last executing test programs: 5.742889554s ago: executing program 6 (id=865): syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x2000, 0x20, 0x33, 0x0, @empty, @rand_addr=0xfffffc}, @generic="33083082db0319bc6faea21ef957fee2f91586b565110965b544d405ecd557e02360d875af5d15dc3276d92e"}}}}) (async) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x40, 0x0, 0x2000, 0x20, 0x33, 0x0, @empty, @rand_addr=0xfffffc}, @generic="33083082db0319bc6faea21ef957fee2f91586b565110965b544d405ecd557e02360d875af5d15dc3276d92e"}}}}) sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) getitimer(0x60, 0x0) 5.65560121s ago: executing program 6 (id=867): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x40, 0x83) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) socket$inet(0x2, 0x2, 0x0) ioctl$DIOCRCLRTABLES(r1, 0xc450443c, &(0x7f0000003380)={{'./file0\x00', './file1\x00', 0x14}, 0x0, 0x0, 0x0, 0x1, 0x4, 0x9, 0x6, 0x42, 0x200}) ioctl$VNDIOCSET(r0, 0x80046478, &(0x7f0000000040)={0x0, 0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x0, 0x0, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) munlock(&(0x7f00004da000/0x1000)=nil, 0x1000) r2 = semget(0x0, 0x1, 0x281) semop(r2, &(0x7f0000000080)=[{0x53ed7e204bb87408, 0x7, 0x1800}], 0x1) ioctl$WSKBDIO_GETBELL(r0, 0x40105704, &(0x7f0000000040)) select(0x40, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000200)={0xcea, 0x20010, 0x80000002, 0x1, 0x1, 0x3, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0xfffffffffffffffa, 0x0, 0x1, 0x0, 0x9}, 0x0, 0x0) 5.110627993s ago: executing program 2 (id=886): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f00004ae000/0x2000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f00006a0000/0x3000)=nil, 0x9}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd10]}) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc10016ed", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x4001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) (async) connect$unix(r0, &(0x7f0000000000), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) (async) r1 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x0) setitimer(0x1, 0x0, &(0x7f0000002940)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r2 = syz_open_pts() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsid() ioctl$TIOCSCTTY(r2, 0x20007461) r5 = fcntl$getown(r2, 0x5) fcntl$setown(r4, 0x6, r5) fcntl$setown(r3, 0x6, r5) (async) fcntl$setown(r3, 0x6, r5) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000a80)=""/110) (async) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000a80)=""/110) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x60) (async) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x60) chroot(&(0x7f0000000200)='./file0/file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x3fe) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x3fe) setuid(0xffffffffffffffff) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$unix(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d420000000000000020fafd3493776665d40000f5ff34", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0x409) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.937072065s ago: executing program 2 (id=895): setuid(0xee01) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) setreuid(0x0, 0xee01) r0 = syz_open_pts() setregid(0x0, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000500)=0x7) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x9, 0x0, 0x0, 0x0, 0xfffffe0c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000540)="07d4d416c4820d778be9c4c6934b4298aacdba554c203d1731abc5bd68933c0a5d294a1b098ce8f2d921c6e325302735b2d2bb9e8487a7b4d045b0d723c5151c95e21c45d0b4aa32e946e53429aabbf2d83d1a68c44e350e00ba855489c6ca367f979ad834734547aa0fdeca1e8548eac2", 0x71}], 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x200, 0x2f, "1800e6234f5d7a0000005409456200", 0x3, 0x7}) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4) setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) r3 = semget(0x0, 0x1, 0x281) semctl$GETVAL(r3, 0x1, 0x5, 0x0) 4.835167512s ago: executing program 6 (id=898): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x60, 0x3, 0x7, 0xffffffff}]}) sysctl$hw(&(0x7f0000000000)={0x6, 0xf}, 0x2, &(0x7f0000000040)="eb523011", &(0x7f0000000080)=0x4, &(0x7f00000000c0), 0x0) 4.829760289s ago: executing program 6 (id=901): r0 = socket$inet(0x18, 0x3, 0x42) getsockopt(r0, 0x3a, 0x12, 0x0, 0x0) (async) getsockopt(r0, 0x3a, 0x12, 0x0, 0x0) setgid(0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0xc01) 4.584477517s ago: executing program 6 (id=904): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) listen(r0, 0x0) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) sendto$unix(r1, 0x0, 0x0, 0x401, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/54, 0x36}, 0x800) r4 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) poll(&(0x7f00000000c0)=[{r4, 0xae98cd7e8d4e801f}], 0x1, 0x9) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000040)="d7", 0x1}], 0x1) readv(r4, &(0x7f0000000500)=[{&(0x7f0000000100)=""/209, 0xd1}], 0x1) ioctl$TIOCSETAW(r4, 0x802c7415, &(0x7f00000001c0)={0x0, 0x4d, 0x0, 0x400, "f19f8999ec36ba43f5919862f30f1ab953b76e67", 0x5, 0x6}) setrlimit(0x1, &(0x7f0000000000)={0xffffeffffffffffd, 0xfffffffffffdffff}) r5 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) chmod(&(0x7f00000000c0)='./file1\x00', 0x8) chroot(&(0x7f0000000740)='.\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) 4.580349746s ago: executing program 2 (id=907): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, 0x0, 0x5, 0x0) (async) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffffa, 0x96, 0x80, 0x2, 0x3}], 0x4, 0x0, 0x2, 0x0) (async) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$FIOASYNC(r3, 0x80047470, &(0x7f0000000000)=0x2) (async) ioctl$FIOASYNC(r4, 0x80047460, &(0x7f00000000c0)=0x4) readv(r3, &(0x7f0000000280)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1) (async) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0x8020699b, &(0x7f00000001c0)) (async) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x80007fd, 0x0) 4.380982373s ago: executing program 6 (id=911): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) (async) setuid(0xffffffffffffffff) (async) semctl$GETVAL(0x0, 0x2, 0x5, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x3, 0x3, 0x1, 0xe, "e04537ad708fe59ca12d8f31d4b7950371986597", 0xd, 0x18}) (async) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) (async) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) (async) r3 = syz_open_pts() close(r3) (async) syz_open_pts() (async) ioctl$FIOASYNC(r2, 0x80047466, &(0x7f0000000200)=0x100001) socket$inet(0x2, 0x3, 0x0) (async) select(0x40, &(0x7f0000000180)={0xffffffffdffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000044}, 0x0, 0x0, 0x0) (async) ioctl$FIONREAD(r1, 0x80206913, &(0x7f0000000100)) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = socket(0x2, 0x2, 0x0) getsockopt(r5, 0x0, 0x4, 0x0, 0x0) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r4}, 0xffffffffffffffff, 0x13, 0x2, 0x0, 0x8000000000000001}, {{r4}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) (async) ioctl$TIOCSTAT(r4, 0x20007465) 4.007959679s ago: executing program 2 (id=922): syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x3, 0x63c) syz_extract_tcp_res(&(0x7f00000000c0), 0x0, 0x8) (async) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, 0x41424344}, 0x0, 0x8) syz_emit_ethernet(0x87, &(0x7f0000000100)={@local, @empty, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x51, 0x6, 0x30, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x3, r0, r1, 0x0, 0x0, 0x12, 0x90, 0x10, 0x0, 0x3, {[@sack={0x5, 0x16, [0x9, 0x1, 0x0, 0x5, 0x665]}, @window={0x3, 0x3, 0x40}, @generic={0x11, 0x9, "16aad1d9b323db"}, @generic={0x1, 