last executing test programs: 2.750810763s ago: executing program 1 (id=2): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = fcntl$dupfd(r0, 0xc, 0xffffffffffffff9c) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x80) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000080)) (async) pwritev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="0c9bc307aba762c1f92da4f450b75f650c26ff02a53e5eeeb62aea76302c79773c981f8ffa2d6a9e52f9f3c7b7e9a0c606bfb794cbab5607f2699fefd4886f6fd51719c9ff3b2bd60948", 0x4a}, {&(0x7f0000000140)="52e14da6c99a9f9b1467f17f18a8be4b31b2c6f422db9a59967c4e92bc276054d36ca013c9f16c190211adc88b2cb57301e1f7b1d6714021de8343474eb3d4b5b9795dc3c36f7c945a8275a0a35ac1e1b5a0033d26f0c697a4062d6b988d2fbe6b6986d790492c9b595f641b1601df1b498b17262c863c9a4bb1cfe2c2798f64d5", 0x81}], 0x2, 0x9) (async) ioctl$TIOCSTAT(r2, 0x20007465) ioctl$TIOCSBRK(r2, 0x2000747b) (async) chroot(&(0x7f0000000240)='./file0\x00') (async) ioctl$DIOCCLRSTATUS(r1, 0xc0284416, &(0x7f00000002c0)={'./file0\x00', &(0x7f0000000280)=""/27, 0x666, 0x5fd1, 0x7, 0x5}) (async) mkdir(&(0x7f0000000300)='./file0\x00', 0x10) (async) r3 = setsid() fcntl$lock(r2, 0x9, &(0x7f0000000340)={0x6, 0x0, r3, 0x3, 0x2}) (async) ioctl$DIOCSETHOSTID(r2, 0xc0044456, &(0x7f0000000380)=0x1) ioctl$DIOCGETSTATUS(r2, 0xc2084415, &(0x7f00000003c0)) (async) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) (rerun: 32) setgroups(0x3, &(0x7f0000000800)=[r4, r5, r6]) acct(&(0x7f0000000840)='./file0\x00') (async, rerun: 64) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000880), 0x400, 0x0) (rerun: 64) ioctl$DIOCIGETIFACES(r7, 0xc0284457, &(0x7f0000000980)={'./file0\x00', &(0x7f00000008c0)=""/192, 0x0, 0x6, 0x4, 0x9}) (async) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f0000000b40)={{'./file0\x00', './file0\x00', 0x2, 0x4}, &(0x7f00000009c0)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x9, 0x0, 0x0, 0x2, 0x3, 0xb, 0x3}, {@broadcast, '\x00', './file0\x00', 0x101, 0xfff7, 0x2, 0x1, 0x9, 0x24, 0x4}, {@loopback, '\x00', './file0\x00', 0x10, 0x7, 0x18, 0x7f, 0x7, 0x7f, 0xe7}, {@rand_addr=0x4, '\x00', './file0\x00', 0x8000, 0x6, 0x2, 0x8, 0x7, 0x19}, {@broadcast, '\x00', './file0\x00', 0x75c, 0x7f, 0xc, 0xfe, 0x4, 0x4f, 0x93}, {@rand_addr=0xffff, '\x00', './file0\x00', 0x3, 0x2d, 0x0, 0x7, 0x1, 0x5, 0x1f}, {@empty, '\x00', './file0\x00', 0x3, 0xf22, 0x0, 0x0, 0x9, 0xf, 0xb8}], 0x224ac318, 0x7, 0x0, 0x0, 0x6, 0x20000, 0x8, 0x5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000fc0)={0x1, 0x401, r2}) ioctl$DIOCGETSTATES(r8, 0xc0104419, &(0x7f0000001440)={0x4, &(0x7f0000001000)=[{0x0, ""/16, [{[@v6=@empty, @v6=@mcast1]}, {[@v6=@ipv4={""/10, ""/2, @loopback}, @v4=@loopback]}], {}, {}, @v6=@remote}, {0x0, ""/16, [{[@v4=@rand_addr, @v4=@multicast1]}, {[@v6=@ipv4={""/10, ""/2, @rand_addr}, @v4=@remote]}], {}, {}, @v4=@loopback}, {0x0, ""/16, [{[@v6=@ipv4={""/10, ""/2, @local}, @v6=@ipv4={""/10, ""/2, @multicast2}]}, {[@v4=@loopback, @v4=@loopback]}], {}, {}, @v4=@loopback}, {0x0, ""/16, [{[@v4=@local, @v6=@empty]}, {[@v4=@multicast1, @v6]}], {}, {}, @v4=@remote}]}) (async) select(0x40, &(0x7f0000001480)={0x5, 0xc77a, 0xd0, 0x3, 0x6, 0x2, 0x3, 0x6}, &(0x7f00000014c0)={0x3, 0xbd4, 0x6, 0x0, 0x2, 0x9, 0x0, 0x8}, &(0x7f0000001500)={0x4, 0x7f, 0xffff, 0x7, 0x1, 0x9, 0x0, 0x6}, &(0x7f0000001540)={0x3, 0x16000000000}) (async) open(&(0x7f0000001580)='./file0\x00', 0x1, 0x10) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0xc) ktrace(&(0x7f00000015c0)='./file0\x00', 0x1, 0x2c00, r9) (async) ioctl$TIOCSCTTY(r8, 0x20007461) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 2.639589225s ago: executing program 5 (id=6): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000180)=@abs={0x4c, 0x1, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000080)=[@rights={0x24, 0xffff, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff, r0, r0]}], 0x24, 0x4}, 0x8) open(&(0x7f0000000300)='./file0\x00', 0x75f493fec6515f78, 0x0) 2.553870147s ago: executing program 2 (id=3): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b10005016000009f0500050003000000331c13fecea10500fef96ecfc72fd3357af302b37b673039d2d236acf20b7804be38224991f7c8cf5f88882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037281802000000720fd38bfbb770c1f572ca81ea77b3c5890400000000000000361b1257aea8c500002002fbffec2200008abfba090000001d89e400040700000080042000"/177, 0xb1, 0x4, 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000140), &(0x7f0000000180)=0x1c) 2.508616294s ago: executing program 5 (id=9): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x44000802) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x10) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x5) 2.507084318s ago: executing program 2 (id=10): sysctl$kern(&(0x7f0000000100), 0x2, &(0x7f0000000000)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) symlink(&(0x7f0000000900)='.\x00', &(0x7f0000000240)='./file0\x00') rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/file0/../../file0\x00') 1.390541719s ago: executing program 2 (id=12): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000ac0), 0x10, 0x0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000040)=0x2) syz_extract_tcp_res(0x0, 0x7, 0x9) pread(r1, &(0x7f0000000140)="e7077b6629e0397383eaeac9193e79db7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e0000000000", 0x34, 0x4) dup(r0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xffb, 0x4e, 0x2100006, 0x5c0, 0x1, 0x80, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0x5, 0x1, 0x2901f03c}, {0x1000008, 0x5, 0x4, 0x9}, {0x7, 0x800, 0x800a}, {0x2, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000002, 0x99}, {0x7f, 0x5, 0x4f8, 0x6d}, {0x6, 0x300, 0x58, 0x40000007}, {0x2, 0x100, 0x6, 0x8}, {0x8007, 0x8001, 0x81, 0x103}, {0x1cc, 0x3, 0xfa, 0x3}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0xb8c, 0x10005, 0x8, 0xe}, {0x29a7171c, 0x80, 0x1, 0xc377}, {0x0, 0x427, 0x69}, {0x2d5, 0x8000001, 0x100ffe}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xc9d}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000180)=@abs={0x4c, 0x1, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000840)=[@cred={0x18}], 0x18, 0x4}, 0x8) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0, 0xfffffe88}, {&(0x7f0000000600)=""/251, 0xfb}], 0x10000000000001e3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$unix(0x1, 0x1, 0x0) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000200), 0xfffffffffffffe61) recvmmsg(r5, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000000}, 0x38, 0x2840, 0x0) r7 = socket(0x18, 0x3, 0x85) ioctl$FIONREAD(r7, 0xc1206922, &(0x7f00000001c0)) recvfrom$inet(r7, &(0x7f00000002c0)=""/208, 0xd0, 0x3000, 0x0, 0x0) writev(r4, &(0x7f0000000000), 0x14) 1.390064888s ago: executing program 0 (id=1): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) r0 = open$dir(&(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) open$dir(&(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x10) rename(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x2) setresuid(0x0, r2, 0xee00) getresgid(&(0x7f0000000080)=0x0, 0x0, 0x0) setresgid(0x0, 0x0, r3) fchownat(r0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, r3, 0x0) 1.384453223s ago: executing program 7 (id=8): r0 = openat$wsmuxkbd(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x2) setresuid(r2, 0x0, r2) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1024, &(0x7f0000000480)={0x0}, &(0x7f0000000580)=0xc) setresuid(r2, r4, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x1c5) ioctl$WSMOUSEIO_SCALIBCOORDS(r5, 0x81205724, &(0x7f00000002c0)={0x43, 0x50000, 0x7f, 0x5, 0x2, 0x203, 0x68, 0x10, [{0x10000000, 0x4, 0x3, 0x3}, {0xfffffff3, 0x7, 0x2bf, 0x2}, {0x20006, 0x8000b86, 0xa, 0x9}, {0x3, 0x200, 0x5, 0x80007}, {0x40000042, 0x9, 0x3, 0x494}, {0x4, 0x8, 0x8, 0x95}, {0x4cdf, 0xdf61, 0x2, 0x4f0c}, {0x8, 0x9, 0xa43, 0x6}, {0x4, 0x8e2b5, 0x40000003, 0x7}, {0x4, 0x8, 0x80000003, 0x6}, {0x1c1, 0x400fdff, 0x927a, 0x1}, {0x41016, 0x76d, 0x0, 0x8}, {0x3, 0x1, 0xf, 0x408}, {0x29a71718, 0x4, 0x3}, {0x7, 0xf8f, 0xdda, 0x8000}, {0x1, 0x800bd3d, 0xf777, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x49, 