last executing test programs: 5.201221728s ago: executing program 6 (id=3549): sysctl$hw(&(0x7f0000000000)={0x6, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_open_pts() (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r3 = socket(0x2, 0x3, 0x0) r4 = dup(r3) setsockopt$inet_opts(r4, 0x0, 0x14, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r5, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) (async, rerun: 64) close(r5) (rerun: 64) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) flock(r0, 0x3) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) (async, rerun: 64) close(r0) (async, rerun: 64) execve(0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) 2.218567513s ago: executing program 3 (id=3578): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000040)={0x4, 0x0, {[0x1, 0x9, 0x1, 0x1, 0x2, 0xfffffffffffffffa, 0x255, 0x100000001, 0xfffffffffffff473, 0x0, 0x76f, 0x7ff, 0xf4e4, 0x3, 0xffff, 0x9, 0xa, 0x1], [0xa4ef, 0x23, 0x8, 0xfffffffffffffffd, 0x0, 0x16, 0x66, 0x3, 0x1000000000, 0x98], [0xbf3, 0xa34e, 0x9, 0x34, 0x0, 0x39, 0xf], [0xfffffffffffffffc, 0x1, 0x9, 0xd09, 0x2, 0x9], [{0xfff7, 0x7fffffff, 0x4, 0x80}, {0xcf, 0x3, 0xe9c, 0x4}, {0x3, 0xfb, 0x0, 0x1}, {0x5, 0x8, 0x9, 0x7fff}, {0xd5d, 0x8, 0x9, 0xfffffffffffffffd}, {0x18, 0x8d, 0xb, 0x100}, {0x4, 0xfa9, 0x6, 0x8000000000000001}, {0x3, 0x7, 0x8, 0x6}], {0x7, 0x1, 0x7ff, 0x7fffffff}, {0x845d, 0x9, 0x1, 0x100000001}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x80, 0x0) fchdir(r1) (async) clock_gettime(0x2, 0xffffffffffffffff) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 1.841404256s ago: executing program 3 (id=3592): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) r1 = socket(0x2, 0x8000, 0x4) setsockopt(r0, 0x64578105, 0x9, &(0x7f0000000440)="762c3e56f3fc879484774a8bb43fb3f5220354dc5d2c38659f931ca4a96ee786e546f589d5c37b068e3e6db9142e26b41933a1bdd170a0a45cef0a1db1cda6f5e70f5f8d17acd68d3f5b08454be4f4227bdf1b8331fc4bab5bd8dc4e2e1207618f1e9fcaea4f42e82c361ba1d9d79d960825ccfd8c943495a1a157954a70f8ce1ccf75bcd63e7e2d828e108a785ef70e330601a520d81685fcab6c00454ecf12c09548", 0xffffffffffffff40) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) sendto$inet(r1, &(0x7f0000000180)="2e9a7f4f7d47abe675351047531e3379dbd60f7bfcc21651688ec11e42d2b8ad891561ed599ceaa60ffbed9e4dce9d4ff05013e3ccd6fe9646e65d28e3696794cf3e768779a12bf1a25fe7c7608f6918557abd2cc0d30ccf4dd077288dca97c5d961c0188ab6463b0231d8426eb96ebda9f8dc1933b66f7d3418053c5a52c41b1c95e1d6c75c0607d254ad905652a334a9ef04e63fe87e16ceed07fb2401ebd38ad3590ce68e73101931abbab11f67725095e18e0ab5397315b24fe3b0e8785bd6cdec63233d1fbead4305355aeff7ef6bb27e13d5c4eaf14bf115cf671c02989167a75c7060c5c35a38ae4f29be", 0xee, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = open(&(0x7f0000000040)='./bus\x00', 0x2, 0x100) clock_getres(0x0, &(0x7f0000000080)) minherit(&(0x7f0000800000/0x800000)=nil, 0x802000000000, 0x0) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000000c0)={0x0}, 0xc) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x2, 0x0, 0x3, 0x4, r4}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r5 = syz_open_pts() close(r5) ioctl$WSMUXIO_INJECTEVENT(r3, 0x80185760, &(0x7f0000000100)={0xffffffff, 0x8001, {0xfffffffffffffffd, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r6, 0x1000000029, 0xb, 0x0, 0x0) r7 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r7, 0xf3) setuid(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') syz_open_pts() write(r5, &(0x7f00000000c0)="7f80946b3125cddf659314674b3f747c8494570d3bb8", 0x16) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000380)={0x7630, 0x6, 0xfffffff8, 0xfffffff6, "0000209c0c000a00000000f000000a00", 0xf, 0x10}) writev(r7, &(0x7f0000001000)=[{&(0x7f0000001040)="b7e02e6d5b71a2518bfb1397bee5e5d02a7e748e2802e41559c09dd4d4efd4125dad2d074f8804d96906c64b3601b425451ec7dab28d4463d29af54cf5311f6655725067b56a1c1bc10339134c1afc1e2de2b11bb87d1e190ad57b1a5ac6e26a15f8b9ec952b3854786b60d48434484234c6c053a167c2310f189098d920665b80", 0x81}], 0x1) 1.80368365s ago: executing program 7 (id=3594): sysctl$kern(0x0, 0x0, &(0x7f0000003940)='\x00', &(0x7f0000000040)=0x1, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x201}, 0x0, 0x0, 0x7}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x3f, &(0x7f0000000040)="00fb534f", 0x4) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0}, 0xc) r3 = geteuid() setreuid(r3, 0x0) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140)={r2, r3, 0xffffffffffffffff}, 0xc) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r1, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000003940)='\x00', &(0x7f0000000040)=0x1, 0x0, 0x0) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x201}, 0x0, 0x0, 0x7}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x1, 0x0) (async) close(r0) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r1, 0x1000000000029, 0x3f, &(0x7f0000000040)="00fb534f", 0x4) (async) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000080), 0xc) (async) geteuid() (async) setreuid(r3, 0x0) (async) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140)={r2, r3, 0xffffffffffffffff}, 0xc) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) write(r1, 0x0, 0x0) (async) 1.798684294s ago: executing program 7 (id=3597): syz_extract_tcp_res(&(0x7f0000000180)={0x41424344, 0x41424344}, 0x10000, 0x6) syz_emit_ethernet(0x104e, &(0x7f00000009c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x19, 0x1040, 0x64, 0x2, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0x3, 0x1e}]}}, @tcp={{0x3, 0x3, 0x41424344, r0, 0x1, 0x0, 0xa, 0x20, 0x0, 0x0, 0x9, {[@sack_perm={0x4, 0x2}, @eol, @sack_perm={0x4, 0x2}, @window={0x3, 0x3}, @generic={0x3, 0xa, "5186cced702d8b42"}]}}, {"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"}}}}}}) (async) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x8001, 0x0) (async) r2 = socket$inet6(0x18, 0x4002, 0x0) getsockopt(r2, 0x29, 0x27, 0x0, 0x0) (async) syz_emit_ethernet(0x80, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6d9efb", 0x4a, 0x67, 0x0, @rand_addr="00000000010000000000000afffffffe", @loopback, {[], @tcp={{0x3, 0x2, r0, r1, 0x0, 0x0, 0x10, 0x10, 0x9, 0x0, 0x1, {[@sack={0x5, 0x2a, [0x9, 0x7, 0x5, 0x5, 0x1, 0x200, 0xc, 0xbfa3, 0xf3a, 0x7ff]}]}}, {"0b58fd764507457aa412"}}}}}}}) 1.757481911s ago: executing program 7 (id=3600): readv(0xffffffffffffffff, 0x0, 0x0) r0 = kqueue() r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000400)={0x3, 0x7f, {[0x2, 0xad, 0x7ff, 0x2, 0x80000000, 0x2d1, 0x40, 0x7, 0x7fffffff, 0x6, 0x4, 0x8, 0x9, 0xa, 0x3, 0x8001, 0x4], [0x5, 0x1, 0xe, 0x3, 0x0, 0x7, 0x2, 0x6, 0x80000000, 0xff], [0xe4d9, 0x1, 0x86, 0x1, 0x7, 0x1, 0x8], [0x0, 0x49a, 0x8, 0x5d, 0x7fffffffffffffff, 0x80000000], [{0x2, 0x0, 0x7f, 0x5}, {0x401, 0x0, 0x0, 0x9}, {0x43, 0x5, 0x5, 0x8}, {0x8, 0x2, 0x8001, 0x3800000000000000}, {0xd3, 0x6, 0x2, 0x6}, {0xdfe0, 0x4, 0x0, 0x6}, {0x1000, 0x3, 0x4010, 0x1}, {0x7, 0x101, 0x10001, 0x1}], {0x5e, 0x4, 0x1000, 0x9}, {0x5b9f, 0x9, 0x8, 0x1}}}) kevent(r0, &(0x7f00000003c0)=[{{}, 0xfffffffffffffff6, 0x3, 0x1, 0xfd, 0x6}], 0x1, 0x0, 0x9b67, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000003840)={{0x30000, 0x820}, {0x5, 0x73900000000000}}, 0x2) kevent(r0, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x42, 0x40000000, 0xfa, 0x14003}], 0xfffffffd, 0x0, 0xffdffff8, 0x0) mquery(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x6) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x1, 0xffffffff, 0x1, 0x50, "acbae3caffc1ffe3a1fc85442d1aa956a6960bd2", 0x1, 0x7}) kevent(r0, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) 1.756862919s ago: executing program 3 (id=3601): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0xaa19}, {0x2, 0x4000}, {0x3, 0xffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x0, 0x4000000}, {0x0, 0x10005}, {0x0, 0x40000}, {0x0, 0x6}, {0x2, 0x4}, {0x2, 0x40000003}, {0x2}, {0x1, 0xffff7fff}, {0x0, 0x26eb}, {0x1, 0x5}, {0x2}, {0x5}, {0x2}, {}, {0x3, 0x1}, {}, {0x2, 0x7}, {0x2, 0xb2}, {0x0, 0xfffffffd}, {0x2, 0xa}, {0x2, 0x100004}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$FIOASYNC(r0, 0xc00c7007, &(0x7f00000000c0)) 1.698178412s ago: executing program 3 (id=3602): syz_extract_tcp_res$synack(0x0, 0x1, 0x0) (async) r0 = open(&(0x7f0000000040)='./bus\x00', 0x18289, 