0xd, "f5185a0ecc095910883e8d"}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}]}}, {"2d2ff0d4f29ca8b77e"}}}}}}}) 4.007275589s ago: executing program 2 (id=923): r0 = socket(0x18, 0x2, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async, rerun: 64) r1 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa81000d0008078cf19efde079f04535bad9ab90f3c08c83969f61da937fe08723aa08e75437c57399135d215e5864804ee1b3377fabe29cbcba36a9a5c91b5fb140399bf83cfd257127d9c78f4678a074ecb6d53de6be743eb4"]) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x12, 0x0) ioctl$FIONREAD(r0, 0x80206916, &(0x7f00000001c0)) 4.000292722s ago: executing program 2 (id=927): pwritev(0xffffffffffffffff, &(0x7f0000000080), 0xfffffffffffffe3, 0x99b) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="065174640b7f5c84e16561e05acc07e336cfe592ff6e55f7f13591184ebab37dbaf10947e8505d6b78f3447a3e3efe77d739be12fe4897437240ff8d677dc172ba57b73c07ea6bf6bc8ab13634709c4d52274248a5df4351d26f7adb6781e7cb8f6c50de03e89d6d03", 0x69}, {&(0x7f0000000500)="85b28423f07d08109c73a42fcfaf0cac00fd49a5974ff6a5f6c4adbc05314bd8ae9a773800b2ab2a74546ddd73bb4619804a9f4c70ce4542c80442fadf973c496fe14ad07099f771", 0x48}, {&(0x7f0000000800)="7be3387de02cbff3f0e71c3fcdc872de008acc513b062ef22889550331eb7ced7f5e3defa5c5f9f333ff926dd6bfed127f1836802499badb19972b3e972e227483d56ed753212e64107a79b326677bcb20b758c74880326dfde7d85dc8ce040b90453d20c2e81fcce4a28316ab047daf433ba9dca6ec1ae828f6a59fc9131ff7d05d90a717372f2b5d5265d1856a48f2739fdb7c5f6267ec2620aa073fc700e624d350ed7b3037ea73de260e5a50fa75edf3bfa9a37a93030e0af7af2107568d", 0xc0}], 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="10000000ffff00000100"], 0x10, 0x8}, 0x4) kqueue() r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) sysctl$hw(&(0x7f0000000340)={0x6, 0xe}, 0x2, &(0x7f0000000380)="5d895e8d9f799d", &(0x7f0000000440)=0x7, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r2, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x10000) r3 = syz_open_pts() ioctl$FIOASYNC(r3, 0x80047460, &(0x7f00000000c0)=0x8) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000100)="a9a3c266421ba31f958fee419857162609", 0x11}], 0x1) kqueue1(0x4) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000001c0), 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200), 0xc) setgid(0xffffffffffffffff) r4 = getegid() setregid(r4, 0x0) setresgid(0x0, r4, 0x0) kqueue1(0x4) ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000a40)={'./file0\x00', 0x7, 0x5, 0x4}) r5 = socket(0x18, 0x1, 0x0) getsockopt(r5, 0x29, 0x2e, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000240)={0x0, 0x3}) openat$vmm(0xffffffffffffff9c, &(0x7f0000000280), 0x8, 0x0) socket$inet(0x2, 0x4, 0x7) accept$inet6(0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)=0x1c) open(&(0x7f0000000340)='./file0\x00', 0x40000, 0x124) 2.393696393s ago: executing program 5 (id=972): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$kern(&(0x7f0000000100)={0x1, 0x20}, 0x2, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x1c, 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) setreuid(0xee00, 0x0) r1 = getuid() r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000080)=@abs={0xff, 0x0, 0x0, 0x2}, 0x8) chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f00000001c0)) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) 2.235975388s ago: executing program 5 (id=979): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCNOTTY(r0, 0x20007471) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x10000, 0x7f, 0x24, 0x618, "7eb5ae1e9e42178c57c1e80a6faa7ef0c865f9c6", 0x3, 0x1c2}) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000080)={0x2, 0x4, 0x9, 0x6}) ioctl$TIOCGFLAGS(r0, 0x4004745d, &(0x7f00000000c0)) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x200, 0x159) mknodat(r2, &(0x7f0000000140)='./file0\x00', 0x80, 0x54a15cce) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000180)={0x200, 0xfffb, 0x0, 0x9d44}) ioctl$TIOCGFLAGS(r0, 0x4004745d, &(0x7f00000001c0)) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) getdents(r2, &(0x7f0000000240)=""/150, 0x96) r4 = dup2(r3, r0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r4, 0xc028575d, &(0x7f0000000300)={0x4, 0x5, './file0\x00', 0xdc, 0x0, 0x3, 0xd}) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000000340)=0x5) ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f0000000380)=0x8001) ioctl$DRM_IOCTL_MODE_CURSOR2(r4, 0xc02464bb, &(0x7f00000003c0)={0x2, 0x1, 0x5, 0x3, 0x1, 0x1, 0x0, 0xb9f, 0xf}) ioctl$PCIOCGETROM(r4, 0xc0107005, &(0x7f0000000440)={{0xe0, 0x1, 0x4d}, 0x7, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000480)={0x80000000, 0xfffffc01, 0x80000001, 0xf, "a1a9f880d4807b9743a44a433c0fb5bef19b04ea", 0x0, 0x8}) ioctl$TIOCNXCL(0xffffffffffffffff, 0x2000740e) ioctl$WSDISPLAYIO_GETPARAM(r4, 0xc0205759, &(0x7f00000004c0)={0x2, 0x3, 0x0, 0x8000}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000540)={&(0x7f0000000500)=[0x6, 0xc, 0x4, 0x10, 0x9, 0x678], 0x6, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x8010640d, &(0x7f0000000580)={0x7, 0x88f8}) ioctl$KDSETMODE(r4, 0x20004b0a, &(0x7f00000005c0)=0x1) socket(0x20, 0x4, 0x3) select(0x40, &(0x7f0000000600)={0x200, 0x2000000000000000, 0x2, 0xfffffffffffffff9, 0x6ba, 0x3, 0x8, 0x8000000000000000}, &(0x7f0000000640)={0xffffffff7fffffff, 0x2, 0x15, 0x3, 0xfff, 0x5, 0xfffffffffffff7a6}, &(0x7f0000000680)={0xfffffffffffffff8, 0x1bf1, 0x9, 0x4, 0x2, 0x2, 0x7, 0xffffffffffffffe2}, &(0x7f00000006c0)={0xfffffffffffffb29, 0x3}) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000700)) ioctl$TIOCOUTQ(r1, 0x40047473, &(0x7f0000000740)) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x8, 0x0) ioctl$BIOCLOCK(r6, 0x20004276) 2.153846357s ago: executing program 5 (id=983): select(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0) 2.053979269s ago: executing program 5 (id=987): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000040)) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x807ff, 0xa4, 0x2, 0x0, 0x80000001, 0x7, 0x40010002, 0x10, [{0x3, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x8, 0xfffffff9}, {0x101, 0x81, 0x8, 0x9}, {0x4, 0x10001, 0x8012, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0x7, 0xffffffff, 0x6, 0x6}, {0x1000006, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1004, 0x4}, {0x1ce, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0xfffe, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0x5, 0x5, 0x4}, {0x0, 0x1, 0x0, 0x6f0}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) getrlimit(0x7, &(0x7f0000000380)) (async) sysctl$hw(&(0x7f00000000c0)={0x6, 0xf}, 0x2, &(0x7f0000000380)="6db64e525d891397a740b83a8d2c2cb6cb82c6a9c63880", &(0x7f0000000080)=0x17, 0x0, 0x0) (async) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = getuid() stat(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r2, r3) (async) getsockname(r0, &(0x7f0000000500)=@in, &(0x7f0000000540)=0x10) (async) r4 = socket(0x2, 0x1, 0x0) shutdown(r4, 0x2) poll(&(0x7f0000000180)=[{r4, 0x40}], 0x1, 0x7) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) write(r0, &(0x7f00000003c0)="690d08698118293844c111f250d82ed8a2708d785b4dbc2eb800bbfa0de636b80bc47f502cc4d22dbaf8afadeb4211eada3ea64e34eba2eda7930b73eaeeffc970f991c442b5dbf70cb273cf18bf7a689c739d64344524601ff1fbf0dca7228accc1c2df0d73", 0x66) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x1, 0x0, 0x1}, 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) chroot(&(0x7f0000000080)='./file0/file0\x00') (async) utimes(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000240)={{0x4, 0xffffffffffffffff}, {0x0, 0x8001}}) getresgid(&(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) read(r0, &(0x7f00000002c0)=""/113, 0x71) 2.052922875s ago: executing program 1 (id=989): r0 = socket(0x18, 0x1, 0xfe) getpeername$inet6(r0, 