0x0, 0x0, 0xa}) socket$inet(0x2, 0x8000, 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x3, 0xc, 0x3, 0x10000101, 0x4, 0x5, 0x3, 0x10, [{0x5, 0x4, 0x8, 0x71800}, {0x4, 0x300b7fe, 0x6, 0x10001}, {0x100006, 0x0, 0xb, 0x22}, {0xe0, 0x0, 0x80000001, 0xffffeffe}, {0x7, 0x0, 0xd1, 0x10000}, {0x8000, 0x6, 0x14000009, 0xc}, {0x4, 0x7, 0x7, 0x70}, {0x1, 0x6, 0x9f3d835c, 0xfffffffc}, {0x401, 0x5, 0x35, 0x3}, {0xfefffc04, 0x47, 0x5, 0xff}, {0x8, 0x7, 0xa38c000, 0x4d1e}, {0xcb, 0x6, 0x201, 0x204010}, {0x2f92, 0x6, 0x5, 0xfffffff7}, {0x1, 0xfffffffd, 0xfffffffa, 0x6169}, {0x5, 0x8, 0x27, 0x400007}, {0x80000000, 0x7a2, 0x3, 0x3}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r7, 0xc0105715, &(0x7f0000001540)={0x40000000000000cd}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSKBDIO_GETENCODINGS(r7, 0xc0105715, &(0x7f0000000080)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240), &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) socket$inet(0x2, 0x3, 0x0) munmap(&(0x7f000068f000/0xc000)=nil, 0xc000) ioctl$VT_GETSTATE(r0, 0x40067664, &(0x7f0000000000)) 1.250405461s ago: executing program 1 (id=14): r0 = socket(0x2, 0x3, 0x2) r1 = socket$inet6(0x18, 0x3, 0x0) accept$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r2, 0xffff, 0x1025, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt(r1, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04aee1f", 0x4) socket$inet(0x2, 0x3, 0x28) shutdown(r0, 0x2) r3 = socket$inet(0x2, 0x3, 0x40) setitimer(0x2, 0x0, 0xfffffffffffffffe) sendto$inet(r3, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) r4 = socket(0x1, 0x8002, 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r5 = socket(0x18, 0x3, 0xa3) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0x3ff, 0x8020000000000001}}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000140)={0x1c, 0x18, 0x3, 0x3, "d5ca25447a63f986e94f8195b14fb055", 0x1}, 0x1c) socket(0x2, 0x3, 0x2) (async) socket$inet6(0x18, 0x3, 0x0) (async) accept$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) (async) socket$unix(0x1, 0x5, 0x0) (async) getsockopt$sock_int(r2, 0xffff, 0x1025, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) setsockopt(r1, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04aee1f", 0x4) (async) socket$inet(0x2, 0x3, 0x28) (async) shutdown(r0, 0x2) (async) socket$inet(0x2, 0x3, 0x40) (async) setitimer(0x2, 0x0, 0xfffffffffffffffe) (async) sendto$inet(r3, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) (async) socket(0x1, 0x8002, 0x1) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) socket(0x18, 0x3, 0xa3) (async) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (async) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0x3ff, 0x8020000000000001}}, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) (async) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) (async) connect$inet6(r4, &(0x7f0000000140)={0x1c, 0x18, 0x3, 0x3, "d5ca25447a63f986e94f8195b14fb055", 0x1}, 0x1c) (async) 1.249802539s ago: executing program 7 (id=15): r0 = socket$inet(0x2, 0x5, 0x8) sendto$inet(r0, &(0x7f0000000000)="ae6dd55b8cdd152e650ce08e2d92a09f2384768f49f111705cb70ac6150930d06da665bfa3139794a3967a1d9fcb49a8be7bd5a27ceeb449ad493bd9bf6c35110855afad5646647ff601f6b3302c5ad1dda2", 0x52, 0x8, &(0x7f0000000080)={0x10, 0x2, 0x1, 0x7}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000000c0)="fa0bd6b3f9db8699b1b66a6e42e8a772b28985fb8d41bfc856fe661b", 0x1c) kqueue() kqueue() r1 = accept4(r0, &(0x7f0000000100)=@in6, &(0x7f0000000140)=0x1c, 0x4000) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f0000000180)="6f5bb849c572e633545275c408ed1a9834265c0eefda4a34e0c719c17d90844d1f4c4aa44957154c70db60f650da9f9707bb2f5169032c412a3c98b5133f136f2ad68b1e704d908bcb9f857fcf8a7c0e66ded2a2b7057a777660f43e9ac8366c7b0c68909ef5ebbac975631ef0977e692d9bfa9a4937454e05b7f1579d02affc0be62979d85db0c45cd9b094b2f350e3db6fbf00a407388bb66d92bbbb3fbb10365097c71755eeed27c28b3f6df1047a3e250bfe9f6a", 0xb6) r2 = fcntl$dupfd(r0, 0xc, r0) ioctl$WSDISPLAYIO_DELSCREEN(r2, 0x80085754, &(0x7f0000000240)={0x3ff}) ioctl$AUDIO_GETPAR(r2, 0x40404124, &(0x7f0000000280)) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r3, 0x80085762, &(0x7f0000000300)={0x1, 0x2}) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000340), &(0x7f0000000380)=0x8) r4 = fcntl$dupfd(r0, 0xc, r0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000600)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[{}, {}, {}, {}], &(0x7f0000000540)=[0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x2, 0x5, 0x0, 0x0, 0xc5104804402a0a37, 0x5, 0x9, 0x44, 0x5, 0x3}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000680)={r5, 0xd, 0x0, 0x0, 0xffffffff}) r6 = open(&(0x7f00000006c0)='./file0\x00', 0x80, 0x150) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x40, 0x0) ioctl$DIOCRGETADDRS(r7, 0xc4504446, &(0x7f0000000780)={{'./file0\x00', './file0\x00', 0x62, 0xf0}, &(0x7f0000000740)=[{@empty, '\x00', './file0/file0\x00', 0x2, 0x1ff, 0x2, 0x4, 0x6, 0x81, 0x8}], 0x54, 0x1, 0x1, 0x3, 0x3, 0x96, 0x32, 0x5}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000c00)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000c40)={r8}) recvmsg(r6, &(0x7f0000001000)={&(0x7f0000000c80)=@in6, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000cc0)=""/247, 0xf7}, {&(0x7f0000000dc0)=""/254, 0xfe}, {&(0x7f0000000ec0)=""/91, 0x5b}], 0x3, &(0x7f0000000f80)=""/121, 0x79}, 0x3840) ioctl$WSKBDIO_GETDEFAULTBELL(r2, 0x40105706, &(0x7f0000001040)) sysctl$net_inet_tcp(&(0x7f0000001080)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f00000010c0)="b091fc5ef701ed2d274051e86016010b172baaa5707e8d2d44d6289dd452cca2e1362b44df7345c25df9a41704236053b449266b0a936177e1eb28d71f1854645a3dee49ef9bd30a86a6877512d06fb87a627caf9d47c1c889cea2397d2fc8c510b1aa105921b2134cf89086809b22e13fb02af229ec275068543dc423e32b2c4a36c5e87b6108eba70cf944fdbe77dce4a5a3168b6185088630b0d2be26b9c2a7b0dddf8880067d23db2ad49fc25a9f93616a83ece3ea2e6e0f5285c53301d4689bf0d99dd2f1358cade0ba945587ad6c7ce9a1f4fca339c17afe56a7262fef", &(0x7f00000011c0)=0xe0, &(0x7f0000001200)="5a786f9f2f9a6d52e74a1307e963795aaa44871cdf8c8d5a181852ac5cd2683202610b0f5c8ba7ac4947cba0e45c5925b02c05cfcb835cde4d469794ab4ee1fad274ec48da62f9983335419760080e891536efb0115a8af580d84f05760bb0844dc2c397469bb7c36cb3385a9519af7068924604f69035fbbf186c23ecbfdebca202542b751a3a65672a254526de2efe6584004289c802189d9d0a1d02f3c966b69d1e176d594adc402a8ea3bfba75cc099298cb97ae5ec90fae004ea226b02f1c152f43746e1618842f47", 0xcb) ftruncate(r4, 0x2) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000001340)={0x0, 0x33, &(0x7f0000001300)=""/51}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000013c0)={&(0x7f0000001380)=[0x8], 0x1, 0x4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r9, 0xc01064c8, &(0x7f0000001440)={0x5, 0x0, &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000001480)={0x100, 0x10, 0x4, 0x100, 0xfffffe01, 0x10000, 0x3fc00, 0x10, [{0x4, 0x7, 0x8, 0xbd0a}, {0x1, 0x40, 0x7, 0xca0}, {0x7, 0x9, 0x3, 0x1}, {0x1, 0x0, 0x5, 0xd0d}, {0x5, 0x7, 0x8, 0x8000}, {0x400, 0x1c6, 0x0, 0x4}, {0x6, 0x5, 0xfffffa06, 0x8}, {0x3f26, 0x0, 0x4, 0xff}, {0x3ff, 0x80, 0x3, 0x2c}, {0xffffffae, 0xffffff65, 0x1b400000, 0x648c}, {0x2, 0x100, 0x3f454683, 0xd052}, {0x9, 0x1, 0x7fffffff, 0x1}, {0x3, 0x2, 0x0, 0x8}, {0xd8f, 0x3, 0x0, 0x2}, {0x800, 0x4, 0x4, 0x2}, {0x3, 0x20, 0xc5f, 0x2}]}) ioctl$WSMUXIO_INJECTEVENT(r6, 0x80185760, &(0x7f00000015c0)={0x5, 0xa752, {0x2, 0x3}}) 1.03427194s ago: executing program 7 (id=16): ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3976fdec, './file0\x00', [{[@v4=@multicast1, @v6=@loopback], [0x8006, 0x4], 0xfffe}, {[@v6=@mcast1, @v6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x8001}], [0x6, 0x2], 0x4, 0x1a}], {{0x247, 0x3, 0x1, 0x7ff}, 0xe, 0x40c, 0x80, 0xfff, 0x7d, 0x17, 0x10}, {{0x5, 0x83, 0x0, 0x5}, 0x8002, 0x7, 0x2, 0x2, 0x81, 0xf0, 0xac}, @v4, 0x0, 0x6, 0xf44d, 0x0, 0x1ff, [[0x9, 0x1], [0x2, 0x8350]], [[0x1, 0x603f], [0x20007, 0x3]], 0x5, [0x0, 0xd], 0x2, 0x18, 0x6, 0x2, 0x0, 0x3, 0xb, 0x83, 0x1, 0x8, 0x9, 0xce51, "e9ff"}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000080)={0xf, 