0x110) (async) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000000440), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xff, 0x10000001, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfffffffffffffeff, 0x0, 0x3, 0xa4, 0x7, 0xff], [0xfffffffffffffffc, 0x80000003, 0x59, 0xffffffff, 0x100, 0x7b99, 0x200, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc], [0x100000001, 0x2, 0x4, 0x5, 0xfffffffffffffffe, 0x11000, 0xfffffffffffffffe], [0xfffffffffffffffe, 0x20000000000, 0x401, 0x100000000, 0xfffffeffffeffffe, 0x100000005], [{0x0, 0x20000007, 0x0, 0x5}, {0xfffc, 0x2, 0x200000c9, 0x2}, {0x0, 0x0, 0xfffffffe, 0xfffffffffffffffd}, {0xfffe, 0x1000, 0x6, 0x3e}, {0x10, 0x2, 0x0, 0x80b}, {0x6, 0x2000, 0xe, 0x1ffffffffffffffd}, {0xffff, 0x0, 0x0, 0xfffffffffffffffb}, {0xff30, 0x965, 0x8, 0x1004}], {0x2000, 0x7aae, 0x3ff, 0xb7f}, {0xfffe, 0x0, 0x73e8, 0x1}}}) (async) r1 = socket(0x18, 0x3, 0x3a) sysctl$kern(&(0x7f0000000040)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeb0) (async) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x1}, 0xc) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000002740)="abf734f14a4819137aa3fb4fede70914bb67340f459d8806085867fde6f3eceea7d85b9e4b487e5ea752729d4421276fe97a8f07a77efc742151f530da628321", &(0x7f0000000100)=0x40, 0x0, 0x0) (async) r2 = socket(0x18, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt(r2, 0x1000000000029, 0x3d, &(0x7f0000000040)="00000080", 0x4) (async) getsockopt(r2, 0x29, 0x3d, 0x0, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000780), 0x40, 0x0) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 1.658027425s ago: executing program 3 (id=3605): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x8c, 0xfffff, 0x10, 0x10}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x8000000000000002, 0x46ad}, {{}, 0xffffffffffffffff, 0x1, 0xf0000000, 0x3, 0x8}, {{}, 0xfffffffffffffffd, 0x88, 0x1, 0xffffffff, 0x3}, {{r0}, 0xfffffffffffffffa, 0x35, 0x80, 0x9, 0xf4}, {{}, 0xffffffffffffffff, 0x6, 0x20, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x8d, 0x10, 0x2, 0xffffffff}, {{}, 0xffffffffffffffff, 0x28, 0x2, 0x1f70, 0x80000000000005}], 0xb19, 0x0) sysctl$hw(&(0x7f0000000280)={0x6, 0x1c}, 0x2, &(0x7f0000001280)="fffd", &(0x7f0000000240)=0x2, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x8000003, 0x5, "001a3cfcf6c07c79eb000000e7ffffff000b00", 0x544, 0xc04}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000480)=0x8) writev(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)="26aff0900edb54", 0x7}], 0x1) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x3, 0xfffffffffffffffb}) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) r5 = socket(0x18, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) chroot(&(0x7f0000000740)='.\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') setuid(0xffffffffffffffff) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) 1.356835799s ago: executing program 4 (id=3609): r0 = msgget(0x1, 0x3) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x21, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x80007, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x1735, 0x8000004}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000280)={0x1, 0x47}, 0x3, &(0x7f0000000100)="71f91e3471ac00584dedbc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0xfffffd5c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) mknod(&(0x7f0000000040)='./file0\x00', 0x4, 0x8) setitimer(0x0, &(0x7f0000000000)={{0x401, 0x3fc}, {0x1, 0xc0000}}, &(0x7f0000000140)) 1.356123661s ago: executing program 4 (id=3610): r0 = socket(0x18, 0x1, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0x6, 0x2000003, 0xeffffff9, 0x1, 0x5, 0x8, 0x6, 0x1, 0x2, 0x4001, 0x7f}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) poll(&(0x7f0000000000), 0x35, 0x0) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) close(r0) socket(0x24, 0x4000, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000280)={0x0, 0xfffffffd, 0xfeffffff, 0x3, "0800140000fffbf6ed010076d0f0ef69d5b1b1ad", 0x4ffffffc, 0x9}) setsockopt(r0, 0x6, 0x41, &(0x7f0000000280), 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000140)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x38, 0x4000, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@parameter_prob={0xc, 0x2, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfff8, 0x65, 0x0, 0x8, 0x1, 0x0, @broadcast, @loopback}, "0400fffffdfb04ff"}}}}}) 1.25261598s ago: executing program 2 (id=3612): r0 = getpid() wait4(r0, 0x0, 0x2, &(0x7f0000000000)) (async) wait4(r0, 0x0, 0x2, &(0x7f0000000000)) r1 = shmget(0x2, 0x4000, 0x14, &(0x7f0000ffb000/0x4000)=nil) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) r5 = getgid() r6 = getgid() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x8, r3, r5, 0xffffffffffffffff, r6, 0xa, 0x81}, 0x9, 0x0, r0, r0, 0x4, 0x4, 0x6}) setregid(r6, 0x0) (async) setregid(r6, 0x0) wait4(r0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)) r7 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r7, 0xffff, 0x100, &(0x7f0000000280)=0x1, 0x4) (async) setsockopt$sock_int(r7, 0xffff, 0x100, &(0x7f0000000280)=0x1, 0x4) accept(r7, &(0x7f00000002c0)=@in, &(0x7f0000000300)=0xc) (async) r8 = accept(r7, &(0x7f00000002c0)=@in, &(0x7f0000000300)=0xc) r9 = fcntl$getown(r7, 0x5) fcntl$lock(r8, 0x8, &(0x7f0000000340)={0x1, 0x2, 0x4, 0x40000000000000, r9}) getppid() (async) getppid() r10 = msgget(0x1, 0x1) msgctl$IPC_SET(r10, 0x1, &(0x7f0000000380)={{0x5, r3, r4, r3, 0xffffffffffffffff, 0x2, 0x9}, 0x5, 0x1ff, r0, r2, 0xfffffffffffffffb, 0x1}) (async) msgctl$IPC_SET(r10, 0x1, &(0x7f0000000380)={{0x5, r3, r4, r3, 0xffffffffffffffff, 0x2, 0x9}, 0x5, 0x1ff, r0, r2, 0xfffffffffffffffb, 0x1}) shmctl$IPC_RMID(r1, 0x0) (async) shmctl$IPC_RMID(r1, 0x0) ioctl$VNDIOCSET(0xffffffffffffff9c, 0xc0384600, &(0x7f0000000480)={&(0x7f0000000400)='./file0\x00', 0x8, &(0x7f0000000440)='./file0\x00', 0x8}) setregid(r6, r6) (async) setregid(r6, r6) setgid(r5) fchownat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', r3, r4, 0x4) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) msgctl$IPC_SET(r10, 0x1, &(0x7f0000000580)={{0xd705, r11, r4, r3, r5, 0xd, 0x2}, 0x0, 0x3, r9, r0, 0x48, 0x4, 0x4903, 0x6}) (async) msgctl$IPC_SET(r10, 0x1, &(0x7f0000000580)={{0xd705, r11, r4, r3, r5, 0xd, 0x2}, 0x0, 0x3, r9, r0, 0x48, 0x4, 0x4903, 0x6}) getpid() ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f0000000600)={0x3f10, 0x3, 0x3c3, 0x2, "6f183e267cb226f0de5dc49d953b8330b2d35fb1", 0x7, 0x7f}) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffff9c, 0x8058574f, &(0x7f0000000640)={'./file0\x00', 0x1, 0x746, 0x74b, 0x0, 0x81, 0xc5, 0x7fffffff, 0x1, 0x2, 0x7}) setregid(r12, r4) unlink(&(0x7f00000006c0)='./file0\x00') (async) unlink(&(0x7f00000006c0)='./file0\x00') connect$unix(r7, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0xa) 1.177856181s ago: executing program 1 (id=3616): r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs, &(0x7f00000000c0)=0x8) bind$unix(r0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@broadcast, @broadcast, [{[{0x88a8, 0x4, 0x0, 0x3}], {0x8100, 0x6, 0x0, 0x1}}], {@generic={0x3c03, "bd7b3fc9a5105cb2657b5eb32faf213b6ff48fdf111972763a30e5fd8b447b6d36505b72a9ef719ec32339b084e7acffb2268f4dc52a"}}}) syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @random="0cd3e8aa80aa", [], {@ipv6={0x86dd, {0x0, 0x6, "000400", 0x30, 0x16, 0x0, @rand_addr="fe000000010000ff80d14400002000", @loopback, {[@dstopts={0x62, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0xffffff79}, @enc_lim={0x4, 0x1, 0x81}, @enc_lim={0x4, 0x1, 0xc}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xc247}]}], @udp={{0x0, 0x1, 0x8}}}}}}}) syz_extract_tcp_res(&(0x7f00000001c0), 0x74be996a, 0x80000000) 1.102982082s ago: executing program 1 (id=3617): unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='W\x00') 1.101905556s ago: executing program 1 (id=3620): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x5, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x3, 0x0) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r3 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaab3073464aaaaaaaaaa080045f6002c008b477b3c59d9e00b0e009078000b0008010003fc0000000400000009"]) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r5 