last executing test programs: 3.015807058s ago: executing program 1 (id=477): r0 = socket(0x2, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000180)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x22}, 0x0) r1 = syz_open_pts() mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000000029, 0x2a, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000005, 0x101, 0x80000001, 0x80000005, 0x10001, 0x10, [{0x0, 0x0, 0x4, 0x71000}, {0x8, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0xfffffffe, 0x9}, {0x1, 0x800, 0x8007}, {0xc844, 0x200726, 0xf63, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x58}, {0x6, 0x78, 0x8000, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0xfffe, 0xc, 0x3}, {0x26, 0x9, 0x9, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffc, 0x1, 0x6}, {0xc, 0x7, 0x5}, {0x3, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0x2e1, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x23) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f00000002c0)={0x10, 0xffffffff, [{&(0x7f0000fff000/0x1000)=nil, &(0x7f0000752000/0x4000)=nil, 0x7}, {&(0x7f00006be000/0x1000)=nil, &(0x7f000044b000/0x3000)=nil, 0x6}, {&(0x7f00005cd000/0x1000)=nil, &(0x7f00002d0000/0x3000)=nil, 0x7}, {&(0x7f00006de000/0x2000)=nil, &(0x7f000054f000/0x4000)=nil, 0x1}, {&(0x7f00002b0000/0x3000)=nil, &(0x7f0000092000/0x2000)=nil, 0x1}, {&(0x7f000075f000/0x3000)=nil, &(0x7f00004f7000/0x4000)=nil, 0x200}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000023c000/0x1000)=nil, 0x1}, {&(0x7f00005c6000/0x4000)=nil, &(0x7f0000291000/0x4000)=nil, 0x7}, {&(0x7f00007c3000/0x2000)=nil, &(0x7f00003c4000/0x3000)=nil, 0x6}, {&(0x7f00001a1000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f00001be000/0x3000)=nil, &(0x7f00003ec000/0x4000)=nil, 0x3}, {&(0x7f0000234000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x6}, {&(0x7f0000399000/0x3000)=nil, &(0x7f00006d7000/0x2000)=nil, 0xffff}, {&(0x7f000040e000/0x2000)=nil, &(0x7f00006c6000/0x2000)=nil, 0x9}, {&(0x7f000069e000/0x2000)=nil, &(0x7f0000701000/0x2000)=nil, 0xc3}, {&(0x7f00000e4000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x8000000000000001}], './bus\x00', 0x7f}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r4, 0x20004101, 0x0) ioctl$TIOCDRAIN(r1, 0x2000745e) 3.015275291s ago: executing program 5 (id=478): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r1, 0xfffffffc) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) getsockopt(r0, 0x2, 0x8, &(0x7f0000000040)=""/17, &(0x7f0000000080)=0x11) r2 = accept(r0, &(0x7f00000000c0)=@un=@file={0x0, ""/48}, &(0x7f0000000100)=0x32) bind(r2, &(0x7f0000000140)=@un=@file={0x1, './file0\x00'}, 0xa) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) msync(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$WSDISPLAYIO_LDFONT(r4, 0x8058574d, &(0x7f0000000200)={'./file0\x00', 0x81, 0x21ea7b96, 0x6, 0x1, 0x6, 0x4, 0xcefa, 0x1, 0x1, 0x2}) ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f0000000280)={'./file0\x00', 0x5, 0x2, 0x3, 0x1, 0x1ff, 0x400, 0x3, 0x2, 0x1, 0x40}) close(r4) sendto$unix(r0, &(0x7f0000000300)="53302a727636a0ab1da017e7bdb3d23125613518ac497bbf41a1b07ce70d1ac9ec8628bca9a2ad141acc7089390d530da539c43dc7d63e67eb0b942ae43edd5bcc76a80c510ecd3aeae8acea6e2ae4c14ee8979119975bd8eadd45671bacf17b7785bf8ca66ef2d1982b7e18bddd9b1b13728fa42db1b793a8f982ff836692428cd5b5ead74f348ad898fb9c078da10b036708ff3076c93e868a868836ab103b17687fd35fef2de50a224465a5740a1c66f80efafa1088d2cdfe68bae1a14e98412ed1c84ea9ecce22733ecd940f6196dda53d40387882422bb7715eb24d", 0xde, 0x4, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000440)={0xffa4, 0x3, 0x7ff0000, 0x10001, 0x7, 0x0, 0x401, 0x10, [{0xfff, 0xfffffff5, 0x9, 0xbb}, {0x6, 0x5, 0xb89d, 0x10}, {0x7fffffff, 0x800, 0x7, 0x7}, {0x3ff, 0x7fffffff, 0x712, 0xf097}, {0x8001, 0x5, 0x7, 0x6}, {0x9, 0x7f, 0xfff, 0x1}, {0xf0, 0x1, 0x9, 0x6}, {0x200, 0x2, 0x651, 0x3b1f}, {0x4, 0xff, 0x7, 0x1}, {0x7, 0x9, 0x101, 0x1}, {0x0, 0x6, 0x1}, {0x4, 0xfffffff7, 0x800, 0x9}, {0x101, 0x10, 0x200, 0x8}, {0x3, 0xd, 0x3, 0x8d5}, {0x8, 0x5, 0x165a3364, 0x3}, {0x6175, 0x4, 0x7, 0x4}]}) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000005c0)={0x0, 0x200, 0x1, 0x5ba, "a97887bc8a1340feed02614784cd431b606a7c74", 0x5, 0xb}) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000600)={'./file0\x00', 0x4, 0x5, 0x4, 0x1, 0x800, 0x2, 0x6, 0x0, 0x1, 0x40, 0x7}) mknod(&(0x7f0000000680)='./file0\x00', 0x100, 0xc) close(r4) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) ioctl$VMM_IOC_CREATE(r4, 0xc2585601, &(0x7f00000006c0)={0x10, 0x7, [{&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x100000001}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9b}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x80000000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0xc}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x224254bb}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x2}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0xc74}, {&(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}], './file0\x00', 0x1}) execve(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000a40)=[&(0x7f0000000900)='/dev/wsmouse\x00', &(0x7f0000000940)='/dev/wsmouse\x00', &(0x7f0000000980)='/dev/wsmouse\x00', &(0x7f00000009c0)='f%}^-:\x00', &(0x7f0000000a00)='%{\\%{!\x00'], &(0x7f0000000b40)=[&(0x7f0000000a80)='/dev/wsmouse\x00', &(0x7f0000000ac0)='/dev/wsmouse\x00', &(0x7f0000000b00)='/dev/wsmouse\x00']) r6 = socket$inet6(0x18, 0x4000, 0x7) close(r6) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000b80), 0x80, 0x0) ioctl$VNDIOCSET(r7, 0xc0384600, &(0x7f0000000c40)={&(0x7f0000000bc0)='./file0\x00', 0x2, &(0x7f0000000c00)='./file0\x00', 0x8}) ioctl$TIOCMGET(r3, 0x4004746a, &(0x7f0000000c80)) socket$inet(0x2, 0x1, 0x2) 2.839935577s ago: executing program 5 (id=482): sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000500)="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", 0xfffffd2e}], 0x1) write(r0, &(0x7f0000000000)="b6914d", 0x3) socket(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) munlock(&(0x7f00003ef000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) 2.539726788s ago: executing program 1 (id=484): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0xbc, 0x2, 0x100, 0x3, "58092b20b42b67eaaa88ed3b4f78ae44b55d43b0", 0x43d55541, 0x3a}) ioctl$TIOCCDTR(r0, 0x20007478) r1 = dup(r0) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000080)) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f00000000c0)=0x8) ioctl$TIOCSDTR(r1, 0x20007479) ioctl$TIOCGTSTAMP(0xffffffffffffffff, 0x4010745b, &(0x7f0000000100)) ioctl$TIOCSCTTY(r1, 0x20007461) r2 = syz_open_pts() ioctl$TIOCDRAIN(r2, 0x2000745e) r3 = getpgrp() fcntl$setown(r1, 0x6, r3) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setreuid(r4, 0x0) kevent(r1, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffff8, 0x88, 0x2, 0x7fff, 0x1}, {{r2}, 0xfffffffffffffffd, 0x18, 0x20000000, 0x7, 0x800}, {{r2}, 0xfffffffffffffffa, 0x197, 0x8, 0x7, 0x1}, {{r0}, 0xfffffffffffffff8, 0x90, 0x1, 0x5, 0x9}, {{r2}, 0xfffffffffffffff8, 0x20, 0xfffff, 0x7, 0xbc6}, {{r1}, 0xffffffffffffffff, 0x8a, 0x2, 0x394, 0x7}, {{r1}, 0xfffffffffffffffb, 0x80, 0x8, 0x5, 0xfff}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x61, 0x4, 0xe76, 0x7ff}, {{r0}, 0xfffffffffffffff8, 0x3, 0x1, 0x4, 0x5}, {{r1}, 0xfffffffffffffffb, 0x49, 0x10, 0xd, 0x80}], 0x214, &(0x7f0000000300)=[{{r2}, 0xfffffffffffffffb, 0x86, 0x2, 0x9, 0xbb}, {{r1}, 0x6, 0x22, 0x80000000, 0x3, 0x7}], 0xf, &(0x7f0000000340)={0x3}) ioctl$TIOCMBIS(r2, 0x8004746c, &(0x7f0000000380)=0x3) select(0x40, &(0x7f00000003c0)={0x5, 0x2, 0x4, 0x2, 0x6, 0x1, 0x100000000, 0x49}, &(0x7f0000000400)={0x11, 0x3, 0x9, 0xffffffffffffff80, 0xffffffffffffffff, 0x1fb, 0x9, 0x3bc}, &(0x7f0000000440)={0xfffffffffffffff9, 0x3ff, 0x40, 0x9385, 0x2, 0x3, 0xd6, 0x7}, &(0x7f0000000480)={0x5d00, 0x2}) openat$diskmap(0xffffffffffffff9c, &(0x7f00000004c0), 0x20, 0x0) sysctl$hw(&(0x7f0000000500)={0x6, 0x6}, 0x2, &(0x7f0000000540)="90bad4b91e98e9f519a43953c0937269427e1e8891662320e8cb6e8498d5fd2f361afb980d7fa69adb02c8d50c6638bff330b77f4d3a0f40beccee543dc15ef869069d8f4adf61d9f3b498dceaff11c10a41226f59b5ba660389060efa47b2603341abbb47cac75fc2972534b8fcb8d3a8823147b0aeac4d50bab23ae530883efb7e0177e1384f16f1f7fadd1fbd0dc1dacbec2e05ee971ac9", &(0x7f0000000600)=0x99, &(0x7f0000000640)="7e5fbc7ff2f28836205ab26b11d5a18a8fad4d", 0x13) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000006c0)="fa2aaf0324b6cb153205a6206dd09c21f7f5de41657416d62b45edb298e6c87e3abf245d206c3cf39493898e18ed3d7a40b76733831249d66fb11843ade41fea244b23528d", 