0x80000000, 0x15, 0x0, 0x0, 0x0, 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x1, 0x4001, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) setsockopt$sock_int(r2, 0xffff, 0x1023, 0x0, 0x0) ioctl$TIOCGTSTAMP(r2, 0x4010745b, &(0x7f0000000000)) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0xffffffff, 0x0, 0xfffffffd, 0x3, "210d0000000200000006000000000200007fffff", 0x7fffffde, 0x88004}) 878.95672ms ago: executing program 0 (id=17): r0 = openat$klog(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) socket(0x18, 0x3, 0x52) mmap(&(0x7f0000017000/0x2000)=nil, 0x2000, 0x1, 0x5012, 0xffffffffffffffff, 0x3) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000c80)={0x10, 0x6, [{&(0x7f0000004000/0x2000)=nil, &(0x7f000000d000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000004000/0x1000)=nil, 0x1ff, 0x1}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3, 0x1}, {&(0x7f0000012000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7, 0x2}, {&(0x7f0000005000/0x3000)=nil, &(0x7f0000015000/0x4000)=nil, 0x5, 0x1}, {&(0x7f0000018000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x1}, {&(0x7f0000008000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x803}, {&(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x7000)=nil, 0xba, 0x2}, {&(0x7f000000b000/0x2000)=nil, &(0x7f0000006000/0x3000)=nil, 0x8}, {&(0x7f0000002000/0x2000)=nil, &(0x7f000000f000/0x4000)=nil, 0x6}, {&(0x7f0000009000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x81, 0x2}, {&(0x7f0000010000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x86, 0x2}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x3, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000009000/0xe000)=nil, 0x3, 0x2}, {&(0x7f0000006000/0xb000)=nil, &(0x7f0000005000/0x4000)=nil, 0x9, 0x7}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, 0x2, 0x1}], './bus\x00', 0x7ff, 0x9, 0x0, [], 0xffffffffffffffff}) sysctl$kern(&(0x7f0000000240)={0x1, 0x12}, 0x2, &(0x7f00000003c0)="e7d3b51da48053cdecf1971554523ee33a6e1320afe5006fc482abe4992e2c4a9c1eefaa4c5218a8d7277773b689043ec144ef4655a749e86de899642aa0b3e90a14fba8c7bc846d1803cc3e35e90ca4619fcd3e92441cd68c7b3bc446f388bfbd77cd54eb1b7534edec458f164c81b568286b77221a09316569b1635cefbe719e94bed9db708d24bca3b19406401a091d202b13", &(0x7f0000000480)=0x94, &(0x7f00000004c0)="e7a3ecc312d168862d69e4106a7e71ae8f84a18ce3be317cf5f4aa89069679e7bbbccaace3c3f82571e842ff61970497c0047de876997afce504aafd1da8eda041719b811cfadb58e619b85a7cd9e6fd903ff7be738eca80193d767c05d27635d217f0060aa49e711ecf6b3a264003c1848ec20e7abf9008a96dbcd98481cb72cd64a09a1ee1ace91956e7b49f81f27307e29c7a6103b8b18776e0df731939f11efde279db8937", 0xa7) r2 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x6, "fff4ce00", 0x8}, 0x1c) r3 = socket(0x18, 0x2, 0x0) sendmmsg(r3, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000000000000000000000000001", 0x6}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) ioctl$VMM_IOC_RUN(r1, 0xc0285602, &(0x7f0000001980)={0x5e, {0x80, 0xe}, 0x9, &(0x7f0000001700)={@vex={0x0, 0x2, '\x00', 0x7}, {[0x8, 0x1, 0x7, 0x40, 0x2, 0xf, 0x3, 0x2, 0x8, 0x8, 0x6, 0x5, 0x8, 0x6, 0x6, 0x9f8, 0x5, 0xffffffff], [0x5, 0x80, 0x5, 0x7, 0xbe3, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x4], [0xe5f4, 0xfffffffffffffffd, 0x6, 0x6, 0x2, 0xfffffffffffeffff, 0x7471], [0xfd5, 0xffff, 0x3d2a, 0x8, 0x1000, 0x7], [{0x0, 0x0, 0xd9, 0x10001}, {0x10, 0xfffffff8, 0xff, 0x6}, {0x6, 0xffffffff, 0xfffffffa, 0x10}, {0x2, 0x80000001, 0x6, 0x7fffffff}, {0x284, 0xe, 0x3, 0x6}, {0x2, 0x8, 0xffff, 0x40}, {0x2, 0x7, 0x0, 0xfffffffffffffffa}, {0x442, 0x1, 0xffff, 0x2000000000000000}], {0x0, 0x7ff, 0x10, 0x5}, {0xbffc, 0x5, 0x9, 0x4}}}, 0x3, 0x58}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$BIOCIMMEDIATE(r4, 0x8010427e, &(0x7f0000000040)=0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0xb752], 0x1, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f0000000380)={&(0x7f0000000300)="af5ebfe6da84f11a7016fdaa9d65923e2ff417d643f269619628b42c09f4422498c71f3c46f79457def9b45bd2ab461a1650f62d18654937f695213b632ddc8196f46a23779c6089aa50964af57ffba079d446ee0147dbde8106d9e5bd6b38a0031ca6216185317cfb3f9ea5b143268983", 0x71}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x1010, r0, 0xe) r6 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f0000000080)=0x8) ioctl$WSMUXIO_INJECTEVENT(r6, 0x80185760, &(0x7f0000000000)={0x4000, 0x101, {0x3}}) openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000c40)={0x10, 0x2, 0x3, 0xffffffff}, 0x10) r8 = socket(0x11, 0x3, 0x0) recvmmsg(r8, &(0x7f00000000c0)={{0x0, 0x30, &(0x7f0000000100), 0x248, 0x0}, 0xbfff}, 0x1c, 0x2042, &(0x7f0000000880)={0xa, 0x5}) 877.88391ms ago: executing program 3 (id=4): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b10005016000009f0500050003000000331c13fecea10500fef96ecfc72fd3357af302b37b673039d2d236acf20b7804be38224991f7c8cf5f88882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af630037281802000000720fd38bfbb770c1f572ca81ea77b3c5890400000000000000361b1257aea8c500002002fbffec2200008abfba090000001d89e400040700000080042000"/177, 0xb1, 0x4, 0x0, 0x0) getsockname$inet6(r0, &(0x7f0000000140), &(0x7f0000000180)=0x1c) 876.791996ms ago: executing program 5 (id=18): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x2}, {0x1, 0xfffffffd}, {0x1}, {}, {0x1, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x1, 0x2}, {}, {0x2, 0xfffffffc}, {0x2}, {}, {0x0, 0xffffffff}, {0x3}, {0x0, 0x3}, {}, {}, {}, {0x0, 0x10000006}, {0x1, 0x57fd}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f000007a000/0x3000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {&(0x7f000067c000/0x10000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000088000/0x4000)=nil, &(0x7f000008c000/0x1000)=nil}, {0x0, 0x0, 0x7fff}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f000070f000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00004f9000/0x1000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f000022d000/0x2000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x1}], './file0\x00', 0x5, 0x0, 0x0, [], 0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r1 = open(&(0x7f0000000440)='./file0\x00', 0x80, 0x48) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2, 0xffffaf35, 0x7f, 0x4, 0x84000001, 0x7fbefffd, 0x5, 0x10, [{0x10000000, 0x5, 0x3, 0x3f}, {0xffffff73, 0xfdfffffe, 0x100001, 0x3}, {0xc7, 0x7, 0x6, 0x9}, {0x7, 0x6, 0xfffffff6, 0x6}, {0xac2, 0x8, 0x1002, 0x800007}, {0x4020002, 0x5, 0x7, 0x9}, {0x9, 0xdf61, 0x200004f8, 0x14}, {0x6, 0x11, 0x2013, 0x6f}, {0xfffffffd, 0xfffffffb, 0x40000003, 0xa}, {0x0, 0x3, 0x400, 0x1ff}, {0x1e6, 0x400fff9, 0x10927c, 0x4}, {0x3, 0x25, 0x9, 0x2d0b}, {0xfffffffe, 0x2, 0x80002004, 0x408}, {0x2, 0x8, 0x100, 0x200}, {0x7ffe, 0x1, 0x8, 0x5}, {0xfffffffd, 0xfffffffd, 0xf779, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4000000000, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x200007bffffffffe}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f0000701000/0x2000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8000000000b936}, {&(0x7f00000a9000/0x1000)=nil, &(0x7f000072c000/0x3000)=nil, 0x1000}, {&(0x7f000025b000/0x1000)=nil, &(0x7f0000704000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000401000/0x1000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x20a}, {&(0x7f000021f000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf978}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f000020e000/0x1000)=nil, 0xd}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x1000)=nil, 0x1000009}, {&(0x7f0000108000/0x11000)=nil, &(0x7f0000714000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f000051d000/0x3000)=nil, 0x1000039f7}, {&(0x7f00001e1000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x400000000005}], './file0/file0\x00', 0x1, 0x0, 0x0, [], 0xffffffffffffffff}) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc028698a, &(0x7f0000000100)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) acct(&(0x7f0000000000)='./file0\x00') r4 = socket$inet(0x2, 0x3, 0x2e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000e40)={0xffffffffffffffff}) r6 = fcntl$dupfd(r2, 