last executing test programs: 6.483780395s ago: executing program 7 (id=1100): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb803500010800"]) pipe2(&(0x7f0000000000), 0x4) 6.479341138s ago: executing program 7 (id=1101): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000002c0)={0x3, &(0x7f0000000080)=[{0x1, 0xb, 0x4, 0xac}, {0x2, 0xb, 0x1, 0x4}, {0x6, 0xf0, 0x6, 0xfffffffe}]}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af6300372802", 0x62, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x18, 0x5, 0x0) r1 = dup2(r0, r0) r2 = socket$inet6(0x18, 0x4, 0x3) poll(&(0x7f00000000c0)=[{r0, 0x4}, {r1, 0x40}, {r2, 0x80}], 0x3, 0x5) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000780)="3bb8c80000000007dee5f7fd0206", 0xe}], 0x1) ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000740)={0x7a, 0x0, 0xfffffffc, 0xdd, "0000000400000000000000008000004000", 0x3, 0x800004}) getsockopt(r2, 0xac, 0xa, &(0x7f00000005c0)=""/118, &(0x7f0000000640)=0x76) sendto$unix(r0, &(0x7f0000000300)="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", 0x26a, 0x400, 0x0, 0x0) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000100)="b9a1a928b3b5c97e6190f5036825", 0xe}, {&(0x7f0000000140)="6a69db3162ff3e3077f69635f98f66845844858e9fcb7b3223dfa15e9ce993b6dac522616c0d6c137b48668ef0e756e0e6288469850e297b61fd8c5ce1bc1698e365709f9422dfc8f232c2225355af5860c81f50f6d03b35cb17b591ba3966564029be9af44d73", 0x67}, {&(0x7f00000001c0)="d81d27e991708ce286558e1049384885c3390c08b6a65346d0fcdf579e28b64dc2a1a59ef60cf7215dff6bc86161bf7177f00c635c6129ad6146b6ab5abeaee35e19be85d0d8e2ff2388290f3f7479ecae3af5da5c521a87e686a71b047ed51153cd78954cec840a64b6a93ebabe32e78aea3d73bb7594bbb9e70a0e63759f27621b7ee5ca905dceb6869918eedcdd50151e5302f0bfcebb0a481c2300106fd025178cc1a1ab8cbf23f519f404d54b69ee8e75c76ce77069cb8f6b5594afc4a67ed078681fe6ce", 0xc7}], 0x3, 0x9) 6.47457416s ago: executing program 4 (id=1103): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') pipe2(&(0x7f0000000280), 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x5c) chdir(&(0x7f0000000100)='./file0\x00') sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x3c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) r1 = socket(0x18, 0x3, 0x1) getsockopt(r1, 0x29, 0x24, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x8) mknod(&(0x7f0000000080)='./file0\x00', 0x2950, 0x13d4) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r2, 0x0) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') truncate(&(0x7f0000000080)='./file0\x00', 0x3) setuid(0xee01) clock_settime(0x100000000000000, 0x0) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='c\x00') ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xff, 0x5, 0x0, 0x5, 0xfffffffffffffffa, 0x1000000000000, 0x9, 0x0, 0x7ffffffd, 0x3, 0x0, 0x3, 0xffffffffffffffff, 0x4, 0x3, 0xa4, 0x7, 0xff], [0xfffffffffffffffc, 0x4, 0x59, 0xffffffff, 0x100, 0x7f99, 0x202, 0x4, 0xffffffffffffffff, 0x5], [0x100000001, 0x2, 0x4, 0x5, 0xfffffffffffffffb, 0x10fff, 0x2], [0xfffffffffffffffe, 0x20000000000, 0xc01, 0x100000000, 0xfffffeffffeffffe, 0x100000005], [{0x0, 0x20000007, 0xfffffffd, 0x5}, {0xfffc, 0x2, 0x200000c9, 0x2}, {0x400, 0x0, 0xfffffffe, 0x5}, {0x2, 0x5, 0x7, 0x9}, {0x10, 0x2, 0x0, 0x80b}, {0xfffe, 0x2003, 0x3fffe, 0x1ffffffffffffffd}, {0xbe, 0x0, 0x800000, 0x7}, {0xff7f, 0x7, 0x8, 0x4}], {0x2000, 0x7aae, 0x3fc, 0xb7f}, {0x0, 0x0, 0x73e8, 0x1}}}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000340)={0x200, 0x5, 0xffffdfa2, 0xffffff8a, "08ed909900006a49260da02948b06321f385ffe6", 0x4000000, 0x20008}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$unix(0x1, 0x5, 0x0) 6.284596736s ago: executing program 7 (id=1106): socket(0x18, 0x3, 0x0) (async) r0 = socket(0x18, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f00000006c0), 0x0) pwrite(0xffffffffffffffff, &(0x7f0000000080)="4f8e8bca7c5076cbbcba046bea103ccb80ecd9b7a7c70364c9ffa85239eb11766937405afd4c03a074c1256c0cd63e0e2376d39174c3134950a1414d6cc18ed8deb1601537951212953e0100ab5c8d6d9d2b9c720cb3d7525361b8269fcebba0cd2f42", 0xfffffffffffffcf1, 0x1) setsockopt(r0, 0x80000000, 0x3b, &(0x7f0000000040)="4bbf7e49c151eff3264e8d2a384b091bcaed5a8f5e058bcc13576f927736474f5b65b5565daa6dcc1ccaca6ad628487dc2d9e3cd81fc0872777c46b0634c132b915ba50713825ff87b38f78f7f8001186332f3097a44e9d1f756bc61ff15d1b43ea71b128c703591c4d83095a0429633000f1bafa73419586b5df949e5207aef4baa3b4369654327d6f7853ed851ae217cfe4b2b27f8e06204f4", 0x9a) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x6, 0x1000, 0x40008, 0x5, 0x18002, 0x10, [{0x40006, 0x2, 0xfffeffff, 0x200a24}, {0xc5c, 0x7fff, 0x3c00a34a, 0xffffdff9}, {0x800008, 0x20f89, 0x7d, 0x9}, {0xfffffff9, 0x800, 0x3, 0x6}, {0x4, 0x803, 0xfffffff7, 0x4d8d}, {0x1ff, 0x3, 0x3, 0xb0}, {0x8000008, 0x7, 0x81ec, 0x2d}, {0x2, 0xe, 0x17, 0x100002}, {0x2, 0x87e, 0x7ff, 0x3caf}, {0x4, 0x40000090, 0x6, 0x88}, {0x1c6, 0xd, 0x4, 0x101}, {0x10001, 0x6, 0x20004, 0xc}, {0xb8d, 0x1453, 0xa, 0x2c4}, {0x29a71720, 0x9, 0xd, 0x6}, {0x4, 0xb, 0xfffffff9, 0x6}, {0xfffffffe, 0x8, 0x1002, 0x1c}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0xffff, 0x0, 0xffffffffffffffff, 0x1, 0x800000000000108, 0x5, 0x7}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0xffff, 0x0, 0xffffffffffffffff, 0x1, 0x800000000000108, 0x5, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000003, 0x101, 0x80000001, 0x4, 0x10001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8000, 0x3}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x5, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0xfffd}, {0x6, 0x803, 0x8, 0x8}, {0x2, 0x5, 0x5, 0x9}, {0x6a72, 0x8009, 0x1000, 0x4}, {0x7, 0x10001, 0xb, 0x3}, {0x408, 0x5, 0x8, 0x6}, {0x80000000, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffd, 0x60, 0x6}, {0x1000c, 0x5, 0x9, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816affbc0608fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"]) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f0000000140)=r0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0x10000, 0x0, 0xffffffffffffffff, 0x1, 0x80000000000010c, 0x5, 0x7}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0x10000, 0x0, 0xffffffffffffffff, 0x1, 0x80000000000010c, 0x5, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) 6.059052846s ago: executing program 7 (id=1107): socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) fcntl$getown(r1, 0x5) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000000)=0xef000, 0x4) r2 = socket(0x11, 0x8000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x801) r3 = open(&(0x7f0000002280)='./file0\x00', 0x0, 0xa4) ioctl$TIOCFLUSH(r3, 0x80047476, &(0x7f0000000000)=0x1) bind(r2, &(0x7f0000000040)=@un=@file={0x1, './file0\x00'}, 0xa) socket$inet(0x2, 0x2, 0x9) syz_emit_ethernet(0x16, &(0x7f0000000140)={@remote, @random="8eb80d764ece", [{[{0x88a8, 0x3, 0x1, 0x2}], {0x8100, 0x5, 0x0, 0x9}}], {@generic={0x852b}}}) ftruncate(r3, 0x8) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x3}, 0x8) 6.058212883s ago: executing program 7 (id=1108): mknod(&(0x7f0000000280)='./file1\x00', 0x1000, 0x1e4f) (async) r0 = open(&(0x7f0000000100)='./file1/file0\x00', 0x890, 0x20) listen(0xffffffffffffffff, 0x1) (async) r1 = socket(0x18, 0x4001, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000300)={0x2, 0x1, 0x0, 0x40fffffffffffffe, 0xffffffffffffffff}) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getpeername$inet(r1, 0x0, &(0x7f0000000140)) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xb5219f1000b913f1, 0xec) sendto(r2, &(0x7f0000000000)="b6659d6e8116737242f38b0c213aeca3a638202623cfadc172016cd44b9a00000000ffffffff541fbd", 0x29, 0x6, &(0x7f0000000240)=@un=@file={0x1, './file1/file0\x00'}, 0x10) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"]) (async, rerun: 64) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0]) (async) close(r4) (async) r5 = socket(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f00000002c0)=@file={0x1, './file1/file0\x00'}, 0x1) (async, rerun: 32) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) (rerun: 32) r8 = semget(0x0, 