0x45}, {&(0x7f0000000740)="63a31e08c41ff22748b484ddc9686676400e3d0d4adcd2226ea533cf0d2acff9fa2c2328c17e38601f2b1ce2c179c06114d752895d8e5dcc0c5e820b734c6b99b297ecb51752d4e9016dfda4e8637d9adc43df55b73a4182d563ff200f3c45a1f8a3a3f8185d5505742c514080d316b7cdda8ad5012b2bde96779a7dd1d988caa80bfb617b536af30048f0f6d7252a27eecd011523b5534d697a635adb7939a24eabca7cfc353795902277a4dba60d3a1c37866e1bf48dc867d850e4cc0b72173c32beb5", 0xc4}], 0x2) openat$tty(0xffffffffffffff9c, &(0x7f0000000880), 0x20, 0x0) select(0x40, &(0x7f00000008c0)={0x0, 0x8, 0x3, 0x7fffffffffffffff, 0x7fff, 0x8000000000000001, 0xffffffffffffffd7, 0x5}, &(0x7f0000000900)={0x3, 0xb, 0x4, 0x7, 0xc, 0x3, 0x2}, &(0x7f0000000940)={0x1, 0x2, 0x0, 0x100, 0x17d6a89a, 0xc8b, 0x8, 0x9}, &(0x7f0000000980)={0x400, 0x8}) getsockopt$sock_int(r1, 0xffff, 0x200, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) r6 = openat$pci(0xffffffffffffff9c, &(0x7f0000000a40), 0x80, 0x0) ioctl$PCIOCWRITE(r6, 0xc0107003, &(0x7f0000000a80)={{0x78, 0x5, 0x6}, 0x1000, 0xffff8000, 0x7}) syz_extract_tcp_res(&(0x7f0000000ac0), 0xdd8d, 0x7) ioctl$WSMUXIO_LIST_DEVICES(r5, 0xc1045763, &(0x7f0000000b00)={0x7, [{0x3, 0xeab2}, {0x3, 0x50}, {0x2, 0x2}, {0x3, 0x4}, {0x3, 0x10000}, {0x1, 0x10000}, {0x3, 0x3}, {0x3, 0x4}, {0x2, 0xd}, {0x2, 0x1}, {0x2, 0x2c3}, {0x3, 0x101}, {0x3, 0xe00000}, {0x1}, {0x3, 0x5}, {0x3, 0x7}, {0x3, 0x2}, {0x2, 0x2}, {0x3, 0x6}, {0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x1, 0x80}, {0x1, 0x7}, {0x1, 0x9}, {0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x3}, {0x3, 0x4}, {0x2, 0xfff}, {0x3, 0x4}]}) syz_extract_tcp_res(&(0x7f0000000c40), 0x8, 0xee) 2.182241718s ago: executing program 1 (id=484): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0xbc, 0x2, 0x100, 0x3, "58092b20b42b67eaaa88ed3b4f78ae44b55d43b0", 0x43d55541, 0x3a}) ioctl$TIOCCDTR(r0, 0x20007478) r1 = dup(r0) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000080)) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f00000000c0)=0x8) ioctl$TIOCSDTR(r1, 0x20007479) ioctl$TIOCGTSTAMP(0xffffffffffffffff, 0x4010745b, &(0x7f0000000100)) ioctl$TIOCSCTTY(r1, 0x20007461) r2 = syz_open_pts() ioctl$TIOCDRAIN(r2, 0x2000745e) r3 = getpgrp() fcntl$setown(r1, 0x6, r3) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) setreuid(r4, 0x0) kevent(r1, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffff8, 0x88, 0x2, 0x7fff, 0x1}, {{r2}, 0xfffffffffffffffd, 0x18, 0x20000000, 0x7, 0x800}, {{r2}, 0xfffffffffffffffa, 0x197, 0x8, 0x7, 0x1}, {{r0}, 0xfffffffffffffff8, 0x90, 0x1, 0x5, 0x9}, {{r2}, 0xfffffffffffffff8, 0x20, 0xfffff, 0x7, 0xbc6}, {{r1}, 0xffffffffffffffff, 0x8a, 0x2, 0x394, 0x7}, {{r1}, 0xfffffffffffffffb, 0x80, 0x8, 0x5, 0xfff}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x61, 0x4, 0xe76, 0x7ff}, {{r0}, 0xfffffffffffffff8, 0x3, 0x1, 0x4, 0x5}, {{r1}, 0xfffffffffffffffb, 0x49, 0x10, 0xd, 0x80}], 0x214, &(0x7f0000000300)=[{{r2}, 0xfffffffffffffffb, 0x86, 0x2, 0x9, 0xbb}, {{r1}, 0x6, 0x22, 0x80000000, 0x3, 0x7}], 0xf, &(0x7f0000000340)={0x3}) ioctl$TIOCMBIS(r2, 0x8004746c, &(0x7f0000000380)=0x3) select(0x40, &(0x7f00000003c0)={0x5, 0x2, 0x4, 0x2, 0x6, 0x1, 0x100000000, 0x49}, &(0x7f0000000400)={0x11, 0x3, 0x9, 0xffffffffffffff80, 0xffffffffffffffff, 0x1fb, 0x9, 0x3bc}, &(0x7f0000000440)={0xfffffffffffffff9, 0x3ff, 0x40, 0x9385, 0x2, 0x3, 0xd6, 0x7}, &(0x7f0000000480)={0x5d00, 0x2}) openat$diskmap(0xffffffffffffff9c, &(0x7f00000004c0), 0x20, 0x0) sysctl$hw(&(0x7f0000000500)={0x6, 0x6}, 0x2, &(0x7f0000000540)="90bad4b91e98e9f519a43953c0937269427e1e8891662320e8cb6e8498d5fd2f361afb980d7fa69adb02c8d50c6638bff330b77f4d3a0f40beccee543dc15ef869069d8f4adf61d9f3b498dceaff11c10a41226f59b5ba660389060efa47b2603341abbb47cac75fc2972534b8fcb8d3a8823147b0aeac4d50bab23ae530883efb7e0177e1384f16f1f7fadd1fbd0dc1dacbec2e05ee971ac9", &(0x7f0000000600)=0x99, &(0x7f0000000640)="7e5fbc7ff2f28836205ab26b11d5a18a8fad4d", 0x13) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000680), 0x200, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000006c0)="fa2aaf0324b6cb153205a6206dd09c21f7f5de41657416d62b45edb298e6c87e3abf245d206c3cf39493898e18ed3d7a40b76733831249d66fb11843ade41fea244b23528d", 0x45}, {&(0x7f0000000740)="63a31e08c41ff22748b484ddc9686676400e3d0d4adcd2226ea533cf0d2acff9fa2c2328c17e38601f2b1ce2c179c06114d752895d8e5dcc0c5e820b734c6b99b297ecb51752d4e9016dfda4e8637d9adc43df55b73a4182d563ff200f3c45a1f8a3a3f8185d5505742c514080d316b7cdda8ad5012b2bde96779a7dd1d988caa80bfb617b536af30048f0f6d7252a27eecd011523b5534d697a635adb7939a24eabca7cfc353795902277a4dba60d3a1c37866e1bf48dc867d850e4cc0b72173c32beb5", 0xc4}], 0x2) openat$tty(0xffffffffffffff9c, &(0x7f0000000880), 0x20, 0x0) select(0x40, &(0x7f00000008c0)={0x0, 0x8, 0x3, 0x7fffffffffffffff, 0x7fff, 0x8000000000000001, 0xffffffffffffffd7, 0x5}, &(0x7f0000000900)={0x3, 0xb, 0x4, 0x7, 0xc, 0x3, 0x2}, &(0x7f0000000940)={0x1, 0x2, 0x0, 0x100, 0x17d6a89a, 0xc8b, 0x8, 0x9}, &(0x7f0000000980)={0x400, 0x8}) getsockopt$sock_int(r1, 0xffff, 0x200, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) r6 = openat$pci(0xffffffffffffff9c, &(0x7f0000000a40), 0x80, 0x0) ioctl$PCIOCWRITE(r6, 0xc0107003, &(0x7f0000000a80)={{0x78, 0x5, 0x6}, 0x1000, 0xffff8000, 0x7}) syz_extract_tcp_res(&(0x7f0000000ac0), 0xdd8d, 0x7) ioctl$WSMUXIO_LIST_DEVICES(r5, 0xc1045763, &(0x7f0000000b00)={0x7, [{0x3, 0xeab2}, {0x3, 0x50}, {0x2, 0x2}, {0x3, 0x4}, {0x3, 0x10000}, {0x1, 0x10000}, {0x3, 0x3}, {0x3, 0x4}, {0x2, 0xd}, {0x2, 0x1}, {0x2, 0x2c3}, {0x3, 0x101}, {0x3, 0xe00000}, {0x1}, {0x3, 0x5}, {0x3, 0x7}, {0x3, 0x2}, {0x2, 0x2}, {0x3, 0x6}, {0x2}, {0x1, 0x9}, {0x3, 0x3}, {0x1, 0x80}, {0x1, 0x7}, {0x1, 0x9}, {0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x3}, {0x3, 0x4}, {0x2, 0xfff}, {0x3, 0x4}]}) syz_extract_tcp_res(&(0x7f0000000c40), 0x8, 0xee) 1.951781511s ago: executing program 5 (id=503): r0 = socket(0x2, 0x3, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0x8) rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000002540), 0x1, 0x0) ioctl$WSKBDIO_GETENCODING(r1, 0x4004570f, &(0x7f00000025c0)) socket$inet(0x2, 0x1, 0x4) 1.728864997s ago: executing program 1 (id=510): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchmod(r0, 0x9c) close(r0) socket(0x10, 0x2, 0x10) r1 = socket(0x18, 0x1, 0x0) close(r1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7}) close(r1) ioctl$FIONREAD(r1, 0x4004667f, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x8000003, 0x5, "001a3cfcf6c07c79eb000000e7ffffff000b00", 0x544, 0xc04}) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000300)="c0", 0x1}], 0x1) read(r4, &(0x7f0000000200)=""/255, 0xff) readv(r4, &(0x7f0000000780)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x2) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000100)={'./bus\x00', 0x80, 0x8000, 0x7, 0x0, 0x4f00, 0x9, 0x100, 0x0, 0x0, 0x9, 0x9f5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mknod(&(0x7f00000000c0)='./bus/../file0\x00', 0x2000, 0x6384) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r5, 0xc0104451, &(0x7f0000000740)={0x0, 0x408, 0x80, 0x2000, "0000000000fb000000000000b34445f0388a19a0", 0x33c3300a, 0x3}) r6 = open(&(0x7f0000001440)='./bus\x00', 0x8, 0x0) ioctl$BIOCSRTIMEOUT(r6, 0xc0307004, &(0x7f0000000080)={0x1, 0x10}) ioctl$WSDISPLAYIO_ADDSCREEN(r6, 0x80245753, &(0x7f0000000000)={0x5, './bus\x00', './bus\x00'}) 1.725310992s ago: executing program 4 (id=513): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000500)="bdd2b7a0f4303973104318993b9e05b3c496d67fc08de56264b1e7b1f917d9ef5fc37fac2bf8f27348b382a0ebc1d98d4dc904c4e562c2fe1cc73492f49380e467592f13355fb37a627b54bf1adc87ec94836935c798c9a90b40ca1d541ec7fb81c1db67397e3247ffeb7e5363ae3d096881fa89ede1dab7e6b2b0016975e54b23fbc8d2412ccd86c59c6cf3cf072a5d132678909dcfee08205cb2a6021c967c733377f1df6c0db4e43832ff91e7d4a963141199010a5aef36b51d194928f3c5bc32f8e1658c2a4d042678e822f36f2594f904e84adc5d54f824665500d164b2e6f1d2385caf15a18943a560a2fef54c14ff5107bdbeb87ca19caba9432e2fe3f70154893179dc4e14a476215b3fbf814bc33c29181c01f81a94efb69f9b390bb854953fa6c83e7740e0e66c62dc2ae92d0420299a6a4d27a70b3a6dda776577ad946c98277055c731328fb80f94026a4e33422c0ac476a9686fac70363dca5c11f3fa26bae11a2808fdf8ef098c09219e74a595e6afbaef6e1649abeeba04840b56ef4749cf688d75c6c12cc134130176d708340a4558e4307b2c32517a40b9874ce66c6933e85194699e2579ab0a4e830b5f0081c276125796ab0ceb4c2028513dff15cc121da1632e86f03a5c63694a9fcde5dacfc70123160d20170cf7acc58a670a1a1beec8b3046a31e5103f327d6c61e4a29d7538ece017f29bcf0d49cd519a30e57af42a4bce7827407b5b7bc17f11dd132ce89271cdd6929b730d9152fefc6c452a3b010675c1a9834d06a47974b7c55503496a7c6841369cbd14f9199e91ef609f242bb55a690c757af8e5407b855894c7e2d56b255a7f5d5dcfbf3d06d3375d433787ed8009e80f3cf08ef3e873bab3a0437ed9f0aef106e27b68e51e20d18ed92302a2f1b7356dc847524e0f1ad4a90bcd8555aa58b5c041187b5ba6eb3d94bdc0bb60843b470fd966d43cf181ae0433ddf3915f86f24340a78b0f5e73997eb40975fed5ea0fba295588a94cc7ecf6a6c903531430ef6520a8876413710f11a7568d9e8f0add2742690bd23e1a04d909