0x0, r2) sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000f00)={&(0x7f0000000b40)=@abs={0x5, 0x0, 0x0, 0x2}, 0x8, &(0x7f0000000e00)=[{&(0x7f0000000b80)="9590db82d4a5b5b642dc9522a9f9b5f1767206cea856fae1e801edd8eb0ec21009024efaa385556eef39c6f8f88b436ef7bb431d6fd4adba089be7d2d6fb751f24d0b53c3828d5c014264121e9ef0adc78ffa1f61617f0a704dc8b9d657203f3c7a52df5b54c36bbfaf230b61a92234117c25b8d25dbb8452f69dc533b1c8cc6a64567649d4c088c535ed4d0d52ea11160efc8d4ced3f27348c4", 0x9a}, {&(0x7f0000000c40)="e5393b29db0a64c07b82746dc2bbc34996185e1f9e1f5fc46b997afd8e6f67711f7a6a37c09bffffbefe9d727c22516ea9db6da1b43e11d17dd5951677ef8840594f5e2ec33cf3476237f78aa23e71a9a408dbe36ee9204df2c94ce802de9b9adfe1e98c03946f0a9f3fad3aa499aedbc812f20ee593a87003053782847e6d59b5ba27310cf3afcfef4e2760093f56918028e61a1484dc140df268c089ac515da26714d9d2f6583a193ad684cac47cb22c393d30e6f48cdc9bdfd0a0edaea7db5d5c", 0xc2}, {&(0x7f0000000d40)="eca37ceede124a12a8283c2c6191068c686428608aacc6b115e61bf28e41d1f58ed479440dae1d14ab0f1994d981fceb444f7ea72c352680024138", 0x3b}, {&(0x7f0000000d80)="6c065e6982509e3cbb68a9b7bbb86f21ed3ce11550ce7fe8e6be782d3d775f06078116a5692424f54cb819581265354e6da178911f34d689e6e6094dc21f3addf52def7fe0e529b18e1b9204e50b3047e971d7caa1d50917ca47acc01c6ff5a4105e40b1263be3", 0x67}], 0x4, &(0x7f0000000e80)=[@rights={0x34, 0xffff, 0x1, [r0, r2, r1, r3, r0, r1, r0, r3, r1, 0xffffffffffffff9c]}, @rights={0x2c, 0xffff, 0x1, [r4, r5, r2, r6, r2, r0, r0, r1]}], 0x60, 0x41f}, 0x400) 876.223655ms ago: executing program 6 (id=19): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x139) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0, 0xfffffffffffffff6}}, 0x42, 0x410) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r1, 0x0) utimes(0x0, &(0x7f0000000080)={{0x9, 0x200}, {0x7, 0x5}}) (async) r2 = kqueue() kevent(r2, &(0x7f0000000080)=[{{}, 0xfffffffffffffff6, 0x19, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x3, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1c5) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x3, 0xffffaf35, 0x7f, 0x5, 0xa2, 0x40003, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0xfff, 0x1000002}, {0x20006, 0x8000b86, 0xa, 0x9}, {0xa, 0x1fd, 0x5, 0x6}, {0x42, 0x9, 0x3, 0x800007}, {0x20002, 0x8, 0x8, 0xd}, {0x4cdf, 0xdf61, 0x200004f8, 0x66}, {0x8, 0xf, 0xa43, 0x8d}, {0xfffffffa, 0x8e2b5, 0x40000003, 0x6}, {0x4, 0x2d1, 0x400008, 0x3}, {0x1e0, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x1, 0x45b, 0x2d09}, {0x3, 0x1ff, 0x90000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0xdda}, {0x1, 0x4, 0xf777, 0x8}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6(0x18, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0xc, "fffffef8000f00000000000207000001", 0x4cdee064}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0xf1e, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x1}, 0x1c) (async) sendto$inet6(r4, 0x0, 0x0, 0x400, 0x0, 0x0) (async) kevent(r2, &(0x7f0000000000), 0x5, 0x0, 0x5, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r0, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$DIOCGETSTATE(r5, 0xc1084413, &(0x7f0000000040)={{0xffffffff00000004, './file0\x00', [{[@v4=@remote={0xac, 0x14, 0x0}, @v4=@loopback], [0x8006, 0x4], 0xfffe, 0x18}, {[@v4=@broadcast], [0x6], 0x4, 0x18}], {{0x247, 0x3, 0x1, 0x800}, 0xd, 0x10, 0x81, 0xfff, 0x7d, 0x17, 0x10}, {{0x1, 0x8, 0xff, 0x5}, 0x8002, 0x7, 0x2, 0x2, 0x4, 0xf0, 0xac}, @v4=@multicast2, 0xfffffffc, 0x6, 0xf46d, 0x6, 0x6, [[0x4000009, 0x2000401], [0x2, 0x8350]], [[0x3, 0x603d], [0x20007, 0x1]], 0x24, [0xffffffff, 0x7], 0x0, 0x2, 0x2, 0x2, 0x0, 0x5, 0xb, 0x83, 0x1, 0x0, 0x9, 0xce51, "e9ff"}}) (async) ioctl$DIOCRDELTABLES(0xffffffffffffffff, 0xc450443e, &(0x7f0000000100)={{'./file0\x00', './file0\x00', 0x25, 0x41}, 0x0, 0x30e, 0x0, 0x10, 0xaae4, 0x3, 0x0, 0x0, 0x8}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0804467, &(0x7f00000000c0)={0x30, 0x1fe, 0x1, 0x1002, "c95a6e80020000001900df0000000000008000", 0xfffffffc, 0x89d}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x61) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240), &(0x7f0000000100), &(0x7f0000000880), 0x0) (async) ioctl$DIOCKILLSTATES(r5, 0x0, &(0x7f0000000100)={{0x7a00, 0xef, 0x3}, 0x2, '\x00', 0x2, {@addrmask={@v4=@broadcast, @v4=@broadcast, 0x0, 0x0, 0x7}, [0x40, 0x3], 0xe, 0x0, 0x100}, {@table={'./file0\x00', 0x0, 0x3, 0x8}, [0x7, 0x4], 0x0, 0x1, 0x8372}, './file0\x00', './file0\x00', 0x7fff, 0x9}) 801.471707ms ago: executing program 1 (id=14): r0 = socket(0x2, 0x3, 0x2) r1 = socket$inet6(0x18, 0x3, 0x0) accept$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r2, 0xffff, 0x1025, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt(r1, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04aee1f", 0x4) socket$inet(0x2, 0x3, 0x28) shutdown(r0, 0x2) r3 = socket$inet(0x2, 0x3, 0x40) setitimer(0x2, 0x0, 0xfffffffffffffffe) sendto$inet(r3, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) r4 = socket(0x1, 0x8002, 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r5 = socket(0x18, 0x3, 0xa3) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0x3ff, 0x8020000000000001}}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000140)={0x1c, 0x18, 0x3, 0x3, "d5ca25447a63f986e94f8195b14fb055", 0x1}, 0x1c) socket(0x2, 0x3, 0x2) (async) socket$inet6(0x18, 0x3, 0x0) (async) accept$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) (async) socket$unix(0x1, 0x5, 0x0) (async) getsockopt$sock_int(r2, 0xffff, 0x1025, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) setsockopt(r1, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04aee1f", 0x4) (async) socket$inet(0x2, 0x3, 0x28) (async) shutdown(r0, 0x2) (async) socket$inet(0x2, 0x3, 0x40) (async) setitimer(0x2, 0x0, 0xfffffffffffffffe) (async) sendto$inet(r3, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) (async) socket(0x1, 0x8002, 0x1) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) socket(0x18, 0x3, 0xa3) (async) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (async) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0x3ff, 0x8020000000000001}}, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) (async) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) (async) connect$inet6(r4, &(0x7f0000000140)={0x1c, 0x18, 0x3, 0x3, "d5ca25447a63f986e94f8195b14fb055", 0x1}, 0x1c) (async) 594.958733ms ago: executing program 6 (id=20): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421210000ed710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba090000001de371a3f8343732051ed6b71989e0000405f8fffffe13000000", 0xb1, 0x2, 0x0, 0x0) r1 = socket(0x18, 0x3, 0x3a) bind(r1, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x8000, "ff32830000890000205d307f27773b27", 0x8}, 0x1c) getsockopt$sock_timeval(r1, 0xffff, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 521.230964ms ago: executing program 3 (id=21): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {0x0, 0x4000}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {0x4}, {0x1}, {0x1}, {0x2, 0x6}, {0x1}, {0x3}, {}, {0x2}, {0x1, 0x1000}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x7ff}, {0x2, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000080)=0x7) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$WSDISPLAYIO_GMODE(0xffffffffffffff9c, 0x4004574b, &(0x7f0000000b00)) r1 = socket(0x18, 0x3, 0xa3) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0x3ff, 0x8020000000000001}}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000001540), 0x8, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000016c0)={&(0x7f0000001580)='./file0\x00', 0xb5d, 0x5, 0x8, 0x6, &(0x7f00000015c0)="3e4bf0f3", 0x4, 0xc}) ioctl$VMM_IOC_CREATE(r0, 0xca605601, &(0x7f0000000080)={0x10, 0x7, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffff822d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x10}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xb}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffffff89}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000373000/0x4000)=nil, 0x2000006}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4, 0x2}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f00003ac000/0x1000)=nil, 