last executing test programs: 3.971912787s ago: executing program 1 (id=5569): r0 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0xc1126939, &(0x7f00000001c0)) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r1 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x43}, {0x3, 0x0, 0x0, 0x45}]}) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) close(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000040)=0xf, 0x4) sysctl$hw(&(0x7f0000000000)={0x7, 0xf}, 0x2, &(0x7f0000000340), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) readv(r1, &(0x7f0000000440)=[{0x0}], 0x1) r2 = socket(0x2, 0x4001, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt(r3, 0x0, 0xa, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = kqueue() kevent(r4, 0x0, 0x80000000, 0x0, 0x9, &(0x7f0000000240)={0x1, 0x8}) setsockopt(r2, 0x6, 0x4, &(0x7f0000000140)="924ecfd76c", 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) kevent(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x7, &(0x7f0000000240)={0x6, 0x200000001}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3.971321037s ago: executing program 2 (id=5570): sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb}, 0x3, &(0x7f00000003c0), 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) lseek(r0, 0xfffffffffffffff2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) getsockname$unix(r0, 0x0, &(0x7f0000000840)) r1 = open(&(0x7f0000000000)='./file0\x00', 0xb0, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) sysctl$hw(&(0x7f0000000200)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, 0x0, 0x0) renameat(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)='./file0\x00') 3.932769369s ago: executing program 2 (id=5571): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000100)=[{0x54, 0x1, 0x4, 0x5}, {0x7, 0x54, 0x26, 0x1}, {0x1026, 0xaa, 0x2, 0x8}]}) write(r0, &(0x7f0000000080)="8e10107db4ddb1d07899e0def26649ebd593e1f23b8d1709903c7a3da8843475ab80932c5365f7ca1f8aa88af8793cfc87ebe243cc", 0x35) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3ff) open(&(0x7f0000000040)='./file0\x00', 0x80, 0xa1) 3.89516896s ago: executing program 2 (id=5577): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r1}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) (async) semctl$GETPID(0x0, 0x1, 0x4, &(0x7f00000001c0)=""/247) 3.891099752s ago: executing program 2 (id=5580): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x18, 0x6, 0xa}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = syz_open_pts() sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0) close(r0) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x1040978c, 0xba, 0xf7fffbfc, 0x80a19f, "bb08000100f167d910508b000000000000000080", 0x100, 0x4000002}) nanosleep(&(0x7f00000000c0)={0x2, 0x1e7}, &(0x7f0000000100)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) sysctl$hw(&(0x7f0000000140)={0x6, 0x1}, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x0) pledge(&(0x7f00000001c0)='.+\x00', &(0x7f0000000200)='tap') ioctl$FIONREAD(0xffffffffffffffff, 0xc0206923, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) kevent(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9b68, 0x0) r4 = socket(0x18, 0x3, 0x0) getsockopt(r4, 0x29, 0x2a, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}}) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) r5 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r5, 0x80206979, &(0x7f0000000100)) fcntl$setstatus(r2, 0x4, 0x40) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) open(0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 3.842875701s ago: executing program 2 (id=5583): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="fd02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x2}, 0x8) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'}) poll(&(0x7f0000000340)=[{r1, 0x1}], 0x1, 0x9) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x40}], 0x1, 0xff) 3.468694893s ago: executing program 2 (id=5592): chmod(&(0x7f0000000180)='./file2\x00', 0x111) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mknod(&(0x7f0000000140)='./file2\x00', 0xc000, 0xd00) r0 = open(&(0x7f0000000080)='./bus\x00', 0x200, 0x115) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) setsockopt(0xffffffffffffffff, 0x1000000000029, 0xc, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x3, 0x4, 0x8a38, 0x4000003, "07160a009cef01098b748200"}) write(r2, &(0x7f0000000580)="e84cb05688d3aea91631f0812fa384b63383ed48ffaf12a9374fd8a80cda58f90103beb55b3b571fcd9861c98ab1d6996b363cf3ed406e6de24918ab76ce64e4c45f2cfeee294e91bd3be7cbad889bab43dd975a637ac8ea7236c606f64586fdbe38d69cea68ddef9d51c635a584e3d17c17ebc6ec7319c97b34ead28d5c6df6c418401282584d941d537ada52139cea8990290254ba892daf8f4803896fb1d243bfe7e4bab940b722b751b137ba9ae9d79b83d031024a67933bfcb82167c94d7d8e90f073993ee07b5b32ea6211970cba9f0bbe868dc19bfe92d8d9e5066d9e5e0c71d9d9ee7c687bbbe78d9e7b0f4afe5037c06a6542d29f0c70cb903741d61940711ff36f99ef3a4bba378ef855e6b702f0a65836cb71062a90a998ddca420e2deb0ee55e5f77d8c1466e4d6452db02d4ec3b6969d279e573921ff1594c6e807e00b475aae81dbec016ab253aa6eaa89a54da068d531fddf6aa125cf629d9172b3035d892aee7602811cbabd58d5dcc755bf100597e25d476e88686208fc01172f537b4427948c057af8aa374c4f6511e8b99f631aed8b22c756bf7aaedba12ee69ef8bb48292a9a90e1543b6a34b09b575d323e3edfa8f4b79439b2ac5ca230b5a5e3ac189dda8ab827eaf833488075a07f9603a2025bb4fd205b5cc016b76bf5e67c02c364fcce45546289f2b49940828aa66b1b0a8cd55864d8f74a68a77e5186fcc40eafa3f9cb77829767e578903e3585752a779df1bdce6c3193d70fa3d086af9059a25e78a37c13cd8db379cfb6a0a46766f3d2a915d763c2a013cc939fa510f50875b14e33252d65c9c585782b3bf0e95ae0d1bedbd7478570e8f3758f1ddadb4376a50cd77dab5e1ac5d5d047430e4ea3ce63638d11ea604cf8f618b2bb62c58784bbe364072375cb9fbf74e65e27722af5b91d8032659075888567e1c79c245c26b1499f722f492553098a949cd69549ef5c96faf045ac9b36183df52603b00d38b4c55801ec87efc42e20fd246d1548a0511937d10da1d7af9a0486c8a51adcf3e79362a251952b78bfb9fc2b2224959e5de15e8deb5d9716e097bece264a768d35f1e06bd08295d7d25fbb5497117a77d363c54d8e0f2c4fbe61af456f2953323d412053ff85b26f71005fb8ff8baa098b8c0631cc7aa7739440ed444f9c3dfeaf8111efcf24c74ff8c01fa65b65123276885aec3891732b599c8a2a62ea885e859d5244c6dce3dc69127ff491378263e94e07710b78023bb8b4813598f436115a77ca61e82f8dfd2634ec69520fed25ebf505631cc84ca3a7af703db8c603f6e1ca8842860fff20123aa5822061664a062beab54181e6c6c5bc9de215f183bff1ddb3b5bdae8277fd7dfd052bab926a80134dc073f573f0db5d74686884b9d4b5cc11d21849e13cb172be163bb0085816aeea121cf060cc97a658e4d66a5dc028eec2a2b9459247a247f4f10c651a1f81ed862a2e8cef481898059ef0bfbf45029b9ba045c157bcb56ed13549113bbee73a718bb0cfac69cb66e6cbbbb2e096c7d0d068cbbf2f30b426cb83af5a96bad3f7f5fad7098d6ece4a471c6a5a14c63c41ffdd839076fbcb97d21f9f9d621650436bce865aa3e37039992f84eae9e0dc8cba1b3e893b7c0b6f5535ad0fe808ba605f3e3498434a90c5e9fd5e5a85ae741f1a32c8e68dd22bc2db711713b6e5b5bda1dfc806f8e295a158705d73e80b46eda996135c57bc971cffac30b9cfe7238eff9e15fa978890a0295fdab3305e4de41a71363f852365b1bb9bea938a72e2460e77628dc27694934a5a4a87e6b9a1b611196b42537a573", 0x511) r4 = dup2(r3, r2) poll(&(0x7f0000000000)=[{r4, 0x40}], 0x1, 0x0) r5 = socket(0x2, 0x2, 0x0) shutdown(r5, 0x1) connect$unix(r5, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) socket(0x2, 0x2, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$VNDIOCSET(r0, 0xc0285108, &(0x7f0000000040)={0x0, 0xffffffffffffffba, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) 2.972790405s ago: executing program 1 (id=5604): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffffe, 0x29, 0x80, 0x2, 0xc}, {{r0}, 0xfffffffffffffffe, 0x10a, 0x10, 0x4, 0x8000000000000000}], 0x8, 0x0, 0x15, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r3 = syz_open_pts() close(r3) syz_open_pts() getsockname$inet(r2, &(0x7f0000000080), &(0x7f0000000140)=0xc) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x8) writev(r3, &(0x7f0000000100)=[{&(0x7f00000009c0)="2228e6beca3c4ba17a2dc2ce44497fb2dc0169b8a20d817abfb58e62b289a2160297a26aac6079318a5cc8e33c2ef4f1f19b018ae2b0eae53acb731d1346460f68f2a91ec389851d26a11eb87af94cfd4af7283a69fab08a7572555285353e7b3fefeeb8fee2588c6cdaa3ad9977ac6a48f757cee2ca2c3e14272ec6ff6d9fa904841e1947baa5a08cf12e6b78943d97119688e547d61f8e4ad73ff435df0b9b9a663d78cc36ca9aebfc26fe84249f27a8fa149d7343bf9b3965ea2551ca03ee77a083df467cb7b24c42df1539e928cde414b9eb0c20396648666872e9a7bf5ac3933f84b76801706e703224a395d37009dd3c2dac0a5aadc834313644f184b06a74bcc98264497650526fca71203c85722884211bf0187c941569c04c3c976db2ed1fb3bf897a60d726e1300056174c1ba29c068d0bd8ca093f6aa6e34466dfd8d8bd5b8e8545f815b08ab0997f86c4df8f3960dd4ebf41d89ea47fcf68b5fe808b6badc579fce6030e1c69403aff6c0f8308b69f804260fd6aca84cf353fc2e18415e23f021943d3dfebd7cea8649ce04356fd821e632577b2818299aa9bc997a9a8d094d5a462c0dedd8fe1c1f6b8db79a670011e1395019a0c10975c9d7a34048546804f62e54a5bdbb928e13362a1b8b2acd664a4a5becc0fc48b8e98edc41b9ca2b535431e6fb814f0943411e7a7482a6fbaa5eb04c56bfa1e4a0487455e5c3f7eb1b17b014348f33da60795f0323adf39344b52ac30be079ae59f06b93a9c9de3ae4120ef33d1717b2903b0b9c03189dd36d42a20f5c641d53e06c46d2a2afef5605aad53f2538b1e498d76f01272341065e185f37e917099ff67b4a8edc54e039c29ef3a6e9b6ce9c84e1a9100e9440ebb46f4bc9b9171cef2e2500203b1edb51719b1ccbdc54d07b3c427315de20ef89329e8530f46fdff1e15b8cd8e89621986083c89c7956bfc7be5a7e6c0bfe412ca455f19d5163163c4203c36a7c931a45259aa8070a448a68744c6e5728cd26710ac8e770c7822da26c78a38e6bfd2f9677c053196ec378759c826a9834c00e478d4c38df6afac4ad0a0cfab4de4c0f7a6843fd601eb697f42ea2c303f72fab2c1714cb4672d6e4508a9f60c90b61926b5ebfd9eee10d440840d6debcef487a903e7a769559b445b23e95e734d00b641453745999027ebe56b1277cd4b6758aaffbb087688238ad010ce3de164cf3bb674ae57d546ed5ce1b93ced27d071e769f3b4a58450d85bb92560bbcd7f1f9d039835a6cbe27dc17124092f6ba5a0b87bc1efe4bb0b276c304b19a3ff0a1a3e9d7dd822fd0499f7967fa4d9975cc8e93f68464914286c143a6430e328712c6ca98cc72b6228f27f719dc48c4cb9af80d12495baa7ea3b2917dbc706a76a876f126a2af06257f850f1828b646b7c3dbd5517cba17de4186ed132f591bd532c1c94b91c37846cd33e8e0bc658ab25f355c115ba1a41710dfc00dbe0656134c5b97a022456971043e696263c0b97c54363ef8a5a90bc6bfed55fcf1cfa32076b963cdf460617216a8cd88f34d105bc787070e7313c0a048b4536eaf357d5298ae50a5c7abc4bbe7b6130d8a5be701b43097002c65a88934d884181c0f528c36e5595ab14a3d856c15484bcd6197cff09fdd3d8c3559b9124520077e8775996a49519d56f43d60f9746b5bec209b6723e2ba37f02cca08f7432f7fe334dc65daacb86695880b8af9555dc897fc1e312b53a27f08183c7f499c07254edc690fea76597ebd661776d3742dcdb03f9648a797f023b527effa954f76e063b58f3f4de56435d535468124f14eab6dadb517c383fe7d919350d9b9d3603", 0x51c}], 0x1) 2.505260019s ago: executing program 1 (id=5622): writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) chflagsat(r0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) fchdir(r1) chroot(&(0x7f0000000740)='.