 0 104 1 0 1 1 0 8 0 amappl4 104 262 0 247 1 0 1 1 0 8 0 amappl3 96 3074 0 2958 4 0 4 4 0 8 1 amappl2 88 506 0 454 2 0 2 2 0 8 0 amappl1 80 10104 0 9538 13 0 13 13 0 8 0 amappl 88 4567 0 4403 5 0 5 5 0 92 1 uvmvnodes 80 105 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 254 0 254 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 6 0 0 1 0 1 1 0 8 0 uaddrrnd 24 684 0 654 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 684 0 654 1 0 1 1 0 8 0 vmmpekpl 168 6900 0 6865 2 0 2 2 0 8 0 vmmpepl 168 49696 0 47872 82 0 82 82 0 357 2 vmsppl 368 683 0 654 4 0 4 4 0 8 1 rwobjpl 40 15927 0 14965 11 0 11 11 0 8 0 pdppl 4096 1374 0 1308 98 32 66 82 0 8 0 pvpl 32 307126 0 298365 102 0 102 102 0 265 21 pmappl 216 683 0 654 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 367 0 32 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace mtx_enter(18) at mtx_enter+0x6e clockintr_unbind(ffff800001654630,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001605700) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff80003c908a90) at dtclose+0xd9 spec_close(ffff80003c8f95e0) at spec_close+0x466 VOP_CLOSE(fffffd806df4e1d0,1,fffffd8007ffd680,ffff80003c908a90) at VOP_CLOSE+0x129 vn_closefile(fffffd806d1842e0,ffff80003c908a90) at vn_closefile+0x11d fdrop(fffffd806d1842e0,ffff80003c908a90) at fdrop+0x121 closef(fffffd806d1842e0,ffff80003c908a90) at closef+0x190 fdfree(ffff80003c908a90) at fdfree+0x115 exit1(ffff80003c908a90,0,0,1) at exit1+0x576 sys_exit(ffff80003c908a90,ffff80003c8f9940,ffff80003c8f9890) at sys_exit+0x1a syscall(ffff80003c8f9940) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f4948767700, count: -14 ddb> machine ddbcpu 1 No such command ddb> trace mtx_enter(18) at mtx_enter+0x6e clockintr_unbind(ffff800001654630,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001605700) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff80003c908a90) at dtclose+0xd9 spec_close(ffff80003c8f95e0) at spec_close+0x466 VOP_CLOSE(fffffd806df4e1d0,1,fffffd8007ffd680,ffff80003c908a90) at VOP_CLOSE+0x129 vn_closefile(fffffd806d1842e0,ffff80003c908a90) at vn_closefile+0x11d fdrop(fffffd806d1842e0,ffff80003c908a90) at fdrop+0x121 closef(fffffd806d1842e0,ffff80003c908a90) at closef+0x190 fdfree(ffff80003c908a90) at fdfree+0x115 exit1(ffff80003c908a90,0,0,1) at exit1+0x576 sys_exit(ffff80003c908a90,ffff80003c8f9940,ffff80003c8f9890) at sys_exit+0x1a syscall(ffff80003c8f9940) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f4948767700, count: -14