0x2}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7ffd}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xffffffff}], './file0\x00', 0x5, 0x9}) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x100) open(&(0x7f0000000000)='./bus\x00', 0x1, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xfdff}}, 0xfffffffffffffdd0, 0xe) 520.587209ms ago: executing program 5 (id=22): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) r0 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0x2b) mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x5900) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2db) ioctl$BIOCSETIF(r1, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETIF(r1, 0x40384900, 0x0) closefrom(r0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x11, 0x0, @multicast1, @rand_addr=0xac14ffff}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}) mlock(&(0x7f0000363000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x83) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000080)=0x1ff) ioctl$AUDIO_GETPAR_ctl(r2, 0x40404124, &(0x7f0000000000)) 520.25647ms ago: executing program 6 (id=23): r0 = socket(0x1, 0x8002, 0x1) select(0x40, &(0x7f0000000180)={0x35, 0x2, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x209, 0xfffffffd, 0x2, 0x1, 0xc41, 0x10, 0x80000000, 0x1, 0x0, 0x101, 0x6}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) r2 = open(&(0x7f0000000800)='./file1\x00', 0x10, 0x4) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x10}, {}], 0x2, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./bus\x00', 0x20a, 0x0, 0x2, 0x0, 0xfffffff7, 0x2, 0x80000000, 0x1, 0x2, 0x9, 0x40000000000a4c2}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) r3 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r3) closefrom(r0) ioctl$BIOCIMMEDIATE(r2, 0x80044270, &(0x7f0000000000)=0x2) 518.888204ms ago: executing program 4 (id=24): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) r0 = socket(0x18, 0x1, 0x0) getsockopt(r0, 0x6, 0x1, 0x0, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x30001) truncate(&(0x7f0000000000)='./file0\x00', 0xff) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe}) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f0000000040)={""/16, @ifru_metric}) 466.488421ms ago: executing program 3 (id=25): mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x20006470, 0x0) r1 = socket(0x11, 0x3, 0x3) sendto$unix(r1, &(0x7f0000000080)="b10005040000010100000eb107000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896466a421020000ed710fd18bfbb670baf5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfdf82300008abfba0900000008e371a3f8343732051ed6b71d89e0000405f8fffff0e0000000", 0xb1, 0x0, 0x0, 0x0) 465.701881ms ago: executing program 6 (id=26): socket(0x18, 0x2, 0x0) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10021, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000100)={0x3, 0x1f}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000005c0)=[{0x35, 0x0, 0x0, 0xffff8fdc}, {0x81, 0x2, 0x5, 0x8}, {0xe, 0x0, 0x4, 0xffffffff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xef, 0x9, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0x8, 0x8, 0x71800}, {0x8, 0x300b7fe, 0x7, 0x7}, {0x100006, 0x0, 0x3, 0x22}, {0xe0, 0x0, 0x201, 0xffffeffe}, {0x7, 0x80006b63, 0x80000001, 0xff7f}, {0x2, 0x6, 0x7fff, 0xc}, {0x1, 0x7, 0x7, 0x70}, {0x58a, 0x3, 0xfdf2, 0xb9}, {0x401, 0x5, 0x10000034, 0x6}, {0xfefffc04, 0x5, 0x6, 0x1}, {0x8, 0xff79, 0x5, 0xe1}, {0xcb, 0x6, 0x200, 0x8}, {0x2100df, 0x6, 0x5, 0xfffffc00}, {0xffff7fff, 0xe2, 0xfffffff5, 0x33}, {0x5, 0x8, 0x27, 0x4}, {0x8, 0xd655, 0x9, 0x2}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$SPKRTONE(r3, 0x80085301, &(0x7f0000000200)={0x1, 0x5}) fstatat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) chown(&(0x7f0000000280)='./file0\x00', 0x0, r4) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r5, 0x2, 0x2) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000001c0)={0xff, 0x401, 0x17bb, 0x5, "d2e7cd35a074ed35ee71bf4fc6290dce37305241", 0x80da, 0xa967}) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x1, 0xff, 0x8, 0x1}]}) syz_emit_ethernet(0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaabbfffffffff790281816140738296003ffff08060001080406040008ce6093d7dc07ff2338"]) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg(r6, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff22}}, 0x38, 0xe) 465.087265ms ago: executing program 4 (id=27): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f0000000000)) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x10205b1a) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000340)) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$DIOCGETRULESET(r2, 0xc444443b, &(0x7f0000000200)={0x800, '\x00', './file0\x00'}) 464.406339ms ago: executing program 3 (id=28): r0 = openat$klog(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0x1}], 0x1, 0x0, 0x0) mmap(&(0x7f0000017000/0x2000)=nil, 0x2000, 0x1, 0x5012, 0xffffffffffffffff, 0x3) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="82e22d9d7d8b9abd6f266c6529a26689749676f2f46cd024121cab6e96f0982841ebd6ca0ecf5694631f162f05cfadd5f35a338b3ff5dc53f44f0b3cbea31967d1b5e4c39c6e0bdb", 0x48}], 0x1) r1 = socket$inet(0x2, 0x8003, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffde7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x55}, 0x3, 0x0, 0x0, &(0x7f0000001300), 0x0) setsockopt(r1, 0x0, 0x1f, &(0x7f0000000340)="15337ac0", 0x4) (async) r2 = socket$inet(0x2, 0x3, 0x40) sendto$inet(r2, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) ioctl$BIOCIMMEDIATE(r3, 0x8010427e, &(0x7f0000000040)=0x8) (async) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt(r4, 0x6, 0x8, 0x0, 0x0) ioctl$BIOCGDLTLIST(r3, 0xc010427b, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[0x4, 0xaf, 0x3, 0x0, 0x9]}) getpid() r5 = socket(0x11, 0x3, 0x0) recvmmsg(r5, &(0x7f00000000c0)={{0x0, 0x30, &(0x7f0000000100), 0x248, 0x0}, 0xbfff}, 0x1c, 0x2042, &(0x7f0000000880)={0xa, 0x5}) 398.330648ms ago: executing program 2 (id=29): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae31800004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 397.835749ms ago: executing program 4 (id=30): mknod(0x0, 0x2000, 0x6d4) mknod(&(0x7f0000000280)='./file0\x00', 0x1, 0x1e60) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f00000002c0)={0x4, 0x4e, 0x2100009, 0x5c0, 0x1, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10027, 0x6, 0x71001}, {0x9, 0xc, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x800a, 0x400}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x203, 0x2000002, 0x99}, {0xce1, 0x15, 0x4f8, 0xa}, {0x6, 0x300, 0x55, 0x40000008}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x8001, 0x0, 0x103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0x7, 0x5, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc377}, {0x0, 0x427, 0x69}, {0x8008, 0x8000001, 0x101002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chmod(&(0x7f0000000940)='./file0/file0/..