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FIOGETOWN(r5, 0x4004667b, &(0x7f0000000080)) ioctl$FIONREAD(r2, 0xc0206921, &(0x7f00000001c0)) r6 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r6, 0x80206919, &(0x7f00000001c0)) r7 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r7, 0x8020690c, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x802069a1, &(0x7f00000001c0)) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000100), 0x8) r8 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r9 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r9, 0x0, 0x1, &(0x7f0000000000)="7f4a6fc4", 0x4) socket$inet(0x2, 0x8000, 0xe) socket$inet(0x2, 0x5, 0x3) accept$inet(r8, &(0x7f0000000100), &(0x7f0000000180)=0xc) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000002c0)="d3f6278d3f647b4dfe3c698d309b437e45bbc3c0083439ec2782d5b04d42423d468caca84aa7e9d71658ff0cfc00b8b0df6014c749717c3b164fa2116a16cbba3ac2ae479b4f696f1c200dd8d00bc272c5d994a1dd32be452fb15abb72373aa43be6694f7f65b71d7d6912e6834f4e80e2e8081e1b6d91730cc6df114d10e13b15b73b631f2d4ff2e6d357fc5bc2f72daba95eb11c2d6988d51781156afcf965aea7ef9e6e21051f0c5283079d8c5bf99c2c", 0xb2) clock_getres(0xb3df7f09697aa280, 0x0) getpeername$inet(r8, 0x0, 0x0) 1.101624926s ago: executing program 2 (id=3621): mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x0) (async, rerun: 64) r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x88) (async, rerun: 64) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000001c0)={0xf66b, 0xfffffffe, 0x401, 0x1fffff05, "9cdc45c6307e8b61c7d61df7fb7f6c00005fdd04", 0x707, 0x2}) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) (async) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, 0x0, 0x0) r2 = syz_open_pts() syz_open_pts() (async, rerun: 64) poll(&(0x7f0000000140)=[{r2, 0x80}], 0x1, 0x8001) (async, rerun: 64) syz_open_pts() (async) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) setrlimit(0xa00a2adee21ce02b, 0x0) (async) mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x33, &(0x7f00000000c0)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) (async, rerun: 32) select(0x40, &(0x7f00000000c0)={0x0, 0x1, 0x4, 0x0, 0x100000000000000, 0x1000006, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x60, 0xfffffffffffffffe, 0x0, 0x0, 0x9, 0x9, 0x1ff, 0xffc}, 0x0) (rerun: 32) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x1c5) ioctl$FIONREAD(r4, 0x80047308, &(0x7f00000001c0)) (async) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') 1.037353739s ago: executing program 2 (id=3623): mlockall(0x0) mlockall(0x1) 1.037129864s ago: executing program 1 (id=3624): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) pwritev(r0, &(0x7f0000000880)=[{&(0x7f0000000100)="c04c", 0x2}], 0x1, 0x1ffffffffffffffe) (async) pwritev(r0, &(0x7f0000000880)=[{&(0x7f0000000100)="c04c", 0x2}], 0x1, 0x1ffffffffffffffe) mprotect(&(0x7f0000068000/0x3000)=nil, 0x3000, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r2 = socket(0x18, 0x3, 0x3a) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x67, &(0x7f00000000c0)={0x3}, 0xc) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000000)=0xef000, 0x4) sendto(r1, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) shmget(0x2, 0x1000, 0xe1c, &(0x7f0000069000/0x1000)=nil) (async) shmget(0x2, 0x1000, 0xe1c, &(0x7f0000069000/0x1000)=nil) munlock(&(0x7f0000068000/0x3000)=nil, 0x3000) (async) munlock(&(0x7f0000068000/0x3000)=nil, 0x3000) 1.036633868s ago: executing program 4 (id=3625): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)={@empty, @broadcast, [], {@generic={0x8100}}}) setsockopt(r0, 0x8, 0x9, &(0x7f00000001c0)="759ade8f0febdc701d63686bf03947bfd740c50f2a28833720275e442dc3fe007a011dba7c1bdce0897588046a4afef8449cbbbc562222945e8e3999da757d6e3bec5d72283d8eaead5e0a99d7810c03921d7bf71e266db2d808cae5f0ec6e53c023e17da6292018a1144fe128e74883df874151d945548a711d915dda26d1d7eb190750f242ab561fe989", 0x8b) r1 = socket(0x18, 0x1, 0x0) close(r1) socket(0x24, 0x2, 0x0) setsockopt(r1, 0x6, 0x41, &(0x7f0000000000), 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1, 0x0, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setsockopt$sock_int(r3, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x1, 0x2000e40) sendto$unix(r2, &(0x7f00000000c0)="b1000503000004000000100007000000020013fecea1050100007ae3d236acf20b781038164991f7c8cf5f883ba8c29513de84cbed514929ffffff41019b672f4d335c223e7d0c34f495a819a3a42102110000720fd18bfbb670c1f5a872c881ea6e2ec58904000000000080e41ef2be813db7da307600000047e6006b00112b000000000004bfba353e537e2ba37f50b609f4f707e37181f834371205d1a7f1c057aa1a33000dbf55ef349b2e52a8322f45693c6199ffe6cf33f3833e1ef3415cb1e15a1c1263e10744ed3eff6179953d7cd0278d9b76dbc2aca58287721863ae58b681035b72b2", 0xe8, 0x9, 0x0, 0x0) r4 = openat$klog(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$LIOCSFD(r4, 0x80046c7f, &(0x7f0000000080)=r2) 963.853947ms ago: executing program 4 (id=3626): writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x2f, &(0x7f0000000180)={@random="4cc3768a2da2", @local, [{[], {0x8100, 0x5, 0x1, 0x3}}], {@generic={0x8010, "9cb17e753d60d40e2d731438c684b76e03820b9b6d2e68c2b9c93bb33f"}}}) connect$inet(r0, &(0x7f0000000000), 0x10) recvfrom(r0, &(0x7f0000000040)=""/226, 0xe2, 0x1020, &(0x7f0000000140)=@in6={0x18, 0x3, 0x40}, 0xc) 963.017626ms ago: executing program 2 (id=3628): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000016c0), 0x1, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r2, 0x800474c4, &(0x7f00000000c0)) sysctl$net_inet_ip(&(0x7f0000000b00)={0x4, 0x2, 0x0, 0x1a}, 0x4, &(0x7f0000000b40)="b58b34c12796fefd2a0e", &(0x7f0000000c00)=0xa, &(0x7f0000000c40)="b2fce6eaa334c8fe536d6373c9744142ca1eb970fb", 0x15) getegid() getegid() write(r0, &(0x7f0000001cc0)="6d530b9a3a58c0db48c802ec053b8638534013fa44", 0x15) pread(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x7fffffffffffffff) shutdown(0xffffffffffffffff, 0x2) ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x80045745, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) open$dir(0x0, 0x10, 0x2) openat$speaker(0xffffffffffffff9c, &(0x7f00000016c0), 0x1, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) (async) fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) (async) ioctl$FIONREAD(r2, 0x800474c4, &(0x7f00000000c0)) (async) sysctl$net_inet_ip(&(0x7f0000000b00)={0x4, 0x2, 0x0, 0x1a}, 0x4, &(0x7f0000000b40)="b58b34c12796fefd2a0e", &(0x7f0000000c00)=0xa, &(0x7f0000000c40)="b2fce6eaa334c8fe536d6373c9744142ca1eb970fb", 0x15) (async) getegid() (async) getegid() (async) write(r0, &(0x7f0000001cc0)="6d530b9a3a58c0db48c802ec053b8638534013fa44", 0x15) (async) pread(0xffffffffffffffff, &(0x7f0000002cc0), 0x0, 0x7fffffffffffffff) (async) shutdown(0xffffffffffffffff, 0x2) (async) ioctl$WSDISPLAYIO_SVIDEO(0xffffffffffffffff, 0x80045745, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)) (async) open$dir(0x0, 0x10, 0x2) (async) 900.392016ms ago: executing program 2 (id=3630): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x56}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x8) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)="cff5c05664da486cda974a82388ef359023b50129bdb3b8c172b8359eb32d47209b20e003b553a10352e3b0b4f4247b103", 0x31}], 0x1) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000000)=0x8) ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x47) writev(r1, &(0x7f0000000640)=[{0x0}], 0x1) writev(r1, &(0x7f0000000180)=[{0x0}], 0x1) 895.825752ms ago: executing program 0 (id=3633): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0x27, &(0x7f0000000040)="2300bf98", 0x4) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) ktrace(&(0x7f0000000080)='./bus\x00', 0x1, 0x8, 0x0) 712.509387ms ago: executing program 7 (id=3634): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x6, 0xfffffff9, 0xff, 0x80000004, 0x2, 0xfffe, 0x10, [{0x4, 0x8, 0x2, 0x71100}, {0x7, 0x8, 0x8, 0x40}, {0x8, 0x1ff, 0x3, 0x9}, {0x2, 0x200800, 0x8007}, {0x401, 0x200726, 0x102800, 0x9}, {0x446, 0x6, 0x6, 0x99}, {0xce3, 0xffffffff, 0x4f8, 0x3}, {0x9, 0x803, 0x14, 0x8}, {0x1, 0x82, 0x5, 0x2}, {0x1, 0x7fff, 0xd1b, 0x4}, {0x1d1, 0x3bd, 0xc, 0x3}, {0x800, 0x101, 0x8, 0x9}, {0xb8c, 0x80000000, 0x8, 0x10001}, {0x81, 0xfffffffa, 0x1, 0x6}, {0xc, 0x8, 0x9, 0x4}, {0x0, 0x1, 0x1012, 0x30804}]}) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt(r1, 