240f2565ab6c4d7c8cb265f55d4151b05159701fdfa8da6f79705edfeb9c3a3f6a2be069e7c250334018aeb961766a3d7aecb9e9b5f9860b99a18b57e64748a37f33266dcbc17be800ec954bac13756aa5d3ae21c8e435910a28f86aa64fae181bc5c86004ad3ba45defe79405b7d17015f779e146b6be1ddf1b827930eb535e3c521cdd37a9834947a9e289271a82f117845fbf5c11ce30cca96c0647bb3bdb00cb0edc5f92add240f4e6baa74244ffd3feb7e462684ac2ab67ae9dd2f5010a66282a0df57284d93678c836173c8f1f5be6f08a4e907e4c624600b5f4594839a3788c4881d9cabfad60df989411bc5f343fca1441f12379221e5e6c477b546a8b8608cbc25b5867fbf158b9aa8438c15ab978c38a251758ca0fbdc5f5df03c7c3a8f01c2bcbf4fa97cbae5df4b7ae58e0ce5a6659221eb39c8bb77b9f3b45323f9d03c709cd057db75e2cf2610163376b3238919eb0d2ba1a7e59f7304eb1eaa392b3c61463b442dad87a939b8bc9a34367934188442996201f6ff87219e3b90387c45074e22acbae31197fe675168f6043c7dd86bbf689edc11d994e7c1dcc5c94eca1f6f8cee229e548fef6a85a6007b62678e9d40ca5b880706c123b0a27d43e241264c0c61982e96d82d52f39399253a933f504af756829603bf1caddd39e34d69f7b5573fab54764208782326c3c456a447eeea21112fb6ffa6d3d1c89e489e923ca02333cf47dc449aadb391526ec0b4413d135be3c38e2da67afb715b5eb19ffb6ce65bfe3d96e305e74930d3dc27eda2ce6f44a834117764aeb5d785c34e28a56bf42c63a009e288bb1e29bbfde2d0da4310f6f898a9c47f63a0a87469198e4fdec2c5f6c7f73b73881ff024313b1936eeed32db239b76530d6cb33ce23d07b03d9776aaeced9d06edd575ea6bc707949faedc36d3a88ffc62e1996c287b0929f02a3f776830dc9adc3e7c39f0ab5b5852b8ad80b2250ee4ea4c07626cf172a2524796a959f157623e4ac201e4d206ac922dda53405629d6d298e758bae31e1dd794ef71e4bb2885573bcf457fdf433b04a853fa4224eacdcc25e32384a22c9d62bc1e206f8b6173db23cef889c6d4b8b14c4dfa3a31b973face6a03d51fa01b697ab6b37046ff916f7ce12fba575688f351bc805e38f628aa7ad3685ca0affb4f6a5a1aa62daac87064a91b72649237c793964e5996de6a4e01b6e22c7a9ef69fc980b61e14347cb2ffc6441bf5422091544f66f294569963c49c2ab3430dc5f63e96bf96196ac1cde2eac0228892a9e228d14f6654a780bb40f97fcaa837a474f78a4229a2cea00296585c8fb184f4271bcbd75d07a3d185fad8a5553d0c919396e65b085b6eb7a174803ddba11a06e4ebb998905988890079eb0a7e29d944df4ee8cd74e84481384b8eeb8528cb79cd4023cb83ce5000473401888439fea2b7f2caf25ec214454372365e95ec20b9ee2d17a637765c95347d9112eacafd20c512e47c81125f0c779e579f4e785f006660d1494974060c4f3ca6c47d245f1bd022fd00f6a0416e5bc14e97bef0e88ed5608b79d1a5d48e9a4902f1ba0491425afb62ee2aae318c2ddf5425a2d0cbcc19ebbd44443bbabf78344b1505bbe0bf06fd428d0dd5aa3dd29498784290f5cc253ad6dac11d7e1977a568ae1e4b3dfeae1e9c715958ed529ed50ce752ab728ab57be012fbee123250bb1ac1660df153b6fd1283de987b3bf1761f19e07e63fb8ec67219e68ebe6c1464b1627ae351579e6b96a6862d50765e766446d175ce78e3ab75cc6604d4b772c1a7b7569e52cb940cb79bfc60593c4ec36df233ef92416b65838d275db6fe915ad49350189e830174c671978ee89ad0067f85e4e1779f5e9f7634c2baf931955ef702825c86269545d2c5f461f95d480e8216a3c05f53c4342d3f35e17e1d843ef4c349eb9e4b4af380eb053329afa269318cb89ecd428ea8f5ad1fd4123c5a87e3393552fc3546d09f3d9b33dd2a2c5954057c6c44e400c37da0c5f40e44a8b60cf518f29c35368f558d086bd5ee7e20c0eb02a082f592345cf61827b32b6455c72961f1a212544621fe27306ac522170f36b6b83e92b8065405282521ef008da0d25cee345a2a1586082351408c5eff24d3fb0d8d43706fbafcfb2dbe1bb757f63eff092a33606dfd9f6f24a4e74dcb1e3778db8279d76fd41493a041df271778c32f307125d841b09bd8861558731198b0346a1f837ebb1d66cb2007e914bb00edafce2646de376ceb1d174c218d243a8c3b4dd65366c90166845472409159971650927317568f368c014a26b18fca8d9abf7a957c785299c86161d85e1d437c2c57a5bf8265732576bf7ed099caa21721b1845352962819d8a191401c56c32dd139cb881516fdc4744117525a15e75dcbf601817195b2092732dcea602771127aef93e2ede0f522879449b3d10ab88b6a0a2dcdbbfe118a7639d1ffd2f97d3c14e2a76745800a9351dac2530483a8f5f37342ba699500e04715916ac821c7ad432f290c3b521ce10445d8805cf0b43f58da6193efbf4070e98d8166f592588c74457a3f4966e9e3b2bd1eec335546315931933bfffc5a5ba71a96f229cd248403a395b1bdef055193942b96666f7901d2637e3709f25403c2eff1cebee334db911a8e097a502e54fdc6dd80b1040f4bcb05e2e3de7cda0c5de9b848c81c645ddda34e0d96f14ec4314749fca8649cc9610ddf450e21dbb7e821a8a075f8c1b4998e47aae89868ee1e4aaaee982ae8e9d191892f4c59343cfa55bf24e6990abaa7a7945ccc65269d1e6a6c7c9cd9690dcb09bce67196e6a2325bb6760e68edf1b0ccf663149c9d4f15ba06fc1c3c5d72b871278b6808fdab5955e9170bca809e1ee60f87e0f8ea9de8b2eb8", 0xfffffd2e}], 0x1) write(r2, 0x0, 0x0) close(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="fffffeff0b7ee29ce20e44e720dd60"]) socket$unix(0x1, 0x1, 0x0) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x3) r5 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000080)) 1.234781095s ago: executing program 0 (id=516): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x4, 0x6}], 0x203, 0x0, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x712, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x4, 0xa) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000080)="ebaa4e713048e699319a964800000000000000a7", 0x14) msync(&(0x7f00005c6000/0x3000)=nil, 0x3000, 0x6) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000180), 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$kern(&(0x7f0000000380)={0x1, 0x32}, 0x2, &(0x7f00000011c0)="71157dc7", &(0x7f0000000080)=0x4, 0x0, 0x0) 1.229925145s ago: executing program 2 (id=519): fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x300000003}) r0 = socket(0x18, 0x2, 0x0) socketpair(0x1, 0x4, 0x48, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r1, 0x1000000000029, 0x8007f, &(0x7f00000000c0)="0b7b30e11029b7da890329fc555479d3edc66f4f964727bb272b8852701be5f15f999c99f35372a21b7f4e0f19af6dc4c8293512d1e9059cabc6dc7869ee29334fc09f4ad3f6e6625a5296958cd15d05b85d41b7247e067335291a841912ee6d024f0c35ed90ba4268585065c5b829dce420416c5a3f776744c90cd52918cfc3e870a43169ba55689f463daeb0646473e2726599d0721bec4f3c01586800308096821e", 0xa3) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) 1.22859059s ago: executing program 6 (id=520): msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0xed, 0x0, 0x0, 0x0, 0x0, 0x14, 0x4}, 0x1, 0x200000000006a, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x72cb}) r0 = socket(0x18, 0x1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6dc) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) close(r1) chdir(&(0x7f0000000000)='./file0\x00') 1.227586335s ago: executing program 7 (id=521): sysctl$hw(&(0x7f0000000040)={0x6, 0x12}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) sysctl$ddb(&(0x7f0000000080)={0x9, 0x3}, 0x400000000000000d, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffe8a) 1.147719493s ago: executing program 6 (id=522): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5200) r0 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000001c0)={0x0, &(0x7f00000003c0)}) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, &(0x7f0000000300), 0xfffb4161, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETA(r2, 0xcd504404, &(0x7f0000000180)={0x2, 0x2, 0x8, 0x0, "cded2108002581ba7db28c9d6fb975390a000004", 0x47ffd, 0x6}) write(r0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.146158932s ago: executing program 4 (id=524): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)='#!', 0x2}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x2}]}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4) write(r0, &(0x7f0000000200)="093ea61c35e9ad2002000000000a", 0xe) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x4, 0x7) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000240)="fd7fc83dc67014f894933938d49b756d02af8a0cd0118b249a7180390c7a0fd496ee29e88dd228963ec8841ed86b826942f8bbda90b93181f4b38de7af5fb799e9b9be40d9f7a3f27ed1d66ea890e591278a4f43c9c3ba425662284f95316da2d213233cb9c8fde61520994765264b9f7277a53615524e207b3d678443d94b0ab26e0d4891d4834469871f132ac8417b3cc2b108a1ab25c3f45f0adb5fdabda1d4ef84d6af62947ca8768d10fec9b7f30b492b2a3a8d7b74c9348fe18768ca75dcfc5a4c014c7c8b914f903b6f7b6a55584a939ca8447b2418478f022b82784fd8acd818", 0xe4) 1.145783806s ago: executing program 2 (id=525): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xfffa, 0xfe, 0x0, 0x81}, {0x3, 0x0, 0x0, 0x4}]}) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x6000, 0x0) (async) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x80) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f00000000c0)) ioctl$BIOCIMMEDIATE(0xffffffffffffffff, 0x80044270, &(0x7f0000000080)=0x9) (async) setuid(0xee01) (async) syz_emit_ethernet(0x6e, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r2 = syz_open_pts() close(r2) (async) syz_open_pts() (async) socket(0x18, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="6fcba96e64d77dfe77d06091c8341acb34f68c0a", 0x14}], 0x1) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$BIOCGHDRCMPLT(r5, 0x40044274, &(0x7f00000001c0)) (async) readv(r0, &(0x7f0000000600), 0x0) fcntl$dupfd(r1, 0x7, 0xffffffffffffffff) (async) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000040)) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) 1.007855509s