0x0, &(0x7f0000000080)) 2.028921872s ago: executing program 5 (id=990): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x16f) getpgrp() futimes(r0, 0x0) 1.903121455s ago: executing program 1 (id=992): syz_open_pts() mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xf66d, 0xe6fc, 0x9, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x400, 0xfffff197}) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x2}, 0x4, &(0x7f00000002c0)="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", &(0x7f0000000180)=0x17b, &(0x7f00000001c0)="1a7e0fba3699af3278aef08b0c8a67d363619be2afe8ed2e29190388980c54cb9eea960490ae2e45c26b5ed26727864402ee2b3cb0fbcac42ff7473f7783ac1b848a2e4e803c886ae075b7beecb345de5560670bbb26249c38458cc5a41df04a46cc66511e26413cc177d54dc7a1f7837716c9006cb37294b71df89d62f8bb6b09e563b93994a9de2fc9126df4f67e9d42578b9b9a791a223a737bda86b61843271f8d0ba0a804574fb43d91603972573158a11df28c8bdb02c22aed9cffe06f6e687cc3a063cd26cf7a687a2cd58578ad04be5006efed", 0xd7) sysctl$net_inet_gre(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="b3ec1747e9b6ccd50c640969ea4e0a", 0xf) r1 = socket(0x2, 0x8002, 0x0) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x18, 0x6, 0xc}, 0x4, &(0x7f0000001bc0)="9b0214c3", &(0x7f00000002c0)=0x4, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) r3 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x1c0) read$audioctl(r1, &(0x7f00000009c0)=""/4096, 0x1000) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSTOP(r4, 0x2000746f) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0x0) futimens(0xffffffffffffffff, &(0x7f0000000c40)=[{0x7ff, 0xfffffffffffffffd}, {0x86fd, 0x9}]) ioctl$FIOASYNC(r3, 0x80047460, &(0x7f0000000140)) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000000)={0x2001, 0x7, 0x9, 0xfffffbfc, "e8a5973b95390d23119fd164229399c8036429d3", 0x3, 0xffffff1c}) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) closefrom(r2) socket(0x18, 0x1, 0x0) r6 = socket(0x2, 0x4001, 0x0) close(r6) fstat(r6, 0x0) 1.895866089s ago: executing program 5 (id=994): syz_emit_ethernet(0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa1b08b494c8a8677e1b2f1dbb1e01f7aaaaaaaaaaaaaabb08651f2ebf2cff5e6e0200010000"]) syz_open_pts() sysctl$hw(&(0x7f0000000080)={0x6, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) r0 = syz_open_pts() r1 = dup3(0xffffffffffffff9c, r0, 0x2) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000ac0)={0x4, 0x2, {0x7, 0xf3}}) close(r0) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) kevent(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9b68, 0x0) socket(0x18, 0x3, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x2fe) syz_extract_tcp_res(&(0x7f0000000b00), 0x0, 0x5) setuid(0xee01) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt(r3, 0xffff, 0x0, &(0x7f00000000c0)=""/241, &(0x7f00000001c0)=0xf1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000080)={0x99e, 0x7, 0x9, 0xc, "721d4a722b2821a4060000000100020000dc09ee", 0x9b41, 0x9}) ioctl$TIOCOUTQ(r2, 0x40047473, &(0x7f0000000200)) ioctl$TIOCSTAT(r2, 0x20007465) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7fd}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000123000/0x3000)=nil, &(0x7f0000369000/0x3000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000204000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffdffffffffff9}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0xe}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fa}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x2}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25582a5c]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000080)='./file0\x00', 0x80000000000206, 0x0) r4 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r4) 1.874799746s ago: executing program 0 (id=996): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) symlink(0x0, 0x0) r1 = socket(0x18, 0x3, 0x0) setitimer(0x1, &(0x7f0000000140)={{0xf32b46f, 0x100800000000009}, {0x7ffeffffffffffff, 0x10001}}, 0x0) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, 0x0) ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100)) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x9) ioctl$DIOCGETSTATUS(r2, 0xc2084415, &(0x7f0000000400)) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) r4 = socket(0x18, 0x1, 0x0) getsockopt(r4, 0x29, 0xb, 0x0, 0x0) utimes(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, 0x0) 1.597657603s ago: executing program 0 (id=998): syz_emit_ethernet(0xeb, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a81900810002000800450000d50066000000069078e0000001ac1400aa4e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500180009078fffc1c09c9e1e02a2b84daa6e39f00f95530b581366e8100b761ca8fbd491f3735e11c9135768025c011d15133b7089d709c94ded9dcde89558c306c4391498bc0c8946d1b1548a51755fa701c0c28a6a1b3c6c54ed95d01e34b4ca429fc42b312fe46999e5dddc1227da6e1ee188c4111ab86e367cf0967f87e06da2cec2f2f208d242ad5c8ee229f3f367e166388c17b3c7cbbbe05004522674fdc82ed74cfaf3a592a25ee70ea4ae862baa4ca0a"]) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x3fb}) clock_getres(0x4, &(0x7f0000000000)) r0 = syz_open_pts() close(r0) syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCGETA(0xffffffffffffffff, 0x402c7413, &(0x7f0000000040)) 1.489160635s ago: executing program 0 (id=1004): kevent(0xffffffffffffffff, 0x0, 0x20000, 0x0, 0x2, &(0x7f0000000240)={0x8000000000000000, 0x3}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000040), 0x0) 1.404232171s ago: executing program 0 (id=1011): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r0 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) acct(&(0x7f0000000080)='./file0\x00') ioctl$DIOCGETRULES(r0, 0xcd604406, &(0x7f0000000280)={0x52, 0xf, 0x9, './file0\x00', './file0\x00', 0x0, "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"}) 1.277575417s ago: executing program 0 (id=1016): r0 = syz_open_pts() close(r0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r2, 0x20007461) ioctl$FIOASYNC(0xffffffffffffff9c, 0x80047469, &(0x7f00000000c0)=0x6) read(r2, &(0x7f00000003c0)=""/253, 0xfd) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000001c0)={0x2ed, 0x1, r2}) ioctl$TIOCSPGRP(r3, 0x40047477, &(0x7f0000000200)) syz_emit_ethernet(0x52, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd605f6a99001c2ca902000013b4c000000000000000000000fe8000000000000000000000000000aa2c0000000000f7004e89544e27b27647e76fd7cb3370fc40f90faa930d1ddf7987ab324f2c48d9c626bd68339c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51020800907801ff"]) writev(r0, &(0x7f0000000280)=[{0x0}], 0x1) socket$inet(0x2, 0x1, 0xf2) r4 = socket(0x1, 0x1000, 0xf) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) syz_emit_ethernet(0xca, &(0x7f00000004c0)={@local, @empty, [{[], {0x8100, 0x4, 0x1, 0x4}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xb8, 0x68, 0x20, 0x0, 0x92, 0x0, @empty, @local={0xac, 0x14, 0x0}}, @generic="92081f8fa20ac5ea5520078d413e906f9c4915066e5fc2e0ab63b18135b3f13cf30a32dadcfb3399b4b6ea25ec939ef0417d7a0804138c624da23d3621addb670e02a0acad0ff727a3df293df3a620c29e6303dd0812a570fa63f7ca33c09898f96975a82a52ebbdc91927d5d344a2331e2999b22a556b287e330d7d2a62c6a848c887b935d8ecc86e44c5abedb231cf38a4a5064784fc553ef00be48cde11fb8470f467"}}}}) mknod(0x0, 0x2000, 0x637e) open(0x0, 0x80, 0x0) r5 = syz_open_pts() ioctl$TIOCGTSTAMP(r5, 0x4010745b, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0xf0, 0xff}, {0x84, 0x11, 0x3, 0x48}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0)=""/72, &(0x7f0000000000)=0x48) r7 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000040)='#!', 0x2}, {&(0x7f00000003c0)='\n', 0x1}], 0x2) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.270994844s ago: executing program 7 (id=1018): munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x6) futimes(r0, &(0x7f0000000080)=[{0x100000001, 