0x6, 0x1, &(0x7f0000000180)="b4b066686838a6034174d1427e0bf9e7e67058272ce1c9f6007a8855ba7c8dab76c76f86a013f62b775be61eb92eac1a4564deac2ac83506bdd89a2487adafc0d4fe4892672d8a94aadc60a349fa75671ac58bf4c964505dc843fda6370fd73884ab628fda72a207121336de365f39a59549cff633d8bfa2c6eda05311079a38d3012757c6ef1042b77ee8460771fe1c65e1f6fc1afcc3368926085adcfd24273a5eba9c61f3af072ae66823889da97d9445c7762f95731a2dfd78581b44822657cc4fd29e0af9e408f6e60cdfb989bf4f858937d9fbc52b706a6d1c08b9a11a9f", 0xe1) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x820e, 0x6, 0xffffdf82, 0xffffff90, "08955c1cfac164e20a070e00000009ffe600", 0x4000000, 0x5}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 613.995993ms ago: executing program 0 (id=3635): ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x8, 0xd7, "00000000000000000000002ef3ffffff00", 0x13, 0x3}) setrlimit(0xe, &(0x7f0000000040)={0x9, 0x53}) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) writev(r1, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000400)="fa", 0x1}], 0x2) ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000000000)={0x6, 0x10}) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x8, 0xd7, "00000000000000000000002ef3ffffff00", 0x13, 0x3}) (async) setrlimit(0xe, &(0x7f0000000040)={0x9, 0x53}) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) (async) writev(r1, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000400)="fa", 0x1}], 0x2) (async) ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000000000)={0x6, 0x10}) (async) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) (async) 613.516237ms ago: executing program 2 (id=3636): socket(0x18, 0x1, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) select(0x40, &(0x7f0000000140)={0x8, 0x1008000003ff, 0x1, 0x0, 0x2, 0x0, 0x0, 0x6}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x16, 0x0, @broadcast, @rand_addr=0xac1400ff}, @udp={{0x2, 0x2, 0x8}, {"777cde15"}}}}}}) open(0x0, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) clock_gettime(0x4, 0xfffffffffffffffe) 613.209006ms ago: executing program 7 (id=3637): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0) (async) poll(0x0, 0x0, 0x8) (async) open(0x0, 0x615, 0x15) (async) msgctl$IPC_SET(0x0, 0x1, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5200) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) pipe(0x0) (async) openat$speaker(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000180), 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) r2 = semget(0x0, 0x0, 0x0) semop(r2, &(0x7f0000000040)=[{0x0, 0x6, 0x1800}], 0x1) (async) semop(r2, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000180)={0x1, 0x2f}, 0x2, &(0x7f0000000240)="cb6286660b1b0eb785f98ba6f057c588836b6fe745bfa01134000acae3a7b6048926297779fd05ac1b7424c3db4bf4f35754eda57bf897fec67e257a8d081806136f350fb8af074435bf4b20fb02898d4feb00115225f773dbb7d8d8087d9f37311da90e17a28068c920ebaa5289f9866081118fdf26c8220d96578ce77e35556dd37d95b498f1cc189ae6392bdf03610cd2f3898efebe6c981f980cf048bc08aca3d4c8d31045efcd0af7f10c0ac0", &(0x7f00000001c0)=0xaf, &(0x7f0000000300)="6b69a2027e9fcde72193fe05755dd7f9b553fcf5127c6616e33dec6b8649647d0b580cb5171a6d6eec2a00240405d136b3f5297883392a06c4d34aaaa51e66db5aedeb79aa472ae39221457b34559b388148beeda91415cf885a54567d5fe511676fffbea8", 0x65) close(0xffffffffffffffff) (async) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x40, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x6, 0x0, 0x0, 0x0, 0x1) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) ioctl$TIOCSETA(r3, 0xc0104451, &(0x7f0000000740)={0x5, 0x408, 0x3fc, 0x2000, "0000000000fb000000000000b34445f0388a19a0", 0x33c3300a, 0x2}) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) pwrite(r0, &(0x7f00000000c0)="a7", 0x1, 0x40007) 613.116736ms ago: executing program 0 (id=3638): sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) 612.882885ms ago: executing program 0 (id=3639): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x0, 0x0, 0xbffffffffffffff6, 0x100010001000b}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) unlink(&(0x7f0000000000)='./file0\x00') ioctl$SPKRTONE(0xffffffffffffffff, 0x80085301, 0x0) r0 = kqueue() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0/file0\x00'}, 0x10) kevent(r0, &(0x7f00000000c0), 0x40, 0x0, 0xa, 0x0) kevent(r0, &(0x7f0000000000), 0x29f, 0x0, 0x7ffe, 0x0) 571.409859ms ago: executing program 0 (id=3640): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8) 539.29551ms ago: executing program 7 (id=3642): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x3, 0x2, 0x0, 0x100000000000000}) (async, rerun: 32) r0 = socket(0x1, 0x5, 0x0) (rerun: 32) close(r0) (async, rerun: 64) semop(0x0, &(0x7f00000000c0)=[{0x2}, {0x0, 0x2ff, 0x800}], 0x2) (async, rerun: 64) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async, rerun: 64) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (rerun: 64) writev(r1, &(0x7f0000001800)=[{&(0x7f0000001500)="d802f7987deed9e3181b644a504a5335026ba3abf4ef8b357fd1e8f12cc1de974c2108757fad799d554506304f4e6f", 0x2f}], 0x1) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r2, 0xc0284457, &(0x7f0000000000)={0xfffffffe, 0x5, 0x3, 0x1000, "080000400006000000010000000100ff2b0100", 0x4917, 0x8}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) r4 = syz_open_pts() fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) (async) flock(r4, 0x1) flock(r4, 0x3) (async) r5 = socket(0x1, 0x5, 0x0) fcntl$setstatus(r5, 0x4, 0x40) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0) (async, rerun: 64) openat$zero(0xffffffffffffff9c, &(0x7f00000006c0), 0x100, 0x0) (rerun: 64) dup2(r3, r6) (async) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000700), 0xc) (async) fcntl$lock(r4, 0x8, &(0x7f00000003c0)={0x2, 0x0, 0x9, 0x100000004}) (async) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, 0x0) (async) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@in6, 0xc, &(0x7f0000000240), 0x0, &(0x7f0000000500)=""/4096, 0x1000}, 0x801) (async) r7 = socket(0x18, 0x2, 0x0) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async, rerun: 32) write(r0, &(0x7f0000000140)="24bdfa5d1d2873c63e35348295b299ab09dbd0734449c365d05ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688a858b8cf6bbca32ec975d185cfcadf68ed7796e53e0000400007a20746f313da7dc6c5133407dbcafaea3077475df6575658bc77274869b4cf11d1374cacc8af0e6508712b97dd66229e96593f6a8822b437639678a1cc3702368dc70dcf2429a7e1582005bed8a072a9c3310cdeeb79f221bda2b2ccef950b12ea84e60e401ed6abbac6c034a7d182a13e31f491b6f624148710ee7f3278e676ec4119399aa9c8774e6c53f708853588d97fc458e5807859417c4cc81f0f51d2f4718ce77baaadf64199ef12945bb1506", 0x19861) (rerun: 32) 538.881916ms ago: executing program 3 (id=3643): socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x3a, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r0, 0x80047476, 0x0) kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x1, 0x5}], 0x0, 0x0, 0x1000, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000616000/0x3000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f000066a000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x6}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0x2}, {&(0x7f000013f000/0x2000)=nil, &(0x7f000064d000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000069b000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f000069e000/0x2000)=nil}, {&(0x7f0000617000/0x2000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00'}) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101) ioctl$FIONREAD(r1, 0xc0106978, &(0x7f0000000140)) ktrace(0x0, 0x5, 0x192c, 0x0) syz_emit_ethernet(0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r3 = socket(0x18, 0x3, 0x0) readv(r3, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/71, 0x47}], 0x1) unveil(0x0, &(0x7f00000000c0)='x\x00') 330.408308ms ago: executing program 0 (id=3644): r0 = socket(0x18, 0x2, 0x0) close(r0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffd, 0x89, 0x8, 0x7}], 0xffffffff, 0x0, 0x0, 0x0) r1 = socket(0x800000018, 0x2, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x201, 0x18b) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffff9c) write(r3, &(0x7f0000000100), 0xfffffe5d) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) r4 = socket(0x18, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) bind$unix(r1, &(0x7f0000000040)=@abs={0x1f95d27d48731892, 