\x00') close(0xffffffffffffffff) syz_open_pts() 2.300843167s ago: executing program 1 (id=5627): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)="9a8a0d7d5efec75aa48c22deb37c833f7a586bc08885a54739", 0x19}], 0x1) (async) pwrite(r0, &(0x7f0000000340)="4ec33d43165a12a7dc2a8f8de524c8439000628ba3a387c611283bade11f05e89db6065231658ecb8d2ca006106e1b8c466e820fcd81cbd6ecd65b17264921a4431e24f133694834550a5bba498b9f9eadc25b0b3b89b2e8", 0x58, 0x5) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x114) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) rename(&(0x7f0000000080)='./file0\x00', 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r3}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) lchown(&(0x7f00000001c0)='./file0\x00', 0x0, r3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="4103000000817aa201e47374ec73a21c2e875ac85e6f4c", 0x59}], 0x1) (async) execve(0x0, 0x0, 0x0) (async) getppid() 2.097273487s ago: executing program 0 (id=5637): r0 = socket(0x800000018, 0x3, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r1 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) ktrace(&(0x7f00000001c0)='./file0\x00', 0x1, 0x40002344, 0x0) dup2(r0, r1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000040)={0x30, 0xe731, 0xc, 0x6, "8275ccb7478a688f124e79cc3af74d02c9641038", 0x8, 0x23306f19}) r3 = socket(0x11, 0x3, 0x3) sendto$unix(r3, &(0x7f0000000080)="b1000504000001010000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896466a421020000ed710fd18bfbb670baf5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfdf82300008abfba0900000008e371a3f8343732051ed6b71d89e0000405f8fffff0e0000000", 0xb1, 0x0, 0x0, 0x0) 1.969898657s ago: executing program 0 (id=5643): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d3, 0xffffffffffffffff, 0x0, 0x8000000000000000, 0x9, 0x0, 0xffe}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$vfs_nfs(&(0x7f0000000000), 0x7, &(0x7f00000025c0), 0x0, 0x0, 0xfffffffffffffe5f) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x2, &(0x7f00000011c0), 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) setuid(0xee01) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$WSDISPLAYIO_DELSCREEN(r3, 0x80085754, &(0x7f0000000040)={0x3965, 0x1}) sysctl$net_inet_tcp(&(0x7f0000000040)={0x7, 0x2, 0x2, 0xa0000204}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x46cb252ac0b00b84, 0x0) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0x8020690e, &(0x7f00000001c0)) 1.820914453s ago: executing program 3 (id=5645): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x10) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x41) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x3, 0x0, 0xffffffffffffffff, 0x40, r2}) fcntl$setstatus(r0, 0x4, 0x8) semget(0x3, 0x0, 0x6) r5 = shmat(0xffffffffffffffff, &(0x7f0000ffc000/0x1000)=nil, 0x2000) sendto$unix(r1, &(0x7f0000000100)="9625997be41200cf4389065031cf40697081f4277727e2d03cbd55c7c49b2631a42bc226e397da1b458bf58e7a2a6756c4abee934594cf8f9aa97e3778b34d6e1afd498bc0142a7c6ad250e44ce438fa1f8b0a9c0a724c50ce418f9618375b05beb5ccf2c304d53468e8ca1acea755866f969053e6522127c0d395768b8e557aa947ea7cc161", 0x86, 0x40b, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0xa) mknod$loop(&(0x7f0000000200)='./file0/file0\x00', 0x40, 0x0) shmdt(r5) ioctl$WSKBDIO_GETMAP(r1, 0xc010570d, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x5, 0xb, 0x10, 0x80, 0x1}]}) r6 = shmget(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r6, 0x4) r7 = fcntl$getown(r0, 0x5) setuid(r3) setsockopt(r1, 0xd8f9, 0x2, &(0x7f00000002c0)="df632c66da094917d4f8e36b4144995b144b020b49ef6146faec1511076cf5277956af1910797012fcbf3c1f43f77bf10e5e986d103c3ccc7a152b60d2b87fff14c63c5780693e1b81c349c6ac", 0x4d) fchownat(r0, &(0x7f0000000340)='./file0\x00', r3, r4, 0x1) r8 = getpgid(r7) lchown(&(0x7f0000000380)='./file0/file0\x00', r3, r4) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x70) socketpair(0x7, 0x2, 0x6, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fcntl$dupfd(r0, 0xa, r10) r12 = open$dir(&(0x7f0000000700)='./file0/file0\x00', 0x80, 0x20) r13 = fcntl$dupfd(r11, 0xa, r9) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000740), 0x10000, 0x0) sendmsg$unix(r1, &(0x7f0000000840)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x1}, 0x8, &(0x7f00000006c0)=[{&(0x7f0000000480)="604936bbc4750a6169a9ea43ddb5d18aab2bd08587df75d12712d6b07f2eca877f5a7ae9f2062337630213333846d622349442e0678fa0f8c33aeefe0bf5a34166bfd62dea091508dd963b939c544bc240b149fc4745bc108abbb1fb245fdb5f70473bc9460a501bec44d5adb7afb537ae4ade74f6b0a0acfa366dc870d71834c5ac9036410340d41473fc34dcd46661eeac63f1319b7a18f4ab498369867c153f938ac06e4e9a31345c77849dce7c4e24238f6c85d25a7257cf3db66491f272ca7e84ffcd00699d7b5309a7efe03bdd3bb74d4c6ece79e1690f5eff8a84ec", 0xdf}, {&(0x7f0000000580)="d5339f58f076624905543f87ed3e58e7999d1f2f4d9a248424f48e16f90c81e82591adc540202a4644683c4b6183df35048f652a1d974d16e8e3b7520cbc6c249846c893c4a1c0856898a3770b076aecc9d05cb14e1e3041370be36177c1a0e5ee934fff7eb45816773cde6e22091c7009ee02e2ec804a222f97a7e857570c2f1390f6345ace17f6b0d8", 0x8a}, {&(0x7f0000000640)="f570eab84ec606466f5fe3bfc6bb", 0xe}, {&(0x7f0000000680)="47ea87abee0bdc007fb3b56ddd371370b42feaabb8044c07810d67d3482660ca3cd0", 0x22}], 0x4, &(0x7f0000000780)=[@cred={0x20, 0xffff, 0x0, r8, 0xffffffffffffffff, r4}, @rights={0x18, 0xffff, 0x1, [0xffffffffffffff9c, r10]}, @rights={0x28, 0xffff, 0x1, [r10, r11, r12, r13, r11, r0]}, @rights={0x18, 0xffff, 0x1, [r9, r1]}, @rights={0x20, 0xffff, 0x1, [r14, r11, r11, r9]}], 0x98, 0x1a}, 0x0) semget(0x0, 0x1, 0x80) r15 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000880), 0x80, 0x0) ioctl$BIOCSETIF(r15, 0x8020426c, &(0x7f00000008c0)={'tap', 0x0}) 1.817756425s ago: executing program 3 (id=5646): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async, rerun: 32) r0 = syz_open_pts() (rerun: 32) close(r0) (async) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x6}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) r1 = syz_open_pts() (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x2410, 0xffffffffffffffff, 0x0) (async, rerun: 32) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 32) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0xa9) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x1, 0x9e, 0x2000007, 0x7, 0x4, 0x8000, 0xb8e, 0x10, [{0xfffffffd, 0x7fffffff, 0x3, 0x7}, {0x101, 0x8, 0x4, 0x8000}, {0x1000, 0x4, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x100, 0x2}, {0x42, 0x8, 0x80002800, 0xb}, {0x1ff, 0x6, 0xe, 0x95}, {0x4, 0xdf41, 0x200004f6, 0x3}, {0x6, 0x4, 0x16, 0xb}, {0x9, 0x1000084, 0xb, 0x3}, {0x4, 0x7, 0x9b, 0x1ff}, {0x1de, 0xffff, 0x40, 0x7}, {0xc, 0x29, 0x9, 0x2d0c}, {0x1000000, 0x100401, 0x80000003}, {0x29a71797, 0x4, 0x0, 0x579}, {0x5, 0xf8f, 0x4000006, 0xfffffffc}, {0xfffffffd, 0x800bd3d, 0x6, 0x30001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc2, 0x3, 0x1, 0x40803, 0xfffeffff, 0x1, 0x0, 0x1, 0x2004007, 0xf5}) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) (async, rerun: 64) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x766a, 0x7ff, 0xcfe, 0xffffff01, "9cdc4580307e080000006b08fc5f81e6015fdd04", 0x7, 0x9}) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x8) (async) r5 = syz_open_pts() ioctl$FIOASYNC(r5, 0x80047469, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r6 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCEXCL(r6, 0x2000740d) (async) open(&(0x7f0000000140)='./bus\x00', 0x80, 0x8e) (async, rerun: 32) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0xfd98}], 0x1) (rerun: 32) 1.734233288s ago: executing program 4 (id=5650): ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3}) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0x80000001, 0x7, 0xd7, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\x00', 0x3, 0x3}) mlockall(0x1) (async) mlockall(0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x4) syz_open_pts() mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) fcntl$setstatus(r1, 0x4, 0x40) ioctl$BIOCSRSIG(r1, 0x80044272, &(0x7f0000000200)) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) poll(&(0x7f0000000000), 0x35, 0x0) close(r0) (async) close(r0) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) (async) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r3, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) mprotect(&(0x7f0000325000/0x3000)=nil, 0x3000, 0x4) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x3}, {0x0, 0x10001}, {0x1, 0x303}, {0x0, 0x100001ff}, {0x1}, {0x0, 0x1ed}, {0x2, 0x5c8e}, {0x2, 0xfffffffb}, {0x3}, {0x3, 0x3}, {0x1}, {0x3}, {0x1, 0xda}, {}, {0x2}, {0x2, 0xfffffffd}, {0x2}, {0x1, 0x9e}, {0x1, 0x2}, {}, {0x0, 0x17}, {0x3, 0x1000}, {0x2, 0xa}, {0x2, 0x3}, {0x3}, {0x0, 0x80000005}, {0x0, 0x4}, {}, {}, {0x1, 0x6}, {0x0, 0xf}, {0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x77) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000180), 0x1, 0x6) (async) syz_extract_tcp_res(&(0x7f0000000180), 0x1, 0x6) socket(0x18, 0x2, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x400, 0x6, 0x0, 0x0, 0x200000001, 0x1, 0x6, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) syz_extract_tcp_res(0x0, 0x4, 0xf5) (async) syz_extract_tcp_res(0x0, 0x4, 0xf5) readv(r3, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/139, 0x8b}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000380)="673bb5b8cc0c16ed08f1b8d24ec34555a65007857cf49811f88d01f1fc94794643e7eca455061c9c3ce6abbbdabb26a52ad7f4", 0x33}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000380)="673bb5b8cc0c16ed08f1b8d24ec34555a65007857cf49811f88d01f1fc94794643e7eca455061c9c3ce6abbbdabb26a52ad7f4", 