0x5}]) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000000c0)) r1 = msgget(0x0, 0x105) msgctl$IPC_RMID(r1, 0x0) r2 = msgget(0x2, 0x8) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x6, &(0x7f0000000140)='./file0\x00', 0x8}) ioctl$TIOCCDTR(r0, 0x20007478) msgctl$IPC_STAT(r1, 0x2, &(0x7f00000001c0)=""/110) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000240)={0xd, 0xfffffff8, 0x3, 0x0, "986fd344b7d270c806d46b479578f43829d82644", 0xffffffff, 0xfb}) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x2}, {r0, 0x2}, {r3, 0x2}], 0x3, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000300)={0x4, 0x5, 0x4, 0x8001, "200dd19b14fab51cd7bf746f95d6c548c87bb294", 0xcfd3, 0x9}) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000340)={0x3, 0x2, 0x0, 0x8000, "183d07fc4a892db03505fbe7d2ae554fd3e8f81d", 0xfffffffc, 0x1}) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) ioctl$TIOCMBIC(r4, 0x8004746b, &(0x7f00000003c0)=0x80) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0x1c, 0x18, 0x3, 0x7ff, "c3badd63e7f27ba151a67c4f54d851e5"}, 0x1c) semctl$GETALL(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000440)=""/158) ioctl$TIOCSETVERAUTH(r0, 0x8004741c, &(0x7f0000000500)) fstatat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) r6 = getuid() r7 = getgid() r8 = getthrid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000600)={{r5, 0xffffffffffffffff, r6, r7, 0x40, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0x2a, 0x7, 0x8, 0xffffffffffffffff, r8, 0xfffffffffffff774, 0x0, 0x9, 0x0, 0x8}) clock_gettime(0x2, &(0x7f00000006c0)) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000700), 0x80, 0x0) ioctl$WSKBDIO_SETMODE(r9, 0x80045713, &(0x7f0000000740)) 1.270735338s ago: executing program 7 (id=1019): sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x4}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.25642811s ago: executing program 7 (id=1021): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x8e) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r0, 0x0) r2 = syz_open_pts() fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x61, 0x100000000}) chmod(&(0x7f0000000080)='.\x00', 0x0) close(r2) syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 1.04909027s ago: executing program 1 (id=1023): select(0x40, &(0x7f0000000000)={0x1ff, 0x34, 0x3, 0x44b571c2, 0x0, 0x2, 0x9, 0x8}, &(0x7f00000000c0)={0xee, 0x100000001, 0x9, 0x1000, 0xfffffffffffffff9, 0x4, 0x8, 0x2}, &(0x7f0000000100)={0x2, 0x3, 0x4d, 0x4, 0x101, 0x9, 0x1, 0x8}, &(0x7f0000000140)={0x2, 0x7e}) nanosleep(&(0x7f00000025c0), &(0x7f0000001180)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000080)}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000001c0)={0x4, 0xb028, 0x0, 0x0, "3a6209158b50fc65c5f077713ed97495990ba7a2", 0x4, 0x40}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x840, &(0x7f0000000240)={0x34, 0xffffffffffffff80}) dup2(r1, r0) execve(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)) 974.685762ms ago: executing program 1 (id=1025): write(0xffffffffffffffff, &(0x7f00000004c0)="b96abcf5ac7cffa09ea8", 0xa) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000001c00)="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", 0xb01}], 0x35) write(r1, &(0x7f0000000080)="c30a16845e", 0x5) 971.256332ms ago: executing program 7 (id=1027): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r1, 0x0) select(0x40, &(0x7f0000000000)={0x2, 0x2, 0x786, 0x9, 0x7, 0x3, 0x8, 0x5}, &(0x7f0000000080)={0x5, 0x6, 0x101, 0xff, 0x9, 0x10001, 0x8, 0x7}, &(0x7f0000000100)={0xfffffffffffffff6, 0xebc0, 0xe42, 0x74ca, 0x1, 0x6, 0xd07, 0x9}, &(0x7f0000000180)={0xd8, 0x90}) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) pwrite(r0, &(0x7f00000000c0)="a7", 0x1, 0x40007) 970.708586ms ago: executing program 1 (id=1028): syz_emit_ethernet(0x2e, &(0x7f0000000240)=ANY=[@ANYRES32]) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$WSKBDIO_GETENCODING(r1, 0x4004570f, &(0x7f0000000040)) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x40978b, 0x10001, 0xfffffc01, 0x80a1a4, "bb08000100f167d910508bc49d7323000000007e", 0x0, 0xffffffff}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x10000001) 726.663772ms ago: executing program 7 (id=1030): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1, 0x0}, 0x40) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f00000003c0)={&(0x7f0000000380)}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffb, {[0xfffffffffffffffc, 0xa6, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x4, 0x0, 0x0, 0x1, 0x7, 0x49, 0x2, 0x100], [0x8, 0x1, 0x1, 0x8, 0xffffffffffffffff, 0x80000000, 0xfffffffffffffffc, 0x5, 0x0, 0xb81], [0x5, 0x0, 0x8f, 0x0, 0x800002, 0x0, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x0, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0x0, 0x4, 0x1000}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x6, 0x4}, {0xfffe, 0x0, 0x7}, {0x8, 0x6, 0x200, 0x8}], {0xfffe, 0x8, 0x0, 0x84d}, {0x203, 0x10, 0x84, 0x2}}}) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x38, 0x0, 0x0) r4 = kqueue() r5 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r5, 0x9, &(0x7f0000000280)={0x3, 0x0, 0x3b5, 0x100038121008c}) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20, 0x20) open(&(0x7f0000000240)='./file0\x00', 0x611, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000380)={&(0x7f00000000c0)='./file0/file0\x00', 0xf, &(0x7f0000000300)='./file0\x00', 0x8}) execve(0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) r6 = syz_open_pts() close(r6) syz_open_pts() writev(r6, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x4b}, 0x2, &(0x7f0000000200)="adfa99a30af7", &(0x7f0000000180)=0x6, &(0x7f0000000280), 0x0) r7 = semget$private(0x0, 0x1, 0x600) semctl$IPC_STAT(r7, 0x0, 0x2, &(0x7f0000000200)=""/123) kevent(r4, &(0x7f0000000140), 0xe4a, 0x0, 0xa9f9, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, &(0x7f0000000200)='~\x00\x00\x00', &(0x7f0000000040)=0x4, &(0x7f0000000080)="03004000", 0x4) sendmmsg(r0, &(0x7f0000001940)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff22}}, 0x38, 0xe) 552.828052ms ago: executing program 3 (id=1038): r0 = getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa"]) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987ab7fe", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) bind(r2, &(0x7f00000000c0)=@in={0x10, 0x2, 0x0}, 0x1c) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0}, &(0x7f0000000140)=0xc) setuid(r3) chown(&(0x7f0000000040)='./file0/file0\x00', r3, 0xffffffffffffffff) chown(&(0x7f0000000000)='./file0\x00', r0, 0xffffffffffffffff) 552.139573ms ago: executing program 3 (id=1039): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x20) r2 = getpid() ioctl$DIOCCHANGERULE(r1, 0xcd60441a, &(0x7f0000000400)={0x3, 0xb4, 0x4, './file0\x00', './bus\x00', 0x0, "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"}) r3 = getsid(r2) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r3) r4 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) clock_gettime(0x3, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r4, 0x0) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000140)="cc1cc3b5d8384e86760f978e661a5f6da1259ea2aa1d935bdfd4a0f10a9140197e6454f6b813271c08ff592c48481506a23afbffffffffffffff58ea9034a0f276eb7ac9b5e19b62360700e2c794dd55b6e40f8a781df5", 0x57}], 0x1) ioctl$TIOCSWINSZ(r5, 0x80087467, &(0x7f00000000c0)={0x5, 0x3, 0x3, 0xa7}) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 503.532682ms ago: executing program 3 (id=1041): sysctl$net_inet_tcp(&(0x7f0000003a80)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000080), 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f58f10939603ad903abf65b18d01000000000000000000000001000000af776665d4cd12c60034", 0x31}], 0x1, 0x0, 0x2, 0x2}, 0x40d) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x9, 0xfffc, 