ago: executing program 5 (id=526): openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) select(0x40, &(0x7f0000000100)={0x3, 0x2}, &(0x7f00000024c0)={0x4, 0x0, 0x0, 0x4, 0x0, 0x2, 0x1}, 0x0, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6dc) r0 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x16a) ioctl$TIOCFLUSH(r0, 0x80047476, &(0x7f0000000080)=0x82) 1.007499924s ago: executing program 7 (id=527): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x1) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) flock(r0, 0x1) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x18, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xbd, 0x0, 0x1, {[@mss={0x2, 0x4, 0x9}]}}}}}}}}) 1.007073551s ago: executing program 6 (id=528): syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="859000042d00ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000040000aac9ff9078000000006006c33e00003a80fe80000000000000"]) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) (async) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r0 = shmget$private(0x0, 0x12000, 0x114, &(0x7f0000001000/0x12000)=nil) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) shmctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0xa, 0x0, 0x0, 0x0, 0x0, 0x108, 0xc}, 0xb, 0x9, 0x0, 0x0, 0x5, 0x10, 0x1d78}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f00000002c0)}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x200, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000001440)={'tap', 0x0}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000880)="ec6813b6d238c1baf800000000251cd15900"/32, 0x20}], 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x16}, 0x2, &(0x7f00000003c0)="00e0aebbc2f0307e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082a5e75341a2b1e59bffc4828e4377e1ba2b68b7ef44d49a89aa19574360d34608000000000000009389a6229b6388d605", &(0x7f0000000080)=0x4f, 0x0, 0xfffffffffffffd6f) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x16}, 0x2, &(0x7f00000003c0)="00e0aebbc2f0307e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082a5e75341a2b1e59bffc4828e4377e1ba2b68b7ef44d49a89aa19574360d34608000000000000009389a6229b6388d605", &(0x7f0000000080)=0x4f, 0x0, 0xfffffffffffffd6f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0xc0104407, 0x0) syz_extract_tcp_res(&(0x7f0000000240), 0x8, 0x2) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) write(0xffffffffffffffff, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x803, 0x8018, 0x2000007, 0x1, 0x80000001, 0x800081ac, 0x80010001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0xa, 0x8, 0xfffffff9}, {0x100, 0x3, 0x0, 0x9}, {0x1, 0x2, 0x8007}, {0x401, 0x200727, 0x4002802, 0x7}, {0x1, 0x650, 0x200, 0x99}, {0x101, 0x0, 0xfff, 0x6d}, {0x6, 0x7, 0x14, 0x7}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8005, 0xd17, 0x4}, {0x1d3, 0x10005, 0x200, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x7, 0x8, 0x1}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x5, 0x6, 0x10000000}, {0xfffffffd, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7a", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e570400"/151, &(0x7f0000000180)=0x97, &(0x7f00000001c0), 0x4) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r3 = socket$inet(0x2, 0x4000, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000040)="e2f404ff", 0x4) (async) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000040)="e2f404ff", 0x4) 884.037126ms ago: executing program 0 (id=530): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x6) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400c}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) socket(0x11, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f0000000040)=0xfffffffc) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000480)={0x2, &(0x7f0000000280)=[{0x40, 0x0, 0x30, 0x8}, {0x16, 0x4, 0x1, 0x1}]}) write(r2, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) r3 = kqueue() writev(r1, &(0x7f0000000200)=[{0x0}], 0x10000000000002a9) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffefc, 0xfffffffe, {[0x2, 0x10000000004ef, 0x5, 0x100000000, 0x0, 0x80000000, 0x400, 0x0, 0x0, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x1, 0x9, 0x4, 0xfffffffffffffff7, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x3, 0x1, 0x80000000, 0x6, 0x0, 0x0, 0x47], [0x8, 0x2, 0xa64, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x6, 0x3}, {0x2, 0x9d1, 0xfffffffe, 0xffc}, {0x1009, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0xfffffffe, 0xd, 0x1}, {0x7ffe, 0xd, 0x40007, 0xfffffffffffffffd}, {0xfffe, 0xfffffffc, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) kevent(r3, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005040000000000000000340000", 0xf, 0x0, 0x0, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0xa, 0x83, 0x400f}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="e15a93ade8fdf79411d132e8b8aec16c058579c7de1e2c6bf763cc2f3fee5a9da4074a3b454c096c07911cdce2e8d2498b4317040000000095aec9653f6fba00ff00d5ab", &(0x7f0000000080)=0x44, 0x0, 0x0) setrlimit(0x1, &(0x7f00000001c0)={0x0, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x46, &(0x7f00000017c0)=ANY=[]) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket(0x18, 0x1, 0x0) 883.03507ms ago: executing program 5 (id=531): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x0, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x3, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x4000000, 0x8}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) sysctl$hw(&(0x7f00000002c0)={0x6, 0xe}, 0x2, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000040)=0x7, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000080), 0x4) dup(r3) setsockopt$sock_int(r3, 0xffff, 0x1023, 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r5 = socket(0x2, 0x4001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket(0x2, 0x400000000002, 0x0) setsockopt(r6, 0x0, 0x5, &(0x7f0000000080)="c5f5d915", 0x4) setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r5, &(0x7f0000000000), 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) syz_emit_ethernet(0x21, &(0x7f0000000100)=ANY=[@ANYBLOB="e33a176cd02400000000000080350001080006040002aaaaaaaaaabbac1400bb0000000000000000006e"]) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) 882.598339ms ago: executing program 2 (id=532): r0 = socket(0x800000018, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc020699e, &(0x7f00000001c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) r2 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x80206932, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket(0x18, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @random="d0b5ed9e6963", [], {@ipv6={0x86dd, {0x0, 0x6, "36ea07", 0x38, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@time_exceed={0x3, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "9dd0c6", 0xfff7, 0x2c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, [], "56d9949d10d34be5"}}}}}}}) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) r5 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000400)='./file1\x00', 0xa) chdir(&(0x7f0000000040)='./file1\x00') symlink(&(0x7f0000000580)='./file0\x00', &(0x7f00000002c0)='.\x02\x00') unlinkat(r5, &(0x7f0000000140)='./file1\x00', 0x8) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) link(&(0x7f0000000340)='./bus\x00', &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x15) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 880.465859ms ago: executing program 7 (id=533): mknod(&(0x7f0000000080)='./file0\x00', 0xc000, 0xa1e) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000001400)=0x1) fcntl$setstatus(r0, 0x4, 0x40) close(r0) r1 = msgget$private(0x0, 0x730) msgsnd(r1, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) (async) msgsnd(r1, 0x0, 0x401, 0xee01) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x0) (async) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f00000000c0)) (async) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) (async) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000040)=0xc) (async) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fchown(r4, r5, r6) r7 = getuid() chown(&(0x7f0000000040)='./file0\x00', r7, 0xffffffffffffffff) (async) r8 = getgid() r9 = getpid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, r3, r6, r7, r8, 0x1d2, 0x2}, 0xfffffffffffffffd, 0x8d31, 0xffffffffffffffff, r9, 0x4, 0x8, 0xffffffffffff6ead, 0x2}) (async) r10 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) pread(r10, &(0x7f0000000000)="2beba8c5bfaaff44b437dfbb000000", 0x50cc3a, 0x80000000) 879.844592ms ago: executing program 4 (id=535): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x70e, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x448, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xae2b15b63f034800, 