0x33}], 0x1) 1.364436559s ago: executing program 4 (id=5661): r0 = getuid() setreuid(0xee00, r0) (async) setreuid(0xee00, r0) setreuid(r0, 0x0) (async) setreuid(r0, 0x0) setuid(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x3e, &(0x7f0000000000), 0x15) 1.158698946s ago: executing program 4 (id=5663): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) setgid(0xffffffffffffffff) sysctl$kern(&(0x7f0000000280)={0x1, 0x45}, 0x2, &(0x7f00000002c0)="1dac13cda1342d938b023de3815a1ffd13c261bae25e7eb2db48ce9befda797972640bb0c69cc99f5f2fd7734211913283787e363d4138a346ec0289f19fdf60e33bb2baca17b162ef21fe676f2c8d80721ec670d91879839ad89e17e68302f3c7dae5275d62a88e88133a66a13b3b22a0f3ce0b31fc01c1ac1707e387d45a6ff81dacb7c0d166fcd5cd093235a709f79b6fbca3369075df3c5f49f171288fc30cac3acb781e019b48f2ea03753c380f3726f4df8ee6722d4dfab125f596", &(0x7f0000000380)=0xbe, &(0x7f00000003c0)="7a4c7f7f403c24602b68a2a3923342d3ca439956fe5dc671e672d1445cb0a1bb10af9bc8d91738b6f63e9d023ab719ce2cc9ffcf9e1dda3b5c53608b51fb6b531f7acd26c9b273e453c3a25dfafb", 0x4e) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r2 = getpgid(0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000240)={r2, r3, r4}, 0xc) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x9) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r6 = fcntl$dupfd(r5, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r6, 0x200074c4, 0x0) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000000)=0xffff) close(r0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x102, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x1ff, 0x20060400003fffc, 0x2, 0x5}) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) r7 = socket(0x18, 0x3, 0x0) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) execve(0x0, 0x0, 0x0) 1.154084155s ago: executing program 4 (id=5667): r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x14) ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000000040)) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000080)={0x4, 0x7ff, {0xea, 0x1ae}}) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r0, 0x1}) ioctl$WSDISPLAYIO_DELSCREEN(r0, 0x80085754, &(0x7f0000000140)={0x1, 0x1}) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000180)) socket$inet(0x2, 0x3, 0x3) r1 = socket$inet(0x2, 0x4, 0xfe) select(0x40, &(0x7f0000000200)={0x6363, 0x1ff, 0x5, 0xafcd, 0x4, 0x9, 0x8, 0xa}, &(0x7f0000000240)={0x265e, 0x10, 0x100000000, 0x8000000000000000, 0x3, 0xa, 0x7ff, 0x7}, &(0x7f0000000280)={0x80, 0xfff, 0x7fffffff, 0x6, 0x8, 0xbc1b, 0xb, 0x4}, &(0x7f00000002c0)={0xd85, 0x6}) connect(r0, &(0x7f0000000300)=@un=@abs={0x0, 0x0, 0x0}, 0x8) ioctl$KDGKBMODE(r0, 0x40044b06) ioctl$VT_GETSTATE(r0, 0x40067664, &(0x7f0000000340)) write(r1, &(0x7f0000000380)="ce17898084d2052c852a3a253540402030814d31d8e3d59ce000dafd306e2277db551fc58876e728b8fbbc8836471cd9a9298f2131eb541f3ef6ab2e00d08e562725f8725181ed75f299c75f4e00e72ac38db9359206438dc29aa63356c279dfe9a08ee30c15c44441ae726faacb66e3cfe1f3a36026407994fc0b44111e049df20c1f0dfc31991d3c452af4b3532a5232499843062e892fb8db5cba6ccb0148849527c0aece2439b9f99da8633a6af8ab614c3ee1", 0xb5) ioctl$BIOCGRTIMEOUT(r0, 0x4010426e, &(0x7f0000000440)) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000480)={'./file0\x00', 0x890, 0x2, 0x9, 0x1, 0x6, 0x1, 0x509, 0x2, 0x1, 0x0, 0x3}) pread(0xffffffffffffffff, &(0x7f0000000500)="5518848b8723bbba8b4811296d4e76baa5c42115ac61b5e4084e452227cbbb55caf6bb3838b70395e5c8132c6c3585bace383b0739f9e3f4f87b0d52d14870b65e3027a4ae9b4d2163f3332b26b8b2eef51a8e2548a64ae8bd91d3c35bc84c6a7bd4a8d4ef85e36fa3ef63f1a15b873ea4ec1a2bfe5a82d1b4b3e239bd3212e09518a4f7f0e40297a8a0b0cdc81d8e2d3f886d01200509795286227f5722ac4f70b9336d2e483eb6a27b8c16fa8e46", 0xaf, 0x7ff) r2 = socket(0x18, 0x5, 0xff) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f00000005c0)={0x10, 0x10001, [{&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff2000/0xe000)=nil, 0x8173}, {&(0x7f0000c00000/0x400000)=nil, &(0x7f00003fe000/0xc00000)=nil, 0x9}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000d90000/0x3000)=nil, 0xfff}, {&(0x7f000076c000/0x1000)=nil, &(0x7f0000efd000/0x1000)=nil, 0x1}, {&(0x7f0000783000/0x1000)=nil, &(0x7f0000c5d000/0x2000)=nil, 0xb4c8}, {&(0x7f0000d8f000/0x4000)=nil, &(0x7f00004c7000/0x3000)=nil, 0x7}, {&(0x7f000062e000/0x3000)=nil, &(0x7f0000609000/0x3000)=nil, 0x8000}, {&(0x7f0000a63000/0x400000)=nil, &(0x7f0000d2a000/0x3000)=nil, 0xebb}, {&(0x7f00004e1000/0x2000)=nil, &(0x7f0000f8e000/0x1000)=nil, 0x1}, {&(0x7f0000d65000/0x1000)=nil, &(0x7f00004e0000/0x1000)=nil, 0x3}, {&(0x7f0000623000/0x1000)=nil, &(0x7f00009ad000/0x2000)=nil, 0xf}, {&(0x7f0000688000/0x3000)=nil, &(0x7f00006b5000/0x2000)=nil, 0x200}, {&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000f2a000/0x1000)=nil, 0x101}, {&(0x7f0000d9a000/0x3000)=nil, &(0x7f00007c9000/0x4000)=nil, 0x401}, {&(0x7f0000fe9000/0x14000)=nil, &(0x7f0000d47000/0x2000)=nil, 0xa9}, {&(0x7f0000e17000/0x4000)=nil, &(0x7f0000d01000/0x2000)=nil, 0x7}], './file0\x00', 0x1}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2012, r2, 0xfff) ioctl$TIOCSETVERAUTH(r0, 0x8004741c, &(0x7f00000007c0)=0x3) madvise(&(0x7f000067e000/0x1000)=nil, 0x1000, 0x6) getsockname$inet(r2, &(0x7f0000000800), &(0x7f0000000840)=0xc) connect$unix(r2, &(0x7f0000000880)=@abs={0x0, 0x0, 0x1}, 0x8) ioctl$TIOCSETVERAUTH(r0, 0x8004741c, &(0x7f00000008c0)=0x7fffffff) ioctl$WSMOUSEIO_SRES(r0, 0x80045721, &(0x7f0000000900)=0x80) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000940)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000009c0)=@abs={0x1, 0x0, 0x3}, 0x8) ioctl$KDDISABIO(r0, 0x20004b3d) socket(0x20, 0xc004, 0xa) 896.299757ms ago: executing program 0 (id=5669): fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x3, 0x0, 0x8, 0x9}) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_pts() r1 = syz_open_pts() open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) clock_getres(0x0, &(0x7f00000005c0)) r2 = syz_open_pts() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0084463, &(0x7f00000000c0)={0x8, 0xffeffffc, 0x7fff, 0x4, "c9f7550000000bca9853a4956b47c0d100", 0x7, 0x200}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) close(r1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) poll(&(0x7f00000007c0)=[{r2, 0x4}, {r0, 0x1}, {r0, 0x1}, {r2, 0x2}, {r0, 0x22}, {r0, 0x40}, {r0, 0x7}], 0x7, 0xffffffff) 893.631791ms ago: executing program 4 (id=5670): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000001ac0)='./file0\x00', 0x2) sysctl$kern(0x0, 0x0, &(0x7f0000000380)="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", &(0x7f0000000080)=0x102, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) dup2(r1, r0) select(0x40, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000200)={0xcea, 0x20010, 0x80000002, 0x1, 0x1, 0x3, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0404469, &(0x7f0000000000)={0xc635, 0x40b, 0x7ffc, 0x2000, "0000100000fb1fffe70000d3b04d45f0388a19a0", 0x33c3300e, 0x2}) ioctl$WSKBDIO_GETENCODINGS(r2, 0xc0105715, &(0x7f0000000000)) 888.541706ms ago: executing program 7 (id=5671): r0 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000100)) syz_emit_ethernet(0x18b, &(0x7f0000000480)={@broadcast, @remote, [{[], {0x8100, 0x1, 0x1, 0x2}}], {@ipv6={0x86dd, {0x0, 0x6, "99cea6", 0x151, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@routing={0x62, 0x10, 0x0, 0x8, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @mcast2, @mcast2, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}]}], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x6, 0xffff, "4b2115e6a301683b209d113f8c5d0d9c2c0adf73a93c24f297c403be2dceb46acd823e8dcc4dec0cde93b6f8888c203640ff10b12eacd05563e6abd4647b69bf780f4df4efe700c955a17abef3b9c5e6ad7aec2db5b145681b5bc92d6cd7d49bef1cea99ed8b8a16da6e29b11698b183a679d166758317426d9926b78bd4a7c53899cb8e9171b1e41e63fe1d0b534bc1cf970d6db36534b5d9b228559409bcc1164f5f989cda8748141eef2d18f38042d47c844821d394b100be4cecacc71defe5"}}}}}}) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000240)={0x5, 0x4, 0x5, 0x8c72, "4c681e7c1d1f6e0e8d558c4795455dd9f20b12eb", 0x1, 0xe5}) r1 = socket(0x18, 0x3, 0x1) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) sysctl$net_inet_tcp(&(0x7f00000001c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000d40)="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", &(0x7f00000002c0)=0x210, &(0x7f0000000300), 0x0) accept(r1, &(0x7f0000000180)=@in, &(0x7f0000000200)=0xc) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='.\x00') fchflags(r2, 0x10001) syz_emit_ethernet(0xbd, &(0x7f0000000300)={@local, @empty, [{[], {0x8100, 0x4, 0x1, 0x3}}], {@generic={0x3c07, "d147cef7920eab7c11b1b6f06868134f43fe1e401c02341d94d31894eccfe2bc3460d62452b8c668d65f7c6f94441b0b2d1f53605279744c21ff4c6ec69cd371c822e2a25edf4c7bc0b06939acec741da6535327ad8f65fe2d96f5b7e6569c48a7ec6231ce23c68cf28031eb64205ec422a96560e3b6c400516b8250a37dfcdb0dccea544576c1f5b9a944a77f83a4dd08c24f207fcf08a5e8a43b59cf21489b0588eb64e4a17b2baa2ef4"}}}) sysctl$hw(&(0x7f00000016c0)={0x6, 0xf}, 0x2, &(0x7f0000001700)="39a88de5681f3b47644a", &(0x7f0000001740)=0xa, &(0x7f0000000140)="3e8436179339610b4a24ad6493d0441f46bc652fe97ed927e6f6dd2132910514b2eac634dfc71d9d", 0x28) pipe(&(0x7f0000000000)) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x0, 0xffffffffffffffff, 0x81) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) 887.665932ms ago: executing program 7 (id=5672): nanosleep(0xffffffffffffffff, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x1, 0x4}) getrusage(0x0, &(0x7f0000000240)) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000140)=0x2) ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)=0x4) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/1, 0x1}], 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x450a) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0x13, 0x2}, {{r1}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f0000000000)) 812.655561ms ago: executing program 7 (id=5673): r0 = socket(0x6, 0x1, 0x0) setuid(0xffffffffffffffff) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x100) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f00000003c0)=0x84c) r2 = getegid() setegid(r2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') lchown(&(0x7f0000000100)='./file0/file0/..