0x1, 0x281) semctl$GETPID(r8, 0x3, 0x4, 0x0) (async, rerun: 64) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000000)={{0x7, r6, r7, r6, r7, 0x2, 0x1b5a}, 0xfffffffffffffff8, 0xf, 0x7}) (async, rerun: 64) semop(r8, &(0x7f0000000180)=[{0x2, 0x4, 0x1000}, {0x0, 0x8abd, 0x800}, {0x2, 0xe21c, 0x1000}, {0x0, 0x5a}], 0x4) (async) r9 = socket(0x2, 0x4001, 0x0) r10 = fcntl$dupfd(r9, 0x2, r9) close(r10) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x4b}, 0x2, 0x0, 0x0, &(0x7f0000000280), 0x0) (async) open(&(0x7f0000000080)='./file1\x00', 0x20, 0xb2) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) close(r0) 4.962535714s ago: executing program 4 (id=1111): mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6381) select(0x5b, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xe, 0x4, 0x2800000000000000, 0x181c, 0x8, 0x423f}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x100) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) accept(r0, &(0x7f0000000040)=@un=@abs, &(0x7f00000000c0)=0x8) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSRTIMEOUT(r0, 0xc0307004, &(0x7f0000000080)={0x2, 0x2000000f}) 4.782503804s ago: executing program 1 (id=1115): symlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00') setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) open$dir(&(0x7f00000001c0)='./file1\x00', 0x20000, 0x11f) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x3, 0x4, 0x8a38, 0x4000003, "07160a009cef01098b748200"}) r1 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff08ffffffffaaaaaaaaaabb86dd30"]) ioctl$FIONREAD(r1, 0x80206979, &(0x7f00000000c0)) 4.295550074s ago: executing program 7 (id=1125): r0 = syz_open_pts() mknod(&(0x7f00000000c0)='./bus\x00', 0x40, 0x4) r1 = open$dir(&(0x7f0000000300)='./bus/file0\x00', 0x67a02c12389933cb, 0x1a4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) sysctl$kern(&(0x7f0000000400)={0x1, 0x58}, 0x2, &(0x7f0000000480)="c049297144b6371afc7b8f40a1d20602d7838eff7fbc7ec0f643c47d4ccb535600a7d3388540ffd9a3f9f2e974a9818851a101868b7246c25dabde7d7c24296b29bfe32d47b53cd1898ed07c8f6fa735bdcacbc0acc8b846644579c7a959dc1a77fdf15f3d295fcd37fdaf338361aca7f48e9bb2c71f816f245c699b078ff1f9f8ae4ea4d7e2e6865ddb3b52bc471b9eb8db7b0bf40519b659af010caa0ec8afa1c9d9efcadee382f2e0972e", &(0x7f00000002c0)=0x4, 0x0, 0x1ea2e2aaf028a729) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) symlink(&(0x7f00000001c0)='./bus/file0\x00', &(0x7f0000000180)='./file0\x00') ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0xb, 0x0, 0x36}) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x2) execve(0x0, 0x0, 0x0) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x4f}, 0x4000000000000127, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00000d4000/0x2000)=nil, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x293, 0x0) fchdir(r4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) r6 = getuid() chown(&(0x7f0000000040)='./file0\x00', r6, 0xffffffffffffffff) syz_emit_ethernet(0x9e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd66e229450068f008fe8000000000000000000000000000aafe00000000ebffffffffffffff0000000601000000000000c204000000000101000000000000000464000000000000004e234e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="208000079078000401131210d5a36b14ec0241b881c811290807ad0303031312146d6922da4238a59e7ca3e6ce11e057080a00000040000000030001"]) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) setregid(r7, 0xffffffffffffffff) chown(&(0x7f0000000140)='./bus\x00', r6, r7) openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VMM_IOC_INTR(r3, 0x800c5606, &(0x7f0000000100)={0x78, 0x1, 0x4}) 4.278073946s ago: executing program 1 (id=1126): select(0x40, &(0x7f0000000180)={0x80000000, 0x44809e9d, 0xfffffffffbffffff, 0xfffffffefffffffd, 0x2000040000000002, 0x210, 0x9454, 0x9}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x1, 0x7f, 0x40000007}, {0x84, 0xc, 0xd5, 0x2ec6}, {0x6, 0x9, 0x1, 0xfffffff2}]}) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) r2 = kqueue() r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000002c0)={0x4, 0x400, 0x200, 0x3, "bdeb6bd90bf5f5cf5c34cba0e5dc5a9bfd07dc6e", 0x7, 0x5}) kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) writev(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000140)="5bcad69493", 0x5}], 0x1) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r5 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r5, 0xc0307004, &(0x7f0000000140)=0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x40, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r6, 0xc020697e, &(0x7f0000000100)) fsync(0xffffffffffffffff) r7 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) poll(&(0x7f00000000c0)=[{r7, 0xae98cd7e8d4e801f}], 0x1, 0x9) close(r7) 4.040931636s ago: executing program 4 (id=1129): close(0xffffffffffffffff) (async) r0 = semget$private(0x0, 0x2, 0x28c) semop(r0, &(0x7f0000000000), 0x0) (async) semctl$GETALL(r0, 0x0, 0x6, 0x0) (async) r1 = semget$private(0x0, 0x2, 0x0) (async) semop(r0, &(0x7f0000000100)=[{0x1, 0x3, 0x1000}], 0x1) (async) semop(r0, &(0x7f0000000180)=[{0x1, 0xffff, 0x800}, {0x2, 0xafaa, 0x800}], 0x2) (async) semop(r0, 0x0, 0x0) (async) r2 = semget$private(0x0, 0x2, 0x204) semctl$GETALL(r2, 0x0, 0x6, 0x0) (async) semget$private(0x0, 0x0, 0x585) (async) semctl$GETPID(r1, 0x3, 0x4, &(0x7f00000002c0)=""/2) socket$inet(0x2, 0xa4133976a0f827e7, 0x3) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, 0x0) open(0x0, 0x9cab835cfdc52675, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) socket(0x6, 0x5, 0x18) (async) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x80}, {0x0, 0x4}}, 0x0) getitimer(0x0, &(0x7f0000000380)) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) socket(0x18, 0x2, 0x0) (async) socket(0x800000018, 0x2, 0x0) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) (async) r3 = socket(0x2, 0x3, 0x0) close(r3) (async) r4 = socket(0x18, 0xc003, 0x3a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) sendmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="36a8dc93cbdfb9bc", 0x8}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x19}, 0xe) (async) socket(0x18, 0x3, 0x0) 4.039618774s ago: executing program 1 (id=1132): r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x7ffffffe, 0xf, 0x8001, 0x70d0b42b, "88b4e4d6a24bfdfffffffff4ff10235300", 0x1}) read(r1, &(0x7f0000000200)=""/255, 0xff) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000011c0)='\x00\x00\x00\x00', 0x4) 3.780667529s ago: executing program 1 (id=1133): syz_emit_ethernet(0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100000088a8"]) utimes(0x0, 0xffffffffffffffff) 3.775554246s ago: executing program 1 (id=1135): setuid(0xee01) r0 = socket$inet(0x2, 0x1, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = socket(0x18, 0x3, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) socket$unix(0x1, 0xef8b4ece82781e14, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x1, 0x4) sysctl$hw(&(0x7f00000000c0)={0x6, 0xc}, 0x2, 0x0, &(0x7f0000000080)=0xfffffffffffffecd, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000002c0), &(0x7f0000000080)=0x1a, 0x0, 0x0) ioctl$VMM_IOC_RUN(r2, 0xc0205602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) bind(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x18, 0x1, 0x9, 0x225}, 0xc) r3 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = syz_open_pts() ioctl$TIOCOUTQ(r4, 0x40047473, &(0x7f0000000180)=0x8) preadv(r1, &(0x7f0000000180)=[{0x0}], 0x1, 0xfff) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000040)) 3.774637263s ago: executing program 1 (id=1136): r0 = socket$inet(0x2, 0x2, 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) (async) close(r3) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 64) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r5}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) (async) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$WSMOUSEIO_SETMODE(r3, 0x80045726, &(0x7f0000000000)={0x1}) (async, rerun: 32) setsockopt$inet_opts(r6, 0x0, 0x1, 0x0, 0x0) (rerun: 32) 