0x1010, r1, 0x4000000003) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xae2b15b63f034800, 0x1010, r1, 0x4000000003) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mmap(&(0x7f000000f000/0x2000)=nil, 0x2000, 0x0, 0x8010, r0, 0x0) 878.131624ms ago: executing program 7 (id=536): connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x9a1, &(0x7f0000000100)="ebffcbff13b9fd812eaa4e713048e699319296484ce2606988523cc9e97c8379f5be96fa14970b9d62ec374a65d37664b877232890e76340721f75da1dfe601f02f42b79621265ee5fe0e24b4114fe4ee14d1ae43ee03d131097ec7d818fdb6b98decb53ef06ee6bb32b9dd4db163823080b3c6552816f833211677755175a377adb4f2cfd97d272caf7656101e51e3b0a44ed437325d6a78db117b4eae41ae8f106e90a54d71e62a088ac6c9fe12e83a1b466e4073957f62d00d5cfb251f13eec0314e27c1af35a6129cb4e0cb22597292b8d2f13efedfe47fcdaa3a50e30173046c6690d431a0000000000000000", 0xef) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x0, &(0x7f0000000280)}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106978, &(0x7f0000000140)) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) connect$unix(r0, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) 877.24031ms ago: executing program 5 (id=537): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) dup2(r1, r2) sendmmsg(0xffffffffffffffff, 0xffffffffffffffff, 0x18, 0x0) 728.229281ms ago: executing program 0 (id=538): setreuid(0xee00, 0xffffffffffffffff) getuid() (async) r0 = getuid() r1 = getegid() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) socket(0x1, 0x5, 0x0) (async) r3 = socket(0x1, 0x5, 0x0) close(r3) (async) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FIONBIO(r4, 0x8004667e, &(0x7f0000000180)=0xe09) write(r4, &(0x7f0000000100)="e8", 0xff25) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200, 0x8529b4bd87011da3) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x200, 0x8529b4bd87011da3) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x200400e}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)='\x00\x00\x00', 0x3}], 0x1) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd602a654700383afcfe8000000000000000000000010000bbff0200000000000000800000000000010102907800000000605a3cf206cb2c00ff010000000000000000000000000001fe8000000000000000000000000000bb2b"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, @multicast2}, @icmp=@echo={0x8, 0x0, 0x0, 0x0, 0x100}}}}}) lchown(&(0x7f0000000000)='./file0\x00', r0, r1) (async) lchown(&(0x7f0000000000)='./file0\x00', r0, r1) 714.312025ms ago: executing program 3 (id=539): sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000001540)="0b001440", &(0x7f0000000000)=0x4, 0x0, 0x53e46a883bd361b0) 714.054631ms ago: executing program 7 (id=540): mknod(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xa) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file2\x00') rename(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 713.304437ms ago: executing program 3 (id=541): setuid(0xee01) (async) r0 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32) ioctl$FIONREAD(r0, 0x8020699b, &(0x7f0000000100)) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async, rerun: 64) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) (async, rerun: 64) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x7fffffff, 0x8cacf, 0xfffdff7e, 0x1603529, "04e4577e010405010800", 0x6ab, 0x5}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (async) kqueue() (async) r2 = accept(r1, &(0x7f00000001c0)=@in6, &(0x7f0000000200)=0xc) setsockopt(r2, 0x6c6a, 0xe, &(0x7f0000000240)="5a62a442a42557ade51498a530d7ffb9eea7a4278a047f5b28d4d3db03307e703eadd243f7ec896b0b545be43f7acfb63386fdf59abd56ba775bcd5b19fca62c1e2e209aa163de6b09206fbd73ddc48376378650fcddba57b326029ccdabfa769d896925a18d13698cc8fb611425d7aade1be81aa0f61f189d139626267a4942e5c5b09a03d89642c4b19f1ba254927b0c8e771bd1453ab86841a100b3ef07ffb8cfac72e7b9fa50a40e42a04150d5b170740b3b633277af7e47102ecba96866b1e5e6c6c9468d4f06e10ad56037eccfb9584af8fb2e44ba3256efa7c250e8391c6ea1425d23ce304620", 0xea) (async, rerun: 64) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (rerun: 64) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000080)=0xfffffa71) (async) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000340)='./file0\x00', r4}) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="8b11384532d7148c61d483aa9f5c731ad55c", 0x12}], 0x1) getdents(r3, &(0x7f00000003c0)=""/57, 0x39) (async) getsockname$unix(r2, &(0x7f0000000140)=@abs, &(0x7f0000000380)=0x8) sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, &(0x7f0000001540)="41c1bf8a", &(0x7f0000000080)=0x4, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x1e, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) (async) execve(0x0, 0x0, 0x0) 712.890287ms ago: executing program 1 (id=542): sysctl$net_inet_ipip(&(0x7f0000000400), 0x4, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="ce108922484c77c879d4328a02e02bb64cc2f9070a40b251001cb518bd4f8a1cb38ee6c0b39098e341543995af7290e65bc199057a0100e684b2649c978bad78e06cb153402d7433d66ffce681e28909cb3ce72d93b0ccfe126c3ac4194c49eaa046425cf2867ba435db47d812395c1d02f5632af678f0d7", 0x78}, {&(0x7f0000000500)="f97421b722deda6b9109202b843ca92ff25556a5ee57ede2bc20", 0x1a}, {&(0x7f00000000c0)="0500000400000000000000b35c72102503c8f38b", 0x14}, {&(0x7f0000000100)="4c225efb879d60ae598d992b0765ae7b9ffc08fc7b9b2ae7fc2d7b126774c36cf7258c797c3ba46fb43f39ef2ffcc2b1db8bb79c211b1f2ff460b05b8da8bbb6790197925107c8478ef3a32b1574fee7e1063ad6892cee5432b6baf6b17e826c27ed9fdbc4740c527a7010a64968c252728f6ebc1342caf7ac236c3e5a9760af1778392e5fdd87bcb999643be2faac2953c677c19ff1ca539e64f1c74f59d64401cdd3a4925776fccdfc106af02cd3039ff6982a463ecadc68c147bc", 0xbc}, {&(0x7f00000001c0)="3b7a2e566da2235359164995ed3012842647", 0x1}, {&(0x7f0000000200)="2e10e31746986b4812ae08ffef6f5286464ebd18286ae4254df79e92b9840218730904b55ddd3b4cec1ea3b3c23e64ef98ccad91ac82b20f22d095a0ef4e3d589ec25c2281dbbed82916f61f21cdbed2632f0e23487c674d56c5e2dd740acc7c8c50f7f421733a15a8303a498d6eb1f1326738f70e64bea87195fe88ad1c4ad3dc8aa50f", 0x84}, {&(0x7f0000000080)="541fdd6a9bef75b0ba8d5a28e5a9259b8a16e8e1fd0566f36a73c74eeb01e9918cb262862b2d9053d3646ead94629553cedb6cb527", 0x35}, {&(0x7f0000000300)="fd8881991ba561ea9cb8df57d11d2d676022daffdaad55a54a08e0c32d8592fac8997db568749b0d9a8d39794acc19cbcab5481ef593b58340c3e793c58c7b4a0c866072dd", 0xffffffffffffff49}], 0x8, 0x5) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x7ec}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0x7fffffff, 0x6def, 0xffffdf82, 0xfdfffffc, "1826283e680021d5ff7f0d01fd04000004400800", 0x800}) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="117384167f2033a20d95aa5820fed3e6b3cdfac938093822264ab0bccbfd4ef8860e4f1b90bd23fb982cab1101c766e2626267939000f1f29f4525d64141a3152bb6807a921e70db92f69302b5cf2ad9f0d10a76c3d88ef0d5e86028c5ff5755", 0x60}, {&(0x7f00000002c0)="f888308d051ee60544a7a3ec35e710cd7108c8ef23509fb131f092d4c5f967df9935035a04c8fdbbee64a949face53c0fd4e9cb9b227ba90b3e8dd90c889b7f30acd662c15ce788866e6ebea6bd6404f32a0b349ade0f18de249a6b8a85c3a8ad91a0af244cae3c1d9b951acd82ae64ac1ab6a452aa86ebaa03b63254c5dd70732baf83fd07970", 0x87}, {&(0x7f00000005c0)="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", 0x1a8}, {&(0x7f00000009c0)="205480bf5c4c134cb3fec38d14a7b3b79b4647987cf37da175d33e102819acc7bf748484821208bd6c175e2b0c09915aa42f9efb25e16d39a4e7d05dae03587b773ee923775f0bd11ee57e666679a23c7012b248be9d944c190e1ce14f18af1e43263d8650e0d819365c33ad8ca2e98faa3f2e8087e70c833420ea5f4e907e04ccf998b78f259b5d3067a730c2a09b19a28bf47a052830dff52ce5317eb3c90237b2ff0ee2657608214d62a07f10117738aca34ccda096bc818058ee340bcfa86485cbe34ca1199d04d066e4", 0xcc}, {&(0x7f00000008c0)="8ad55f95c8be480ce46b48144573fec3683182580f6204bab868dd59bef401f1a649b3e2c11dc15b87426b7deb72379710a47b1725fb0cbd3eff8e43898675488aeb51ceb8e35a626744bce788acd35ec89d0ead7adf56e53505d43002c75fd19e00b5289aadc98938fe35cf069fff255c5affc8d515b377b068bf5e4e84ebb8a43d3e4178e0e293c9a7150b6c8560a7", 0x90}, {&(0x7f00000013c0)="e663344ce8cd893732d1367c7a28828f2e7730488f7de97d2208a8988f00005e15e9e3f7ced99e117f718537317bbb0168", 0x31}], 0x6) pwritev(r0, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000200)="981950391f6f8894ed0d746f4e75", 0xe}], 0x2, 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, 0x0) unveil(0x0, 0x0) getppid() 712.548233ms ago: executing program 4 (id=543): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r0 = getppid() open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x1) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r1, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r2 = fcntl$getown(r1, 0x5) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0xd27d43220c7df9b, r2) 712.200221ms