\x00', 0x0, 0x0) r3 = msgget$private(0x0, 0x88) msgsnd(r3, &(0x7f0000000880)=ANY=[@ANYRES64=r0, @ANYBLOB="936d967998273e8f44c6b1974b99646da4b0e6657b9ec7bced9912c994f9e82a23d960ebbba455a57f2911b9feb58a6ad2080d80a2468d7017d3bab146f25faf78f2062bdc4292765afbbddac6540d6fdb4e626305761608fed43784c79234fda8358e347268b0f2984140c96d4faca84bf328edf876d48898", @ANYRES8=r3, @ANYRES16=r2], 0x0, 0x0) ioctl$FIONREAD(r0, 0x80206982, &(0x7f00000001c0)) write(r0, &(0x7f0000000200)="2b5c90ba16fc7c9f6ed08ab6fdec38c0fa59321284a15b5b78ec1b3b879f33d495e14bc560c775487ddb0910236686a14973a87bb631144ac8b102a0f91db2649d5591d123219f3fa505c7149aff4a4678e8b5ce8949a7a9f016fbbf9e677b1c1050812a96b9edce0985b98cab3eb8826e9a3956abd8846077af68d2dfe5d97bf07855813475329f40e8e7b02ec5b7542af1de6ba39d8bc1", 0x98) execve(&(0x7f00000002c0)='./bus/file0\x00', &(0x7f0000000580)=[&(0x7f0000000300)='\x00', &(0x7f0000000340)='$\x00', &(0x7f0000000380)='\x00', &(0x7f0000000440)='[\b\x00', &(0x7f0000000480)='+-/\x00', &(0x7f00000004c0)='\\(.^-@%^},(-\x00', &(0x7f0000000500)=':*\x00', &(0x7f0000000540)='\\\x00'], &(0x7f0000000800)=[&(0x7f00000005c0)='\x00', &(0x7f0000000600)='(\x00', &(0x7f0000000640)='[].$/\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='(%+,\x00', &(0x7f0000000700)='/{\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='#^\'\x00', &(0x7f00000007c0)='\xd8)/\x00']) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) ioctl$WSKBDIO_SETKEYREPEAT(r1, 0x800c5707, &(0x7f0000000180)={0xfffffff7, 0x7, 0x8}) chown(&(0x7f0000000080)='./file0\x00', r4, r2) 812.094639ms ago: executing program 7 (id=5674): setuid(0xee01) r0 = socket(0x1, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x40) (async, rerun: 32) fcntl$setown(r0, 0x6, 0x0) (rerun: 32) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) (async, rerun: 64) r2 = getgid() (async, rerun: 64) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x10000, 0x0) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) (async, rerun: 64) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (rerun: 64) ioctl$TIOCSETA(r5, 0xc4504443, &(0x7f0000000000)={0xa, 0x7, 0x7, 0x5, "00c3051b9d06832f4702000004000004765c00", 0xa, 0x5}) sendmsg$unix(r0, &(0x7f0000000580)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000380)=[{&(0x7f0000000040)="9345b25a61dbcc2ab61aa34718431bdda74d2912490eafc928f080fc2af600acb0ff", 0x22}, {&(0x7f0000000080)="231e5c802bf7cbfa1ee252d17891a92bc72a1b427554e7aca4f53ee6d308de08ba7fd0f68b3ae33472eec77475376bf8d2ef90279102c562c42338d8e3015b18a4d59671c83109d74a1440af4c5d43240112e098fdd0b5f7f21dc936cc02d5337a63bb0c5fb4298a501f2de044710f2b4ba096df61aec25fe5840ad8fb75eb6fdae10890245602acc9723465b5b7ff6058327296835055d2e5109199715cf280e3b15b210757df3d1cf386e9ca3f", 0xae}, {&(0x7f0000000140)="4bf30b8640e85926837315b11afd2f41839615c2f6359f0b76e9440bb7112d83300c9851339b2860f151419a5c0b8a19b1e6d98bd5d0c3e4d1823a9537812faebfa2d75614bfe105d399268e478af46b0e0ce91d0e1177ce9e4d6f293805880203747ce3d426fb6d382387004e158fcc4af75a4dfc07c3595957052439d3eaa8ce6433d984ff44dc748523524e3c848c8d92ca4d15ca37f6d5682f5c20bf526a6e0a57d8c724c6ed0a0e29b9b7c2af30d7847ffd98d54cb012b99809a416d7cd79d722cecb0225bd1dbc5d81860da9a86c5e89de39b2db026ca483ce951db89c0b8a60a764265a91a33159ba7e5f2b7a", 0xf0}, {&(0x7f0000000240)="980d943d93a3597b0d874c4febd1783c8b256143a51ad2d02dc0ae0088acc0c1483c8e6eb64a6b809cfdd9c27c2d15b009393107c781f0e9de293576300aa360ae6796b9462fe6198473c64dbf9619b52fd060aae88006180ba19de8b8d4edd03493134560ec02ed735bb32cafddcb3eb774c17732d5a89bf876cabcfe03186a4314ac7339c6d632de88a47bf54166978368d0", 0x93}, {&(0x7f0000000300)="ed9db87f9aaeb6d3847fd7219c425fb91bd24d64974a3356b5824a493fc037a285686f65cfe370c7ef364ea4c142a940dc87ba63e289da4c19fad4e4447a42eef88ca0e8acd1569e6f635cb100751385923294ec7fdf993893f08ba39c76ff3b44888429aec18d327c5391b13c716fd1537db7fea3603d5b5a1863", 0x7b}], 0x5, &(0x7f00000004c0)=[@cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r1, r2}, @rights={0x18, 0xffff, 0x1, [r0, r0]}, @rights={0x20, 0xffff, 0x1, [r0, r0, r0]}, @rights={0x38, 0xffff, 0x1, [r0, r0, r0, r3, r4, r0, r0, r0, r5]}], 0x90}, 0xa) shutdown(r0, 0x2) 810.808568ms ago: executing program 7 (id=5675): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) (async) setuid(0xffffffffffffffff) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) acct(&(0x7f0000000000)='./file0\x00') (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') 810.283621ms ago: executing program 7 (id=5676): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) fcntl$lock(r0, 0x9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300000003}) (async) syz_emit_ethernet(0x76, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x1, 0x68, 0x67, 0x99eb, 0x1, 0xf0, 0x0, @multicast1, @rand_addr=0xb823, {[@noop, @rr={0x7, 0xf, 0x6, [@rand_addr=0x3, @empty, @multicast1]}]}}, @generic="28bb55ce6ebf86d86980beb4ff766d61f2273e4a61f8577e05a8435724fadae7cd02a6c8117fb7b08f1e88ca916f69a0570ff54bc367f262db57b19d1ea02ff90beff084"}}}}) execve(0x0, 0x0, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x3, 0xf, 0x1ff}, {0xac, 0x8f, 0x5, 0x8000004d}, {0x6, 0x8, 0x9, 0x400004}]}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0xffff65d5, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x2, 0x7}, {0xdc2c, 0x3, 0x14, 0x7}, {0x1, 0x650, 0x3, 0x6}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x7, 0xa}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x6, 0x4}, {0x1c8, 0x10001, 0xfffffffb, 0x6}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x20000003, 0xfff, 0x9}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000843000/0x1000)=nil, 0x3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffe}, {&(0x7f0000b13000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xfffffffffffffffe}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f000005d000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x4}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x3c}, {&(0x7f0000ed3000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x81}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) recvfrom(r2, 0x0, 0x0, 0x1041, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) 809.607003ms ago: executing program 3 (id=5677): r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x3, 0x2, 0x8, 0x1}) flock(r0, 0x1) flock(r0, 0x3) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x7f}, {0x4, 0x7fe, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x0, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r2 = kqueue() readv(r2, &(0x7f0000001440)=[{0x0}], 0x1) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x1, 0x2, 0x8000000000006, 0x100000000}) 513.393742ms ago: executing program 3 (id=5678): sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) unveil(&(0x7f0000000040)='./bus/\x00', &(0x7f0000000080)='c\x00') r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x2888a, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) fcntl$getflags(r1, 0x1) socket(0x2, 0x8000, 0x2) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x9c, 0x9, 0x81, 0x1}]}) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000340)={0x4, &(0x7f0000000300)=[{0x6e, 0x5, 0x872b, 0x2}, {0x8, 0xe, 0x1, 0x1, 0x6}, {0xc, 0x5, 0x4, 0x7, 0x402}, {0x0, 0x7, 0x20, 0x1, 0x7}]}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x3}, {0x2, 0x1}, {0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}) recvmsg(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0}, 0x800) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x48, 0x0, 0x37) sysctl$kern(&(0x7f0000000100)={0x1, 0x17}, 0x2, &(0x7f00000001c0)="e022a2e0331a67acbab302c5637d648a207009fec8b293a81c1d6bd383bb2d72120e14d312d0df40e84cd7a062f78919a63ce09e4ebd72aad3c39c7b5e80d247cd3d51505ff9c08bb88cfe9c2154af9ead9f4991ae643f581db949563d5a16cf047e60270c5d4a9aadc2b5aae4946d58d378ee067409df93ab126beb59d167fcb1476df28d19ef9365702b1055c01d9ca0430c814b5b922c50e3aba81254a4bd52ad968ea8c9d13ee5c07ee289d00f09a38add5f020b5a17a7e5e8a340aca5", &(0x7f0000000140)=0xbf, &(0x7f0000000280)=')', 0x1) 510.60566ms ago: executing program 1 (id=5680): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x0, [{&(0x7f000005f000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil, 0x200000000000000}, {&(0x7f00000a3000/0x2000)=nil, &(0x7f000009e000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000054000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f000009d000/0x4000)=nil, &(0x7f000008e000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f000079c000/0x3000)=nil, 0x1}, {&(0x7f00002ef000/0x3000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00003cf000/0x3000)=nil}, {&(0x7f00000a1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f000037d000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f000009a000/0x4000)=nil, &(0x7f0000090000/0x2000)=nil, 0x2}, {&(0x7f000009e000/0x4000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00', 0x6}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) r1 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r1, 0xc2c04200, &(0x7f00000001c0)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000362000/0x3000)=nil, 0x3000, 0x2, 0x11, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) ioctl$KDDISABIO(r0, 0x20004b3d) 477.548981ms ago: executing program 3 (id=5682): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000180)='./file0\x00') (async) chdir(&(0x7f0000000180)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x5c) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x5c) chdir(&(0x7f0000000100)='./file0\x00') setuid(0xee01) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') select(0x40, &(0x7f0000000080)={0xc2, 0x9, 0xa7d1, 0x2, 0x9, 0xfefffffffffffffe, 0xfffffffffffffffd, 0xffffffffffffffff}, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0xc) sendto$unix(r0, &(0x7f0000000100)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce1002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712050eeab7196fcbd80407000200c011200000", 0xb1, 