3.381833715s ago: executing program 4 (id=1142): socket(0x10, 0x8000, 0x5) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) close(0xffffffffffffffff) rename(&(0x7f0000000140)='./bus\x00', 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x5e07963dbfff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000180)=0xe09) write(r0, &(0x7f0000000100)="e8", 0xff25) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x84) madvise(&(0x7f0000c38000/0x10000)=nil, 0x10000, 0x2) r1 = syz_open_pts() ioctl$TIOCDRAIN(r1, 0x2000745e) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x6, 0x3}, {0x8000000000000000, 0x8000000000000000}}, 0x0) unveil(&(0x7f0000000400)='./file0\x00', &(0x7f0000000040)='c\x00') shmget$private(0x0, 0x2000, 0x10, &(0x7f0000a31000/0x2000)=nil) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x302) mlock(&(0x7f0000972000/0x2000)=nil, 0x2000) 3.37962575s ago: executing program 4 (id=1145): sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.048420822s ago: executing program 4 (id=1150): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) close(r3) (async) select(0x40, &(0x7f0000000080)={0x8, 0x3ff, 0x0, 0x7, 0x0, 0x1, 0x8000000000000000, 0x8}, &(0x7f0000000380)={0xffb, 0x0, 0x8, 0x0, 0x2, 0x4, 0x2}, 0x0, 0x0) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x100) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) 1.402776012s ago: executing program 6 (id=1195): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504406, &(0x7f0000000740)={0x1, 0x7, 0x3, 0x0, "97aa00", 0x2, 0x7ffbffe2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xcd504407, &(0x7f0000000740)={0xfffffff3, 0x3, 0x803, 0x800003, "7a0100000000000000000000e500", 0x1, 0x9}) 1.282283821s ago: executing program 6 (id=1197): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, 0xffffffffffffffff, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="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", 0xb1, 0x2, 0x0, 0xffffffffffffff3a) (async) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x26}, 0x2, &(0x7f0000000840)="02a7d1e8", &(0x7f0000000080)=0x4, &(0x7f0000000900), 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x5}, 0x2, &(0x7f0000000200)="011607cbfc46647e1b746c704a6acffecfa79dca442e282ac11012c9bb00055c710ba954fe6d807466ee0d4f98d79e2103a0d57280fc9878d885b0834e70200936c24a4bf3bd4d4553b4de0460f9f5989309830a3a2d857e2ff1410e7a2a77566029b6c2591ca56480cd089b30ff1d8742c0848ed63c67e970b90214287be612de0a65b04afd382f75d5a8220b0b15304077dd22812075fce87613b5e8229ee8c3caba6b3891c84784fe53f26fa1af2bff05ddb3dea5", &(0x7f0000000180)=0xb6, &(0x7f00000002c0)="05e38de509d56b33e9381368fada9014d35e1405446f00844ed8d998c14a02659b8f5cb04f0450f76e619e5350f164b252f149c09bc84ae911dbaa0852d5852c1a84881377542f2245bb57319503bd07c38840c64a04c009753204c3f1f89b89f3b4424e5e584aa92e5121561ed2b65c6638b732cecb623521f334db3c118537b09f28aa39ad0650eb0bf2cda81800", 0x8f) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4) r1 = socket(0x18, 0x2, 0x0) (async) execve(0x0, &(0x7f0000000380)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async) r2 = socket(0x1, 0x2, 0x0) (async) r3 = msgget$private(0x0, 0x200) msgrcv(r3, 0x0, 0x0, 0x1, 0x1000) (async) msgsnd(r3, &(0x7f00000002c0)={0x2}, 0x8, 0x0) msgsnd(r3, &(0x7f0000000a80)=ANY=[@ANYRESOCT], 0x401, 0x0) (async) msgsnd(r3, &(0x7f0000000040)={0x1, "ad273b553053fcbe95366c5b1159fc375df07146b4789dd767ff8b301f5c581c8b12c6f6a4e17a07adbb558fff62453e2d330e2e7e01893f579b056671a464232aa1d18766665e1cb1b536f9df155609118636c9d16e01f0f2660c58bdb81bbdf8ac4fccbde1f877cb7dec9ae14668b8a7dde38ddf736d"}, 0x7f, 0x0) syz_emit_ethernet(0x6d, &(0x7f00000003c0)=ANY=[@ANYBLOB="aa2aaaaaaaaaaaaaaaaaaaaa8010399622598f4e290c54310f236349321287b4f3400cd3f3431b4e5ee6ab77e4d2f2d61b51a962aecf357335266a50457ddcc09e6ae6afd197cb4787366a1f463fefe282e798313c3bf9c6e253fc472577e0d929944093e88fa0500aa59cbf7816e14f6b1d08"]) (async) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) poll(0x0, 0x0, 0x7) (async) ioctl$FIONREAD(r1, 0x802069de, &(0x7f00000001c0)) (async) r5 = syz_open_pts() ioctl$TIOCCDTR(r5, 0x20007478) (async) poll(&(0x7f0000000100)=[{r4, 0x10}, {r4, 0x1}, {r4, 0x2}, {r0, 0x1}, {r5, 0x4}, {r2, 0x4}, {r4, 0x1}], 0x7, 0x3) (async) sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) 1.278056818s ago: executing program 3 (id=1199): open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x44) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[]) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x44) (async) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[]) (async) 1.079591795s ago: executing program 3 (id=1201): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = kqueue() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x1, 0x7f, 0x40000007}, {0x84, 0xc, 0xd5, 0x2ec6}, {0x6, 0x9, 0x1, 0xfffffff2}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="500459eabc08dbe48a395f71bfffc0de47baa7529e3e807447f80b78a5000000000000c967ec98df1eae34b1", &(0x7f0000000000)=0x2c, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r2, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) (async) kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x7fff, 0x3, 0x9, 0x0, 0x5, 0xd87, 0x41, 0x1, 0x0, 0x100000000642, 0xffffffff}) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) r4 = open(&(0x7f0000000280)='./file0\x00', 0x80, 0x3cc) sysctl$hw(&(0x7f0000000080)={0x6, 0x3}, 0x2, &(0x7f00000002c0)="a1591e50bfd55e87aec3c132b17395b2818fcef77a39226570e1e033c6f8a9181a8c71010587fa93620e4657e3b0abdfef8a432ab6c2d44990f5b2434ad6c0bc06cb134ae4a816a1729688b77dff740aeca5c265ec4a8eaf3b051a2254925badbe35b402656938a61952e85424cb06ce92db576619e94bf0b6c8cbe8af48f033aca51205e494382db8dd6d6047e625a96b0e7f3dc99b2ec141a5f9fe5026d33f314189c8780c08ef8caed4feb1508ee1765ffad64f8610818aa52ba410bb0e7953bd07eefbffaaf639e19cdb2280b912bee0b2e5d7649fdfb2e2482180a506821d6171fbb743", &(0x7f0000000240)=0xe6, &(0x7f0000000480)="1ac649e5406da6811eb87cdb01076a9fbb9186e4235d6f88159715fb2a9572566c3aae04f027bbd1324913278fce89608768c41233ab2176793dc99970b0f5a866bc5ad0980b754801db5b68cf0bc74f210348c303cd2610aba0cd4c1bf4cc4628a391135d35cfb80c4ab84ae3ecd5df709b0acb9940c4655586b11e85a995a7842bf07fb34e912b63d08cdb083548e173c4a5034fabb932933d8f4359da8594010a8abf066b8baa07efc08b26750a3cf03d63232b709cefec2b491210f0e7df146760e6de4b2cdc30943737f758b7648bf2b07cfd15ceaac78bd06acaf332181a9f6333", 0xe4) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0xb, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x7, 0x4, 0x9, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0x10, 0x3}, {0x7, 0xfffffffb, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0x1, 0x2, 0x6d}, {0x2000a, 0x806, 0x14, 0x4}, {0x3, 0x81, 0x1, 0x4000009}, {0x3ff, 0x8001, 0xc7, 0x10087}, {0x4, 0x5, 0x9, 0x10aeb}, {0x803, 0x40, 0x1, 0x5}, {0xe0, 0x4, 0x5, 0x403}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x800004, 0x9, 0xfff}, {0x0, 0x5, 0x4, 0x81}]}) (async) writev(r0, &(0x7f0000000400)=[{&(0x7f00000003c0)="eb2ec8f37bdcabfdb2d480dc2921c6cef4f2208b58d1477cb3a540c6ebc20f13436f65f6355c10385fe5d99791751a8fecb3", 0x32}], 0x1) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000300)={0x1, 0x46}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) (async) close(r4) sysctl$kern(&(0x7f0000000580)={0x1, 0x12}, 0x2, &(0x7f00000005c0)="17d192af9712210e9f7e1bcf935ccfbfd483f68a76db4a249998cdda022d69", &(0x7f0000000640)=0x1f, &(0x7f0000000680)="438e39567551e23f35fd5d4a00638deacf37d74ce14a7c0d379ef5ec97d72d990b92f36d3dd82d17155f55d975d8c14cf6020169fabb949d80e1df96fd70de11ab9fb9b0bdb74b90f12611e1741b5a80bcfe00cae7536730f56a22fad7f565969b07ff80db4c538070b0e8", 0x6b) 1.078051875s ago: executing program 6 (id=1203): getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x120, 0x3}, 0x55, 0x5, 0x0, r0, 0x3fffffffff, 0x2, 0x40000000000, 0xffff}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x3, 0x4) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f00007aa000/0x4000)=nil, 0x4000, 0x4, 0x812, r2, 0x2) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, &(0x7f0000000340)="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", 