0x7}, 0x8) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r1, &(0x7f0000000240)=[{0x0}], 0x1) 325.973622ms ago: executing program 5 (id=3646): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x2}, 0x8) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)={{0x10001, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x14800000000000}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) setegid(0xffffffffffffffff) setregid(0x0, 0xffffffffffffffff) setuid(0xee01) setgid(0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x1, 0x5, 0x0) setsockopt(r2, 0x4, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x7, "fc68965b4000"}) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_mpls(&(0x7f0000000000)={0x4, 0x21, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000000100)="644a89063fcc9a56bc46aa6f3c0cdcb7655099283e58d6a40d3bd7791b6fb98c", 0x20) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x0, 0xeffffffffffdfffb, 0x10012efffffff, 0xffffffffffffffff}) sysctl$hw(&(0x7f0000000140)={0x6, 0xb}, 0x2, &(0x7f00000002c0)="c6cd1ac827e72ce2011c4f4b165bed0a7db0e8d9d77e8271a0667b90407e9ff6673adc609f33b345cee9bfa3f953e66bd5b028e2967b26b3eef6ffdd60f8ff511d2741ba87e3734ae5af37b411ed94a9047a04df767f31709e92b2f9ef09fac3aa2bef6add921f748162f3fbdb983eda0336409b389cee66a1a0351c15798d4c358b9b294e8c7421187a8f5cd395dd4ac18ce8705ab556153c36c20776bc71", &(0x7f0000000180)=0x9f, &(0x7f0000000380)="fbedeb680821d2fd3f2075d801ed8814979e853ebebbf7cc4c5b9086bd9ea4fa3e782eb8f9409c9fd3173bd9b0b24888934094c431300f8af2e9c4712a0698bfed40305d2294b438a2e4342a62f19c786732e16433ffa4732dc57b0eaf76c11c75f27a9d47cdd67db995df9917fd5aa94a89a854abcee56778e9d6c702fab1254e70f7098c03d44103c72efa6d84e2b8ae208fa81731519e4daf91969a3124e5", 0xa0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) 325.795886ms ago: executing program 6 (id=3647): symlink(&(0x7f0000000fc0)='./file0/file0\x00', &(0x7f0000001000)='./file0\x00') syz_emit_ethernet(0xb9, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00830608fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e20", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB="5002"]) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00140630fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501446"]) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047470, 0x0) execve(&(0x7f0000001140)='./file0/file0/file0\x00', 0x0, 0x0) 234.077952ms ago: executing program 5 (id=3648): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8000, 0x193) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) sysctl$kern(&(0x7f00000000c0)={0x1, 0x56}, 0x2, 0x0, &(0x7f0000000080)=0xffffffffffffff7c, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet(0x2, 0x2, 0x0) r4 = dup(r3) setsockopt$inet_opts(r4, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) r5 = socket(0x2, 0x3, 0x0) r6 = dup(r4) r7 = dup2(r6, r5) connect$unix(r5, &(0x7f0000000000), 0x10) getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000840)={0x0, 0x0}, 0xc) getgroups(0x3, &(0x7f0000000880)=[0xffffffffffffffff, 0x0, 0x0]) sendmsg$unix(r7, &(0x7f00000009c0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f00000007c0)=[{&(0x7f0000000140)="99c32ce70a8f7337781950b1a1d085715e3c971350bef84a37833b70e988becfbb16e5183217ff77407fd6164926659f9c81b632abbf2eb5f412dc66f089e0bbab7e6da5d9589cd9289036bd64a43b01ca7f5267f2616e4210d55bdcfbe55def6e4190a92803c09cf1c1bc7f1574bd5d723b404294fbcf254758356ea5fa111dbb01229d8e382001c4d06d5708effd8e9475347c22bf07a86bde28e00895daa143e3248f01de8d267494f83ed222668416ba66c94d05d8e7e57edfca9288cca5c15172391b39c799ecd3731fb18778", 0xcf}, {&(0x7f0000000240)="00f8fee760ba1d1f425666e132f9f3cee6d46c3979f9b0cec3a9f05dcaf3f659981021ec095253c1df4a14f25e24033c6074187c04e440eb38121b5be34067ab69b67d99f0965e133626de0098e0d34610d92b200446f3da9bdf14fd544d933bb4e247063f69f1f5b99133c391b595e51a7a7c20a3d908b349e75ae8d3e71d33941c348ec9548b3503a018b62889734b2f60bdbda6495ce33d459a1b96662bbd70ef15ff26b9741be4c53edde2db34f4a62fdd714ba5a79f7d5c2896199f8364aab0b9991849182120a794abe98ef391ef53ccac6f796372f364e584c214ff530b16b57ab30f54dced0a068f7e8fb249019badaf40f155ce", 0xf8}, {&(0x7f0000000340)="39812a4fb4545a552a3da63a985af098feb194ac80863c4a2963894348c04a38b51cb6184eca125bbacf84eda31ffa6cd29b1d143cdde1336f030ec184a383ffb068691010bc7fbe13ecb6fc12555dc93092e02797ca127c242f251fd0cd9dac8426078adf069af8826e3f74a5c3a150007a0f73d8f7f721a1ca952a371783a8", 0x80}, {&(0x7f00000003c0)="05d3a5c990a8f646fa0998e97762b76caa4a1b9faca8c5426edce7a5709d2886c50b5f7f1fb508ddcc975426ce59ea517d11d5a207147666394b322eeba37c7e5ceb2752ef0c273fb884056de50952c51ef00a8308557340d94fde854ccfacb40e46f8e1b53aee7f4fbf4eef49427330558ffd33197516a5d0105b037ec4edf1cbf28b96977cd587498b3d465091563c2c7151e292762b0276a7ef62df968d4509e1fca8fc51d1ce686c28c9df12575f9a3ddeccf0e8e14418e5e2f11c", 0xbd}, {&(0x7f0000000600)="d87a052be70c56e88da14f360ccb5529ba824ad8b986add9896f3206e541c079d82790c8fadcde4c446126337fdf7e1ad570b373d3727c1e0e384fb4fe1bf371680ce918e32af41d570a812b76061bb2fa6648bd46948c3732321bb4445aa21f17140198389c3e2455a402c5a5087efccdd5e48b9f24fbfbb86876682323a77e8d32f31ca9467d675cf2dc65f27d5811647666a37392e62ff3026b6056b8f070f9b20d3f11d2aaff75ddeff73c75581fff3e", 0xb2}, {&(0x7f00000006c0)="5b844a638c05e90ae0a99fedc57e1233402f8bc1b5d599e0609f22e572226907e2227c27c6e765dd6a30d9a1d6210b7cabbf4423974f830dc92581d7f835c8546bca35405bd00e4da22656b3a5549346a4f7352006efe8819b6209fbda16b3db28fdacb72ff7cf6f8df6a4de0fdd9f02f72ce771e460ca0596d56cfa5e64daf25d66229505ac5ee99b959769a0820f2ea3f669c22d32bc86993907ae46ee1d", 0x9f}, {&(0x7f0000000480)="b5a2fb8d81dcdf6f2bc2b7e506d1334b89498790e5e4d63ac9b6e2277dbc68c25ef42342ae49cc1008dbd470dd0e0e6370a07c09c7699e331b", 0x39}, {&(0x7f0000000780)}], 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="2800000000000000ffff000001000000", @ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="000000002000000000000000ffff000001000000", @ANYRES32=r7, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2000000000754861c6c923162f000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r6, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000002000000000000000ffff000001000000", @ANYRES32=r3, @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB="000000002000000000000000ffff000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r7], 0xc8, 0x400}, 0x40d) sendto(r4, &(0x7f0000000080), 0x38, 0x0, 0x0, 0x0) syz_emit_ethernet(0xd0, &(0x7f0000000500)={@local, @broadcast, [{[], {0x8100, 0x6, 0x1, 0x1}}], {@generic={0x80f2, "c76e1dd7816bef9bdc50d682582426b9f11e8d65a9a88e1b0bdf28175c503a3ca2fa9164fd7a1e4f89af72bb07143c057b2d395d1027f12578d5822d675912c8bd5b282d324634e4613b186ee92275b5a7f85eaaf303e81b0f03dea0ab867c784d2a1b1c988d3b512a7b28892ba108e14f3a831e5bfc2b874e960af3f35136c2e23d5320468449224e17056f31e1a3b59b750beb0c7f1e49fb70b117d16a25b71437fde62f1fa8c5a695348971b96785a6266ea90bc0891e574e3b2eb2e9"}}}) 232.465704ms ago: executing program 6 (id=3649): r0 = socket(0x18, 0x3, 0x1) (async) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r1 = socket(0x18, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x400c}, 0xb3d83f2, 0x200000000000, 0xffffffffffffffff, 0x0, 0x1ff, 0x204000000000, 0x6, 0x5}) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockopt(r0, 0x29, 0x2c, 0x0, 0x0) 232.152146ms ago: executing program 6 (id=3650): r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000001980)) ioctl$WSKBDIO_SETDEFAULTBELL(0xffffffffffffffff, 0x80105705, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pwritev(r1, &(0x7f00000001c0)=[{&(0x7f00000002c0)="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", 0x196}], 0x1, 0x40080000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x3}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) connect$unix(0xffffffffffffffff, &(0x7f0000000700)=@abs={0x682eb13985c518e6, 0x7}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) mprotect(&(0x7f000070a000/0x4000)=nil, 0x4000, 0x1c8eda66d48a03f) r2 = socket(0x18, 0x1, 0x0) close(r2) setsockopt(r2, 0x1000000000029, 0x42, &(0x7f0000000840)="00cd0a", 0x3) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000780)="ebffcbff13b9fd812eaa4e713048e699319296482091b1c7380729ee0e4689c221050965202c6b9c8d98ea18cadee62ccff556d2de05f4e5b17378d96b6b005775387fdd7e8806c082192e63877a73973e3a4792f386fe7a26254a75f85674534094906e1b1b5a4704e851add7af9669c682776ed62a67d2a0d6b9e311dc13c1d022f9", 