0x6, 0x0, 0x0) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) munmap(&(0x7f000046c000/0x3000)=nil, 0x3000) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 472.471905ms ago: executing program 0 (id=5684): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TIOCSETA(r0, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x109, 0xf, "3901224200", 0x6, 0x10}) (async) syz_emit_ethernet(0x3e, &(0x7f0000001cc0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x2, 0x6, "6fbcf2", 0x8, 0x0, 0x80, @loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @udp={{0x1, 0x2, 0x8}}}}}}}) kevent(0xffffffffffffff9c, &(0x7f0000000080)=[{{r0}, 0x2, 0x8, 0x0, 0x9, 0x8}, {{r0}, 0xfffffffffffffff9, 0x0, 0xf0000000, 0x1, 0x7}, {{r0}, 0xfffffffffffffff9, 0xa8, 0x2, 0x0, 0x8}], 0x1000003, 0x0, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6}, 0x10, 0x1001, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0x0, 0x3, 0x0, "010000010000000800000000000037ea00", 0x0, 0x9}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3ffffffffffffdf3, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32) sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) (async, rerun: 64) flock(r0, 0xf) (rerun: 64) 370.636287ms ago: executing program 0 (id=5686): msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0xa, 0x2a2, 0xffffffffffffffff, 0x0, 0x3, 0x80000000000000f, 0x7, 0x40}) (async) r0 = syz_open_pts() (async) r1 = open(0x0, 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) (async) ftruncate(r1, 0x8531) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) (async) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0xfffffffd, &(0x7f0000000000)="538c2349", 0xfffffffffffffc85) (async) flock(r0, 0x1) (async) flock(r0, 0x3) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x100000001}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaab184effdc917af8b985f675132c5a3aab55d145e54af88e74521001c000a790b8965fc13e98f9078ac1400aa7f0000014e204e2300089078"]) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) setuid(0xee01) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r3 = accept(0xffffffffffffffff, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x8) lseek(r3, 0x81, 0x1) (async) r4 = msgget$private(0x0, 0x790) (async) close(0xffffffffffffffff) (async) syz_emit_ethernet(0x3e, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6036d2b500083af9fe80fe8000000000000000000000000000aa"]) msgrcv(r4, 0x0, 0x0, 0x3, 0x0) r5 = getpgrp() msgctl$IPC_SET(r4, 0x1, &(0x7f0000000240)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8}, 0x2, 0x5, r5, 0x0, 0x401, 0x8, 0x7, 0x8}) 369.449447ms ago: executing program 0 (id=5687): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000380)={0x10000, [{0x1, 0x2}, {0x0, 0xfffffffc}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x8}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x3, 0x204}, {0x3, 0xfffffffd}, {}, {0x3, 0x7fffffff}, {0x0, 0x7}, {0x1, 0x6}, {0x1, 0x7}, {0x0, 0x2000000}, {0x0, 0x3}, {0x1}, {0x1, 0xfffffffc}, {0x2}, {0x0, 0x6}, {}, {0x1}, {0x2, 0x3}, {0x3}, {0x2}, {}, {0x2}, {0x0, 0x57fd}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r0 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000100)) setsockopt$sock_int(r0, 0xffff, 0x80, &(0x7f0000000040)=0x9, 0x4) 366.832688ms ago: executing program 1 (id=5689): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0x5, 0x1, 0xfffffffe, 0x966c, "ff14e7130b1e586ca6294000", 0x40, 0x80}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="847b62e2e20a84c89393834af0fa176af136f1733716977b6c187c3f8f9fb40f461c29991227f9f59fbc289c9e3f6e0d22a020802cb677bd349cdab6ebb0815abb78705ac553ba32a10988605dad8a7d88c2f0cdd7b9c635b9ce3fcab9899993", 0x60}, {&(0x7f0000000100)="1e5b4ae9024d3e33c56e80", 0xb}, {0x0}, {0x0}, {0x0}], 0x5) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) ioctl$TIOCSTAT(r0, 0x20007465, &(0x7f0000000140)) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') openat$wskbd(0xffffffffffffff9c, &(0x7f0000002780), 0x100, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)='\a', 0x1}], 0x1) ioctl$TIOCSETAF(r0, 0x802c7416, 0x0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x2, 0xfffffff9, 0x7c6, 0x7, "eda756c19277edb9a68cc0ae00e67f253c0ea9e5", 0x9, 0x8}) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7) 243.941917ms ago: executing program 3 (id=5690): syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00003a80fe8000000000000000000000000000aaff020000ce00000000000000000000000188"]) msgctl$IPC_SET(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x0}}, 0x10, 0x2040, 0x0) r0 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) kqueue() open$dir(&(0x7f0000000000)='.\x00', 0x80, 0x102) openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0xefb7a946e920559a, 0x0) open(&(0x7f0000000480)='./bus\x00', 0x80000000000206, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x10, 0x100) openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = kqueue() r4 = dup(r3) r5 = kqueue() kevent(r5, &(0x7f0000000080)=[{{r4}, 0xfffffffffffffffa, 0x4d, 0x1, 0x4000007ffffbfc, 0x800000000000008}], 0x30, 0x0, 0x57d, 0x0) close(r1) kevent(r5, 0x0, 0x0, 0x0, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{0x0}], 0x1) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r6 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r6) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1bc, 0xfffa}, 0x4, 0x800100000001, r6, 0x0, 0xff00000000000000, 0xffffffffffffffff, 0x40000000001, 0x8f9}) r7 = socket(0x800000018, 0x2, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x50000802) r8 = open(&(0x7f0000000740)='./bus\x00', 0x800, 0x0) ioctl$TIOCSFLAGS(r8, 0x8004745c, &(0x7f0000000040)=0xfd) setsockopt$sock_int(r7, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r7, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 237.772006ms ago: executing program 6 (id=5691): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x910, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000080)={'./file0\x00', 0x6, 0xa, 0x8, 0x1, 0x4, 0x3, 0x8, 0x3, 0x0, 0x3, 0x2}) r1 = socket(0x18, 0x2, 0x0) r2 = socket(0x18, 0x1, 0x0) close(r2) socket(0x24, 0x2, 0x0) setsockopt(r2, 0x6, 0x41, &(0x7f0000000000), 0x0) setrlimit(0x8, &(0x7f0000000440)={0x45, 0x56}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCSBRK(r4, 0x2000747b) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x62, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}) setsockopt(r1, 0x1000000000029, 0x3e, &(0x7f0000000000), 0x15) 237.580292ms ago: executing program 5 (id=5692): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x3, 0x101, 0x4, 0x80002001, 0x3, 0x10, [{0x2, 0xfe3, 0x6, 0x71800}, {0x1, 0x4, 0x800002, 0x7}, {0x100006, 0x6, 0x8, 0x2}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x10000, 0x3, 0x80000001, 0x7}, {0x2, 0x47fff, 0x14000009, 0x5}, {0xffffffff, 0xbffffff5, 0x4, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0xd621}, {0x0, 0x7, 0x33, 0x1ff}, {0xfffffc00, 0xfffffffc, 0x8001, 0xfffffff5}, {0xa44f, 0xfff9, 0x48a, 0xe1}, {0xcb, 0x2, 0x8, 0x6}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x8, 0xfffffffc, 0xfffffff5, 0xfffffff8}, {0x6, 0x5, 0x3c88, 0xfffffffd}, {0xffff, 0x7624, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)="88cc2ba1", 0x4) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc2, 0x4000003, 0x1, 0x40803, 0xfffeffff, 0x5, 0x0, 0x1, 0x2004007, 0xf5}) ioctl$BIOCLOCK(0xffffffffffffffff, 0x20004276) socket(0x18, 0x3, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCDRAIN(0xffffffffffffffff, 0x2000745e) ioctl$WSKBDIO_SETBACKLIGHT(0xffffffffffffffff, 0x800c5712, &(0x7f0000000040)={0x13, 0xa, 0xffff}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setitimer(0x0, &(0x7f0000000140)={{0x5, 0x100800000000009}, {0xfffff3fbff7fffff, 0x1000000000000ddc}}, 0x0) r2 = socket(0x18, 0x3, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$SPKRTONE(r3, 0x80085301, &(0x7f00000000c0)={0xffffffbe, 0x2}) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) 236.992949ms ago: executing program 6 (id=5693): r0 = open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) r2 = syz_open_pts() close(r2) ioctl$FIONREAD(r2, 0x4004667f, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) r4 = getpgrp() fcntl$setown(r0, 0x6, r4) write(r3, &(0x7f00000003c0)="092020e3ef3df4952f2d07c16b6dbb092900db000001437842000100005624cf7b6a0a", 0x23) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x3) setgroups(0x1, &(0x7f0000000000)=[r6]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r1, 0xc0284408, &(0x7f0000000000)={0x0, 0x7, 0x0}) 132.381222ms ago: executing program 4 (id=5694): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20, 0x0) r1 = geteuid() r2 = getgid() fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x2) setgroups(0x9, &(0x7f0000000080)=[0x0, r2, r2, r2, r2, r2, r2, r2, 0xffffffffffffffff]) semctl$GETPID(0x0, 0x3, 0x4, &(0x7f00000000c0)=""/214) chmod(&(0x7f00000001c0)='./file0\x00', 0x58) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) sendmsg$unix(r3, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x1, './file1\x00'}, 0xa, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x405}, 0x400) rename(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file1\x00') acct(&(0x7f0000000380)='./file1\x00') getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) fcntl$lock(r3, 0x8, &(0x7f0000000440)={0x2, 0x0, 0x1, 0x1, r4}) openat$pci(0xffffffffffffff9c, &(0x7f0000000480), 0x100, 0x0) getgroups(0x7, &(0x7f00000004c0)=[r2, r5, r2, r2, r5, r2, r2]) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000500)={{0xffff9c81, r1, r2, r1, r10, 0x1a4, 0x5}, 0xffffffffffffffda, 0x4, 0xd281}) syz_extract_tcp_res(&(0x7f0000000580)={0x41424344, 0x41424344}, 0x0, 0x81) syz_emit_ethernet(0x358, &(0x7f00000005c0)={@random="21dd359b86ac", @local, [{[{0x88a8, 0x7, 0x1, 0x4}], {0x8100, 0x0, 0x1}}], {@ipv6={0x86dd, {0x1, 0x6, "49e94e", 0x31a, 0x1, 0x1, @rand_addr="735a059dfe3e2f1380bdd00ea11718cb", @mcast1, {[@hopopts={0x0, 0x2, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0xe}, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0xe}]}, @routing={0x33, 0x2, 0x0, 