0x7c1) 991.190008ms ago: executing program 3 (id=1205): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x7, 0x208}, {0x50, 0xf, 0x8, 0x5}, {0x16, 0x80, 0x7}]}) dup(r0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="7fb4ce", 0x3}], 0x1) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000)=0x45, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000340)={0x5, &(0x7f0000000300)=[{0x0, 0x5, 0xfb, 0x6}, {0x3, 0xf, 0xcb, 0x3}, {0x35a, 0x8, 0xc, 0xcf76}, {0xe9, 0x40, 0xb, 0x9}, {0x3ff, 0x81, 0xee, 0x6}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) sysctl$hw(&(0x7f0000000100)={0x6, 0xb}, 0x2, &(0x7f0000000140)="a340a08b2dfeb5df4299a5c467a1d7f4bff5f2fa0882f97852b5a8e7efb4468ea22057acbffa0fe1b4b2599247726559cc19b46b87c758aa36b1653767c929ddad39", &(0x7f00000001c0)=0x42, &(0x7f0000000200)="12c0ccd8394441716a7ac929c63595424d2ec25ea138ebcf1295e17a30beb0c6346f6e168b41905620967c594c6361090d691db1912491af74e791b4c2bb2b95c38664e5ff50ff6ec258455d5a8d115e35a98f6503998d0013830473b7ca2b9fc9318275f4d892be3df50e75641b02972335fcea34642d31c6852f4cc710bfde7fb6299033cffdfad2b859002bd958d9c11e369966bf03c7363ad76ac11638804e9c6a161bbc3b868a83cffe9c3a753ca6e6f953bba491e77050c35b99117e2726734d36d71890b76434ac5bae02cbac57", 0xd1) mprotect(&(0x7f00002b4000/0x2000)=nil, 0x2000, 0x4) 990.630194ms ago: executing program 3 (id=1206): ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3}) (async) setuid(0xffffffffffffffff) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async) r0 = socket(0x1, 0x2, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaa9a20aaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffffffff070b1eac1400aa7f000001000e00907800940b0008000003fc0000000009000000"]) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x18}, 0x409) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x801) (async) r3 = open(&(0x7f0000002280)='./file0\x00', 0x0, 0xa4) ioctl$TIOCFLUSH(r3, 0x80047476, &(0x7f0000000000)=0x1) (async) setrlimit(0x6, &(0x7f0000000100)={0xffff, 0x65}) (async) close(0xffffffffffffffff) (async) r4 = syz_open_pts() ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000340)={0x7, 0x5, 0x77, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x8}) (async) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) (async) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1) (async) fchflags(r3, 0x80000) ioctl$FIONREAD(0xffffffffffffffff, 0x80206979, &(0x7f0000000000)) (async) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r6 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r6, 0x8020690c, &(0x7f00000001c0)) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r7 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r7, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) (async) mknodat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0xc0e99db6de761f86, 0x0) 977.535682ms ago: executing program 6 (id=1208): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x277, &(0x7f0000001040)=ANY=[@ANYBLOB="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"]) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x2, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@dest_unreach={0x3, 0x2, 0x0, 0x0, 0x46, 0x9, {0xc, 0x4, 0x1, 0x2e, 0x40, 0x66, 0xff, 0xa, 0x2b, 0x2, @remote={0xac, 0x14, 0x0}, @multicast2, {[@noop, @noop, @generic={0x0, 0x7, "f32bd9ce19"}, @ssrr={0x89, 0x3, 0x3a}, @rr={0x7, 0x3, 0xa2}, @lsrr={0x83, 0x7, 0xf, [@remote={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0x3, 0x89}]}}}}}}}) r1 = accept$unix(r0, &(0x7f0000001780)=@file={0x0, ""/4103}, &(0x7f0000000040)=0x1009) bind$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x0}, 0x8) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000640)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x100000001}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000000940)='./file0\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$inet(0x2, 0x4003, 0x0) getsockname$inet(r4, &(0x7f0000000080), &(0x7f00000001c0)=0xc) mkdir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x2012, r5, 0x0) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001540)="9b0209c3eb987ab7fe4189c99e805e6e84d356960798a69242e3303eac3846528d050712f838130efce33f523ba44706983a3bce4ed2c723e4c005d86d65f5f6915b0227390ed95bd9dc6d4dc7e149d4d6d06a3f23616e773302d9cae75e39a5a11e32e0e6ebd635450b2eba540af7f2aa5dbfbdd900a0dad2b74fd0acd76b5c567049ef436dbea0d7562f52950fa5ef6e84c513252ddd8680a944d5c2bd02adc7f1fe850c00000000000000062ab475cca257352828a76e5334be562995e894238b96ca5d4d3e670feac9b4e8aa9bef19525cb6f7e8570b2a374f1400041ed45bb7ad3fe963cb9a8bd949ee0fc6dbceb7d956015947b3e88aa810f8ed7cca10ff010000000000001345daa49507756f49775275ca390b94e85d5a95b8bdacb9429c25483a9275d0da3b561c6adc3c141f26a88016dd6b436218bdbdc9ac0a623855e941dc1872fcb045e0d9df1ecc6357ee21e2b0802cb60eec6add5e94723235f06715e7eecc3e0760c70e1dd7873e27142bbae1a7e44de453a073fe3426f334b80f043ba9136d57c799353d46dd81439b111a511a288bee5dfb2e353e3bb073e3342273216b07e49ca4df0fd2dbe9a8eb377010ee678aad0bd8e9fb7d82693a096344671843a1f20823d0bef9177103145eb54a2612b0ff237c6e505ff5f5ba932954d7ff630fdb791f833a1da5af0704f687e196f4f7859e071fc98111cc9024f790ce16ceaa7d0104e39789d910", &(0x7f00000002c0)=0x210, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r6 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd6, 0x8, 0x80000001, 0x17ffe, 0x10, [{0x9, 0x9, 0x4, 0xa24}, {0x45c, 0xb, 0x8, 0xfffffff9}, {0x80000c, 0x20f05, 0x10000200, 0x9}, {0x7ffffffe, 0x800, 0x3, 0x1}, {0x3fe, 0x7ff, 0x1002802, 0x4d86}, {0x3, 0x2, 0x3, 0xb4}, {0x8000008, 0x600, 0x81ec}, {0x2, 0x836, 0x17, 0x8}, {0x2, 0x87e, 0x101, 0x9}, {0x1000004, 0x90, 0x80000d1b, 0x88}, {0x1c7, 0x5, 0x4, 0x412c8391}, {0x3, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x4, 0x8, 0x2}, {0x29a71720, 0xffffdffa, 0x3ff, 0x6}, {0x2, 0x7, 0xfffffff9, 0x108}, {0x0, 0x4, 0x1002, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x5}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8000}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000005b000/0x4000)=nil, 0x3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffe}, {&(0x7f0000b13000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xffffffffffffdffe}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil, 0x8}, {&(0x7f0000795000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x3c}, {&(0x7f0000ed3000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x81}) 880.477044ms ago: executing program 6 (id=1210): mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) mknod(0x0, 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, 0x0) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) open(&(0x7f0000000280)='./bus\x00', 0x690, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x10) ioctl$TIOCGFLAGS(r1, 0x4004745d, &(0x7f0000000100)) 790.912515ms ago: executing program 0 (id=1215): r0 = socket$unix(0x1, 0x5, 0x0) r1 = getpid() setpgid(0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000003ac0)=0x3) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x7, 0xffffffff, r1, 0x0, 0x0, 0x0, 0x8}) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x1ff, 0x2000000000000004}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r5 = fcntl$getown(r3, 0x5) r6 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r7 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r6, 0x80206997, &(0x7f0000000100)) fcntl$setown(r0, 0x6, r5) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) sendto$inet(r4, &(0x7f0000000140)="8dae4ec04c28136a67bae483f7b4fdab90cc65f04b661452dbf670f059cf88f230d85be71374eb1abbf8eda89654dcb1406645a2b825275475b82be74872b5d311ead6bce2aa2cd87da8909d1cbc2b0118e802f8501eb3527e25840dd516160de9a408b8", 0x64, 0x2, &(0x7f0000000080)={0x2, 0x3}, 0xc) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r3, 0x800c5709, &(0x7f0000000040)={0x6, 0x0, 0x2}) r8 = socket$unix(0x1, 0x5, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 530.724679ms ago: executing program 5 (id=1216): openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8", 0x6}], 0x1, 0x0) r2 = syz_open_pts() ioctl$FIOASYNC(0xffffffffffffffff, 0xc0107002, &(0x7f00000000c0)) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r3 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000000080)={0x0}, 0x6a, 0x0) 530.28358ms ago: executing program 2 (id=1217): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) ioctl$TIOCSTOP(r0, 0x2000746f) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0000bb0840450000280066006268bca3d5a1162ef7b71497cf95cc722738eee78a8fd0f4ebe35f17bb575665e944e0ef03000000d589421a4c128500000000", @ANYRES64, @ANYRES32=0x41424344, @ANYRESDEC=r0]) 389.754842ms ago: executing program 6 (id=1218): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCPROMISC(r0, 0x20004269) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() writev(r3, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x5a9d, [{&(0x7f0000462000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000738000/0x4000)=nil, 0x0, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00002fc000/0x4000)=nil, 0x5}, {&(0x7f0000410000/0x4000)=nil, 0x0, 0xe04}, {&(0x7f000011a000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x37ed}, {&(0x7f0000028000/0x3000)=nil, &(0x7f0000826000/0x1000)=nil, 0x5}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000066000/0x3000)=nil, 0x3ffffffffffff}, {&(0x7f0000491000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x240000001}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x5}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil}, {0x0, &(0x7f000028b000/0x4000)=nil, 0x7}], './file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000280)="10dd31254ddf9b0e611d981251419d9afcbb77acd782c9c73c321b82a16002bdf064827e47d6892dde69c33a406da4459ba6c1bf4f19bddea109620fa51f74da1258ce87884255f81f0fe9c32920ae7788cb61dfaeffe0dd1971421d9cb5b16a0ebb74fa9e6113cbe5d0abf10f", 0x6d}], 0x1) chflagsat(r4, &(0x7f0000000240)='./file0\x00', 0x10000, 0x0) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x2, 0x0, 0x5, 0xca27, "f52d5c5d46532ba87beddb48a49c580ace0f6a52", 0x2, 0x7}) readv(r2, &(0x7f0000000180)=[{0x0}], 0x1) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000200)) ioctl$TIOCSTAT(r3, 0x20007465, 0x0) dup2(r1, r0) 389.481388ms ago: executing program 0 (id=1219): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) sysctl$kern(&(0x7f00000000c0)={0x1, 0x1c}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x1c}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) (async) 389.066289ms ago: executing program 5 (id=1220): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setgid(0x0) r1 = socket(0x2, 0x2, 0x0) getsockopt$sock_int(r1, 0xffff, 0x200, &(0x7f0000001580), &(0x7f00000015c0)=0x4) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000180)=[{0x1, 0x82, 0x24}, {0x35, 0x1, 0x1, 0x400}, {0x400e, 0x4, 0x53, 0xd}, {0x70ae, 0xf8, 0x0, 0x4}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[]) r3 = getpgrp() r4 = getuid() ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0xce, 0x7e, 0x40000007}, {0x30, 0x7, 0xff, 0x9}, {0x6, 0x6, 0xff, 0xfffffff2}]}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, 0x0}) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000300)="00231b000f400095043f0080000000001f00385c046200000817c5750008007a", &(0x7f0000000000)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r5, &(0x7f0000000200)="d81ad30100000000000100000000", 0xe) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) fchown(r0, r4, r6) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x20, 0x0) ioctl$TIOCSETA(r7, 0xc4504449, &(0x7f0000000740)={0x3, 0x80000001, 0x0, 0xfffffffe, "97a2224ff1c14649ebb1786b47c1c200", 0x1000, 0x8}) setsockopt$sock_timeval(r7, 0xffff, 0x1006, &(0x7f00000001c0)={0xf, 0x3}, 0x10) fcntl$setown(r0, 0x6, r3) fcntl$setown(r0, 0x6, r3) 388.798135ms ago: executing program 2 (id=1221): setuid(0xee01) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x7fff, 0x7, 0xd5, "00000000000000000000001500", 0x3, 0x1}) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0xf, 0x80000001, 0x7, 0xd7, "00000100000000000000908b7f7f00", 0x3, 0x3}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r2, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) close(r1) r3 = socket$inet(0x2, 0x1, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x10}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) r4 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x2005}) r5 = socket$inet(0x2, 0x1, 0x0) ioctl$FIONREAD(r5, 0x80206979, &(0x7f0000000100)) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f00000000c0)=0xffffffff) sysctl$kern(&(0x7f0000000200)={0x1, 0x5}, 0x2, &(0x7f00000011c0)="71f90900", &(0x7f0000000000)=0x4, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x11}, 0x2, &(0x7f0000000140)="ec6d773ff594f26b6945ef874efda0a2d11b2afa233e24168c188231e75e1a4109fdafdbc507fe151a951810ad6b8dfcd2be6723a886ce8da59f586ee5fc8e7dfd1bf04dfe6868675c9cb8a071613f9b6c513cc984a49b72a1eaaa83eb395ab7173da050e6ee121e3ac53f01d9d19c4ff98cefb8a52d348f2bd411955902dcc97805ab7b0c6f02519941594399b4c2b60661a7e638ac", &(0x7f0000000080)=0x96, &(0x7f0000000240)="e1525ed719b3db0a38b4b10d44dd6c7fcfc88f14212564d7f8520fd7fcc12f192495a21357af476520c6af22a660d3d484f68262066f19ba2317451bc18727254070958658da02c62557ea7eeb23b1144760c90858253837b11c7c53810e4200a88d1c34918d772d70df8f005494", 0x6e) 253.053966ms ago: executing program 0 (id=1222): r0 = socket(0x18, 0x2, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) setuid(0xee01) r1 = socket(0x1, 0x2, 0x0) setuid(0xee01) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x1, 0x0) bind(r2, &(0x7f0000000000), 0x10) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSETA(r3, 0xc0284457, &(0x7f0000000140)={0xbffffffe, 0x5, 0x3, 0x1000, "080000400006000000010000f0ff0f00", 0x20004917, 0x700b}) ioctl$LIOCSFD(r3, 0x80046c7f, &(0x7f0000000080)=r0) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffffffff070b1eac1400aa7f9078000b0008000003fc000000040000000900000000000034edb7621dba10447dcfd7ffec9b6dad1a590eb31dac46d80f654fa29766bc67ac992bd91f8f565bee3d94f38b7931ca9e5120423f529bb0b0f90754c7de15f542953922aa824a117f51b314afa0c30cd8496261e9cc9d0f0454df3b"]) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) chmod(&(0x7f0000000180)='./file0\x00', 0x27f) setuid(0xee01) r4 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r4) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONREAD(r0, 0x8020697f, &(0x7f00000001c0)) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$FIOASYNC(r6, 0xc0107005, &(0x7f00000000c0)=0x1f00) utimensat(r6, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={{0x5, 0xed}, {0xc, 0x8}}, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) 252.677712ms ago: executing program 2 (id=1223): socket(0x2, 0x5, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x48) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000002740)='./file0\x00', 0x8000, 0x1f6) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x3, 0x5fe, 0x80000004, 0x80000003, 0x10001, 0x10, [{0x6, 0x7, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0x8001}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x804, 0x8007}, {0x401, 0x200726, 0x2800, 0x3}, {0x2, 0x40006, 0xffffffff, 0x99}, {0xce1, 0xffffffff, 0x4, 0x2000006d}, {0x2, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x88}, {0x1ce, 0x4, 0x406, 0x3}, {0x7ff, 0xb, 0x5, 0x9}, {0x400, 0x4, 0x40000008, 0x4}, {0x29a71717, 0xfffefff8, 0x1, 0x6}, {0xc, 0x7, 0x5, 0x1}, {0x0, 0x1, 0x1002, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x2, 0x0, &(0x7f0000000100), 0x0, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000008, 0x103, 0x80800001, 0x10081b0, 0x10001, 0x10, [{0x0, 0x2893, 0x4, 0x71002}, {0x7fffffff, 0x9, 0x6, 0xfffffff9}, {0x104, 0xf88, 0x3, 0xa}, {0x4, 0x800, 0x0, 0x7}, {0x401, 0x3, 0x2802, 0x7}, {0x21, 0x650, 0x3, 0x99}, {0xce1, 0xfffffffb, 0x4f8, 0x6d}, {0x2, 0x803, 0x14, 0x8}, {0x2, 0x6, 0x5, 0x5}, {0x6a76, 0x8001, 0x9, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x9, 0x0, 0x1}, {0x29a71716, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x1, 0x10010000}, {0x4, 0x1, 0xfff, 0x2}]}) r2 = open(&(0x7f0000002740)='./file0\x00', 0x8000, 0x1f6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) clock_getres(0x0, &(0x7f00000000c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffe01, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) ioctl$VNDIOCSET(r3, 0x40086475, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCSHDRCMPLT(r0, 0x80044275, &(0x7f0000000000)=0xa) 251.948079ms ago: executing program 0 (id=1224): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x2000000, 0x1000302010008, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db"]) unveil(0x0, &(0x7f00000000c0)='x\x00') ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7f, 0x40000009}, {0x28, 0xf, 0x3, 0x4006}, {0x16, 0x9, 0x1, 0xfffffff2}]}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x34, 0xf4, 0x47, 0xc548}]}) ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000480)={0x9, 0x8, {[0x4, 0x8000, 0x6, 0xd8, 0x3, 0x7fffffff, 0x8, 0x65, 0x4, 0x4, 0x100000000, 0x7fffffffffffffff, 0x7, 0xf, 0x9, 0x0, 0x4, 0xd], [0x3, 0x28dc, 0x80000000, 0x1, 0x10, 0x40, 0x1000, 0xf, 0xfffffffffffffff7, 0x1000], [0x7, 0x6e, 0x800, 0x4, 0xe0, 0x1], [0x7, 0x6b, 0x3ff, 0x0, 0x80000000, 0x3], [{0x8001, 0x6, 0xcc, 0xd}, {0x3, 0x5860, 0xff, 0x3}, {0x4e6e, 0xecc, 0x3, 0xb33b}, {0xe, 0xfff, 0xa, 0x3}, {0x9, 0xb3d, 0x2, 0x8fd}, {0x3ff, 0x46, 0x19, 0x1}, {0x8, 0x9, 0x10000, 0x401}, {0x4, 0xfffffff9, 0x4, 0xf78}], {0x81, 0x6, 0x1, 0x9}, {0x9, 0x7, 0xe, 0x9795}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) 251.767929ms ago: executing program 5 (id=1225): openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80080000000, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x1, 0x200023}) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x5e) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fsync(r1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) close(r3) write(r2, 0x0, 0x0) 146.669694ms ago: executing program 5 (id=1226): open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0xc0) setpgid(0x0, 0x0) r1 = getppid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0x0, r1, 0x0, 0x16ef97e0, 0x0, 0x400000002, 0x4}) r2 = getppid() setpgid(0x0, r2) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r3, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r4 = fcntl$getown(r3, 0x5) setuid(0xffffffffffffffff) fcntl$setown(r0, 0x6, r4) close(r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) writev(r5, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) 146.3378ms ago: executing program 0 (id=1227): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000140)=[0x7, 0x43cd, 0x8]) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x8) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') setuid(0xffffffffffffffff) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000040)='./file0/file0/../file0\x00', 0x3bd, &(0x7f0000000080)='./file0\x00', 0x8}) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') 144.897945ms ago: executing program 5 (id=1228): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1a7, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0x2, 0xb}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) syz_open_pts() 143.84251ms ago: executing program 3 (id=1229): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x200000001, 0x80000000000000c, 0x4, 0x7}) (async) r0 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000280)=0x8cf04, 0x3a) (async) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x37, 0x0, @empty, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c32e", 0x6, 0x6, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}}}}) 140.419018ms ago: executing program 2 (id=1230): setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d372586474f1) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETIF(r0, 0x40384900, 0x0) close(r0) r1 = syz_open_pts() mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) stat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffe) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400400000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x3, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d06}, {0xfffc, 0x4, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x3, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xdb78}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000480)="b1000503000004000000000007000000331c13fecea10500fef96ec0300100007ae30200004e3039d2d236acf20b7810be38164991f7c8cf5f882b29ffffff7f000000510100ad090000006c0000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8063076000000000000000004bfba353e537e2ba37f50b609f4f707e37183f834371205d1a7f1c057aa1a3300", 0xb1, 0x40c, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000000), 0x29f, 0x0, 0x8001, 0x0) close(r1) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d372586474f1) (async) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x40384900, 0x0) (async) close(r0) (async) syz_open_pts() (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) (async) stat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffe) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400400000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x3, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d06}, {0xfffc, 0x4, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x3, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xdb78}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) (async) socket(0x11, 0x3, 0x0) (async) sendto$unix(r2, &(0x7f0000000480)="b1000503000004000000000007000000331c13fecea10500fef96ec0300100007ae30200004e3039d2d236acf20b7810be38164991f7c8cf5f882b29ffffff7f000000510100ad090000006c0000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8063076000000000000000004bfba353e537e2ba37f50b609f4f707e37183f834371205d1a7f1c057aa1a3300", 0xb1, 0x40c, 0x0, 0x0) (async) kqueue() (async) kevent(r3, &(0x7f0000000000), 0x29f, 0x0, 0x8001, 0x0) (async) close(r1) (async) 3.73349ms ago: executing program 0 (id=1231): sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x3, &(0x7f0000000180)="3bf2925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a7622c5788f7a4af1ce34c908cb8c57d076fb138c3b9bd02fb94adfa5ce78730d11c294f53adf325dffdebeba8dde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951d16adff26aa2e48b4", &(0x7f0000000080)=0xa0, &(0x7f0000000240)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa30200000042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe97b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba300000000000000014557f61ad238a7317e73650b8b125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98606e472b70b560f7021f567adf4d", 0xfffffffffffffe9d) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff00"}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, &(0x7f0000000100)='q', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000140), 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000143000/0x3000)=nil, 0x3000, 0x4, 0x810, r0, 0x8) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60000037001800000000000000000000010000000000000000000000080008002b1a0000000000042c000000000000002b000007fffffffe06004e"]) 3.374986ms ago: executing program 2 (id=1232): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) socket(0x11, 0x3, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000440)={@local, @random="d09b049f6b63", [], {@ipv6={0x86dd, {0x0, 0x6, "36d2b5", 0x30, 0x3a, 0xf9, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "5f7f00", 0x0, 0x2c, 0x0, @loopback, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}}) sysctl$net_inet_ip(&(0x7f0000000cc0)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="71f91e3471ac0058bc5a91501d94a34b8e5ff49ead69c9b3b32c84f8d320018983cea251ec000050c127dcdfdf5b16134f032c75405a000048044f2c0495f1496131b46051a74f58c9fcbec9fd0312aa24f63eb91489a05c8c796b67310f648b950e7e7ca075ed83ed454a949c585f359084bd96d93a33c830e1124227ed69ab8942a9ab7ed9ce964bd8447ba799bb22e1b3fec93d9bf8692c2f819943cbfdb5e8b1c8c4046da548cfdefae14f2154da26b3eafb169f6e0ccd457ddb226fa2d32ba256e0665cc352e68df80adfab9b1985cec93f6381aa50d00daa16c6976515ca14d6b4fd58fd11092e94f3b825698cf8bc525cece76ecab6354a387584da10c70a", 