0x0, 0x0, 0x4, 0x0, 0x800000800000000}) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) (async) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000180)="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", 0x130}], 0x1) (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async, rerun: 64) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) kevent(r1, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{r1}, 0xfffffffffffffff9, 0x2, 0x40, 0x0, 0x40000000000005}, {{r1}, 0xfffffffffffffffc, 0xc0, 0x20000000, 0x4000000000005, 0x44ad}, {{}, 0xfffffffffffffff8, 0x1, 0x20, 0x1, 0x400000000000008}, {{r1}, 0xfffffffffffffffe, 0x6e, 0x4, 0xffffffff, 0xc3b}, {{}, 0xfffffffffffffffb, 0x6b28b7731859c8bc, 0x40000000, 0x9, 0x3}, {{r1}, 0xffffffffffffffff, 0x1d5, 0x80, 0xe, 0x10000}, {{r1}, 0xfffffffffffffff9, 0x14, 0x10, 0x5, 0x180000001}, {{r1}, 0xfffffffffffffffe, 0x28, 0x1, 0x103, 0xfffdfffffffffffb}], 0x282, 0x0) (async) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x3) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r3 = socket(0x2, 0x4001, 0x0) shutdown(r3, 0x0) poll(&(0x7f0000001380)=[{r3, 0x40}], 0x1, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) (async) r6 = socket(0x2, 0x2, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000012c0)={{}, 0xff5}, 0x10, 0x1002, 0x0) (async, rerun: 32) dup2(r4, r5) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r6, &(0x7f0000000000), 0x10) (async) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000001340), 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async, rerun: 64) ioctl$TIOCSETA(r2, 0xc450444d, &(0x7f0000000740)={0x0, 0x7, 0xfffffffd, 0x4, "97a2224ff1c14649ebb17a926cc9795a6b47c1d1", 0x6, 0xfffffffa}) (rerun: 64) 490.10601ms ago: executing program 3 (id=1044): r0 = socket(0x11, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0x10001, "0606f48b5c88070990bd7d7c026ba99c", 0x10}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f00000004c0)=0x480ba661) r3 = syz_open_pts() ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000600)=0x3) acct(&(0x7f0000000080)='./file0\x00') ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) 363.836153ms ago: executing program 0 (id=1047): r0 = syz_open_pts() syz_open_pts() r1 = syz_open_pts() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x33, &(0x7f0000000080), 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x0, 0xffff63db, 0x9, 0x8, 0x8, 0x8007c, 0x80000000, 0x10, [{0x5, 0x8, 0xfffff115, 0x3010}, {0x0, 0xffffffff, 0x200100, 0xffd}, {0xcd5, 0x7fffffff, 0x0, 0x9}, {0x4, 0x8020fe, 0xf, 0x2000100}, {0x6, 0x2000007, 0x5, 0x5}, {0x3993, 0xfffd, 0x8, 0x40000009}, {0x10004, 0xa00, 0x3, 0xfffffffb}, {0x207, 0xffffffff, 0x228000, 0xffffe2e9}, {0xd, 0x1000, 0x5, 0x7fff}, {0x3, 0x3, 0x5, 0xfffffd76}, {0x86, 0x0, 0x8a3a0004, 0x2000a}, {0x10000, 0x0, 0x4, 0xa6a}, {0xb, 0x0, 0x400009, 0x4}, {0x3, 0x22, 0x2, 0x6f5fc48f}, {0x3, 0xff, 0x3, 0x9}, {0x9be2, 0x5, 0xfd, 0xb}]}) r4 = kqueue() kevent(r4, 0xffffffffffffffff, 0x34, 0x0, 0xf, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) poll(&(0x7f00000007c0)=[{r0, 0x80}, {r0, 0x10}, {r0, 0x40}, {r1, 0x2}, {r0, 0x22}, {r0, 0x40}, {r0, 0x7}], 0x7, 0x40000c) getsockopt(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r6 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x2a) ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f00000000c0)=0x9) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x6) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setuid(0xee01) r7 = geteuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x100000000, 0x0, 0x200023, 0x5}) socket(0x18, 0x2, 0x0) setuid(0xffffffffffffffff) 294.644176ms ago: executing program 4 (id=1050): sysctl$net_inet_ah(&(0x7f0000000140)={0x4, 0x2, 0x33, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x2, 0x33, 0x1}, 0x4, &(0x7f0000000040)="104870d92c72274fd5630bc610964244b25ce78efb9ce9015d3f1deb9f8a67de9d6bace9a03d648c680a00a3651c1aba78bdccef39de8ac97d", &(0x7f0000000080)=0x39, &(0x7f00000000c0)="97a92ccb75b8bbd69ca354", 0xb) sysctl$net_inet_ah(&(0x7f0000000100)={0x4, 0x2, 0x33, 0x2}, 0x4, &(0x7f0000000180)="8f7fe999918ee8791b728134d89a2cad23f9311ff936f21fa78b05a6b9da9dda80da52777af192bcbfc74ce3f3fdc3df8e45fdf9ddb3a21640ba8d50463a51828e933e74901c548843b4d3ade8ea53f555cf744c48e148b1521d1bb0ac3600fef912a6f8ec085927ec1b50708594873d3425534be0de1b361e1e9bf2c19f3292585a982d3998c2785d162b990d64fb03664245c2874b687dde8e70f65975822c2e71bfdd70a99a5911084f232dbfb3c0a4bfb94b40707691eb09ff051986f97b504312b6802af2fad9f53dc851", &(0x7f0000000280)=0xcd, &(0x7f00000002c0)="86570999f09600edb104288a858c91ff4d0be66e15f30478f155ef62397c5a43e78ac1df584f93fd2ff2e91050cc5491366155f584a1d49fe46c60338f7d66f62c6b3b64d7055ccfdc9cb538c62d93f9009e2dfd5734830f8582c8b9b50146c1e2c3a639ddd5394b84d67b2e00965919086a3a7a72417a064fbaf6a1714b620019ddfa74aab35c22c355ae05fe928706de99f69e0ca643a9ef563e67d88732ea1ff0686235b954535b6393034649dbaf82fb501fece94821103a2f33829523aae5fa1f31562a64bae66e716d279b260a9648b6d7065b561d31c710eeaf138ef6058b7f0f1b89b5f278460d9b721b6e", 0xef) 293.853569ms ago: executing program 4 (id=1051): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmmsg(r0, &(0x7f0000000180)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1440}}, 0x38, 0x400) write(0xffffffffffffffff, &(0x7f0000000a00)="533b8b4632e602d1437c36c07ec1f2c9490f81558be2e75eb530986c957d89e64c7a4fc71bb0ced859febdec568e9db9ca7d5185496be7b0dcb3dd4700292f926e26a87488", 0x45) 291.881475ms ago: executing program 4 (id=1052): open(&(0x7f0000000240)='./file0\x00', 0x615, 0x16e) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x4, 0x80002001, 0x3, 0x10, [{0x4, 0xfe3, 0x6, 0x71800}, {0x23, 0x4, 0x800000, 0x7}, {0x6, 0x1, 0x9, 0xaf9}, {0x2, 0x0, 0x4f, 0xfffffffe}, {0x1, 0x3, 0x9, 0x7}, {0x2, 0x47fff, 0x10000009, 0x5}, {0x80000cdb, 0xbffffff5, 0x4, 0x6d}, {0x2000a, 0x803, 0xfdf0, 0x8}, {0x8, 0x83, 0xfffffffd, 0x82}, {0xfffffc00, 0x2, 0x7c84, 0xfffffffd}, {0xa44f, 0xfff9, 0x48a, 0xe1}, {0xcb, 0x3bb0, 0x8, 0x6}, {0x2000e0, 0x9, 0x5, 0x3ff}, {0x8, 0xfffffffc, 0xfffffff5, 0x100006}, {0x401, 0x5, 0x26, 0x3}, {0x81, 0x33, 0x3, 0x2}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) r0 = socket(0x1, 0x2, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000040)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc2, 0x3, 0x1, 0x40803, 0xfffeffff, 0x1, 0x0, 0x1, 0x2004007, 0xf5}) setitimer(0x0, &(0x7f0000000140)={{0x80000001, 0x100800000000009}, {0xfeffffff, 0xffffffffffffff77}}, 0x0) r1 = socket(0x18, 0x2, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = socket(0x18, 0x2, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r3 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}}) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) kqueue() ioctl$FIONREAD(r2, 0x80206916, &(0x7f00000001c0)) symlinkat(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') readlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x7c110232708317ba) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file0\x00', 0x7ffffffffff) 291.282188ms ago: executing program 4 (id=1053): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x50, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffa5ffffff000000000800080022000000e001000209004e", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="50080007907800f3a30e76cb3f6121b2d66550f5fd227c6cec208240e1fd4b4230"]) ioctl$FIONREAD(r1, 0x80206979, &(0x7f00000000c0)) ioctl$TIOCSETA(r0, 0xc148445f, &(0x7f0000000300)={0x2, 0x8, 0x8000, 0xfffffff9, "97a22200000000000000dc2d00800900", 0x2505, 0xfffffffe}) 290.679743ms ago: executing program 4 (id=1054): r0 = socket(0x2, 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffd2}], 0x1) readv(r1, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/236, 0xec}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000003940)='\n', 0x1}], 