0x83) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r0, &(0x7f00000009c0)="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", 0x5b5) sysctl$net_inet6_icmp6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x401, [{0x3}, {0x0, 0xc29}, {0x2}, {}, {}, {}, {0x1, 0xaa59}, {}, {0x3, 0xffffffff}, {}, {0x2, 0x40004}, {}, {}, {}, {0x0, 0x3}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x2}, {0x0, 0x2}, {0x0, 0x7ff}, {0xbb08c0840fa32129}, {0x0, 0x8}, {0x2, 0xfffffffe}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x0, 0x5}, {0x0, 0x200}, {0x2, 0x8}, {0x0, 0xfffffffd}, {0x3, 0x8}, {0x3, 0x8}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005016000000416000b00070000000020000010c18125d7f96ecfc73fd38c23781fd6c61a27ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c50000201201", 0x8b, 0x3a3ae0e0de5f5dda, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000100000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec58904000000000080002a1b4cc702fac500002021fbfa0c0f00008abfba221536f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000940)="7e2fc545c6f4fa07800b52c5c3e4e8633db877462de6763508573b51b3d11ecd65fa4971c286e0f3f4f346c385a8f392951e2f7bd17a2fdc790e9a7ef2a10abfd79f91120e50bce1566f4c", 0x4b}], 0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) mprotect(&(0x7f000076c000/0x2000)=nil, 0x2000, 0x4) unveil(0x0, &(0x7f0000000080)='c\x00') sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) 231.384141ms ago: executing program 5 (id=3651): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x810, r0, 0x5) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000140)=0x5) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0xac, 0x8, 0x2, 0x10}, {0x41, 0xf, 0x2, 0x2007}, {0x6, 0x0, 0x8, 0xc23}]}) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a264ee4975f55011a49b70cb710aa950000000a52e92a24d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x3d}, {&(0x7f0000000340)="1551e6", 0x3}], 0x2) ioctl$WSDISPLAYIO_GMODE(r1, 0x4004574b, &(0x7f0000000040)) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[]) 230.799336ms ago: executing program 6 (id=3652): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="6d54ed688cef3bb7493f9956acb4a6008d4f65f33d4870892589d33f23534662a06abe0402ad28ceca33b3fe440096e06940f44d742bb01250612166d50b98fac77b0dfd66e76b90a7", 0x49}], 0x1, 0x0}, 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x141, 0x145) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) ioctl$FIONREAD(r1, 0xc0106978, &(0x7f0000000140)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x2, 0x8}, {0x40, 0xf, 0x9, 0x7}, {0x6, 0x80, 0x8, 0xfffffffe}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000100)={0x3, 0x0, 0xfff, 0x5}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000300)="00461b000fca13f8e1a2cb59ed4d35958587000000001f00385c046200000817c57500"/44, &(0x7f0000000000)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe6d, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) 134.363631ms ago: executing program 1 (id=3653): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r0 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) acct(&(0x7f0000000080)='./file0\x00') ioctl$WSDISPLAYIO_SMODE(r0, 0x8004574c, &(0x7f0000000040)=0x2) 133.467387ms ago: executing program 4 (id=3654): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00004a1000/0x4000)=nil, 0x400}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x80000002}, {&(0x7f000055e000/0x4000)=nil, &(0x7f000032f000/0x2000)=nil, 0xa}, {&(0x7f0000613000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000251000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f00003d1000/0x1000)=nil, 0x9}, {&(0x7f000043b000/0x1000)=nil, &(0x7f000076c000/0x4000)=nil, 0xffff}, {&(0x7f00000a5000/0x1000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f0000576000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00004a1000/0x4000)=nil, 0x400}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x80000002}, {&(0x7f000055e000/0x4000)=nil, &(0x7f000032f000/0x2000)=nil, 0xa}, {&(0x7f0000613000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000251000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f00003d1000/0x1000)=nil, 0x9}, {&(0x7f000043b000/0x1000)=nil, &(0x7f000076c000/0x4000)=nil, 0xffff}, {&(0x7f00000a5000/0x1000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f0000576000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sysctl$net_inet_ip(&(0x7f0000002800)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, &(0x7f00000028c0), 0x0) (async) sysctl$net_inet_ip(&(0x7f0000002800)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, &(0x7f00000028c0), 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0084463, &(0x7f00000000c0)={0x8, 0xffeffffc, 0x7fff, 0x4, "c9f7550000000bca9853a4956b47c0d100", 0x7, 0x200}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0xffffffffffffff5a) 132.964282ms ago: executing program 5 (id=3655): r0 = shmget(0x3, 0x2000, 0x240, &(0x7f0000499000/0x2000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/46) 132.595429ms ago: executing program 6 (id=3656): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x9, 0xfffd, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x103, 0x0, 0x0, 0x7f}, {0x4, 0x7fe, 0x8007, 0x7}, {0x3fd, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xcde, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x0, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1c9, 0x10001, 0xc, 0x3}, {0x8, 0x80000000, 0x8, 0x2}, {0xb94, 0x7, 0x8004, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x3ff}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x2, 0x0, 0xfff, 0xb0000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) pwritev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000001c0)="3adb48b1782315114a1e3042", 0xc}], 0x1, 0x9) munlock(&(0x7f00003a7000/0x3000)=nil, 0x3000) r1 = socket(0x18, 0x8000, 0x3) ioctl$FIONREAD(r1, 0x8020697a, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000140)=""/209, 0xd1}], 0x2, 0x0}, 0x40) sendmmsg(r2, &(0x7f0000001440)={0x0}, 0x10, 0x0) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x8, [{0x0, 0x2}, {0x3, 0x6}, {0x0, 0x7}, {0x0, 0x7}, {}, {0x2}, {0x0, 0x10000}, {0x1, 0x100}, {0x1, 0xffffffff}, {}, {}, {0x0, 0x1fb}, {}, {0x0, 0x1008}, {0x3, 0x4}, {}, {0x2, 0x803}, {0x1, 0x100}, {0x0, 0x2}, {0x0, 0xea}, {0x1}, {0x0, 0x7}, {0x1}, {0x3, 0x410}, {}, {0x2, 0x7}, {0x0, 0xfffffffd}, {0x0, 0x800}, {0x3}, {}, {0x2, 0xf}, {0x3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) socket(0x11, 0x3, 0xc) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x41, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0xa) r4 = kqueue() kevent(r4, &(0x7f0000000040)=[{{r4}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, &(0x7f0000000100)=[{{r4}, 0xfffffffffffffff9, 0x1, 0x1, 0x0, 0xad}], 0x5, 0x0) kevent(r4, &(0x7f0000000180)=[{{r4}, 0xfffffffffffffffa, 0x16, 0x2, 0x2, 0x8}], 0x2, 0x0, 0x2, 0x0) kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x80007fd, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x6, 0x8009e, 0x2000007, 0x10000100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0xfffffff, 0x10001, 0xffffff80, 0x71000}, {0xfffffffd, 0x80008, 0x9, 0xffffffff}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x401, 0x8, 0x2800, 0x7}, {0x2, 0x6, 0x13, 0x99}, {0xcdf, 0xdf61, 0x200004f8, 0x5}, {0x6, 0x9, 0x5, 0xb}, {0xffefffff, 0x84, 0x4, 0x3}, {0x2, 0x4, 0x93, 0x1ff}, {0x1e0, 0x1, 0x7ff, 0x7}, {0x9, 0x29, 0x9, 0x9}, {0xb8c, 0x401, 0xa, 0x405}, {0x29a71717, 0xfffffffa, 0x0, 0x4}, {0xc, 0xf8f, 0x6}, {0xfffffffd, 0x800bc3d, 0x4, 0x30805}]}) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xd, 0x0}) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgget(0x0, 0x600) 17.1016ms ago: executing program 5 (id=3657): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCSBRK(r1, 0x2000747b) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}], 0x0, 0x0, 0x7, 0x0) r2 = kqueue() kevent(r2, 0x0, 0x2, &(0x7f0000000200)=[{{}, 0xfffffffffffffff9, 0x12, 0xfffff, 0xfffffffffffffffd, 0x202}], 0x7, 0x0) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x3, 0xf6, 0x7, 0x3}, {0x8000, 0x4, 0x6, 0xb}, {0x7, 0x5, 0x3, 0x2000}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r4 = syz_open_pts() fcntl$lock(r4, 0x8, &(0x7f00000001c0)={0x1, 0x0, 0x200000000000001c, 0x1000003fd}) fcntl$lock(r4, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1000300000000}) socket(0x2, 0x3, 0x0) fcntl$lock(r4, 0x9, &(0x7f0000000000)={0x3, 0x2, 0x2, 0x100000001}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r5 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r5, 0x0) utimes(0x0, &(0x7f0000000240)={{0x4, 0x593}, {0x10, 0x3}}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd11cd62c7fabfb949d60111769d666015f2ffffc20000eee23d600262f3c08f8600004c58053bfe80"]) 14.373019ms ago: executing program 4 (id=3658): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x108) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) (async) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0) chdir(&(0x7f0000000040)='./file1\x00') (async) chdir(&(0x7f0000000040)='./file1\x00') renameat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000140)='./file0/file0\x00') (async) renameat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000140)='./file0/file0\x00') mkdir(&(0x7f0000001040)='./file0\x00', 0x1) chdir(&(0x7f00000001c0)='./file0\x00') r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0xc02069b6, &(0x7f0000000100)) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) select(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, &(0x7f0000001900)={0x100000000000000, 0xfffffffffffffffe}, &(0x7f0000000440)) (async) select(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, &(0x7f0000001900)={0x100000000000000, 0xfffffffffffffffe}, &(0x7f0000000440)) 14.138476ms ago: executing program 5 (id=3659): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) r0 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x8, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=3660): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x7, 0x0, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0x8, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xb, 0xf2b, 0x9, 0x2}, {0x40000002, 0xd32a, 0x800008, 0x95}, {0x82ce1, 0x800, 0x9c29, 0x400006d}, {0x3, 0x803, 0x14, 0x6}, {0xffffffff, 0x82, 0x4, 0x400009}, {0x5, 0x7fffffff, 0xd1b}, {0x1d0, 0x7, 0x2c, 0x4}, {0x7bc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0xffe}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0xa, 0x6}, {0x0, 0x3, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. uvn_flush: obj=0xfffffd806976bc90, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! load: 1.01 cmd: getty 76179 [ttyin] 0.00u 0.01s 0% 330k pckbd_enable: command error pckbd_enable: command error                                   pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-multicore-0.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (311094) exits with status -1 WARNING: thread `nfsio' (15133) exits with status -1 WARNING: thread `nfsio' (45392) exits with status -1 WARNING: thread `nfsio' (514323) exits with status -1 WARNING: thread `nfsio' (265234) exits with status -1 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error  pckbd_enable: command error                     pckbd_enable: command error sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error    OpenBSD/amd64 (Amnesiac) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 ŠR,kŠpckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error WARNING: thread `nfsio' (409392) exits with status -1 WARNING: thread `nfsio' (228466) exits with status -1 WARNING: thread `nfsio' (159144) exits with status -1 WARNING: thread `nfsio' (479348) exits with status -1 WARNING: thread `nfsio' (335361) exits with status -1 WARNING: thread `nfsio' (70395) exits with status -1 WARNING: thread `nfsio' (286886) exits with status -1 WARNING: thread `nfsio' (354677) exits with status -1 WARNING: thread `nfsio' (353983) exits with status -1 WARNING: thread `nfsio' (247927) exits with status -1 WARNING: thread `nfsio' (256706) exits with status -1 WARNING: thread `nfsio' (370258) exits with status -1 WARNING: thread `nfsio' (250718) exits with status -1 WARNING: thread `nfsio' (352778) exits with status -1 WARNING: thread `nfsio' (489588) exits with status -1 WARNING: thread `nfsio' (347743) exits with status -1 WARNING: thread `nfsio' (338967) exits with status -1 WARNING: thread `nfsio' (114740) exits with status -1 WARNING: thread `nfsio' (272745) exits with status -1 WARNING: thread `nfsio' (468284) exits with status -1 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pmap_unwire: wiring for pmap 0xfffffd805e19ba00 va 0x200000001000 didn't change! pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error    OpenBSD/amd64 (Amnesiac) (tty00) login: denied attempt to set clock back 4263431311 seconds pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 21 seconds pckbd_enable: command error pckbd_enable: command error denied attempt to set clock back 27 seconds OpenBSD/amd64 (Amnesiac) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 vm_resetcpu: failed pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error    OpenBSD/amd64 (Amnesiac) (tty00) login: WARNING: thread `nfsio' (407230) exits with status -1 WARNING: thread `nfsio' (223499) exits with status -1 WARNING: thread `nfsio' (57512) exits with status -1 WARNING: thread `nfsio' (156209) exits with status -1 malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 vm_resetcpu: failed denied attempt to set clock back 61 seconds vm_create: uvm_map failed: 12 vm_create: uvm_map failed: 12 uAvRmN_IfNaG: SP0xNOT Ld80RE9 ON 0, S0x0A L 110 5> E Ifatadl Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND * 56578 53888 0 0x2 0 0 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x7a0d943daed0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu1: uvm_fault(0xfffffd806c928b90, 0x0, 0, 1) -> e ddb{0}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7a0d943daed0, count: -1 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80002a2d4370 rbx 0 rdx 0 rcx 0xffff80002a262d08 rax 0x34 r8 0xffff80002a2d42a0 r9 0xffff80002a2d410c r10 0xfc64f08c346e8c0c r11 0xdde1d6513634ebc4 r12 0 r13 0 r14 0xffff80002a262d08 r15 0 rip 0xffffffff814cd3ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80002a2d42f0 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{0}> show proc PROC (syz-executor) tid=56578 pid=53888 tcnt=1 stat=onproc flags process=2 proc=0 runpri=57, usrpri=57, slppri=16, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a2622a8,0xffff8000ffffd4d8 process=0xffff80002a2661c0 user=0xffff80002a2cf000, vmspace=0xfffffd806ec3cd68 estcpu=7, cpticks=534, pctcpu=0.49, user=20, sys=393, intr=121 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 25904 254299 30663 0 2 0 syz-executor 25904 393645 30663 0 3 0x4000080 fsleep syz-executor 67115 261899 34198 0 2 0 syz-executor 67115 395894 34198 0 3 0x4000080 fsleep syz-executor 26981 198206 72936 0 2 0 syz-executor 26981 95341 72936 0 3 0x4000080 fsleep syz-executor 26981 167365 72936 0 3 0x4000080 lockf syz-executor 59632 224122 63824 0 3 0x80 nanoslp syz-executor 59632 218021 63824 0 3 0x4000080 pipewr syz-executor 59632 240176 63824 0 3 0x4000080 fsleep syz-executor 1534 283593 77985 0 3 0x80 nanoslp syz-executor 1534 260913 77985 0 3 0x4000080 sbwait syz-executor 1534 217166 77985 0 3 0x4000080 fsleep syz-executor 45396 135399 51749 0 3 0x80 nanoslp syz-executor 45396 315360 51749 0 3 0x4000080 lockf syz-executor 45396 448825 51749 0 3 0x4000080 lockf syz-executor 45396 168582 51749 0 3 0x4000080 fsleep syz-executor 10992 250197 86423 0 3 0x80 nanoslp syz-executor 10992 109145 86423 0 3 0x4000080 kqread syz-executor 10992 220689 86423 0 3 0x4000080 fsleep syz-executor 51652 490928 1 0 3 0x100083 ttyopn getty 51749 35788 53888 0 3 0x82 nanoslp syz-executor 86423 492040 53888 0 3 0x82 nanoslp syz-executor 30663 267811 53888 0 3 0x82 nanoslp syz-executor 63824 230937 53888 0 3 0x82 nanoslp syz-executor 20747 468753 53888 0 3 0x82 nanoslp syz-executor 72936 24346 53888 0 3 0x82 nanoslp syz-executor 77985 490158 53888 0 3 0x82 nanoslp syz-executor 34198 249716 53888 0 3 0x82 nanoslp syz-executor *53888 56578 769 0 7 0x2 syz-executor 769 247902 74427 0 3 0x10008a sigsusp ksh 74427 58826 11155 0 3 0x98 kqread sshd-session 11155 909 84130 0 3 0x92 kqread sshd-session 84130 370994 1 0 3 0x88 kqread sshd 80891 35256 49885 74 3 0x1100092 bpf pflogd 