0x0, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}]}, @dstopts={0x88, 0x1a, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x60}, @generic={0x8, 0xaa, "e95c09a6467e1ca95a93e0e376587cc64c152c81b82c47ac8fe90882ada4992a642cd7ea20af2500d4f420482c9b1bbc9acee236547724b6bda1365b1cbd850bf161188a3551b46ac226d48c3009491bd0a1595229ac8e404d2b48178d8865790f72eb73270bfafe6841ffee6a27d538e87662bb124c2fad258092bf840efdde87b7544be2ac74a41f78b3b910a9d96ea6c14e2dc5a421f00265f430db47635a77010543bde618682d38"}, @enc_lim={0x4, 0x1, 0x80}, @generic={0x5, 0x15, "40e0e00395c9aaf7f061bfa1a062997bb9099904bd"}, @pad1]}, @hopopts={0x4, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x3}, @jumbo={0xc2, 0x4, 0xe}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x20000000}, @enc_lim={0x4, 0x1, 0x7}]}, @fragment={0x2b, 0x0, 0x5, 0x0, 0x0, 0x5, 0x65}, @routing={0x67, 0x8, 0x0, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1]}, @hopopts={0x67, 0x18, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0xbb9f}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x5e, 0xad, "78f31300512d80767d56a7d8105d7da6493eac8c75667cfba39c401708a12c67592d79816a8d2cd0ddba1361fc55933d763d6aeeec1d763e231e676ed1ff01318d48c430cf89fce9c373950faa56f147afd169d36cae2c22ab149045d7f4f57101669c001ad038bfec105e34450b15ae115239e498dc723873317111a7c21ba787454080866669e522002987cf5b5c1763f4868f84ca19db23a2f26f4f73160375e07f36bb4271a92fa150f629"}]}, @hopopts={0x6c, 0xd, '\x00', [@generic={0x4, 0x27, "ab9fc781be6fcec4b4dbbb2275a0b089e908dbf42731e10671c2d57a8e1feea8e5fbb094268fb8"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x5e, 0x35, "326c244722e5b6952531a303e4a0e40d2f018003f8c0bed18ad82b5a8e38204144485324bdeaae3627bdfb725032a33d611ca2bb73"}]}], @tcp={{0x2, 0x2, r12, 0x41424344, 0x0, 0x0, 0xd, 0x20, 0xd, 0x0, 0x8001, {[@mss={0x2, 0x4, 0x4}, @mss={0x2, 0x4, 0x80}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "cc16108dbbabe6f80a5c9c860b031939"}, @nop, @nop]}}, {"3e2e4ac0611e372754db2b95421f"}}}}}}}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000940)={'tap', 0x0}) ioctl$WSDISPLAYIO_GBURNER(r3, 0x400c5752, &(0x7f0000000980)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4012, r0, 0x2) accept$inet6(r3, &(0x7f00000009c0), &(0x7f0000000a00)=0xc) sendto(r3, &(0x7f0000000a40)="dd8a57288e86fd0ae1f59e0fb2e44eb879ea9aa18a22272087f33d3b2bb29ab779bba35cc40f5ad6c41cf33c26489f718dcd95254b69ad9142601365a0dcf250e87729c07765178ed62dfcdb78c6d3cd18fabba8d10c9dc7371bab920e1e", 0x5e, 0x4, 0x0, 0x0) chown(&(0x7f0000000ac0)='./file0/file0\x00', r1, r5) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000b00)={0x0, 0x0, 0x0}, &(0x7f0000000b40)=0xc) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000b80)={0x0, 0x0, 0x0}, &(0x7f0000000bc0)=0xc) getgroups(0x2, &(0x7f0000000c00)=[r9, r7]) setgroups(0xa, &(0x7f0000000c40)=[r11, r2, r9, r13, r8, r10, r14, r6, r15, r6]) rename(&(0x7f0000000c80)='./file0/file0\x00', &(0x7f0000000cc0)='./file0/file0\x00') shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000d00)=""/203) 131.925236ms ago: executing program 5 (id=5695): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) setsockopt(0xffffffffffffffff, 0x1000000029, 0x24, &(0x7f0000000000)="5ab777", 0x3) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x1, 0x0) r2 = socket$inet(0x2, 0x3, 0x102) dup2(r2, r1) bind(r1, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) r3 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x8000) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) mknodat(r3, &(0x7f0000000140)='./file0\x00', 0x2, 0x6) setrlimit(0x8, &(0x7f0000000080)={0x0, 0x5}) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/248, 0xf8}], 0x1) writev(r4, &(0x7f0000000180)=[{&(0x7f0000001c00)="3dc899cf833bcdfcad153c2d2cf5f956ed12ed17cfe3bfac5bb39a56b2c78ed17af69fd66c8bfeddaef56648ea15011bc191a1e65c012a70dee5b83bf57dfec614207f98c7d8d011fcf063056c66eb27430002b486ac36769a395b53e356220395e946b28e", 0x65}], 0x1) write(r4, 0x0, 0x0) mprotect(&(0x7f0000618000/0x4000)=nil, 0x4000, 0x4) execve(0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) setsockopt(0xffffffffffffffff, 0x1000000029, 0x24, &(0x7f0000000000)="5ab777", 0x3) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x2, 0x1, 0x0) (async) socket$inet(0x2, 0x3, 0x102) (async) dup2(r2, r1) (async) bind(r1, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) (async) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) (async) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x8000) (async) pipe2(&(0x7f0000000100), 0x0) (async) mknodat(r3, &(0x7f0000000140)='./file0\x00', 0x2, 0x6) (async) setrlimit(0x8, &(0x7f0000000080)={0x0, 0x5}) (async) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/248, 0xf8}], 0x1) (async) writev(r4, &(0x7f0000000180)=[{&(0x7f0000001c00)="3dc899cf833bcdfcad153c2d2cf5f956ed12ed17cfe3bfac5bb39a56b2c78ed17af69fd66c8bfeddaef56648ea15011bc191a1e65c012a70dee5b83bf57dfec614207f98c7d8d011fcf063056c66eb27430002b486ac36769a395b53e356220395e946b28e", 0x65}], 0x1) (async) write(r4, 0x0, 0x0) (async) mprotect(&(0x7f0000618000/0x4000)=nil, 0x4000, 0x4) (async) execve(0x0, 0x0, 0x0) (async) 131.62485ms ago: executing program 6 (id=5696): mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) getdents(r0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x4) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x3f, &(0x7f0000000000)="6744d6e1", 0x4) sendmmsg(r2, &(0x7f0000000940)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x35}, 0x10, 0x0) lseek(r1, 0xfffffffffffffffb, 0x2) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x9) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) (async) openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) getdents(r0, 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x4) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r2, 0x1000000029, 0x3f, &(0x7f0000000000)="6744d6e1", 0x4) (async) sendmmsg(r2, &(0x7f0000000940)={&(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x35}, 0x10, 0x0) (async) lseek(r1, 0xfffffffffffffffb, 0x2) (async) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x9) (async) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) (async) 82.590418ms ago: executing program 6 (id=5697): setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) r1 = socket(0x18, 0x2, 0x0) close(r1) socket(0x11, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x6381) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x8000000006, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 82.135294ms ago: executing program 5 (id=5698): sysctl$kern(&(0x7f0000000100)={0x1, 0x4f}, 0x3, &(0x7f0000000140)="71f91e3871ac0058e05a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000200)=0xff55, 0x0, 0xffffff42) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x404}, 0xe) mknod(&(0x7f0000000000)='./file0\x00', 0xc000, 0x1e5f) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a068da3a5673039d2d236acf20b7804be38164991f7cccf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b37282112000000720fd38bfbb770c1f5a8008081e2772ec5a10400000000000000361b1257aea8c5d0002012020000000000880d6633c556ae9be371a3f8343712051eeab71d8900040700000080042000"/177, 0x58, 0x40e, 0x0, 0x0) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r4 = socket(0x11, 0x3, 0x8) sendto$unix(r4, &(0x7f0000000100)="b10005016000009f05000e0407000000001813fecea10516d09a32693df6231039102d1fdc3f316e357ae302b37b673031d2d236acf20b7804be38297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335c223e7d026ba8af6300372821020000000000008bfbb770c116a985c881ea772ec5890400000000ff0000361b1257aea8c50000200200008a09000000000008e38295f80004073da51a221f00000080042000"/177, 0xb1, 0x0, 0x0, 0xfffffffffffffdab) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x7, &(0x7f0000000140)='./file0\x00', 0x8}) r5 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x2f) ioctl$WSMOUSEIO_SCALIBCOORDS(r5, 0x81205724, &(0x7f0000000100)={0x1, 0x6, 0x9, 0x0, 0x80000001, 0xa1b3, 0x40010001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0xfad, 0x20000008, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0xd6}, {0x4, 0x800, 0x800f, 0x161c}, {0x1c, 0xffff, 0x7, 0x7}, {0x1, 0x653, 0x5, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x2}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x8, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1cc, 0x4, 0xdaa1, 0x3}, {0x3, 0xa, 0x8}, {0x2, 0xffff, 0x89, 0x48}, {0x29a71717, 0x7f, 0x60, 0x7}, {0x1100c, 0x3, 0x9654, 0x4}, {0x0, 0xfffffffd, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setuid(0xffffffffffffffff) r6 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r6, 0x8020697a, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000580), &(0x7f0000000140)=0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r8 = socket(0x1, 0x1, 0x0) setsockopt$sock_int(r8, 0xffff, 0x1021, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 80.419918ms ago: executing program 5 (id=5699): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) close(r1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x900, 0x0) r4 = getpgrp() ktrace(&(0x7f0000000000)='./file0\x00', 0xcbdba2cdc2a7f937, 0x1c00, r4) r5 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x401, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7}) r6 = socket(0x18, 0x3, 0x0) close(r6) getsockname$inet(r6, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4b}, 0x2, &(0x7f00000001c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x1c, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 2.374937ms ago: executing program 5 (id=5700): r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6b, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x800000018, 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x9}, 0x400, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7}) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x22, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$net_inet_ipcomp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = socket(0x800000018, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$hw(&(0x7f00000000c0)={0x6, 0xa}, 