ago: executing program 2 (id=544): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x7ffffbff, 0x10007beb, 0x4347e793, 0xffffff8d, "18262a040200c20023a0ff7f0c00000400", 0x1, 0x1}) r2 = socket$inet(0x2, 0x2, 0x0) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000140), 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0x155}], 0x1) 492.753575ms ago: executing program 3 (id=545): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5200) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pwrite(r1, &(0x7f0000000100)="b6e3fc499ac70f84bb64bbd71c1ed6bbed9234608b171b98b044df7c1447a231f16809e228cbcc92f52a0433000c3fcd1d1df1a48284464708236866ffb25e3f4286aedcda5a7f356b0c84edb5cc013fe90bf84932", 0x55, 0x9) 491.800745ms ago: executing program 6 (id=546): mknod(&(0x7f0000000000)='./file0\x00', 0x100000000205f, 0x73b) r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0xffffffffffffffb6}], 0x1) setsockopt(r0, 0x80000000, 0x6, &(0x7f0000000100)="69a5e046010258e26c8a987b9cfffbf8210485c8c924f1f6d292473c0786", 0x1e) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) read(r0, &(0x7f0000000040)=""/57, 0x39) pread(r0, &(0x7f0000000080)="e930600a0bcd11380994e0d4abf844054c18513079452de9ebd051b9bd74b0079956aefc016880d361ff941dde0bfb9152312fb83c86e55c93c456ddc676ff6c492760074743421631cbd505440d90acfdea527a7710e4e59577745b8a5d11c92b551a8cce7f016bfb96865b7feb25", 0x6f, 0x101) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) 491.173959ms ago: executing program 3 (id=547): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0xfffffffe, 0x7, 0x4, 0x71008}, {0x7, 0x4, 0xd, 0xfffffff9}, {0x8, 0x8000b86, 0xffffbf7d, 0x9}, {0x1002, 0x8800, 0x7}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0xd8, 0x99}, {0xcdf, 0x1, 0x200004f8, 0xb}, {0x6, 0x180b, 0x14, 0xb}, {0x8, 0x82, 0x50, 0x9}, {0x4, 0x3, 0xd1b, 0x88}, {0x1e0, 0x10001, 0xc, 0x3}, {0x7ff, 0xf, 0x9, 0x5}, {0xb8c, 0xc3a, 0x6, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6, 0x5}, {0xfffffffd, 0x2000009, 0x40004, 0x30005}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffffa, 0x0, 0x40000000, 0x4, 0x5}], 0x3, 0x0, 0x7, 0x0) (async) sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x2}, 0x65, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async, rerun: 32) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) (async) setgid(0xffffffffffffffff) (async) setgroups(0x0, 0x0) (async) setuid(0xffffffffffffffff) (async, rerun: 64) chdir(&(0x7f00000001c0)='./file0\x00') (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) (async) chmod(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10) 353.31222ms ago: executing program 6 (id=548): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140), &(0x7f0000000040)=0xc) r1 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0xffffffffffffffb6}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) read(r1, &(0x7f0000000040)=""/57, 0x39) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f0000000040)=0x100) r3 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2810, r3, 0x0) ftruncate(r3, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0xb}, 0x34, &(0x7f0000000180)="00e0ae5b7e0df7ffffffffffffffa307000000cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000000)=0x8) writev(r4, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef359025250129bdb3b8c172b8359eb32d47209b2a02c3b86a29b75b43b0b03", 0x2d}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000080)="b10005010000009f0500070007010000331c13fecea10500fef96ecfc72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a42118210000720fd38bfb0000fd54c125191b1257aea8c500002002fbfe0c2300008abfba0902000000e371a3f8343712051eeab70800000000050000ffffffff00"/177, 0xb1, 0x0, 0x0, 0x0) 353.045471ms ago: executing program 3 (id=549): ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x7}], 0x1}) sysctl$hw(&(0x7f0000000000)={0x7, 0x12}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f0000000040)={0x6, 0x18}, 0x2, &(0x7f0000000080)="0d9153b6994627bf678544a343964872c75655a41402d52f18e7b27a2539b7f2c1", &(0x7f0000000100)=0x21, &(0x7f00000001c0)="50079d7caad71fd52dc8888f11cdb89c93dbd5b2ee984d31fe12a142b781dad9579ddb45cc5de2e450dc18f72e94d8ddc2e8a6593899f8442208cd2750b92e7c3e246a20b49bfd97795cc893385b19543a9d7ee374867ac4b2ba0d6a630239b7d84d3567c22f77ce705f36a18a1041f155b407d2dd0994b7f86563ef41c80f0f5ddd26f54f41cfdfa9fe632340b458943b3b8e89104647da4dee9d491d34b872a389083eb5124d7b1a6933525ac13aaf471211b56c0cf33dc686f0a94b674eaf9f84cbc94cd3bfc5b0de986a5d9f652fed9ef26a2c62e2", 0xd7) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="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", 0xb1, 0x2, 0x0, 0xffffffffffffff3a) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) 351.513898ms ago: executing program 3 (id=550): r0 = syz_open_pts() ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000100)) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000000)=0x714) 343.188761ms ago: executing program 2 (id=551): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) r1 = kqueue() (rerun: 32) kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r2, 0x80206913, &(0x7f00000001c0)) (async) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r3}) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) readv(r4, &(0x7f0000000740)=[{&(0x7f0000000100)=""/191, 0xbf}, {0x0}], 0x2) (async) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000a40)=""/198, 0xc6}], 0x1, 0x1000) (async) ioctl$LIOCSFD(r4, 0x80046c7f, &(0x7f0000000200)=r0) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="69e1629b6174aaaaaaaaaabb86dd60062e0b"]) (async, rerun: 64) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) r5 = socket(0x18, 0x1, 0x0) close(r5) (async) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) sendmsg$unix(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) (async) select(0x40, &(0x7f0000000000)={0xcd, 0x537, 0x986, 0x5, 0x8, 0xa000000000000, 0xca9, 0x5}, &(0x7f0000000040)={0x80, 0x1000003, 0x9, 0x6, 0x40, 0x6, 0x3, 0x65}, &(0x7f0000000080)={0x17, 0x5, 0x8, 0x0, 0x7, 0xf, 0x7, 0x9}, &(0x7f00000000c0)={0x8c7, 0x9}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r7 = socket(0x18, 0x3, 0x17) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) close(r7) (async) execve(0x0, 0x0, 0x0) 340.925015ms ago: executing program 7 (id=552): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) msgsnd(r0, 0x0, 0x401, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x2) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) msgrcv(r0, &(0x7f00000009c0)={0x0, ""/4096}, 0x1008, 0x0, 0x1000) r1 = syz_open_pts() r2 = syz_open_pts() sysctl$vfs_nfs(&(0x7f0000001880)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000040)="7e05935b0bdc", &(0x7f0000000000)=0x6, 0x0, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x0, 0x5, 0xffffdf82, 0xffffff8d, "08ed95990000000000000000ffffffffffffffe6", 0x4000000, 0x20000}) mprotect(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1) r3 = getuid() setuid(r3) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r4 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000)) msgrcv(r0, &(0x7f0000000000)={0x0, ""/7}, 0xf, 0x2, 0x1000) msgsnd(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="010001000000000095937a127fdc1e26641a09b49081f1c6bfcb2292647e563b8817f49319c9e9c0f63a6044cb70cd58d1dd39053b937c3cbe5ea077ea5bf99414500523bf492c3f2a7ddc26aaee2842d6cd59b0"], 0x48, 0x800) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r5 = open(&(0x7f0000000480)='./file0\x00', 0x10181, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0) write(r5, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) msgrcv(r0, &(0x7f0000000080)={0x0, ""/9}, 0x11, 0x0, 0x1800) munmap(&(0x7f0000000000/0x1000)=nil, 0x71c47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfe, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) 62.710431ms ago: executing program 0 (id=553): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x4) 61.883178ms ago: executing program 4 (id=554): msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) (async) pipe(0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x28, 0x10, 0xd9, 0x100a}, {0x16, 0x1a, 0x8d, 0x48a6}]}) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000), 0x10) (async) connect$unix(r1, &(0x7f0000000000), 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) (async) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000000c0)={0x0}, 0xc) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) r4 = socket(0x2, 0x3, 0x2f) r5 = dup(r4) setsockopt$inet_opts(r5, 0x0, 0x22, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000300)=0xffffffb9) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) fchown(r3, r6, r8) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0xffffffffffffffff, r6, r8}, 