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r2 = syz_open_pts() syz_emit_ethernet(0x32, &(0x7f00000000c0)={@broadcast, @remote, [{[{0x88a8, 0x7, 0x1, 0x4}], {0x8100, 0x2, 0x0, 0x4}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @broadcast, @rand_addr=0x6, @remote, @remote={0xac, 0x14, 0x0}}}}}) close(r2) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x7, 0x8, 0xfffffff8, 0xfffffff6, "0000209c0000f000000a00", 0x1009, 0x12}) writev(r3, &(0x7f0000001000)=[{&(0x7f0000001040)="b7e02e6d5b71a2518bfb1397bee5e5d02a7e748e2802e41559c09dd4d4efd4125dad2d074f8804d96906c64b3601b425451ec7dab28d4463d29af54cf5311f6655725067b56a1c1bc10339134c1afc1e2de2b11bb87d1e190a", 0x59}], 0x1) syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x9) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x4, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6, 0x0, 0x3], [0x100000001, 0x8000, 0x8, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x8, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000380)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0xfffc, 0x0, 0x0, 0x84, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}}}}}) r4 = kqueue() kevent(r4, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 1.928698ms ago: executing program 3 (id=1233): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x55, 0x1008, 0x0, 0x0, 0x0, 0x2, 0x3fffffffffe, 0x3}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async) sendmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10}, 0x400) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1005, &(0x7f0000000080)={0x8001, 0x7fd}, 0x10) (async) r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000000), 0x23) (async) semctl$IPC_RMID(r0, 0x0, 0x0) (async) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000280)=ANY=[@ANYBLOB="ff08ffffffffaaaaaaaaaabb86dd60006f3300383a008a211dd10001000000000000de74f8ffffffffffffff008bcf000000000000aa02009078000000006000004000003a01c7e585a06a0902fb00000500000000aa00000000000000000000ffff0f1ab5678f"]) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x1, 0x100) (async) r4 = syz_open_pts() flock(r4, 0x3) fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) close(r4) (async) r5 = syz_open_pts() fcntl$lock(r5, 0x9, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff, 0x1000300000000}) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) r6 = fcntl$dupfd(r5, 0xa, r2) close(r6) (async) syz_open_pts() (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x70, 0x1}, 0x4, &(0x7f0000000300)="9a4cd6267812bc52979467b56a5692a2bf9a71677553bda84654e2fbcd50f042176606436461f66f7369a991c13283f8ddecca6897a718ed988595d1f2c57a735e75eefc4542f26db523f46a415674678c2028c886663878b4d0bb0b606d15de6aa4dc9fcbf1de544c00b6742f6e88bddb24b957e3c59301728e4e9d9a9f7d68980d53b54814a7c88d80a3ed2605158f080c69f014ad", &(0x7f0000000080)=0x96, &(0x7f0000000100)="94e114ba2781783ddc91da2f4b125ec0e43a38050ccf92f1f2befcf543c8e1ca5bd2ee7682d8b8abd54633a1b7c30022b31bfbbed85d82bcd735a5a31a02253115f91ace6ce98ea37311ae91dc01e285c925baaf1c1904505b7f5e2a221d", 0x5e) (async) close(r3) 1.217769ms ago: executing program 5 (id=1234): sysctl$hw(&(0x7f0000000040)={0x7, 0x14}, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffdf) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONREAD(r0, 0x40047309, &(0x7f00000001c0)) 0s ago: executing program 2 (id=1235): r0 = syz_open_pts() openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0xf, 0xfe, 0x9}, {0x6, 0x6, 0x1, 0xfffffff2}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="fd580f000000004bfc183f8a22ab29d91e6e7c43b06300000040000000", 0x1d}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000100)="050000003b12a840000074a3d1da00353e18e1eee30d2baefcca3e0600096948", &(0x7f0000000000)=0x5, 0x0, 0xffffffffffffffa5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000240)="d81ad30100000000000100000000", 0xe) (async) write(r2, &(0x7f0000000240)="d81ad30100000000000100000000", 0xe) ioctl$TIOCSETA(r1, 0xc0d04468, 0x0) (async) ioctl$TIOCSETA(r1, 0xc0d04468, 0x0) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000000)={0x1, 0xffffffff, 0x1, 0x50, "acbae3caffc1ffe3a1fc85442d1aa956a6960bd2", 0x1, 0x7}) ioctl$TIOCSTAT(r3, 0x20007465, 0x0) ioctl$VMM_IOC_INTR(0xffffffffffffffff, 0xca605601, 0x0) (async) ioctl$VMM_IOC_INTR(0xffffffffffffffff, 0xca605601, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) flock(r0, 0x1) (async) flock(r0, 0x1) flock(r0, 0x3) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.151' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 6, size = 287762939904 vm_create: uvm_map failed: 12 pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 D'vC}f\4=trCzu3~9zxQ}*WIߍĈUwXQ3y<1&^uXT(s}[B_Y=L?*υV%Ό-X@;C Wj6害Fv8pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error                                                                                                                            OpenBSD/amd64 (ci-openbsd-multicore-0.us-central1-b.c.syzkaller.internal) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 uvn_flush: obj=0xfffffd806c961100, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! WARNING: thread `nfsio' (332679) exits with status -1 WARNING: thread `nfsio' (510184) exits with status -1 WARNING: thread `nfsio' (220600) exits with status -1 WARNING: thread `nfsio' (285745) exits with status -1 pckbd_enable: command error wskbd0: can't attach mux (error=5) R,kmalloc(): allocation too large, type = 29, size = 16796513700 j|E1\:  WARNING: thread `nfsio' (489197) exits with status -1 WARNING: thread `nfsio' (461492) exits with status -1 WARNING: thread `nfsio' (398695) exits with status -1 WARNING: thread `nfsio' (178374) exits with status -1 denied attempt to set clock back 2480385244 seconds denied attempt to set clock back 2480385244 seconds pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 kernel: protection fault trap, code=0 Stopped at sys_semop+0x3d5: movzwl 0(%rax),%r15d ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace sys_semop(ffff80003c4be038,ffff80003c4571c0,ffff80003c457110) at sys_semop+0x3d5 syscall(ffff80003c4571c0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xaf027d011c0, count: -3 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c4570e0 rbx 0xdeafbeaddeafbead rdx 0 rcx 0xffff80003c4be038 rax 0xdeafbeaddeafbead r8 0x7f7fffffc000 r9 0x1 r10 0xd30d976789bcf889 r11 0x7aae5fca6a09374f r12 0 r13 0xfffffd806c325700 r14 0xffff80003c4571c0 r15 0 rip 0xffffffff8268fa15 sys_semop+0x3d5 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c456ff0 ss 0x10 sys_semop+0x3d5: movzwl 0(%rax),%r15d ddb{1}> show proc PROC (syz-executor) tid=241521 pid=41133 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=86, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c4bed30,0xffff80003c4befd8 process=0xffff80003c4c26a8 user=0xffff80003c452000, vmspace=0xfffffd8067554d80 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 12727 474105 74584 0 2 0 syz-executor 12727 215553 74584 0 3 0x4000080 fsleep syz-executor 31405 10338 69080 0 7 0 syz-executor 31405 330919 69080 0 2 0x4000000 syz-executor 41133 81244 93724 0 2 0 syz-executor *41133 241521 93724 0 7 0x4000000 syz-executor 41133 452399 93724 0 3 0x4000080 fsleep syz-executor 41133 188707 93724 0 3 0x4000080 fsleep syz-executor 49962 472070 49570 0 2 0 syz-executor 49962 479156 49570 0 3 0x4000000 biowait syz-executor 49962 147679 49570 0 2 0x4000000 syz-executor 39714 492263 57494 0 3 0x80 nanoslp syz-executor 39714 368926 57494 0 3 0x4000080 ttyout syz-executor 39714 55322 57494 0 3 0x4000080 fsleep syz-executor 39714 516204 57494 0 3 0x4000080 fsleep syz-executor 92319 58808 53493 0 3 0x3000 suspend syz-executor 92319 220267 53493 0 3 0x4081000 biowait syz-executor 92319 517759 53493 0 3 0x4081000 fltagain2 syz-executor 92319 5169 53493 0 3 0x4081000 pipecl syz-executor 32983 28164 17576 0 3 0x3000 suspend syz-executor 32983 218070 17576 0 2 0x4081000 syz-executor 36792 33736 1 0 3 0x100083 ttyopn getty 79644 319429 82949 0 3 0x82 wait