0x2, &(0x7f0000000100)="7c87bed293c0ff395f4337f31cd4a6fe002bbe15d2b7bfe8239205fe9575c8f898d7acb50062f41ffd8572fd53d780cc995ea2ffced1ea7964013fc0c649efe2cb7e01cbb149badc95c0a341cb24582b87def113575f6f71b48d2efb9a866a18a58916fc71467f58493d72ed88c464f87865143f412f1aceea3df9757473563a51120e71413269879cbf034713f7e99103d5c2a328bebf2a2c3faea831bbcbc89e79d53f28e60eaab9a2f6ae83e7eb6215365264d2cd35c2f493479ab340d4caac489165d7916cc5f7162d000e77c59f694f6fa7347d47c4fbb92e3e39bdf314e2", &(0x7f0000000200)=0xe1, &(0x7f0000000240)="f77eb2320cb6cf393d38f50d446c1a39ce22317cf19e0260a30781d263c9b35deb02942b6bd182f2c3d95657e7470c8e2d745dba004d0ec49fefadd516cc6043d653039beb262b24140c9d0147a20a1bc96c63b3c895b57f9dc19d3d374f374438ffb00ea508437bcf3812ad3b0897e6d7c5efbca82213bf471e0e460b6d9c4a8b17c34d27440d4e1bd7e2620de1c708247337790cb2f7bc100d57ab724cdbf88ea075627a96d3631700931fd51ceb975335c1", 0xb3) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r4, 0x80085761, &(0x7f0000000040)={0x1, 0xea}) ioctl$WSMUXIO_ADD_DEVICE(r4, 0x80085761, &(0x7f0000000080)={0x3, 0xb}) sysctl$hw(&(0x7f0000000300)={0x6, 0x17}, 0x2, &(0x7f0000000340)="654707f4389a3807b22dfc6f12fe1d6f26e143004b94ca1dcba20738e6b84fb47e92bc0a95626f56ca7b073734662a7470003d3576c8f35450d4b2a648d28261aa63a80f5f98d7d158fdc4cca35cdcb0eddc197ff4aadec634882dd7348ede387602c6e68c9e04b246c8f9ca0013c3f31a5c651a7f65c4d969a5fce5d33d06dc7c0cde06f78bd75df583bfd342b2eeaf8e2f91d0c54da222452fb5c77c35565da65a0d4297ef3ef29dc2dbc3e5a0e2022a7df24108522e0db1b5996c0d9b57e5112532", &(0x7f0000000440)=0xc3, &(0x7f0000000480)="66451f3905213f540a743a555325da83161370b90fc3e12afc4371bceb0906ce3cdda7b64e721bade3080476a23b5d1d53facb1120a0ce345230cb82433b3e029feeec6cf213c20150341ad436efd320a32058b7136c84459cc8701eb6edd4582f1643081c7727e76a8369d0b5800ad6c5911c8e16a9769993fb0dbf407c8abfdde553aa744a7191428bd7a357b89054a399f7779a0bcb42ea5aa77f0f2d7892ca2849bf803c065c14fa6a950d8140dfd97df3118a2fd7a42fb91273921a8edc8a79d2f46c8d08bb4da078c50c453049ca71d707a49cf5aa6d61c03b489fff8bdb18537321e1b5", 0xe7) 674.275µs ago: executing program 6 (id=5701): ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000100)={0xc0000000, 0x4003, 0x420001ff, 0x81, "afa40f3c000000000200", 0x0, 0x49e22}) (async, rerun: 64) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) (async, rerun: 64) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000000)="9b1809ffffffffffffff7f473f11e1a4e5f2f9f220ef7f0abdbc34fe42021588dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b44", &(0x7f0000000040)=0x10011, 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) (async) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x1f, &(0x7f0000000080)="c5", 0x1) dup2(r1, r0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f0000000380)=0x49, 0x4) (async, rerun: 64) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) bind(r0, &(0x7f0000000000), 0x10) (async) r2 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r2, &(0x7f0000000000), 0x10) (async, rerun: 32) write(r2, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102", 0x62, 0x40c, 0x0, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000000000)={0x6, 0x100000000008}) (async, rerun: 64) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005130000000000", 0x9, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 326.611µs ago: executing program 5 (id=5702): r0 = semget$private(0x0, 0x7, 0x42) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000000)=""/189) syz_emit_ethernet(0x12c, &(0x7f00000000c0)={@empty, @random="0b13747ebb92", [], {@ipv4={0x800, {{0x1a, 0x4, 0x0, 0x1c, 0x11e, 0x65, 0x2, 0x8, 0x28, 0x0, @loopback, @broadcast, {[@ra={0x94, 0x6, 0x6}, @noop, @lsrr={0x83, 0x1f, 0x0, [@multicast2, @empty, @rand_addr=0x6, @multicast2, @remote={0xac, 0x14, 0x0}, @broadcast, @multicast1]}, @generic={0x0, 0xc, "53419d9288fb1ebcbe79"}, @end, @lsrr={0x83, 0x1f, 0x2, [@remote={0xac, 0x14, 0x0}, @multicast2, @loopback, @local={0xac, 0x14, 0x0}, @loopback, @multicast1, @empty]}]}}, @generic="e4c4dc709855f7273deb22a8a192edb5374bfb52e76aa3379b13cfde5f017e3d05289c9ff0c8b9ee2c5cdfc20903ae965ec93c8fbbcfee3c3c6287c5e9dccf1680ee4e39843e2a02209d7ab5af4559ec30eb62e352a1933d6e4a61f26b1f57c279a3dd745083f2bbfdf4511711648c8bc38774396c2744657aced3599ebcd48f0ee40393e7166495dd25149e7fa258969ae46af7627a4cc8cbe583aec0f8adea590b4858bc1676fae402db9a3533b8507f5b4f15591a"}}}}) fcntl$getown(0xffffffffffffff9c, 0x5) syz_extract_tcp_res(&(0x7f0000000200), 0x2, 0xbaea) semctl$GETNCNT(r0, 0x2, 0x3, &(0x7f0000000240)=""/36) r1 = kqueue() r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = dup(0xffffffffffffffff) r4 = socket$inet6(0x18, 0x8000, 0x25) kevent(r1, &(0x7f00000002c0)=[{{0xffffffffffffff9c}, 0xfffffffffffffffe, 0x56, 0x48, 0x6, 0x4}, {{r2}, 0xfffffffffffffffc, 0x3, 0x1, 0xfb8a, 0x34}, {{0xffffffffffffff9c}, 0xfffffffffffffff8, 0x83, 0x2, 0xffffffffffffffff, 0x2}, {{r3}, 0xfffffffffffffffb, 0x40, 0x40000000, 0x170aaf7c, 0x6}], 0x9, &(0x7f0000000340)=[{{r4}, 0xfffffffffffffffc, 0x0, 0x1, 0x6, 0x5cb3}], 0x7, &(0x7f0000000380)={0x1, 0x3}) setsockopt(r2, 0xf87, 0xffff8001, &(0x7f00000003c0)="348e853669674b9b66f590b2b21da7434e013a4c28fd16c157c4cfcfbf5a366d6fef6ef690d46d78e3eb3a44bf192df4cca234063a9bf71bd5a4b76305a810ad654c3fb9cd2d6f85329f34008068ac46ad6701a85dff174fa3fe5f4ccb7b7cedb6f632f7ab52bd99b056584dc28f475919ca853225a9c3ca14d4c5bc2348f9c62221e2d8a142fcc294d97bb19aa5e1408197e6bb93f60e547bc0ff21d1b0b44274362d2d6281875e1167582f21ba67e619b12d66a382306d7392dffd95ca7bc23794de5f1eb0d77b6d800963bb4bb10bd873d77028ccc0", 0xd7) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000004c0)=""/192) fcntl$setstatus(r3, 0x4, 0x80) write(r1, &(0x7f0000000580)="6f4ef5977b7600e7506e5a3089a6dd0f2c42cd98d45aec303da3ea8bc905886ec8454341e659e98ca7f43606937bb62ff486303a2c0de4e3f7ffbefbad9e4b9ab51dabeabe54ab2040e5b07653ae5000d0bcad4daaef64c908de03082d685ed4eeeaa17712e0f53ba3403cbb4a5da1097af542b8569bdd28f00a4b78368bbe3a41678e7ee229cdc48397b88349c5b85fbcd85376cd8f889ba4a27bdb89aa809153672a6e8465b95c90dcbb5d22911fe9", 0xb0) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000640)=0x1abc0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000680), 0x800, 0x0) ioctl$BIOCFLUSH(r5, 0x20004268) readv(r3, &(0x7f0000000a40)=[{&(0x7f00000006c0)=""/76, 0x4c}, {&(0x7f0000000740)=""/90, 0x5a}, {&(0x7f00000007c0)=""/85, 0x55}, {&(0x7f0000000840)=""/227, 0xe3}, {&(0x7f0000000940)=""/251, 0xfb}], 0x5) r6 = semget$private(0x0, 0x2, 0x12) semctl$GETZCNT(r6, 0x3, 0x7, &(0x7f0000000ac0)=""/36) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000b00)={'./file0\x00', 0x81, 0x10, 0x4, 0x1, 0x5, 0x5, 0x4, 0x2, 0x2, 0x0, 0x6b}) syz_emit_ethernet(0x1ae, &(0x7f0000000b80)={@broadcast, @broadcast, [{[], {0x8100, 0x7, 0x0, 0x3}}], {@ipv4={0x800, {{0x28, 0x4, 0x1, 0x1, 0x19c, 0x65, 0x9, 0x1, 0x4, 0x0, @rand_addr=0x6, @loopback, {[@lsrr={0x83, 0xb, 0x10, [@multicast1, @empty]}, @timestamp={0x44, 0x34, 0x40, 0x3, 0xd, [{[], 0x9}, {[@multicast1], 0x100000}, {[@multicast1], 0x4}, {[], 0x2}, {[@remote={0xac, 0x14, 0x0}], 0x9}, {}, {[@rand_addr=0x7], 0x4}, {[], 0x4}]}, @end, @ssrr={0x89, 0x7, 0x7f, [@empty]}, @rr={0x7, 0xf, 0x0, [@multicast1, @rand_addr=0x8, @multicast2]}, @timestamp={0x44, 0x1c, 0xff, 0x1, 0x6, [{[@loopback], 0x9}, {[], 0x802}, {[], 0x80000001}, {[@loopback]}]}, @ssrr={0x89, 0x7, 0x0, [@rand_addr=0x2]}, @lsrr={0x83, 0xb, 0x7, [@multicast1, @remote={0xac, 0x14, 0x0}]}, @ra={0x94, 0x6, 0x8}, @noop]}}, @udp={{0x3, 0x2, 0x8}, {"1b985752b465bee19b75cd74dff432731832e1b3522cc3188f3edf30bb4d015f4b1e04d7c531e4df6e69b23d1dfbf3a4f791c257ca4e783fae9fc1369aa7ea79c93f21f7f90f58be0b2901d478c02562a7bd7a21a54553d7f6a49db9af94e382a8ee4dd812b293ef3fe3d6206cd93f696cfccd6bb433265212270aa2f64b3f69a12a6b61f61d8291c37e9d1af1e03be8065c81341bf422c0b497d776c33b7d0f37dbd50121e3101c3a90effc986ff2111cb93d72f6e7da8c874e1af3d1e38760c38ccf98d62d62abf6ef60dd5ce807236831642a13674387a5b51dcfac342219e09628f96f70adaf22b415687529096f15939b88"}}}}}}) connect(r4, &(0x7f0000000d40)=@in={0x2, 0x2}, 0xc) getsockopt(r2, 0x836, 0x2, &(0x7f0000000d80)=""/37, &(0x7f0000000dc0)=0x25) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000e00)={'tap', 0x0}) semctl$GETVAL(r0, 0x2, 0x5, &(0x7f0000000e40)=""/88) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000ec0)=[0xac, 0x5, 0x1, 0x0, 0x0, 0x8, 0xb04c]) read(r4, &(0x7f0000000f00)=""/91, 0x5b) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000fc0)={0x4, &(0x7f0000000f80)=[{0x8, 0x4, 0x5, 0xc}, {0x3, 0x5, 0xf}, {0x3, 0x7, 0xff, 0xedf1}, {0x7, 0x9f, 0xfb, 0x3}]}) 0s ago: executing program 6 (id=5703): sysctl$vm(0x0, 0x0, &(0x7f0000001240)='\b', &(0x7f0000000000)=0x1, 0x0, 0x0) (async) sysctl$vm(0x0, 0x0, &(0x7f0000001240)='\b', &(0x7f0000000000)=0x1, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000240)={{0x6363, 0xfffffffffffffbfe}, {0x5, 0x80000000004}}, 0x2) sysctl$vm(&(0x7f0000000040)={0x2, 0x6}, 0x2, &(0x7f0000000100)="1c2dbecda91108ade4665157ecfd5f8d8cb76c5b3c970ed0706b13b39791e430a93ff8913d524e287163efbaed40b1afe5f47b94b436b707b0556c70539c12a616680151ff71d4ecee1f5096ac415a498f63d07f0ac128f69965e5428bf274d9aa5247e8b9ffc9c38e51147f65b773e49b", &(0x7f0000000080)=0x71, &(0x7f0000000180)="78257b22be21575a2cdf1a7d042ddd58161bc6ba1c94ca37a1b9237b7d1d60e20ead42be297e9a86af7818fa376bb9a5c1a2df9a49b7d9d844a5b19bb3e237ebfc89e6decd0e9fa46ba3436186b97bc4eb2feaee213fa944551bcd610db9aa245c8eeb782c92a096a6c53f757de3d5d01b3f44d385b49dbba72e05398e1e02f53fff26bb3f4e5c63568e15df3047b813a6a36ade993ffce9219066f9094a36a3d9a857eb4de00f69b8a23936fa28ff5e76", 0xb1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='x\x00') kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-1.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.117' (ED25519) to the list of known hosts. login: j|E1\:/dev/pf/"OFIxlyZkGO:e|Q4wfe=4pckbd_enable: command error WARNING: thread `nfsio' (52481) exits with status -1 WARNING: thread `nfsio' (336487) exits with status -1 WARNING: thread `nfsio' (286075) exits with status -1 OpenBSD/amd64 (ci-openbsd-multicore-1.us-central1-b.c.syzkaller.internal) (tty00) login: j|E1\:2'pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 pppx: unable to set addresses for pppx3, error=17 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00082, %22/2=17 2'"vm_create: uvm_map failed: 12 vm_resetcpu: failed denied attempt to set clock forward to 13622315181289262 denied attempt to set clock forward to 21474836484 j|E1\:pIn eR @P !