49885 351170 1 0 3 0x80 sbwait pflogd 95023 124051 74946 73 3 0x1100090 kqread syslogd 74946 297247 1 0 3 0x100082 sbwait syslogd 75313 69915 1 0 3 0x100080 kqread resolvd 80212 393614 87178 77 3 0x100092 kqread dhcpleased 27212 281934 87178 77 3 0x100092 kqread dhcpleased 87178 299375 1 0 3 0x80 kqread dhcpleased 9984 387528 0 0 3 0x14200 bored smr 93410 392812 0 0 2 0x14200 zerothread 95968 204353 0 0 3 0x14200 aiodoned aiodoned 72912 241104 0 0 3 0x14200 syncer update 10654 282268 0 0 3 0x14200 cleaner cleaner 67869 285358 0 0 3 0x14200 reaper reaper 85364 35449 0 0 3 0x14200 pgdaemon pagedaemon 43385 410572 0 0 3 0x14200 bored viomb 33554 162296 0 0 3 0x40014200 acpi0 acpi0 76282 326893 0 0 3 0x40014200 idle1 53202 326633 0 0 3 0x14200 bored softnet1 46506 31977 0 0 3 0x14200 bored softnet0 54601 179830 0 0 3 0x14200 bored systqmp 27431 14201 0 0 3 0x14200 bored systq 92878 174185 0 0 3 0x14200 tmoslp softclockmp 13515 100877 0 0 3 0x40014200 tmoslp softclock 29916 53340 0 0 3 0x40014200 idle0 1 244474 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10262 11094K 12443K 166960K 15751 0 pcb 19 16K 17K 166960K 909 0 rtable 230 14K 14K 166960K 1162 0 pf 46 19K 83K 166960K 448 0 ifaddr 38 7K 8K 166960K 232 0 ifgroup 72 3K 3K 166960K 449 0 sysctl 4 1K 9K 166960K 36 0 counters 76 37K 38K 166960K 602 0 ioctlops 0 0K 4K 166960K 2642 0 iov 0 0K 24K 166960K 263 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1544 97K 97K 166960K 4975 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 2K 6K 166960K 17 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 229 0 dirhash 24 4K 16K 166960K 2337 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 3972 0 sigio 0 0K 0K 166960K 92 0 proc 73 115K 180K 166960K 1181 0 subproc 72 4K 4K 166960K 136 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 801 0 in_multi 72 5K 7K 166960K 338 0 ether_multi 1 0K 0K 166960K 58 0 mrt 1 0K 0K 166960K 35 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 265 1182K 1182K 166960K 265 0 exec 0 0K 1K 166960K 1278 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 6 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 270 161K 178K 166960K 37540 0 UVM aobj 148 169K 171K 166960K 159 0 pinsyscall 43 86K 106K 166960K 5294 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 273 0 NDP 15 0K 2K 166960K 176 0 temp 154 8677K 8932K 166960K 195467 0 kqueue 16 22K 34K 166960K 804 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 487 0 482 3 2 1 2 0 8 0 rtentry 176 329 0 245 6 1 5 6 0 8 0 unpcb 144 3305 0 3251 24 20 4 6 0 8 1 syncache 336 17 0 17 7 7 0 1 0 8 0 tcpqe 32 3 0 3 2 2 0 1 0 8 0 tcpcb 736 1449 0 1444 35 34 1 7 0 8 0 arp 136 37 0 22 1 0 1 1 0 8 0 inpcb 328 4960 0 4948 45 40 5 10 0 8 3 nd6 152 53 0 32 1 0 1 1 0 8 0 pkpcb 40 18 0 18 8 7 1 1 0 8 1 kcovpl 48 15 0 7 1 0 1 1 0 8 0 mppekey 1024 3 0 3 3 3 0 1 0 8 0 ppxss 1192 222 0 222 3 2 1 1 0 8 1 pppxif 1504 79 0 79 8 7 1 1 0 8 1 pfstscr 40 5 0 3 2 1 1 1 0 8 0 pffrag 232 231 0 221 1 0 1 1 0 482 0 pffrnode 88 230 0 221 1 0 1 1 0 8 0 pffrent 40 544 0 533 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 6 0 6 5 5 0 1 0 8 0 pftag 88 4 0 4 2 2 0 1 0 8 0 pfstitem 24 268 0 178 1 0 1 1 0 8 0 pfstkey 128 275 0 185 3 0 3 3 0 8 0 pfstate 448 269 0 181 10 0 10 10 0 8 0 pfrule 1344 34 0 29 2 1 1 2 0 8 0 rttmr 136 6 0 6 6 6 0 1 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 1256 0 897 33 8 25 31 0 8 0 art_table 40 1259 0 897 5 0 5 5 0 8 0 art_node 32 322 0 248 2 0 2 2 0 8 0 sysvmsgpl 40 15 0 3 1 0 1 1 0 8 0 semupl 112 5 0 5 4 4 0 1 0 8 0 semapl 112 224 0 214 1 0 1 1 0 8 0 shmpl 112 71 0 8 2 0 2 2 0 8 0 dirhash 1024 797 0 787 6 2 4 6 0 8 0 dino2pl 256 9218 0 7703 96 0 96 96 0 8 0 ffsino 296 9218 0 7703 118 0 118 118 0 8 0 nchpl 144 14730 0 14159 65 34 31 65 0 8 6 rtmask 32 41 0 41 10 9 1 1 0 8 1 vnodes 216 4581 0 0 255 0 255 255 0 8 0 namei 1024 53376 0 53376 4 3 1 2 0 8 1 percpumem 16 316 0 263 1 0 1 1 0 8 0 vcpupl 3968 83 0 1 11 0 11 11 0 8 0 vmpool 840 85 0 3 10 0 10 10 0 8 0 kstatmem 264 298 0 262 3 0 3 3 0 8 0 acpiwqpl 32 3 0 3 1 0 1 1 1 8 1 scsiplug 72 28 0 28 9 8 1 1 0 8 1 scxspl 216 105470 0 105470 16 15 1 8 1 8 1 plimitpl 152 1459 0 1442 1 0 1 1 0 8 0 sigapl 424 4261 0 4213 9 3 6 8 0 8 0 knotepl 120 658 0 0 17 0 17 17 0 8 0 kqueuepl 224 1732 0 1721 20 19 1 5 0 8 0 pipepl 344 581 0 553 12 9 3 9 0 8 0 fdescpl 528 4201 0 4169 3 0 3 3 0 8 0 filepl 160 31265 0 30805 41 21 20 20 0 8 0 lockfpl 104 1360 0 1352 1 0 1 1 0 8 0 lockfspl 48 501 0 497 1 0 1 1 0 8 0 sessionpl 144 45 0 36 1 0 1 1 0 8 0 pgrppl 48 162 0 145 1 0 1 1 0 8 0 ucredpl 104 5877 0 5864 1 0 1 1 0 8 0 zombiepl 144 4602 0 4601 1 0 1 1 0 8 0 processpl 1232 4261 0 4213 6 0 6 6 0 8 0 procpl 664 10398 0 10337 8 2 6 8 0 8 0 sosppl 176 42 0 42 10 10 0 1 0 8 0 sockpl 752 8983 0 8912 69 59 10 20 0 8 2 mcl64k 65536 10 0 0 2 0 2 2 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 111 0 0 14 0 14 14 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 100 0 0 11 0 11 11 0 8 0 mtagpl 96 75 0 0 2 0 2 2 0 8 0 mbufpl 256 1468 0 0 92 0 92 92 0 8 0 bufpl 280 43419 0 37283 439 0 439 439 0 8 0 anonpl 32 15946 0 0 129 0 129 129 0 246 0 amapchunkpl 152 131404 0 130753 85 53 32 37 0 158 5 amappl16 200 15047 0 14950 116 101 15 34 0 8 4 amappl15 192 65 0 65 1 1 0 1 0 8 0 amappl14 184 4 0 4 1 1 0 1 0 8 0 amappl13 176 511 0 510 1 0 1 1 0 8 0 amappl12 168 4649 0 4606 3 0 3 3 0 8 0 amappl11 160 56 0 56 2 2 0 1 0 8 0 amappl10 152 84 0 70 1 0 1 1 0 8 0 amappl9 144 276 0 275 2 1 1 1 0 8 0 amappl8 136 28 0 24 1 0 1 1 0 8 0 amappl7 128 108 0 106 1 0 1 1 0 8 0 amappl6 120 383 0 369 1 0 1 1 0 8 0 amappl5 112 87 0 76 1 0 1 1 0 8 0 amappl4 104 544 0 513 1 0 1 1 0 8 0 amappl3 96 26737 0 26615 5 1 4 4 0 8 0 amappl2 88 694 0 633 2 0 2 2 0 8 0 amappl1 80 27866 0 27272 16 2 14 15 0 8 0 amappl 88 35960 0 35768 5 0 5 5 0 92 0 uvmvnodes 80 210 0 0 5 0 5 5 0 8 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma32768 32768 1 0 1 1 1 0 1 0 8 0 dma4096 4096 3 0 3 3 3 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 8 0 8 3 2 1 1 0 8 1 dma128 128 260 0 260 6 6 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 158 0 11 3 0 3 3 0 8 0 uaddrrnd 24 4201 0 4169 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4201 0 4169 1 0 1 1 0 8 0 vmmpekpl 168 30433 0 30361 4 0 4 4 0 8 0 vmmpepl 168 269356 0 267275 146 47 99 113 0 357 0 vmsppl 488 4200 0 4169 5 0 5 5 0 8 0 rwobjpl 80 69413 0 68031 42 7 35 38 0 8 0 pdppl 4096 8580 0 8426 219 63 156 156 0 8 2 pvpl 32 22271 0 0 180 1 179 179 0 265 0 pmappl 256 4285 0 4172 8 0 8 8 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 556 0 129 13 0 13 13 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7a0d943daed0, count: -1 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 acpitimer_delay(1) at acpitimer_delay+0x76 comcnputc(800,70) at comcnputc+0x29b cnputc(70) at cnputc+0x67 kputchar(70,5,0) at kputchar+0x2ed kprintf() at kprintf+0x29a5 printf(ffffffff83459b22) at printf+0x8b trap_print(ffff800034fd5ef0,6) at trap_print+0x70 kerntrap(ffff800034fd5ef0) at kerntrap+0x2e6 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800001627000) at dt_ioctl_record_stop+0x108 end trace frame: 0xffff800034fd6020, count: 0 ddb{1}> trace x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_4(b008,0) at x86_bus_space_io_read_4+0x37 acpitimer_delay(1) at acpitimer_delay+0x76 comcnputc(800,70) at comcnputc+0x29b cnputc(70) at cnputc+0x67 kputchar(70,5,0) at kputchar+0x2ed kprintf() at kprintf+0x29a5 printf(ffffffff83459b22) at printf+0x8b trap_print(ffff800034fd5ef0,6) at trap_print+0x70 kerntrap(ffff800034fd5ef0) at kerntrap+0x2e6 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800001627000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,81,2000,ffff8000ffff3770) at dtclose+0x109 spec_close(ffff800034fd60a0) at spec_close+0x466 VOP_CLOSE(fffffd805e6aee90,81,fffffd80097fd5b0,ffff8000ffff3770) at VOP_CLOSE+0x132 vn_closefile(fffffd8073ffe790,ffff8000ffff3770) at vn_closefile+0x12b fdrop(fffffd8073ffe790,ffff8000ffff3770) at fdrop+0x121 closef(fffffd8073ffe790,ffff8000ffff3770) at closef+0x192 fdfree(ffff8000ffff3770) at fdfree+0x116 exit1(ffff8000ffff3770,0,0,1) at exit1+0x576 sys_exit(ffff8000ffff3770,ffff800034fd6410,ffff800034fd6360) at sys_exit+0x1a syscall(ffff800034fd6410) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73ec12498900, count: -25