\x00', 0x20) munmap(&(0x7f00004d5000/0x4000)=nil, 0x4000) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x7, 0x0, 0x3, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = kqueue() r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r2, 0x5) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x8200, 0x0, 0xfffc}}}}}}) kevent(r1, &(0x7f0000000000), 0x135, &(0x7f0000000100), 0x6, 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r3, 0x8020699f, &(0x7f0000000100)) 397.042722ms ago: executing program 2 (id=31): socket(0x11, 0x3, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000513000004000000000000040000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0xa, 0x0, 0x0) (async) sendto$unix(r0, &(0x7f0000000000)="b1000513000004000000000000040000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0xa, 0x0, 0x0) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) select(0x37, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1}, {0x1}, {0x0, 0x1}, {0x1, 0x400003}, {0x0, 0x5}, {0x1, 0x7e}, {0x2, 0x4}, {0x3, 0x8000004}, {0x1, 0xffffffff}, {}, {0x0, 0x40}, {0x0, 0x201}, {0x3}, {0x0, 0x1000}, {0x2, 0x4}, {0x0, 0x8}, {0x2, 0x1}, {0x2, 0x10000000}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0x6}, {0x1}, {0x5, 0x5}, {0x2, 0x400}, {0x2, 0xfffffffc}, {0x2}, {0x0, 0xfffffffd}, {0x1}, {0x1, 0xfffffffa}, {0x3}, {0x2, 0xa}, {0x2, 0x102}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x14, 0x0, 0x37) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) (async) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f00000002c0)={&(0x7f0000000280)=[{0x48, 0x1}, {0x25, 0x81}, {0x8c, 0xe}], 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSMOUSEIO_SETMODE(r1, 0x80045726, &(0x7f0000000300)) (async) ioctl$WSMOUSEIO_SETMODE(r1, 0x80045726, &(0x7f0000000300)) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x8, 0x5) syz_emit_ethernet(0x1bc, &(0x7f0000000340)={@empty, @remote, [{[{0x88a8, 0x1, 0x1, 0x4}], {0x8100, 0x0, 0x1, 0x3}}], {@ipv4={0x800, {{0x29, 0x4, 0x0, 0x21, 0x1a6, 0x64, 0x8, 0xf6, 0x32, 0x0, @empty, @multicast1, {[@ra={0x94, 0x4, 0xcfc1}, @ra={0x94, 0x4, 0x18b0}, @lsrr={0x83, 0x7, 0x7, [@multicast2]}, @timestamp={0x44, 0x1c, 0x4, 0x0, 0x2, [{[@remote={0xac, 0x14, 0x0}], 0x1}, {}, {[@loopback], 0x4f63}, {[], 0x8}]}, @ssrr={0x89, 0x1b, 0xf6, [@loopback, @multicast2, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @empty]}, @rr={0x7, 0xf, 0x6, [@loopback, @multicast1, @multicast2]}, @lsrr={0x83, 0xf, 0xa, [@remote={0xac, 0x14, 0x0}, @broadcast, @multicast2]}, @noop, @ssrr={0x89, 0x2b, 0x81, [@local={0xac, 0x14, 0x0}, @multicast2, @multicast2, @broadcast, @multicast1, @loopback, @multicast1, @multicast1, @multicast2, @multicast1]}]}}, @tcp={{0x2, 0x1, r3, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x8, 0x0, 0x5, {[@window={0x3, 0x3, 0xb}]}}, {"5755b53de3148611bc8c56a154ffc456beddd4c8d2c76d83d56fb8e95fe6d8c461fa92f912416e00c616a0f3770498b152ea94608e19565c23e475011868da0e8d568a0c0f49d5eeeb6651bd84cd43f3be0fe5def39f179692d03f78dbea559e7ea7de42fde9673fe804b3c71aa5120f64ca787a31f3b114c7543c13c95f5039db3f71f07e1bc29c36dd38ea150cb75cb89e6bf5e0c84d113659efea435fec1800cca5b37b25e3cbdf96c5d44d9285e396e8691db83b4ae6db1eb5cb8ca78e2dd446741d7b7a481f74f9cbf44f6d80e11d5cce9d5b24fefc306dbd7b3c487ee9943ba8bb7ee792fdaed1"}}}}}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) fcntl$lock(r4, 0x7, 0x0) (async) fcntl$lock(r4, 0x7, 0x0) minherit(&(0x7f000056d000/0x12000)=nil, 0x12000, 0x0) 396.647375ms ago: executing program 6 (id=32): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f0000000f80)={{'\x00', './file0\x00', 0x6a, 0x1}, 0x0, 0x428, 0xffffffffffffff0f, 0x1, 0xdb, 0x8, 0xffffffff, 0x2f00, 0x3}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40615, 0x1fd) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000200)={0x894c987a711d9854, 0x0, 0xfff, 0x30000000000}) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) 349.382622ms ago: executing program 2 (id=33): ioctl$DIOCNATLOOK(0xffffffffffffffff, 0xc0504417, &(0x7f0000000080)={@v6=@rand_addr="e6e3f0c1edeccd4d558f55a8b1c0609b", @v4, @v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@mcast1, 0x1, 0x5, 0x10, 0x43, 0x4, 0x8, 0x2, 0xf5, 0x2}) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$vm(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) open(0x0, 0x18289, 0x1f0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) select(0x40, &(0x7f0000000000)={0x1, 0xfffffffffffffff9, 0x800, 0x2, 0x0, 0x8000, 0x5, 0x7}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x0}) 348.997236ms ago: executing program 4 (id=34): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460000000000000000041", 0xe, 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500120051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 348.733598ms ago: executing program 7 (id=35): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BIOCPROMISC(r0, 0x20004269) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x637f) select(0xfffffffffffffef1, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x214, 0x8, 0x5}, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r2 = socket(0x18, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kill(0xffffffffffffffff, 0xe) sendsyslog(0x0, 0xfec3, 0x9) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000380)={&(0x7f0000000100)='./file0\x00', 0x86e, 0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000280)="5d75661baaf99fa99b8843b5092604584a783c9edf81b72d6b1c0b1073b92cb5bc6ac399547118ca9ade02c54cef69bbf51f7779b4d5bb03ee945d0105524d6a128ea47325b984670666c4574f16290c4524e8cb321e1a7c3bfb31afed7acb5f2bc7216b5ef382c157634794aea8baac1b8331ca12bef387843a354b3ed2adf3c75614ab06fe0da0735de8a0c4b7bdf5184a9013718303def9ee8ed5f626b60cd63b6e2d53c9fcd7f444ab49e7cad6998988ba1887ddc9e6d87af7217e3ae220302751cb7b4b3112d51c75f3d9eaffde", 0xd0, 0xc}) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000000000000000000000000001", 0x6}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) 348.040435ms ago: executing program 4 (id=36): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = shmget$private(0x0, 0x2000, 0x84, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, 0xffffffffffffffff) shmctl$SHM_UNLOCK(r2, 0x4) shmget$private(0x0, 0x3000, 0x440, &(0x7f0000ffd000/0x3000)=nil) poll(&(0x7f0000000180)=[{r1, 0x42}], 0x1, 0xfff) closefrom(r0) 345.361677ms ago: executing program 6 (id=37): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x1, 0x0, @empty, @rand_addr=0xffffff}, @tcp={{0x0, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x0, 0x0, 0x5}}}}}}) (async) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) sendmmsg(r1, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x6) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000140)=0xc) minherit(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2) 1.856363ms ago: executing program 0 (id=38): socket(0x2, 0x3, 0x2f) select(0x40, &(0x7f0000000180)={0x8000000000000000, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x55, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x4) listen(r1, 0x4) execve(0x0, 0x0, &(0x7f0000000140)=[&(0x7f00000000c0)='\x00']) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r2 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$BIOCSRTIMEOUT(r2, 0xc0307006, &(0x7f0000000080)={0x200000000001, 0x10}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x4c) r4 = socket(0x10, 0x5, 0xcb) setsockopt$sock_int(r4, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) shutdown(r4, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000000)={0x6, 0x1d}, 0x2, 0x0, 0x0, &(0x7f00000001c0)="53f8309a6f857e04e2", 0x9) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x401}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x81}, {0x3, 0x1}, {0x0, 0x20}, {0x3, 0x5}, {0x3, 0x1}, {0x1, 0x4}, {0x1, 0xffffffff}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x800}, {0x2}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x3, 0x8001}, {0x1, 0x200060}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r8, r8, r8) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{r7, r8, r7, r8, 0x8f, 0x1a10}, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x4}) r9 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)=@abs={0x2, 0x0, 0x0, 0x1}, 0x8, &(0x7f0000000400)=[{&(0x7f0000000440)="c2c18b175d860bb57b89f29fd1320c7700a87a6024cde61a9804d72cac9067436fa745b835a06f97f51a9a689f95802c930a580b598a0357e5852161666755a486807b3a039a", 0x46}, {&(0x7f0000000300)="204b9dcff190f549ebf5859a2ba9ab8c580240a60fd6d895a1cd224d3cd438398d7179aa5772df255372306608b82c6d69465d604f206d", 0x37}, {&(0x7f0000000340)="c955f62fc28419e0b5c8713788345ce0d83d034bad2289bcc99a0b39c44791f80a73bc2bec57a6322614c77f666f65cd7443f78c38feb12e026d2319b374f287ca1ea22d7a6ec99ded18383153601e978c9c7b196b7f62cf128b0a4273fea9eb80a5df343b709555db2c88e1af1778d01837c25e6eacf61120a71e1614bac2b6fb5ec16701d1f7a2071dafdaee41d310cda349d9d42890c41201584621a50a3ba8c2e5d1aa5896f435e267", 0xab}], 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="16000000ffff000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r3, @ANYBLOB="18000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="18000000ffff00e500200000b805bf93adc745a71897d0196b6c74", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="18000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r6, @ANYRES32=r9, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0], 