0xc) (async) ioctl$LIOCSFD(r3, 0x80046c7f, &(0x7f0000000180)=r5) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff040000006b0e0800450000280067000002009078ffffffffe0ffffff4e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES64=r2]) (async) ioctl$WSKBDIO_GETMAP(0xffffffffffffffff, 0x80047476, 0x0) (async) fcntl$setown(0xffffffffffffffff, 0x6, r7) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x404, 0x0, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1, 0x9, 0x2, 0x3}, {0x4c, 0x3, 0xe5, 0x100}, {0x6, 0xa, 0x3, 0x400c}]}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mprotect(&(0x7f0000230000/0x3000)=nil, 0x3000, 0x2) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x106e, &(0x7f0000001d00)=ANY=[]) 61.62014ms ago: executing program 0 (id=555): sysctl$hw(&(0x7f0000000000)={0x6, 0x13}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x568, 0x18) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) 61.478345ms ago: executing program 0 (id=556): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchmod(r0, 0x9c) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000080)) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 59.903298ms ago: executing program 1 (id=557): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) r1 = getpgrp() fcntl$setown(r0, 0x6, r1) close(r0) kevent(0xffffffffffffffff, &(0x7f00000003c0)=[{{}, 0xfffffffffffffff6, 0x3, 0x80000000, 0x1000fd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) 1.376231ms ago: executing program 2 (id=558): r0 = kqueue() select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xfffff7ffffffffff, 0xd1, 0x2800000000000000, 0x181c, 0x8, 0x3}, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x16, 0x0, 0x0) kevent(r0, &(0x7f0000000140)=[{{}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x4, 0x0) (async, rerun: 64) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r2, 0xc020699c, &(0x7f00000001c0)) (async, rerun: 64) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) (rerun: 64) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000002c0)={0x0, 0x0}) (async) sysctl$hw(&(0x7f0000000140)={0x6, 0x5}, 0x2, 0x0, 0x0, &(0x7f00000001c0), 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 624.094µs ago: executing program 6 (id=559): socket(0x2, 0x1, 0x0) (async) r0 = socket(0x2, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x1, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0x9, 0x8, 0xfffffff7}, {0x100, 0x9, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0xfff, 0x7ff, 0x1, 0x8}, {0x2, 0x82, 0x8000005, 0x5}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1cc, 0x10001, 0x0, 0x3}, {0x8, 0xd5, 0x8, 0x8000002}, {0xb89, 0x555981a8, 0x8, 0x112b}, {0x29a71717, 0x8, 0xffffffff, 0x6}, {0xc, 0x2000005, 0x5, 0x848}, {0x0, 0x1, 0x1002, 0x30004}]}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) (async) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) writev(r2, &(0x7f0000000100)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) pledge(0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x1, 0x2, 0x0) sysctl$kern(&(0x7f0000000300)={0x1, 0x46}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000300)={0x1, 0x46}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) ioctl$FIONREAD(r3, 0xc0286988, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r0, 0x8020699f, &(0x7f00000001c0)) 0s ago: executing program 4 (id=560): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0xf66c, 0xba64, 0x101, 0x5ffffd58, "9d1cff7f00050019000000000700", 0x203fb, 0xe32a}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000009c0)="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", 0x494}], 0x1) msync(&(0x7f00002b6000/0x3000)=nil, 0x3000, 0x6) mkdir(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x84) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = open$dir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x128) renameat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. in6_pcbnotify: Huh? Thought we never got called with mapped! in6_pcbnotify: Huh? Thought we never got called with mapped! malloc(): allocation too large, type = 6, size = 287762939904 pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error panic: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 54515 25468 0 0 0 0 syz-executor *283604 25468 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff83377c92) at panic+0x1e5 __assert(ffffffff833b28ea,ffffffff833acb86,84,ffffffff834073a8) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x24f rtable_add(20) at rtable_add+0x2d9 if_createrdomain(20,ffff800001480000) at if_createrdomain+0x40 ifioctl(ffff800010fd5218,8020699f,ffff80003ac3d410,ffff80002a350d38) at ifioctl+0x1c66 sys_ioctl(ffff80002a350d38,ffff80003ac3d5f0,ffff80003ac3d540) at sys_ioctl+0x674 syscall(ffff80003ac3d5f0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x45496fca7b0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "map->limit == rtmap_limit" failed: file "/syzkaller/managers/multicore/kernel/sys/net/rtable.c", line 132 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83377c92) at panic+0x1e5 __assert(ffffffff833b28ea,ffffffff833acb86,84,ffffffff834073a8) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x24f rtable_add(20) at rtable_add+0x2d9 if_createrdomain(20,ffff800001480000) at if_createrdomain+0x40 ifioctl(ffff800010fd5218,8020699f,ffff80003ac3d410,ffff80002a350d38) at ifioctl+0x1c66 sys_ioctl(ffff80002a350d38,ffff80003ac3d5f0,ffff80003ac3d540) at sys_ioctl+0x674 syscall(ffff80003ac3d5f0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x45496fca7b0, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003ac3d120 rbx 0xffff8000299feddf rdx 0 rcx 0xffff80002a350d38 rax 0xffff8000299fdff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x548d4cb36fbde63e r11 0x16aef6db2a221c00 r12 0xffff8000299febe0 r13 0 r14 0 r15 0x1 rip 0xffffffff82ba9305 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003ac3d110 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=283604 pid=25468 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a350570,0xffff80002a350fe0 process=0xffff80003c515d08 user=0xffff80003ac38000, vmspace=0xfffffd805cf39210 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 25468 54515 81609 0 7 0 syz-executor *25468 283604 81609 0 7 0x4000000 syz-executor 25468 440924 81609 0 2 0x4000000 syz-executor 34751 365932 65353 0 2 0 syz-executor 34751 303517 65353 0 2 0x4000000 syz-executor 19223 75910 10632 0 2 0 syz-executor 19223 162051 10632 0 3 0x4000080 kqread syz-executor 19223 137308 10632 0 2 0x4000000 syz-executor 44838 265039 45330 0 2 0 syz-executor 44838 235861 45330 0 3 0x4000000 smrbar syz-executor 44838 515410 45330 0 2 0x4000000 syz-executor 81924 22532 80590 0 2 0 syz-executor 81924 508927 80590 0 3 0x4000000 biowait syz-executor 81924 254860 80590 0 3 0x4000000 inode syz-executor 60178 220736 3820 0 2 0 syz-executor 60178 60602 3820 0 3 0x4000080 ttyin syz-executor 45330 437690 21048 0 3 0x82 nanoslp syz-executor 24648 315080 0 0 3 0x14200 acct acct 65180 257467 1 0 3 0x100083 ttyin getty 54984 427308 0 0 3 0x14200 bored sosplice 45210 338668 0 0 3 0x14280 nfsidl nfsio 47663 75018 0 0 3 0x14280 nfsidl nfsio 1723 129063 0 0 3 0x14280 nfsidl nfsio 26673 49132 0 0 3 0x14280 nfsidl nfsio 36559 444227 0 0 3 0x14280 nfsidl nfsio 30489 454067 0 0 3 0x14280 nfsidl nfsio 25619 423109 0 0 3 0x14280 nfsidl nfsio 32467 343095 0 0 3 0x14280 nfsidl nfsio 91239 302943 0 0 3 0x14280 nfsidl nfsio 66488 456640 0 0 3 0x14280 nfsidl nfsio 3730 144131 0 0 3 0x14280 nfsidl nfsio 36236 328609 0 0 3 0x14280 nfsidl nfsio 62003 220550 0 0 3 0x14280 nfsidl nfsio 55744 512310 0 0 3 0x14280 nfsidl nfsio 15250 32306 0 0 3 0x14280 nfsidl nfsio 92523 40077 0 0 3 0x14280 nfsidl nfsio 57236 53792 0 0 3 0x14280 nfsidl nfsio 24652 182275 0 0 3 0x14280 nfsidl nfsio 76472 304233 0 0 3 0x14280 nfsidl nfsio 60744 304879 0 0 3 0x14280 nfsidl nfsio 3820 104190 21048 0 3 0x82 nanoslp syz-executor 81609 29514 21048 0 3 0x82 nanoslp syz-executor 52755 94129 21048 0 3 0x82 piperd syz-executor 65353 311226 21048 0 3 0x82 nanoslp syz-executor 85290 121841 21048 0 3 0x82 piperd syz-executor 10632 19189 21048 0 3 0x82 nanoslp syz-executor 80590 13722 21048 0 3 0x82 nanoslp syz-executor 21048 173910 38712 0 2 0x3 syz-executor 38712 215216 90849 0 3 0x10008a sigsusp ksh 90849 449724 35520 0 3 0x98 kqread sshd-session 35520 68996 11478 0 3 0x92 kqread sshd-session 11478 53037 1 0 3 0x88 kqread sshd 80742 446433 36803 74 3 0x1100092 bpf pflogd 36803 506586 1 0 3 0x80 sbwait pflogd 88632 152569 48450 73 3 0x1100090 kqread syslogd 48450 411806 1 0 3 0x100082 sbwait syslogd 8210 513701 1 0 3 0x100080 kqread resolvd 96963 310059 16447 77 3 0x100092 kqread dhcpleased 95775 222795 16447 77 3 0x100092 kqread dhcpleased 16447 435710 1 0 3 