0x1) readv(r1, &(0x7f0000000780)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x2) shutdown(r0, 0x1) ioctl$FIONREAD(r0, 0xc0287533, &(0x7f0000000440)) 65.545706ms ago: executing program 3 (id=1055): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) open(&(0x7f0000000840)='./file1\x00', 0x201, 0x8) (async) r0 = open(&(0x7f0000000840)='./file1\x00', 0x201, 0x8) fcntl$setstatus(r0, 0x4, 0x108) writev(r0, &(0x7f0000000980)=[{&(0x7f00000001c0)="a32c834b409893ccddca8015f1202762f349804ec5fc0f54f5f9c81d7c7824388851ee0abae0c43b2f598d14ae49fcd273fc5468db668b8d87a93dee508de7b5d15c26b90d41bfe3d1dee40d6e89e5cff0673436004112ee943668eea01a22e4a61edf2d7f2b713b7d3df64e707442f39b9491ec566e1cb9ede2a98100ef0367a597d9362f86dedd19a16574b494962edd0c78bf645a4020852f07530e183a1b96579b9f5d7a", 0xa6}, {&(0x7f0000000380)="71765e9e7304ab45f342ccb373b4b3317beb276f39d985675d7c9a5d8d4910377bdef62e9f33146b817222bac03c6d9807fab8e1a244f156f253562e9593cb09dc1ac578333ea4cfb5ee32fb23d5303deb845905fd9178960e6f7b31d0d7f8551eef6873208adb37aaab3971817d1353d03bff02bf2cf8dd2599e6698d420037d035211d390ae3f0097f63bcf25032c320298ea55155df98892a9df364c1dc93c4194d2c4bd8b270b071122127f0eda86057dc10a8907613f49f66a1", 0xbc}, {&(0x7f00000002c0)="c2cc4a2d49b44a48b9e8f6a378a058e40035df3620a017f3431a93db286b6e3aa1cc26a865a3f0f204d6c42fc2ffed5374c58a13957632d55bb0a07c1c7fbbb51c64f7b90b7f33862ff080091661e2563852", 0x52}, {&(0x7f0000000440)="6926c2472fc2b13461ab185632512175e29d9cc3b212878a17ee4dad5513b7896fab1a9547bd7f1551420c55bbb12c604fc01b7a2bf526bb6b7ec71708b44f8b743b8504b5e3912ff1830a865cb719f4ea466cdce5f3cdf8945260752e5a7c4e039f74adba6d86c9c5a0976449de0b34706f12ee9b644b8683cd8071925722b318773d18a72e622a04d50c4f54be8bde1eb24b6c9105ecd2461f6d66b9b90ccb17f27bdef3fbb1aab5f4ceb8287648fc380a84bf93436563b150274b8be9c6a56dedd299a7f2b1833ddc883e8d4a8e801c738af097836e42b4f9f5e3dfba77364c58c24e2a90d27081e2be32", 0xec}, {&(0x7f0000000540)="9c7b46233c90e6a0be2e6d50eb845297d42d64daa40e1dff34889c5f942fa14e7f2e5cc157d81b181f501b98faffb45110794a42349de8420d69f508ef13cac74c209e89260d0722da5671c73c5c0fbf449b6b567315ca53a1d6713a398d6652c28f20817847819605e3a5b48671832752cd70adca5980515b41a589dc5325881c81170af61fdc28470532399e5f01bfad7962c60441f193e0194ed65c8b57d056f2bd46f206d92a85ff3513f7d3aec4896f97485adc0d36bda93f748b55212d2c55f329268a2d6c3328c9479ef32778072930e7aa5879acf3a5b187f781ac0600b050dddb180aafa4d4709fa8671cefdfd5fc0c141a3576d3", 0xf9}, {&(0x7f0000000640)="b9fd2ce7c20effc972c03cb2fa606f8a1e8935e3a22df15918dcf7889cf080301c36b19c4c1e751dc29bb196a08c6d9c957366c1ef97229fdcebb444848d8abc6520a81af4006b4e19f8ccab42fabd69ce7a26603d7ff5f939c78a23a1950b8e2c33161a3f78219a46f31ee0b4832da98c179953bce95267b03bf8b6f7b1fbfbe7d792f809f0693360dde00b68", 0x8d}, {&(0x7f0000000700)="dfef0baef7c89bac52b49ef279891188f54f8b620f6d94ddf1fa68acfe5fe165df10dbe3449277c1fcd698091c090abb6fafeda2afcfdc742e4da905cb100ab4a3e5d26f30cbcaa0e49411f632d3bf2e907d", 0x52}, {&(0x7f0000000780)="773b1e820ea4ff2fc02522194fa4601f77ed68850a7a34b379e1bff367f3fa0e9121699d190707bdf271f7467309f8ffb48addbc6e71e767ee2f27b395d1311bacb2b0ec5b425a39ec17ccbb05fc5709", 0x50}], 0x8) (async) writev(r0, &(0x7f0000000980)=[{&(0x7f00000001c0)="a32c834b409893ccddca8015f1202762f349804ec5fc0f54f5f9c81d7c7824388851ee0abae0c43b2f598d14ae49fcd273fc5468db668b8d87a93dee508de7b5d15c26b90d41bfe3d1dee40d6e89e5cff0673436004112ee943668eea01a22e4a61edf2d7f2b713b7d3df64e707442f39b9491ec566e1cb9ede2a98100ef0367a597d9362f86dedd19a16574b494962edd0c78bf645a4020852f07530e183a1b96579b9f5d7a", 0xa6}, {&(0x7f0000000380)="71765e9e7304ab45f342ccb373b4b3317beb276f39d985675d7c9a5d8d4910377bdef62e9f33146b817222bac03c6d9807fab8e1a244f156f253562e9593cb09dc1ac578333ea4cfb5ee32fb23d5303deb845905fd9178960e6f7b31d0d7f8551eef6873208adb37aaab3971817d1353d03bff02bf2cf8dd2599e6698d420037d035211d390ae3f0097f63bcf25032c320298ea55155df98892a9df364c1dc93c4194d2c4bd8b270b071122127f0eda86057dc10a8907613f49f66a1", 0xbc}, {&(0x7f00000002c0)="c2cc4a2d49b44a48b9e8f6a378a058e40035df3620a017f3431a93db286b6e3aa1cc26a865a3f0f204d6c42fc2ffed5374c58a13957632d55bb0a07c1c7fbbb51c64f7b90b7f33862ff080091661e2563852", 0x52}, {&(0x7f0000000440)="6926c2472fc2b13461ab185632512175e29d9cc3b212878a17ee4dad5513b7896fab1a9547bd7f1551420c55bbb12c604fc01b7a2bf526bb6b7ec71708b44f8b743b8504b5e3912ff1830a865cb719f4ea466cdce5f3cdf8945260752e5a7c4e039f74adba6d86c9c5a0976449de0b34706f12ee9b644b8683cd8071925722b318773d18a72e622a04d50c4f54be8bde1eb24b6c9105ecd2461f6d66b9b90ccb17f27bdef3fbb1aab5f4ceb8287648fc380a84bf93436563b150274b8be9c6a56dedd299a7f2b1833ddc883e8d4a8e801c738af097836e42b4f9f5e3dfba77364c58c24e2a90d27081e2be32", 0xec}, {&(0x7f0000000540)="9c7b46233c90e6a0be2e6d50eb845297d42d64daa40e1dff34889c5f942fa14e7f2e5cc157d81b181f501b98faffb45110794a42349de8420d69f508ef13cac74c209e89260d0722da5671c73c5c0fbf449b6b567315ca53a1d6713a398d6652c28f20817847819605e3a5b48671832752cd70adca5980515b41a589dc5325881c81170af61fdc28470532399e5f01bfad7962c60441f193e0194ed65c8b57d056f2bd46f206d92a85ff3513f7d3aec4896f97485adc0d36bda93f748b55212d2c55f329268a2d6c3328c9479ef32778072930e7aa5879acf3a5b187f781ac0600b050dddb180aafa4d4709fa8671cefdfd5fc0c141a3576d3", 0xf9}, {&(0x7f0000000640)="b9fd2ce7c20effc972c03cb2fa606f8a1e8935e3a22df15918dcf7889cf080301c36b19c4c1e751dc29bb196a08c6d9c957366c1ef97229fdcebb444848d8abc6520a81af4006b4e19f8ccab42fabd69ce7a26603d7ff5f939c78a23a1950b8e2c33161a3f78219a46f31ee0b4832da98c179953bce95267b03bf8b6f7b1fbfbe7d792f809f0693360dde00b68", 0x8d}, {&(0x7f0000000700)="dfef0baef7c89bac52b49ef279891188f54f8b620f6d94ddf1fa68acfe5fe165df10dbe3449277c1fcd698091c090abb6fafeda2afcfdc742e4da905cb100ab4a3e5d26f30cbcaa0e49411f632d3bf2e907d", 0x52}, {&(0x7f0000000780)="773b1e820ea4ff2fc02522194fa4601f77ed68850a7a34b379e1bff367f3fa0e9121699d190707bdf271f7467309f8ffb48addbc6e71e767ee2f27b395d1311bacb2b0ec5b425a39ec17ccbb05fc5709", 0x50}], 0x8) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0xb, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x7, 0x1, 0x71002}, {0x3, 0xe, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x8, 0x14, 0x5910}, {0x101, 0x82, 0x6, 0x3}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ce, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0xfffffffa, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x230003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000940)=@file={0x7, 0x0, './file0/file0/../file0\x00'}, 0x19, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20, 0x401}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r2 = socket(0x18, 0x1, 0x0) close(r2) socket(0x18, 0x2, 0x0) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x26, 0x0, 0x0, 0x0, 0x1f, 0x2}, 0x806) setitimer(0x2, 0x0, 0x0) (async) setitimer(0x2, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r4 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={&(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0], 0x6, 0x1, 0x2, 0x2, 0x9, 0x8, 0x7, 0x8}) open(&(0x7f0000000340)='./file0\x00', 0x10000, 0x82) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140), 0x0, 0x0, r5, 0x1ff, 0x8, 0x3, 0x2, {0x0, 0x4, 0x2, 0x9f, 0x7, 0xfe7f, 0x7f, 0x0, 0xe62, 0x60c, 0x3, 0xd66, 0x200000, 0x40, "dbc7a10187339c78e70fd5fc59368f872c5d70860edda290027dcc193c286d8b"}}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000180)={&(0x7f0000000140), 0x0, 0x0, r5, 0x1ff, 0x8, 0x3, 0x2, {0x0, 0x4, 0x2, 0x9f, 0x7, 0xfe7f, 0x7f, 0x0, 0xe62, 0x60c, 0x3, 0xd66, 0x200000, 0x40, "dbc7a10187339c78e70fd5fc59368f872c5d70860edda290027dcc193c286d8b"}}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000200)={r6, r7, 0x8, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={r6, 0x2, &(0x7f0000000100)=[0xb9, 0x62], &(0x7f0000000140)=[0x6, 0x0, 0x3ff, 0x7, 0x6], &(0x7f0000000180)=[0xb8]}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f0000000280)={r6, 0x2, &(0x7f0000000100)=[0xb9, 