syz-executor 57494 14784 82949 0 3 0x82 nanoslp syz-executor 74584 432562 82949 0 3 0x82 nanoslp syz-executor 53493 144727 82949 0 3 0x82 wait syz-executor 93724 90014 82949 0 3 0x82 nanoslp syz-executor 69080 318545 82949 0 3 0x82 nanoslp syz-executor 17576 173200 82949 0 3 0x82 wait syz-executor 49570 258892 82949 0 3 0x82 nanoslp syz-executor 82949 243608 78431 0 3 0x82 kqread syz-executor 78431 315047 93231 0 3 0x10008a sigsusp ksh 93231 396772 27332 0 3 0x98 kqread sshd-session 27332 1038 89315 0 3 0x92 kqread sshd-session 89315 103221 1 0 3 0x88 kqread sshd 52012 329241 50695 74 3 0x1100092 bpf pflogd 50695 487726 1 0 3 0x80 sbwait pflogd 39984 508635 2792 73 3 0x1100090 kqread syslogd 2792 97843 1 0 3 0x100082 sbwait syslogd 42671 450032 1 0 3 0x100080 kqread resolvd 23967 438453 23457 77 3 0x100092 kqread dhcpleased 32498 392197 23457 77 3 0x100092 kqread dhcpleased 23457 432353 1 0 3 0x80 kqread dhcpleased 18178 69121 0 0 3 0x14200 bored smr 19979 261520 0 0 3 0x14200 pgzero zerothread 49235 313761 0 0 3 0x14200 aiodoned aiodoned 15889 414370 0 0 3 0x14200 syncer update 34679 267075 0 0 3 0x14200 cleaner cleaner 41063 7589 0 0 3 0x14200 reaper reaper 38960 294718 0 0 3 0x14200 pgdaemon pagedaemon 2790 271019 0 0 3 0x14200 bored viomb 7411 270215 0 0 3 0x40014200 acpi0 acpi0 22799 182406 0 0 3 0x40014200 idle1 15212 215977 0 0 3 0x14200 bored softnet1 83249 262854 0 0 3 0x14200 bored softnet0 79607 221179 0 0 3 0x14200 bored systqmp 64659 77919 0 0 3 0x14200 bored systq 77135 2548 0 0 3 0x14200 tmoslp softclockmp 26370 399579 0 0 3 0x40014200 tmoslp softclock 30893 117291 0 0 3 0x40014200 idle0 1 196093 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 41133 (syz-executor) thread 0xffff80003c4be038 (241521) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838b4448) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 malloc+0xe3 #3 sys_semop+0x22f #4 syscall+0xb17 #5 Xsyscall+0x128 Process 49962 (syz-executor) thread 0xffff80003c4bfcc0 (479156) exclusive rrwlock inode r = 0 (0xfffffd800e3c6b50) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 92319 (syz-executor) thread 0xffff8000fffee548 (220267) exclusive rrwlock inode r = 0 (0xfffffd800e3c66b0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 32983 (syz-executor) thread 0xffff800032feafc0 (218070) exclusive rrwlock inode r = 0 (0xfffffd800e3c6da0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10208 11036K 11626K 166960K 13504 0 pcb 17 13K 20K 166960K 361 0 rtable 250 11K 12K 166960K 528 0 pf 34 17K 81K 166960K 167 0 ifaddr 41 7K 9K 166960K 100 0 ifgroup 51 2K 2K 166960K 177 0 sysctl 4 1K 9K 166960K 16 0 counters 68 36K 38K 166960K 204 0 ioctlops 0 0K 4K 166960K 1908 0 iov 0 0K 16K 166960K 104 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1495 94K 94K 166960K 2799 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 13 136K 136K 166960K 125 0 dirhash 12 2K 2K 166960K 33 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 1366 0 sigio 0 0K 0K 166960K 21 0 proc 73 115K 164K 166960K 689 0 subproc 72 4K 4K 166960K 137 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 246 0 in_multi 88 6K 7K 166960K 149 0 ether_multi 1 0K 0K 166960K 19 0 mrt 1 0K 0K 166960K 14 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 115 519K 519K 166960K 115 0 exec 0 0K 1K 166960K 780 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 273 166K 180K 166960K 14891 0 UVM aobj 58 12K 12K 166960K 65 0 pinsyscall 43 86K 104K 166960K 2517 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 139 0 NDP 11 0K 2K 166960K 72 0 temp 82 8680K 8751K 166960K 79332 0 kqueue 13 20K 30K 166960K 253 0 SYN cache 2 8K 16K 166960K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 227 0 224 4 2 2 3 0 8 1 rtentry 176 150 0 45 6 0 6 6 0 8 0 unpcb 144 955 0 937 10 9 1 4 0 8 0 syncache 336 8 0 8 4 3 1 1 0 8 1 tcpqe 32 1 0 1 1 0 1 1 0 8 1 tcpcb 736 633 0 628 13 12 1 7 0 8 0 arp 136 25 0 6 1 0 1 1 0 8 0 inpcb 328 1697 0 1685 24 17 7 12 0 8 5 nd6 152 30 0 4 2 0 2 2 0 8 0 pkpcb 40 8 0 8 4 3 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 56 0 56 4 3 1 1 0 8 1 pppxif 1504 3 0 3 2 2 0 1 0 8 0 pffrag 232 19 0 4 1 0 1 1 0 482 0 pffrnode 88 18 0 4 1 0 1 1 0 8 0 pffrent 40 68 0 53 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pfstitem 24 111 0 45 1 0 1 1 0 8 0 pfstkey 128 111 0 45 3 0 3 3 0 8 0 pfstate 448 109 0 45 8 0 8 8 0 8 0 pfrule 1344 27 0 22 2 1 1 2 0 8 0 rttmr 136 3 0 3 2 2 0 1 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 590 0 179 33 5 28 32 0 8 0 art_table 40 593 0 179 6 0 6 6 0 8 0 art_node 32 150 0 60 1 0 1 1 0 8 0 sysvmsgpl 40 14 0 7 1 0 1 1 0 8 0 semupl 112 2 0 2 2 2 0 1 0 8 0 semapl 112 119 0 109 1 0 1 1 0 8 0 shmpl 112 56 0 5 2 0 2 2 0 8 0 dirhash 1024 32 0 15 3 0 3 3 0 8 0 dino2pl 256 4049 0 2545 96 0 96 96 0 8 0 ffsino 296 4049 0 2545 118 1 117 118 0 8 0 nchpl 144 6015 0 4308 64 0 64 64 0 8 0 rtmask 32 14 0 14 5 5 0 1 0 8 0 vnodes 216 4994 0 0 278 0 278 278 0 8 0 namei 1024 21339 0 21339 2 1 1 1 0 8 1 percpumem 16 117 0 68 1 0 1 1 0 8 0 vcpupl 3968 5 0 1 1 0 1 1 0 8 0 vmpool 840 6 0 2 1 0 1 1 0 8 0 kstatmem 264 112 0 88 6 4 2 3 0 8 0 scsiplug 72 10 0 10 4 3 1 1 0 8 1 scxspl 216 28309 0 28307 11 10 1 7 1 8 0 plimitpl 152 408 0 387 1 0 1 1 0 8 0 sigapl 424 1710 0 1662 8 1 7 8 0 8 0 knotepl 120 506 0 0 15 0 15 15 0 8 0 kqueuepl 224 534 0 525 8 3 5 5 0 8 4 pipepl 344 215 0 186 3 0 3 3 0 8 0 fdescpl 528 1664 0 1632 3 0 3 3 0 8 0 filepl 160 11335 0 11107 32 14 18 18 0 8 7 lockfpl 104 560 0 557 1 0 1 1 0 8 0 lockfspl 48 164 0 161 1 0 1 1 0 8 0 sessionpl 144 27 0 18 1 0 1 1 0 8 0 pgrppl 48 47 0 30 1 0 1 1 0 8 0 ucredpl 104 1845 0 1832 2 0 2 2 0 8 1 zombiepl 144 2207 0 2204 2 1 1 1 0 8 0 processpl 1232 1710 0 1662 6 1 5 6 0 8 0 procpl 664 3974 0 3912 8 2 6 8 0 8 0 sosppl 176 2 0 2 1 1 0 1 0 8 0 sockpl 752 2966 0 2933 34 23 11 17 0 8 6 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 4 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 7 0 0 1 0 1 1 0 8 0 mcl4k 4096 130 0 0 17 0 17 17 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 75 0 0 9 1 8 8 0 8 0 mtagpl 96 121 0 0 3 0 3 3 0 8 0 mbufpl 256 1232 0 0 77 0 77 77 0 8 0 bufpl 280 10356 0 4218 439 0 439 439 0 8 0 anonpl 32 10954 0 0 88 0 88 88 0 246 0 amapchunkpl 152 49698 0 49114 58 28 30 30 0 158 7 amappl16 200 5929 0 5443 52 26 26 26 0 8 0 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 7 0 7 1 1 0 1 0 8 0 amappl13 176 449 0 448 1 0 1 1 0 8 0 amappl12 168 2052 0 2009 3 0 3 3 0 8 0 amappl11 160 11 0 11 1 1 0 1 0 8 0 amappl10 152 73 0 59 1 0 1 1 0 8 0 amappl9 144 356 0 354 1 0 1 1 0 8 0 amappl8 136 29 0 27 1 0 1 1 0 8 0 amappl7 128 87 0 85 1 0 1 1 0 8 0 amappl6 120 285 0 272 1 0 1 1 0 8 0 amappl5 112 100 0 89 1 0 1 1 0 8 0 amappl4 104 436 0 407 1 0 1 1 0 8 0 amappl3 96 8783 0 8675 4 1 3 3 0 8 0 amappl2 88 1807 0 1728 2 0 2 2 0 8 0 amappl1 80 15129 0 14524 16 1 15 15 0 8 0 amappl 88 13929 0 13737 6 1 5 5 0 92 0 uvmvnodes 80 136 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 1 1 1 0 8 1 dma128 128 258 0 258 3 2 1 1 0 8 1 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 64 0 7 2 0 2 2 0 8 0 uaddrrnd 24 1664 0 1632 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1664 0 1632 1 0 1 1 0 8 0 vmmpekpl 168 15016 0 14973 3 0 3 3 0 8 0 vmmpepl 168 112850 0 110365 126 17 109 109 0 357 0 vmsppl 488 1663 0 1632 6 1 5 5 0 8 0 rwobjpl 80 32116 0 30497 38 4 34 34 0 8 0 pdppl 4096 3347 0 3272 123 46 77 85 0 8 2 pvpl 32 17668 0 0 143 1 142 142 0 265 0 pmappl 256 1669 0 1634 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 399 0 71 10 0 10 10 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83861ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838b4240) at __mp_lock+0x199 intr_handler(ffff80003b019ba0,ffff80000006b400) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7bb015dd3250, count: -6 ddb{0}> machine ddbcpu 1 Stopped at sys_semop+0x3d5: movzwl 0(%rax),%r15d ddb{1}> trace sys_semop(ffff80003c4be038,ffff80003c4571c0,ffff80003c457110) at sys_semop+0x3d5 syscall(ffff80003c4571c0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xaf027d011c0, count: -3