0x94, 0x3}, 0xdc2002b6636ff9bc) sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) shmctl$IPC_RMID(0x0, 0x0) 1.494365ms ago: executing program 1 (id=14): r0 = socket(0x2, 0x3, 0x2) r1 = socket$inet6(0x18, 0x3, 0x0) accept$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r2, 0xffff, 0x1025, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt(r1, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04aee1f", 0x4) socket$inet(0x2, 0x3, 0x28) shutdown(r0, 0x2) r3 = socket$inet(0x2, 0x3, 0x40) setitimer(0x2, 0x0, 0xfffffffffffffffe) sendto$inet(r3, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) r4 = socket(0x1, 0x8002, 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r5 = socket(0x18, 0x3, 0xa3) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0x3ff, 0x8020000000000001}}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) connect$inet6(r4, &(0x7f0000000140)={0x1c, 0x18, 0x3, 0x3, "d5ca25447a63f986e94f8195b14fb055", 0x1}, 0x1c) socket(0x2, 0x3, 0x2) (async) socket$inet6(0x18, 0x3, 0x0) (async) accept$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10) (async) socket$unix(0x1, 0x5, 0x0) (async) getsockopt$sock_int(r2, 0xffff, 0x1025, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) setsockopt(r1, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04aee1f", 0x4) (async) socket$inet(0x2, 0x3, 0x28) (async) shutdown(r0, 0x2) (async) socket$inet(0x2, 0x3, 0x40) (async) setitimer(0x2, 0x0, 0xfffffffffffffffe) (async) sendto$inet(r3, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) (async) socket(0x1, 0x8002, 0x1) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) socket(0x18, 0x3, 0xa3) (async) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (async) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0x3ff, 0x8020000000000001}}, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) (async) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) (async) connect$inet6(r4, &(0x7f0000000140)={0x1c, 0x18, 0x3, 0x3, "d5ca25447a63f986e94f8195b14fb055", 0x1}, 0x1c) (async) 1.259583ms ago: executing program 4 (id=39): r0 = syz_open_pts() readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4085, 0xff5}], 0x1) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000240)={0x200079, 0x215fcbc3, 0x3, 0xfffff620, "590113d22022b1c858669613a6683400000600", 0x3, 0xfffffffc}) r1 = socket$unix(0x1, 0x5, 0x0) closefrom(r1) r2 = semget$private(0x0, 0x4, 0x0) semctl$GETALL(r2, 0x0, 0x6, 0xfffffffffffffffe) chroot(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x78) r3 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0xb5219f1000b913f1, 0x1) getsockopt$sock_cred(r3, 0xffff, 0x1022, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0}, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0xd02) mkdir(&(0x7f0000000180)='./file0\x00', 0x17f) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x18289, 0x43) unveil(&(0x7f0000000100)='./file0/file0/..\x00', &(0x7f0000000140)='r\x00') r5 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r5, 0xc0285108, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0, 0x18}) unveil(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000002c0)='w\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000aaaab0ffffffff83080046f4001cfffc0000057800"/42]) r6 = open(&(0x7f0000000440)='./file0\x00', 0x80, 0x48) r7 = getuid() setreuid(r7, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getsid(0x0) connect(r4, &(0x7f00000000c0)=@in6={0x1c, 0x18, 0x1, 0x9, "b69e58f34850809c181242db5212a50d", 0x6}, 0x1c) setsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000480)={r7, r8, r9}, 0xc) 908.775µs ago: executing program 5 (id=40): socket(0x2, 0x1, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x209, 0xfffffffe, 0x3, 0x0, 0xfffffff7, 0x2, 0x7ffffffe, 0x1, 0x1, 0x2000004, 0x5d9}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) access(&(0x7f0000000040)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x100637d) r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f0000000040)=[{0x0, 0xee3a}], 0x1) execve(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r2 = open(&(0x7f0000000a80)='./file0\x00', 0x800, 0x51) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000300)=0x7) ioctl$TIOCSWINSZ(r2, 0x80087467, &(0x7f0000000080)={0x400, 0x6, 0x6, 0x1ff}) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb", 0x2}], 0x1) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000380)={0x80000000, 0xf, 0x2, 0xfffff6b3, "ba06f0100e58ca462faddfdd7f9ec0bbf249e7d7", 0xc, 0xc}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000002, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x0, 0x0, 0x2, 0x7}, {0x6, 0x0, 0x0, 0xffffffff}, {0x3}]}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x3d) 0s ago: executing program 7 (id=41): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4000000000, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x200007bffffffffe}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f0000701000/0x2000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x44}, {&(0x7f00000a9000/0x1000)=nil, &(0x7f000072c000/0x3000)=nil, 0x1000}, {&(0x7f000025b000/0x1000)=nil, &(0x7f0000704000/0x1000)=nil, 0x6}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000401000/0x1000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x20a}, {&(0x7f000021f000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf978}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f000031b000/0x1000)=nil, 0xd}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x1000)=nil, 0x1000009}, {&(0x7f0000108000/0x11000)=nil, &(0x7f0000714000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f000051d000/0x3000)=nil, 0x1000039f7}, {&(0x7f00001e1000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x400000000005}], './file0/file0\x00', 0x1}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc028698d, &(0x7f0000000100)) chmod(&(0x7f0000000080)='.\x00', 0x3db) setuid(0xffffffffffffffff) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0xee) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffbfffffffffffd, 0xffffffffffffffff}) ftruncate(r0, 0x48001000007) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. pckbd_enable: command error Connection to 10.128.1.94 closed by remote host. panic: free: size too large 100 > 16 (0xffff800000c556c0) type rtable Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND db_enter() at db_enter+0x25 panic(ffffffff834d4f5e) at panic+0x1cf free(ffff800000c556c0,5,64) at free+0x690 rtfree(fffffd806dc1b778) at rtfree+0x34e rt_ifa_dellocal(ffff8000015fca00) at rt_ifa_dellocal+0x1ea in_purgeaddr(ffff8000015fca00) at in_purgeaddr+0x1c5 in_ifdetach(ffff8000015e4800) at in_ifdetach+0x7e if_detach(ffff8000015e4800) at if_detach+0x322 tun_clone_destroy(ffff8000015e4800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a86fb10) at if_clone_destroy+0x1d5 tun_dev_close(5d05,7) at tun_dev_close+0x1d9 spec_close(ffff80002a86fbd0) at spec_close+0x417 VOP_CLOSE(fffffd807ea0a100,7,fffffd8007ffd958,ffff80002a736a68) at VOP_CLOSE+0x129 vn_closefile(fffffd806dc22c38,ffff80002a736a68) at vn_closefile+0x11d end trace frame: 0xffff80002a86fcf0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: free: size too large 100 > 16 (0xffff800000c556c0) type rtable ddb> show kasan No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834d4f5e) at panic+0x1cf free(ffff800000c556c0,5,64) at free+0x690 rtfree(fffffd806dc1b778) at rtfree+0x34e rt_ifa_dellocal(ffff8000015fca00) at rt_ifa_dellocal+0x1ea in_purgeaddr(ffff8000015fca00) at in_purgeaddr+0x1c5 in_ifdetach(ffff8000015e4800) at in_ifdetach+0x7e if_detach(ffff8000015e4800) at if_detach+0x322 tun_clone_destroy(ffff8000015e4800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a86fb10) at if_clone_destroy+0x1d5 tun_dev_close(5d05,7) at tun_dev_close+0x1d9 spec_close(ffff80002a86fbd0) at spec_close+0x417 VOP_CLOSE(fffffd807ea0a100,7,fffffd8007ffd958,ffff80002a736a68) at VOP_CLOSE+0x129 vn_closefile(fffffd806dc22c38,ffff80002a736a68) at