0x62], &(0x7f0000000140)=[0x6, 0x0, 0x3ff, 0x7, 0x6], &(0x7f0000000180)=[0xb8]}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chroot(&(0x7f0000000900)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/../file0\x00', &(0x7f0000000800)='w\x00') 62.501198ms ago: executing program 4 (id=1056): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', r0, 0x3}) close(r0) r1 = socket(0x2, 0x8002, 0x0) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f00000000c0)={0x583, 0x1}, 0x10) r2 = open(&(0x7f0000000300)='./bus\x00', 0x200, 0xa0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r2}, 0xffffffffffffffff, 0x13, 0x2}, {{r2}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) 45.60301ms ago: executing program 1 (id=1057): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x7}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, 0x0, 0x0) close(r0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x0, 0x3}}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x8) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 43.061836ms ago: executing program 7 (id=1058): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETA(r0, 0x40204103, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0x11, 0x3, 0xfffffff5}, {0x50, 0xf0, 0x9}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="800f00ecfe74000040d5ad6aa25189923a7a7d2bdcdb6870f8e9ab4cdf0c596df50f7f471d4faba9", &(0x7f0000000000)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[]) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f00000000c0)={0x4, 0x401, 0x5, 0xa, "97a2e900", 0x8, 0xfffff800}) r2 = syz_open_pts() fstat(0xffffffffffffffff, 0x0) setsid() ioctl$TIOCSCTTY(r2, 0x20007461) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) 0s ago: executing program 3 (id=1059): r0 = openat(0xffffffffffffff9c, 0x0, 0xb5219f1000b913f1, 0x26) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f4001c0067000000069078e0000001ac1400aa4e224e23000890786f0ecf7c4d09fc66ad5a82ac4c63d380f40bbb94b2833fd3faf0df38470f44d77141cce45ba48845033dd6638dcee23172b6a8020000"]) mknod(0x0, 0x2000, 0x2e00) fstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x100) r2 = syz_open_pts() mkdir(&(0x7f0000000100)='./file0\x00', 0x100) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0x0) unveil(&(0x7f00000007c0)='./file0/../file0\x00', &(0x7f00000000c0)='c\x00') unveil(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='r\x00') openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') r3 = socket$inet6(0x18, 0x1, 0x6) accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0xdb8, "ff7fffff0400010000000036a6bbd300", 0x7}, 0x1c) r4 = socket$inet6(0x18, 0x8000, 0x6) mprotect(&(0x7f000048b000/0x1000)=nil, 0x1000, 0x2) bind$inet6(r4, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x4, "000000145f1000000000000000000001", 0x44}, 0x1c) fcntl$lock(r2, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) syz_emit_ethernet(0x138, &(0x7f0000000300)=ANY=[@ANYBLOB="4d76be1eff024efad4293f090000000000000043becc978696fde89419dc6c6a5e4579023b644ecdac3b9ed86a6ba19e6eceaf4588b57a9fd2185277ba5be3631999626f1a3d397d08b633ba609904361a187b40e664a36a58af5c8f3a890f7aa221eaaa06c94efe2e602bcf9c902d1a4fe6d9473e5858ef920563d1fe49383edd7727fc414cad35a1173e"]) mprotect(&(0x7f00003b0000/0x4000)=nil, 0x4000, 0x1) r5 = socket(0x2, 0x3, 0x1) connect$unix(r5, &(0x7f0000000000), 0x10) getpeername$inet6(r5, 0x0, &(0x7f0000000200)) poll(&(0x7f0000004a80)=[{0xffffffffffffff9c, 0x20}, {0xffffffffffffffff, 0x40}], 0x2, 0x0) flock(r2, 0x1) flock(r2, 0x3) dup2(r0, r1) fcntl$lock(r2, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd8068ec9a60, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 lo0: can't handle af0 wStopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806fd47e98,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806fd47e80,1) at rw_do_enter_write+0xba rrw_enter(fffffd806fd47e80,1) at rrw_enter+0xc6 VOP_LOCK(fffffd806fe515f8,2001) at VOP_LOCK+0xbd vn_lock(fffffd806fe515f8,2001) at vn_lock+0xa4 vn_closefile(fffffd807b4e11f8,ffff80003a7dafb8) at vn_closefile+0x111 fdrop(fffffd807b4e11f8,ffff80003a7dafb8) at fdrop+0x121 knote_drop(fffffd806011cbc0,ffff80003a7dafb8) at knote_drop+0x1a1 knote_remove(ffff80003a7dafb8,fffffd806f59d2a0,fffffd806f59d330,3,0) at knote_remove+0x215 knote_fdclose(ffff80003a7dafb8,3) at knote_fdclose+0xf9 fdrelease(ffff80003a7dafb8,3) at fdrelease+0xf9 syscall(ffff80003c406ca0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xac020b62820, count: -14 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003c406760 rbx 0 rdx 0xffff8000015ee6c0 rcx 0xffff80003a7dafb8 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003c406640 r9 0x8080808080808080 r10 0xc91cdfbbd68afdca r11 0x541bf9b148477d03 r12 0xfffffd8004037d00 r13 0xfffffd80048245f8 r14 0x3 r15 0xffffffff834bb629 substchar+0x10db8 rip 0xffffffff81cca605 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c406750 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=103739 pid=48956 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003a7daa88,0xffff8000fffedcb8 process=0xffff8000fffe8e90 user=0xffff80003c401000, vmspace=0xfffffd806c7009a8 estcpu=36, cpticks=1, pctcpu=0.0, user=1, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 73872 115102 36580 0 7 0 syz-executor 48956 18159 72187 0 2 0 syz-executor *48956 103739 72187 0 7 0x4000000 syz-executor 48956 266732 72187 0 3 0x4000080 fsleep syz-executor 33113 74962 24029 60929 3 0x90 nanoslp syz-executor 33113 493196 24029 60929 3 0x4000090 kqread syz-executor 33113 116071 24029 60929 3 0x4000090 fsleep syz-executor 68989 37027 52513 0 3 0x82 wait syz-executor 36580 240831 52513 0 3 0x82 nanoslp syz-executor 2241 452463 52513 0 3 0x82 wait syz-executor 86866 520095 52513 0 3 0x2 biowait syz-executor 37936 313571 52513 0 3 0x82 nanoslp syz-executor 72187 282712 52513 0 3 0x82 nanoslp syz-executor 12295 440604 52513 0 2 0x2 syz-executor 24029 430147 52513 0 3 0x82 nanoslp syz-executor 52513 99850 79643 0 3 0x82 kqread syz-executor 79643 400203 83464 0 3 0x10008a sigsusp ksh 83464 303717 19475 0 3 0x98 kqread sshd-session 19475 190724 58502 0 3 0x92 kqread sshd-session 78058 492572 1 0 3 0x100083 ttyin getty 58502 97995 1 0 3 0x88 kqread sshd 5182 75220 49988 74 3 0x1100092 bpf pflogd 49988 414023 1 0 3 0x80 sbwait pflogd 45079 420053 76061 73 3 0x1100090 kqread syslogd 76061 24345 1 0 3 0x100082 sbwait syslogd 74825 307647 1 0 3 0x100080 kqread resolvd 97483 421647 65467 77 3 0x100092 kqread dhcpleased 24519 367834 65467 77 3 0x100092 kqread dhcpleased 65467 405362 1 0 3 0x80 kqread dhcpleased 5802 520450 0 0 3 0x14200 bored smr 12587 135199 0 0 2 0x14200 zerothread 23454 77001 0 0 3 0x14200 aiodoned aiodoned 10819 256658 0 0 3 0x14200 syncer update 34301 280840 0 0 3 0x14200 cleaner cleaner 4113 306391 0 0 3 0x14200 reaper reaper 24967 76713 0 0 3 0x14200 pgdaemon pagedaemon 17091 338653 0 0 3 0x14200 bored viomb 17987 220975 0 0 3 0x40014200 acpi0 acpi0 72640 62973 0 0 3 0x40014200 idle1 45330 315872 0 0 3 0x14200 bored softnet1 58153 230702 0 0 3 0x14200 bored softnet0 26217 500975 0 0 3 0x14200 bored systqmp 19646 392245 0 0 3 0x14200 bored systq 75725 505877 0 0 3 0x14200 tmoslp softclockmp 48179 178249 0 0 3 0x40014200 tmoslp softclock 82958 301825 0 0 3 0x40014200 idle0 1 353640 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 73872 (syz-executor) thread 0xffff8000fffecd18 (115102) exclusive rwlock amaplk r = 0 (0xfffffd806c5563a8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault_check+0x8a9 #3 uvm_fault+0x106 #4 upageflttrap+0xa9 #5 usertrap+0x430 #6 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd806c700308) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 Process 48956 (syz-executor) thread 0xffff80003a7dafb8 (103739) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839e81c0) #0 witness_lock+0x5f1 #1 