0x80 kqread dhcpleased 61626 227158 0 0 3 0x14200 bored smr 31409 408351 0 0 2 0x14200 zerothread 37007 309278 0 0 3 0x14200 aiodoned aiodoned 85708 209610 0 0 3 0x14200 syncer update 11411 69452 0 0 3 0x14200 cleaner cleaner 99018 65450 0 0 3 0x14200 reaper reaper 36788 55989 0 0 3 0x14200 pgdaemon pagedaemon 96033 219469 0 0 3 0x14200 bored viomb 27569 334230 0 0 3 0x40014200 acpi0 acpi0 72405 326361 0 0 3 0x40014200 idle1 90910 73286 0 0 3 0x14200 bored softnet7 77108 148141 0 0 3 0x14200 bored softnet6 19876 79554 0 0 3 0x14200 bored softnet5 8723 92441 0 0 3 0x14200 bored softnet4 38223 309510 0 0 3 0x14200 bored softnet3 389 80970 0 0 3 0x14200 bored softnet2 81796 522645 0 0 3 0x14200 bored softnet1 11399 401548 0 0 3 0x14200 bored softnet0 14982 155748 0 0 3 0x14200 bored systqmp 46531 248903 0 0 3 0x14200 bored systq 40536 436946 0 0 3 0x14200 tmoslp softclockmp 44048 122474 0 0 3 0x40014200 tmoslp softclock 56907 274614 0 0 3 0x40014200 idle0 1 852 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 25468 (syz-executor) thread 0xffff80002a350d38 (283604) exclusive kernel_lock &kernel_lock r = 1 (0xffffffff838ab3f0) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 malloc+0xe3 #3 rtmap_grow+0xb2 #4 rtable_add+0x2d9 #5 if_createrdomain+0x40 #6 ifioctl+0x1c66 #7 sys_ioctl+0x674 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 34751 (syz-executor) thread 0xffff80002a350570 (303517) exclusive rwlock vmmaplk r = 0 (0xfffffd805cf39128) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvm_map_pageable+0x183 #4 sys_mlock+0x23d #5 syscall+0xb17 #6 Xsyscall+0x128 Process 19223 (syz-executor) thread 0xffff8000ffff2540 (137308) exclusive rwlock vmmaplk r = 0 (0xfffffd805cf394f8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvmfault_lookup+0xe8 #4 uvm_fault_check+0x895 #5 uvm_fault+0x106 #6 upageflttrap+0xa9 #7 usertrap+0x3c6 #8 recall_trap+0x8 Process 44838 (syz-executor) thread 0xffff80003c5134f8 (235861) exclusive rwlock clonelk r = 0 (0xffffffff837df798) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 if_clone_destroy+0x67 #3 tun_dev_close+0x1d9 #4 spec_close+0x417 #5 VOP_CLOSE+0x132 #6 vn_closefile+0x12b #7 fdrop+0x121 #8 closef+0x192 #9 syscall+0xbd4 #10 Xsyscall+0x128 Process 81924 (syz-executor) thread 0xffff80002a350040 (508927) exclusive rrwlock inode r = 0 (0xfffffd806e0dd358) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10254 11175K 11305K 166960K 12207 0 pcb 17 12K 12K 166960K 111 0 rtable 190 8K 8K 166960K 381 0 pf 38 18K 25K 166960K 115 0 ifaddr 42 7K 8K 166960K 85 0 ifgroup 56 2K 2K 166960K 126 0 sysctl 4 1K 9K 166960K 10 0 counters 68 36K 37K 166960K 140 0 ioctlops 0 0K 4K 166960K 1626 0 iov 0 0K 16K 166960K 33 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1467 92K 93K 166960K 2030 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 56 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 89K 166960K 706 0 sigio 0 0K 0K 166960K 15 0 proc 72 115K 147K 166960K 625 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 196 0 in_multi 88 6K 7K 166960K 139 0 ether_multi 1 0K 0K 166960K 9 0 mrt 1 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 1K 166960K 427 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 65 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 234 159K 174K 166960K 8523 0 UVM aobj 46 4K 4K 166960K 51 0 pinsyscall 41 82K 102K 166960K 1864 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 51 0 NDP 12 0K 1K 166960K 55 0 temp 79 8652K 8720K 166960K 26978 0 kqueue 14 22K 27K 166960K 132 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 75 0 72 1 0 1 1 0 8 0 rtentry 176 132 0 54 5 0 5 5 0 8 0 unpcb 144 375 0 357 6 2 4 4 0 8 3 syncache 336 5 0 5 2 1 1 1 0 8 1 tcpqe 32 2 0 2 1 0 1 1 0 8 1 tcpcb 736 228 0 220 5 3 2 4 0 8 1 arp 128 16 0 5 1 0 1 1 0 8 0 inpcb 328 839 0 827 11 6 5 6 0 8 3 nd6 144 22 0 7 1 0 1 1 0 8 0 pkpcb 40 5 0 5 4 3 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 29 0 29 3 2 1 1 0 8 1 pppxif 1504 1 0 1 1 1 0 1 0 8 0 pffrag 232 4 0 2 2 1 1 1 0 482 0 pffrnode 88 4 0 2 2 1 1 1 0 8 0 pffrent 40 9 0 7 2 1 1 1 0 8 0 pfosfp 40 1461 0 1037 5 0 5 5 0 8 0 pfosfpen 112 1461 0 746 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 65 0 16 1 0 1 1 0 8 0 pfstkey 128 65 0 16 2 0 2 2 0 8 0 pfstate 384 65 0 16 5 0 5 5 0 8 0 pfrule 1344 27 0 21 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 591 0 228 30 3 27 28 0 8 3 art_table 40 592 0 228 5 0 5 5 0 8 0 art_node 32 130 0 64 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 2 1 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 52 0 42 1 0 1 1 0 8 0 shmpl 112 48 0 5 2 0 2 2 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 2706 0 1195 95 0 95 95 0 8 0 ffsino 296 2706 0 1195 117 0 117 117 0 8 0 nchpl 144 3665 0 1974 64 0 64 64 0 8 0 rtmask 32 4 0 4 1 1 0 1 0 8 0 uvmvnodes 80 3212 0 0 66 0 66 66 0 8 0 vnodes 216 3212 0 0 179 0 179 179 0 8 0 namei 1024 12465 0 12465 5 4 1 2 0 8 1 percpumem 16 85 0 36 1 0 1 1 0 8 0 kstatmem 264 76 0 50 3 1 2 3 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 2 0 2 2 2 0 1 0 8 0 scxspl 216 21797 0 21796 10 9 1 8 1 8 0 plimitpl 152 175 0 156 1 0 1 1 0 8 0 sigapl 424 1045 0 971 9 0 9 9 0 8 0 knotepl 120 505 0 0 16 0 16 16 0 8 0 kqueuepl 224 303 0 292 7 2 5 5 0 8 4 pipepl 344 157 0 130 3 0 3 3 0 8 0 fdescpl 528 999 0 969 3 0 3 3 0 8 0 filepl 160 5779 0 5555 16 3 13 13 0 8 1 lockfpl 104 346 0 344 2 1 1 2 0 8 0 lockfspl 48 160 0 158 1 0 1 1 0 8 0 sessionpl 144 26 0 17 1 0 1 1 0 8 0 pgrppl 48 46 0 29 1 0 1 1 0 8 0 ucredpl 104 838 0 825 1 0 1 1 0 8 0 zombiepl 144 1197 0 1197 1 0 1 1 0 8 1 processpl 1232 1045 0 971 6 0 6 6 0 8 0 procpl 664 2063 0 1979 9 0 9 9 0 8 0 sosppl 168 5 0 5 2 1 1 1 0 8 1 sockpl 752 1309 0 1276 17 6 11 11 0 8 6 mcl64k 65536 17 0 0 3 0 3 3 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 108 0 0 14 0 14 14 0 8 0 mcl2k 2048 47 0 0 6 0 6 6 0 8 2 mtagpl 96 6 0 0 1 0 1 1 0 8 0 mbufpl 256 225 0 0 15 1 14 15 0 8 0 bufpl 280 9903 0 3759 440 0 440 440 0 8 0 anonpl 32 10670 0 0 86 0 86 86 0 246 0 amapchunkpl 152 27441 0 26970 46 22 24 29 0 158 3 amappl16 200 4685 0 4640 46 31 15 23 0 8 8 amappl15 192 18 0 18 3 2 1 1 0 8 1 amappl14 184 125 0 112 1 0 1 1 0 8 0 amappl13 176 9 0 9 1 1 0 1 0 8 0 amappl12 168 1676 0 1646 3 1 2 2 0 8 0 amappl11 160 53 0 39 1 0 1 1 0 8 0 amappl10 152 24 0 24 1 1 0 1 0 8 0 amappl9 144 252 0 251 1 0 1 1 0 8 0 amappl8 136 23 0 21 1 0 1 1 0 8 0 amappl7 128 121 0 107 1 0 1 1 0 8 0 amappl6 120 194 0 191 1 0 1 1 0 8 0 amappl5 112 137 0 127 1 0 1 1 0 8 0 amappl4 104 321 0 302 1 0 1 1 0 8 0 amappl3 96 5199 0 5091 6 2 4 4 0 8 0 amappl2 88 677 0 615 2 0 2 2 0 8 0 amappl1 80 11285 0 10689 17 2 15 15 0 8 0 amappl 88 7698 0 7535 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 50 0 5 1 0 1 1 0 8 0 uaddrrnd 24 999 0 969 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 999 0 969 1 0 1 1 0 8 0 vmmpekpl 168 9792 0 9751 3 0 3 3 0 8 0 vmmpepl 168 70660 0 68711 127 20 107 107 0 357 8 vmsppl 488 998 0 969 6 1 5 5 0 8 0 rwobjpl 80 25380 0 21186 93 2 91 91 0 8 0 pdppl 4096 2006 0 1938 114 40 74 86 0 8 6 pvpl 32 19743 0 0 160 0 160 160 0 265 0 pmappl 256 998 0 969 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 302 0 55 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83782ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838ab1e8) at __mp_lock+0x192 intr_handler(ffff80003c553800,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x76f244744f50, count: 9 ddb{0}> trace x86_ipi_db(ffffffff83782ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838ab1e8) at __mp_lock+0x192 intr_handler(ffff80003c553800,ffff800000079a80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x76f244744f50, count: -6 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff83377c92) at panic+0x1e5 __assert(ffffffff833b28ea,ffffffff833acb86,84,ffffffff834073a8) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x24f rtable_add(20) at rtable_add+0x2d9 if_createrdomain(20,ffff800001480000) at if_createrdomain+0x40 ifioctl(ffff800010fd5218,8020699f,ffff80003ac3d410,ffff80002a350d38) at ifioctl+0x1c66 sys_ioctl(ffff80002a350d38,ffff80003ac3d5f0,ffff80003ac3d540) at sys_ioctl+0x674 syscall(ffff80003ac3d5f0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x45496fca7b0, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83377c92) at panic+0x1e5 __assert(ffffffff833b28ea,ffffffff833acb86,84,ffffffff834073a8) at __assert+0x29 rtmap_grow(21,21) at rtmap_grow+0x24f rtable_add(20) at rtable_add+0x2d9 if_createrdomain(20,ffff800001480000) at if_createrdomain+0x40 ifioctl(ffff800010fd5218,8020699f,ffff80003ac3d410,ffff80002a350d38) at ifioctl+0x1c66 sys_ioctl(ffff80002a350d38,ffff80003ac3d5f0,ffff80003ac3d540) at sys_ioctl+0x674 syscall(ffff80003ac3d5f0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x45496fca7b0, count: -10