vn_closefile+0x11d fdrop(fffffd806dc22c38,ffff80002a736a68) at fdrop+0x121 closef(fffffd806dc22c38,ffff80002a736a68) at closef+0x190 fdfree(ffff80002a736a68) at fdfree+0x115 exit1(ffff80002a736a68,1,0,1) at exit1+0x595 sys_exit(ffff80002a736a68,ffff80002a86ff30,ffff80002a86fe80) at sys_exit+0x1a syscall(ffff80002a86ff30) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c6c181aac50, count: -21 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80002a86f790 rbx 0x10 rdx 0 rcx 0 rax 0xffff80002a736a68 r8 0x101010101010101 r9 0x8080808080808080 r10 0xd454ffc428a66aa1 r11 0x77e1bf06e7a878fd r12 0 r13 0x64 r14 0 r15 0x1 rip 0xffffffff825bcdc5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a86f780 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=106006 pid=50296 tcnt=0 stat=onproc flags process=a proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a736008,0xffff80002a797258 process=0xffff80002a78f1e8 user=0xffff80002a86a000, vmspace=0xfffffd807eed2738 estcpu=0, cpticks=4, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 67639 130499 1 0 3 0x2 0x80 nanoslp getty 66641 272150 1 0 3 0x2 0x80 wait syz-executor 94333 511568 0 0 3 0x14000 0x200 bored smr 71876 174073 0 0 3 0x14000 0x200 pgzero zerothread 66441 186633 0 0 3 0x14000 0x200 aiodoned aiodoned 59639 75876 0 0 3 0x14000 0x200 syncer update 79177 489212 0 0 3 0x14000 0x200 cleaner cleaner 80713 521205 0 0 3 0x14000 0x200 reaper reaper 55575 409481 0 0 3 0x14000 0x200 pgdaemon pagedaemon 29448 23695 0 0 3 0x14000 0x200 bored viomb 48869 354934 0 0 3 0x14000 0x40000200 acpi0 acpi0 7950 503573 0 0 3 0x14000 0x200 bored softnet0 21516 305725 0 0 2 0x14000 0x200 systqmp 2099 136151 0 0 3 0x14000 0x200 bored systq 50727 459515 0 0 3 0x14000 0x40000200 tmoslp softclock 38133 228344 0 0 3 0x14000 0x40000200 idle0 1 293666 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11015 12093K 12152K 166960K 12159 0 pcb 17 12K 12K 166960K 44 0 rtable 180 6K 8K 166960K 457 0 pf 27 12K 13K 166960K 41 0 ifaddr 31 5K 7K 166960K 57 0 ifgroup 42 1K 2K 166960K 66 0 sysctl 1 1K 9K 166960K 5 0 counters 31 17K 18K 166960K 38 0 ioctlops 0 0K 4K 166960K 42 0 iov 0 0K 8K 166960K 3 0 mount 1 1K 1K 166960K 1 0 log 0 0K 8K 166960K 5 0 vnodes 1295 81K 82K 166960K 1400 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 6 21K 81K 166960K 199 0 sigio 0 0K 0K 166960K 2 0 proc 19 25K 83K 166960K 566 0 subproc 45 2K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 66 4K 6K 166960K 121 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 396 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 54 56K 159K 166960K 3375 0 UVM aobj 6 2K 2K 166960K 6 0 pinsyscall 9 18K 89K 166960K 1367 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 5 0 NDP 11 0K 2K 166960K 36 0 temp 21 9105K 9112K 166960K 3625 0 kqueue 1 2K 22K 166960K 31 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 54 0 54 1 0 1 1 0 8 1 rtentry 136 135 0 59 4 0 4 4 0 8 0 unpcb 144 62 0 62 1 0 1 1 0 8 1 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 16 0 15 1 0 1 1 0 8 0 arp 96 22 0 10 1 0 1 1 0 8 0 inpcb 328 114 0 113 3 0 3 3 0 8 2 ip6q 80 1 0 0 1 0 1 1 0 8 0 ip6af 40 1 0 0 1 0 1 1 0 8 0 nd6 112 30 0 15 1 0 1 1 0 8 0 kcovpl 48 10 0 5 1 0 1 1 0 8 0 ppxss 1072 2 0 2 1 0 1 1 0 8 1 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 2 0 0 1 0 1 1 0 8 0 pfstate 384 1 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 573 0 220 34 0 34 34 0 8 8 art_table 40 574 0 220 6 0 6 6 0 8 0 art_node 32 135 0 64 1 0 1 1 0 8 0 shmpl 120 3 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1619 0 155 92 0 92 92 0 8 0 ffsino 256 1620 0 156 92 0 92 92 0 8 0 nchpl 144 1860 0 165 63 0 63 63 0 8 0 vnodes 216 1734 0 0 97 0 97 97 0 8 0 namei 1024 6511 0 6511 2 0 2 2 0 8 2 kstatmem 264 33 0 14 2 0 2 2 0 8 0 scxspl 216 6203 0 6203 3 0 3 3 1 8 3 plimitpl 152 33 0 23 1 0 1 1 0 8 0 sigapl 424 494 0 469 6 0 6 6 0 8 1 knotepl 120 4666 0 4649 10 0 10 10 0 8 8 kqueuepl 184 36 0 35 1 0 1 1 0 8 0 pipepl 304 136 0 109 3 0 3 3 0 8 0 fdescpl 448 481 0 472 4 0 4 4 0 8 0 filepl 120 1780 0 1674 8 0 8 8 0 8 0 lockfpl 104 18 0 18 1 0 1 1 0 8 1 lockfspl 48 9 0 9 1 0 1 1 0 8 1 sessionpl 144 26 0 24 1 0 1 1 0 8 0 pgrppl 48 37 0 27 1 0 1 1 0 8 0 ucredpl 104 87 0 84 1 0 1 1 0 8 0 zombiepl 144 477 0 469 1 0 1 1 0 8 0 processpl 1160 494 0 469 4 0 4 4 0 8 0 procpl 664 556 0 531 5 0 5 5 0 8 0 sockpl 552 231 0 230 4 0 4 4 0 8 3 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 5 1 0 1 1 0 8 1 mcl4k 4096 2513 0 2459 14 0 14 14 0 8 7 mcl2k 2048 216 0 216 5 0 5 5 0 8 5 mextrefs 64 122 0 122 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 5001 0 4943 21 0 21 21 0 8 6 bufpl 272 2279 0 102 146 0 146 146 0 8 0 anonpl 24 81647 0 80863 20 0 20 20 0 187 3 amapchunkpl 152 9315 0 9196 31 0 31 31 0 158 17 amappl16 200 1093 0 1089 4 0 4 4 0 8 2 amappl15 192 7 0 7 1 0 1 1 0 8 1 amappl14 184 437 0 437 1 0 1 1 0 8 1 amappl13 176 122 0 121 1 0 1 1 0 8 0 amappl12 168 730 0 722 2 0 2 2 0 8 0 amappl11 160 5 0 5 1 0 1 1 0 8 1 amappl10 152 60 0 60 1 0 1 1 0 8 1 amappl9 144 268 0 268 1 0 1 1 0 8 1 amappl8 136 114 0 114 1 0 1 1 0 8 1 amappl7 128 146 0 144 1 0 1 1 0 8 0 amappl6 120 165 0 165 1 0 1 1 0 8 1 amappl5 112 92 0 92 1 0 1 1 0 8 1 amappl4 104 266 0 264 1 0 1 1 0 8 0 amappl3 96 1661 0 1644 3 0 3 3 0 8 0 amappl2 88 591 0 580 2 0 2 2 0 8 0 amappl1 80 10483 0 10411 13 0 13 13 0 8 6 amappl 88 2637 0 2594 4 0 4 4 0 92 0 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 5 0 0 1 0 1 1 0 8 0 uaddrrnd 24 481 0 472 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 481 0 472 1 0 1 1 0 8 0 vmmpekpl 168 5995 0 5954 3 0 3 3 0 8 0 vmmpepl 168 39491 0 39162 81 0 81 81 0 357 41 vmsppl 368 480 0 472 4 0 4 4 0 8 1 rwobjpl 40 14175 0 13904 11 0 11 11 0 8 1 pdppl 4096 968 0 944 88 20 68 74 0 8 44 pvpl 32 216064 0 214272 75 0 75 75 0 265 32 pmappl 216 480 0 472 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 513 0 20 15 0 15 15 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834d4f5e) at panic+0x1cf free(ffff800000c556c0,5,64) at free+0x690 rtfree(fffffd806dc1b778) at rtfree+0x34e rt_ifa_dellocal(ffff8000015fca00) at rt_ifa_dellocal+0x1ea in_purgeaddr(ffff8000015fca00) at in_purgeaddr+0x1c5 in_ifdetach(ffff8000015e4800) at in_ifdetach+0x7e if_detach(ffff8000015e4800) at if_detach+0x322 tun_clone_destroy(ffff8000015e4800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a86fb10) at if_clone_destroy+0x1d5 tun_dev_close(5d05,7) at tun_dev_close+0x1d9 spec_close(ffff80002a86fbd0) at spec_close+0x417 VOP_CLOSE(fffffd807ea0a100,7,fffffd8007ffd958,ffff80002a736a68) at VOP_CLOSE+0x129 vn_closefile(fffffd806dc22c38,ffff80002a736a68) at vn_closefile+0x11d fdrop(fffffd806dc22c38,ffff80002a736a68) at fdrop+0x121 closef(fffffd806dc22c38,ffff80002a736a68) at closef+0x190 fdfree(ffff80002a736a68) at fdfree+0x115 exit1(ffff80002a736a68,1,0,1) at exit1+0x595 sys_exit(ffff80002a736a68,ffff80002a86ff30,ffff80002a86fe80) at sys_exit+0x1a syscall(ffff80002a86ff30) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c6c181aac50, count: -21 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834d4f5e) at panic+0x1cf free(ffff800000c556c0,5,64) at free+0x690 rtfree(fffffd806dc1b778) at rtfree+0x34e rt_ifa_dellocal(ffff8000015fca00) at rt_ifa_dellocal+0x1ea in_purgeaddr(ffff8000015fca00) at in_purgeaddr+0x1c5 in_ifdetach(ffff8000015e4800) at in_ifdetach+0x7e if_detach(ffff8000015e4800) at if_detach+0x322 tun_clone_destroy(ffff8000015e4800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a86fb10) at if_clone_destroy+0x1d5 tun_dev_close(5d05,7) at tun_dev_close+0x1d9 spec_close(ffff80002a86fbd0) at spec_close+0x417 VOP_CLOSE(fffffd807ea0a100,7,fffffd8007ffd958,ffff80002a736a68) at VOP_CLOSE+0x129 vn_closefile(fffffd806dc22c38,ffff80002a736a68) at vn_closefile+0x11d fdrop(fffffd806dc22c38,ffff80002a736a68) at fdrop+0x121 closef(fffffd806dc22c38,ffff80002a736a68) at closef+0x190 fdfree(ffff80002a736a68) at fdfree+0x115 exit1(ffff80002a736a68,1,0,1) at exit1+0x595 sys_exit(ffff80002a736a68,ffff80002a86ff30,ffff80002a86fe80) at sys_exit+0x1a syscall(ffff80002a86ff30) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c6c181aac50, count: -21 ddb>