vn_closefile+0x41 #2 fdrop+0x121 #3 knote_drop+0x1a1 #4 knote_remove+0x215 #5 knote_fdclose+0xf9 #6 fdrelease+0xf9 #7 syscall+0xbd4 #8 Xsyscall+0x128 exclusive rwlock fdlock r = 0 (0xffff8000fffef0f0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sys_close+0xd0 #3 syscall+0xbd4 #4 Xsyscall+0x128 Process 86866 (syz-executor) thread 0xffff80002a240a78 (520095) exclusive rrwlock inode r = 0 (0xfffffd806e742100) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vget+0x2a2 #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x1a36 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x98a #11 namei+0x7ca #12 dounlinkat+0xc1 #13 syscall+0xb17 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806cba8b20) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 dounlinkat+0xc1 #8 syscall+0xb17 #9 Xsyscall+0x128 Process 12295 (syz-executor) thread 0xffff8000ffffcd00 (440604) exclusive rwlock vmmaplk r = 0 (0xfffffd806c700e78) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvmspace_fork+0x12b #4 process_new+0x577 #5 fork1+0x3f6 #6 syscall+0xb17 #7 Xsyscall+0x128 exclusive rwlock vmmaplk r = 0 (0xfffffd800b0638a0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvmspace_fork+0x44 #4 process_new+0x577 #5 fork1+0x3f6 #6 syscall+0xb17 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11079 12119K 12418K 166960K 13647 0 pcb 18 13K 14K 166960K 273 0 rtable 207 9K 10K 166960K 552 0 pf 33 17K 22K 166960K 138 0 ifaddr 36 6K 8K 166960K 95 0 ifgroup 48 2K 2K 166960K 158 0 sysctl 3 1K 9K 166960K 13 0 counters 68 36K 37K 166960K 298 0 ioctlops 0 0K 4K 166960K 1928 0 iov 0 0K 16K 166960K 54 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1386 87K 88K 166960K 2622 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 27 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 92 0 dirhash 12 2K 3K 166960K 36 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 89K 166960K 1239 0 sigio 0 0K 0K 166960K 14 0 proc 72 115K 164K 166960K 744 0 subproc 72 4K 4K 166960K 101 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 128 0 in_multi 75 5K 7K 166960K 177 0 ether_multi 1 0K 0K 166960K 20 0 mrt 1 0K 0K 166960K 31 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 139 625K 625K 166960K 139 0 exec 0 0K 1K 166960K 637 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 234 159K 194K 166960K 13468 0 UVM aobj 77 5K 5K 166960K 78 0 pinsyscall 42 84K 104K 166960K 2574 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 1K 166960K 74 0 NDP 11 0K 2K 166960K 67 0 temp 83 9084K 9152K 166960K 46765 0 kqueue 15 24K 30K 166960K 248 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 97 0 93 1 0 1 1 0 8 0 rtentry 176 162 0 78 6 0 6 6 0 8 0 unpcb 144 721 0 703 9 8 1 4 0 8 0 syncache 336 15 0 15 2 2 0 1 0 8 0 tcpqe 32 2 0 2 2 2 0 1 0 8 0 tcpcb 736 327 0 319 9 7 2 7 0 8 0 arp 136 27 0 12 1 0 1 1 0 8 0 ipq 40 1 0 1 1 1 0 1 0 8 0 ipqe 40 2 0 2 1 1 0 1 0 8 0 inpcb 328 1168 0 1154 14 12 2 7 0 8 0 nd6 152 35 0 16 1 0 1 1 0 8 0 pkpcb 40 9 0 9 4 4 0 1 0 8 0 kcovpl 48 11 0 3 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 100 0 100 3 2 1 1 0 8 1 pppxif 1576 3 0 3 3 3 0 1 0 8 0 pffrag 232 13 0 7 1 0 1 1 0 482 0 pffrnode 88 12 0 6 1 0 1 1 0 8 0 pffrent 40 27 0 21 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 3 0 3 1 1 0 1 0 8 0 pfanchor 1288 2 0 2 1 1 0 1 0 8 0 pftag 88 3 0 2 1 0 1 1 0 8 0 pfstitem 24 85 0 27 1 0 1 1 0 8 0 pfstkey 128 85 0 27 2 0 2 2 0 8 0 pfstate 448 85 0 27 7 0 7 7 0 8 0 pfrule 1360 25 0 19 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 643 0 289 32 5 27 30 0 8 0 art_table 40 646 0 289 5 0 5 5 0 8 0 art_node 32 162 0 86 1 0 1 1 0 8 0 sysvmsgpl 40 32 0 15 1 0 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 90 0 80 1 0 1 1 0 8 0 shmpl 112 75 0 1 3 0 3 3 0 8 0 dirhash 1024 34 0 17 3 0 3 3 0 8 0 dino2pl 256 3774 0 2308 93 0 93 93 0 8 0 ffsino 296 3774 0 2308 114 0 114 114 0 8 0 nchpl 144 5521 0 4941 64 41 23 64 0 8 0 rtmask 32 6 0 6 3 3 0 1 0 8 0 vnodes 216 4567 0 0 254 0 254 254 0 8 0 namei 1024 18737 0 18737 4 3 1 2 0 8 1 percpumem 16 164 0 115 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 1 1 1 0 1 0 8 0 kstatmem 264 92 0 68 5 2 3 3 0 8 1 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 3 0 3 3 3 0 1 0 8 0 scxspl 216 19883 0 19882 13 12 1 8 1 8 0 plimitpl 152 194 0 175 1 0 1 1 0 8 0 sigapl 424 1570 0 1523 7 1 6 7 0 8 0 knotepl 120 335 0 0 10 0 10 10 0 8 0 kqueuepl 224 412 0 399 6 5 1 3 0 8 0 pipepl 344 253 0 226 3 0 3 3 0 8 0 fdescpl 528 1553 0 1522 3 0 3 3 0 8 0 filepl 160 9328 0 9089 23 10 13 18 0 8 0 lockfpl 104 590 0 588 1 0 1 1 0 8 0 lockfspl 48 235 0 233 1 0 1 1 0 8 0 sessionpl 144 76 0 67 1 0 1 1 0 8 0 pgrppl 48 92 0 75 1 0 1 1 0 8 0 ucredpl 104 1913 0 1895 1 0 1 1 0 8 0 zombiepl 144 1972 0 1969 3 2 1 1 0 8 0 processpl 1232 1570 0 1523 5 0 5 5 0 8 0 procpl 664 3488 0 3437 6 0 6 6 0 8 0 sosppl 176 4 0 4 2 2 0 1 0 8 0 sockpl 752 2094 0 2058 29 24 5 17 0 8 0 mcl64k 65536 8 0 0 1 0 1 1 0 8 0 mcl16k 16384 5 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 113 0 0 15 0 15 15 0 8 0 mcl2k 2048 23 0 0 3 0 3 3 0 8 0 mtagpl 96 14 0 0 1 0 1 1 0 8 0 mbufpl 256 260 0 0 17 0 17 17 0 8 0 bufpl 280 6959 0 829 439 0 439 439 0 8 0 anonpl 32 12175 0 0 98 0 98 98 0 246 0 amapchunkpl 152 44247 0 43776 49 23 26 33 0 158 1 amappl16 200 4334 0 4300 30 26 4 16 0 8 0 amappl15 192 120 0 120 1 1 0 1 0 8 0 amappl14 184 462 0 461 1 0 1 1 0 8 0 amappl13 176 158 0 146 1 0 1 1 0 8 0 amappl12 168 1856 0 1828 2 0 2 2 0 8 0 amappl11 160 9 0 7 1 0 1 1 0 8 0 amappl10 152 64 0 50 1 0 1 1 0 8 0 amappl9 144 268 0 268 1 1 0 1 0 8 0 amappl8 136 115 0 113 1 0 1 1 0 8 0 amappl7 128 176 0 162 1 0 1 1 0 8 0 amappl6 120 203 0 201 1 0 1 1 0 8 0 amappl5 112 158 0 146 1 0 1 1 0 8 0 amappl4 104 361 0 342 1 0 1 1 0 8 0 amappl3 96 8973 0 8864 4 0 4 4 0 8 0 amappl2 88 742 0 679 2 0 2 2 0 8 0 amappl1 80 19862 0 19269 22 6 16 19 0 8 0 amappl 88 12401 0 12239 5 0 5 5 0 92 0 uvmvnodes 80 127 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 256 0 256 2 2 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 77 0 1 2 0 2 2 0 8 0 uaddrrnd 24 1553 0 1522 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1553 0 1522 1 0 1 1 0 8 0 vmmpekpl 168 15676 0 15627 3 0 3 3 0 8 0 vmmpepl 168 112574 0 110688 121 23 98 111 0 357 0 vmsppl 488 1552 0 1522 5 0 5 5 0 8 0 rwobjpl 80 33899 0 32754 35 6 29 33 0 8 0 pdppl 4096 3113 0 3044 127 56 71 83 0 8 2 pvpl 32 20474 0 0 166 1 165 165 0 265 0 pmappl 256 1552 0 1522 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 328 0 78 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff838f9ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839e79c0) at __mp_lock+0x190 intr_handler(ffff80002a310380,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f Xspllower() at Xspllower+0x1d uvm_fault_upper(ffff80002a310650,ffff80002a310688,ffff80002a310550) at uvm_fault_upper+0x526 uvm_fault(fffffd806c700208,6cf50299000,0,2) at uvm_fault+0x198 upageflttrap(ffff80002a3107f0,6cf50299078) at upageflttrap+0xa9 usertrap(ffff80002a3107f0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7618fb38e060, count: -12 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806fd47e98,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806fd47e80,1) at rw_do_enter_write+0xba rrw_enter(fffffd806fd47e80,1) at rrw_enter+0xc6 VOP_LOCK(fffffd806fe515f8,2001) at VOP_LOCK+0xbd vn_lock(fffffd806fe515f8,2001) at vn_lock+0xa4 vn_closefile(fffffd807b4e11f8,ffff80003a7dafb8) at vn_closefile+0x111 fdrop(fffffd807b4e11f8,ffff80003a7dafb8) at fdrop+0x121 knote_drop(fffffd806011cbc0,ffff80003a7dafb8) at knote_drop+0x1a1 knote_remove(ffff80003a7dafb8,fffffd806f59d2a0,fffffd806f59d330,3,0) at knote_remove+0x215 knote_fdclose(ffff80003a7dafb8,3) at knote_fdclose+0xf9 fdrelease(ffff80003a7dafb8,3) at fdrelease+0xf9 syscall(ffff80003c406ca0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xac020b62820, count: -14