/pNnP v`p0CnP vppDnP vp-,pP v@pj|E1\:",pP vphs@ vp@ xFl @ e+nU@ ȉn!/hhi@ eyr/_x.Z@]-^ !/8El@ enjl&Z !Il@ eq/_X !șs@ eʌl@c !Hs@ ePsc !ei@ ev/_@.V !(bi@ e]X ! yeq@ e]l@\ !hs@ eHDf@U !s@ e_kU !Hs@ vp Ȕs@ vXp8s@ vp8s@ v`q%m OpenBSD/amd64 (k\ԻTSvf4yS%=tV'9) (tty00) login: pIn eR @P !/pNnP v`p0CnP vppDnP vp-,pP v@p",pP vpCDm@ v!Gr@ @n@ e( _X@}Rb !/E~@ eЈnoU@0-n !/(EDm@ tg l@ t g`!l@ e[sGX@]8ȹm !/ ~eq@ eXmx` !{eq@ e0mu` !seq@ em` !qeq@ emU !veq@ emt` !`zeq@ e Zs@+Z !`peq@ eZs~` !ԗl@ eP m@X !җl@ e0Df.Z !HMDm@ v0"Gr. HDm@ vX$GrTHHDm@ v$GrTHCDm@ v-Gr0(JDm@ vH.Gr0ޗl@ v`(Gr@ hN~@ em@cmalloc(): allocation too large, type = 6, size = 4295032832 OpenBSD/amd64 (A O)[91V0 ) (tty00) login: pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 denied attempt to set clock forward to 4263431296 2'WARNING: thread `nfsio' (71321) exits with status -1 WARNING: thread `nfsio' (143032) exits with status -1 WARNING: thread `nfsio' (286261) exits with status -1 WARNING: thread `nfsio' (231793) exits with status -1 WARNING: thread `nfsio' (409217) exits with status -1 WARNING: thread `nfsio' (21321) exits with status -1 WARNING: thread `nfsio' (521596) exits with status -1 WARNING: thread `nfsio' (483971) exits with status -1 WARNING: thread `nfsio' (356852) exits with status -1 WARNING: thread `nfsio' (421423) exits with status -1 WARNING: thread `nfsio' (495381) exits with status -1 WARNING: thread `nfsio' (436875) exits with status -1 WARNING: thread `nfsio' (357009) exits with status -1 WARNING: thread `nfsio' (70540) exits with status -1 WARNING: thread `nfsio' (238539) exits with status -1 WARNING: thread `nfsio' (214123) exits with status -1 WARNING: thread `nfsio' (111023) exits with status -1 WARNING: thread `nfsio' (15634) exits with status -1 WARNING: thread `nfsio' (403848) exits with status -1 WARNING: thread `nfsio' (355520) exits with status -1 vm_create: uvm_map failed: 12 denied attempt to set clock forward to 13622315181289262 denied attempt to set clock back 100663297 seconds malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 100663306 seconds malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 134217733 seconds pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 pppx: unable to set addresses for pppx3, error=17 denied attempt to set clock back 4263431304 seconds 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 11 3%#/.$3 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 2'"malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700    vm_create: uvm_map failed: 12 OpenBSD/amd64 (Amnesiac) (tty00) login: denied attempt to set clock back 134217771 seconds 2'malloc(): allocation too large, type = 29, size = 16796513700 vm_create: uvm_map failed: 12 uvn_flush: obj=0xfffffd806c4dbe28, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 125829045 seconds WARNING: thread `nfsio' (4181) exits with status -1 WARNING: thread `nfsio' (512993) exits with status -1 WARNING: thread `nfsio' (93445) exits with status -1 WARNING: thread `nfsio' (313224) exits with status -1 malloc(): allocation too large, type = 29, size = 16796513700 pmap_unwire: wiring for pmap 0xfffffd807aacc900 va 0x200000001000 didn't change! malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 2678637847 seconds WARNING: thread `nfsio' (51671) exits with status -1 WARNING: thread `nfsio' (226374) exits with status -1 WARNING: thread `nfsio' (281489) exits with status -1 WARNING: thread `nfsio' (11939) exits with status -1 malloc(): allocation too large, type = 29, size = 16796513700 uvm_fault(0xfffffd806c9737b8, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff8217b618 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff80003c4670b0 gsbase 0xffff8000299ddff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff8217b618 Starting stack trace... panic(ffffffff833e4202) at panic+0x1d0 kerntrap(ffff80003c467000) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800001720000) at dt_ioctl_record_stop+0x108 dtclose(31e5f,81,2000,ffff8000ffffc008) at dtclose+0x109 spec_close(ffff80003c4671b0) at spec_close+0x466 VOP_CLOSE(fffffd805ed09948,81,fffffd80097fd340,ffff8000ffffc008) at VOP_CLOSE+0x132 vn_closefile(fffffd800f7933f8,ffff8000ffffc008) at vn_closefile+0x12b fdrop(fffffd800f7933f8,ffff8000ffffc008) at fdrop+0x121 closef(fffffd800f7933f8,ffff8000ffffc008) at closef+0x192 fdfree(ffff8000ffffc008) at fdfree+0x116 exit1(ffff8000ffffc008,0,0,1) at exit1+0x576 sys_exit(ffff8000ffffc008,ffff80003c467520,ffff80003c467470) at sys_exit+0x1a syscall(ffff80003c467520) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7c94af7afd10, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 202 2007661224 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *341099 66133 0 0 0 1 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x7dfb77aa7ad0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806c9737b8, 0x0, 0, 1) -> e ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7dfb77aa7ad0, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80002a38c890 rbx 0 rdx 0 rcx 0xffff80003c424fb8 rax 0x3c r8 0xffff80002a38c7c0 r9 0x1 r10 0x4ccc2db8285dc2d8 r11 0x67aba9f0f69e56fd r12 0 r13 0 r14 0xffff80003c424fb8 r15 0 rip 0xffffffff819993ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80002a38c810 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=341099 pid=66133 tcnt=3 stat=onproc flags process=0 proc=0 runpri=50, usrpri=50, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffe7248,0xffff80003c424568 process=0xffff80003c4e8e98 user=0xffff80002a387000, vmspace=0xfffffd806c973018 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 96523 4052 43092 0 2 0 syz-executor *66133 341099 30714 0 7 0 syz-executor 66133 6266 30714 0 3 0x4000080 fsleep syz-executor 66133 195494 30714 0 3 0x4000080 fsleep syz-executor 66424 494919 11811 0 3 0x82 wait syz-executor 10228 342415 16759 0 3 0x80 nanoslp syz-executor 10228 354661 16759 0 3 0x4000080 kqread syz-executor 10228 128694 16759 0 3 0x4000080 fsleep syz-executor 67493 92862 23907 0 2 0 syz-executor 67493 198724 23907 0 3 0x4000080 fsleep syz-executor 67493 226579 23907 0 3 0x4000080 fsleep syz-executor 16759 5066 11811 0 3 0x82 nanoslp syz-executor 23907 41451 11811 0 3 0x82 nanoslp syz-executor 48373 218567 0 0 3 0x14200 acct acct 5804 43541 11811 0 3 0x82 nanoslp syz-executor 17942 344063 11811 0 3 0x82 nanoslp syz-executor 23164 183389 1 0 3 0x100083 ttyin getty 30714 356919 11811 0 3 0x82 nanoslp syz-executor 1069 85522 11811 0 3 0x82 wait syz-executor 43092 81521 11811 0 3 0x82 nanoslp syz-executor 79329 141015 46083 0 3 0x100082 sbwait arp 46083 152751 1 0 3 0x10008a sigsusp sh 11811 165079 22209 0 3 0x82 kqread syz-executor 22209 188778 28800 0 3 0x10008a sigsusp ksh 28800 295673 6867 0 3 0x98 kqread sshd-session 6867 181285 6872 0 3 0x92 kqread sshd-session 6872 366831 1 0 3 0x88 kqread sshd 73339 468558 44423 74 3 0x1100092 bpf pflogd 44423 322434 1 0 3 0x80 sbwait pflogd 72613 445196 88335 73 3 0x1100090 kqread syslogd 88335 177695 1 0 3 0x100082 sbwait syslogd 42670 8094 1 0 3 0x100080 kqread resolvd 2208 522194 63605 77 3 0x100092 kqread dhcpleased 56066 153380 63605 77 3 0x100092 kqread dhcpleased 63605 45090 1 0 3 0x80 kqread dhcpleased 95684 484394 0 0 3 0x14200 bored smr 75490 196509 0 0 2 0x14200 zerothread 90336 135946 0 0 3 0x14200 aiodoned aiodoned 60170 126420 0 0 3 0x14200 syncer update 8860 20879 0 0 3 0x14200 cleaner cleaner 42280 202397 0 0 3 0x14200 reaper reaper 11859 280514 0 0 3 0x14200 pgdaemon pagedaemon 29240 219458 0 0 3 0x14200 bored viomb 61389 93482 0 0 3 0x40014200 acpi0 acpi0 6111 222743 0 0 3 0x40014200 idle1 91910 155024 0 0 3 0x14200 bored softnet1 5780 67 0 0 3 0x14200 netlock softnet0 60455 456759 0 0 3 0x14200 smrbar systqmp 19764 293783 0 0 3 0x14200 bored systq 3519 152578 0 0 3 0x14200 tmoslp softclockmp 18610 147904 0 0 3 0x40014200 tmoslp softclock 77288 98939 0 0 3 0x40014200 idle0 1 465017 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 60455 (systqmp) thread 0xffff8000ffffea60 (456759) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11106 12220K 14065K 166960K 17715 0 pcb 17 18K 23K 166960K 1722 0 rtable 237 16K 17K 166960K 2115 0 pf 39 19K 84K 166960K 752 0 ifaddr 34 9K 13K 166960K 449 0 ifgroup 44 1K 3K 166960K 795 0 sysctl 4 1K 9K 166960K 105 0 counters 66 36K 38K 166960K 1034 0 ioctlops 0 0K 4K 166960K 3636 0 iov 0 0K 29K 166960K 403 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1583 100K 101K 166960K 6688 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 2K 10K 166960K 45 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 382 0 dirhash 15 2K 3K 166960K 147 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 19 69K 246K 166960K 6318 0 sigio 0 0K 0K 166960K 177 0 proc 74 131K 148K 166960K 1879 0 subproc 81 5K 5K 166960K 308 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1709 0 in_multi 71 5K 7K 166960K 639 0 ether_multi 1 0K 0K 166960K 74 0 mrt 1 0K 0K 166960K 53 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 283 1261K 1261K 166960K 283 0 exec 0 0K 1K 166960K 1851 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 14 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 272 178K 200K 166960K 58137 0 UVM aobj 107 186K 186K 166960K 115 0 pinsyscall 45 90K 106K 166960K 8090 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 571 0 NDP 10 0K 1K 166960K 334 0 temp 154 8685K 8940K 166960K 281014 0 kqueue 15 22K 34K 166960K 1334 0 SYN cache 2 8K 16K 166960K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 830 0 826 11 10 1 3 0 8 0 rtentry 176 650 0 569 7 1 6 6 0 8 0 unpcb 144 4698 0 4679 40 39 1 8 0 8 0 syncache 336 10 0 10 5 5 0 1 0 8 0 tcpqe 32 3 0 3 3 3 0 1 0 8 0 tcpcb 736 2732 0 2727 52 51 1 13 0 8 0 arp 136 111 0 96 1 0 1 1 0 8 0 inpcb 328 8153 0 8141 69 67 2 13 0 8 0 nd6 152 112 0 94 2 0 2 2 0 8 0 pkpcb 40 82 0 82 12 12 0 1 0 8 0 kcovpl 48 34 0 25 1 0 1 1 0 8 0 mppekey 1024 5 0 5 5 5 0 1 0 8 0 ppxss 1192 392 0 392 7 6 1 1 0 8 1 pppxif 1504 40 0 40 9 9 0 1 0 8 0 pfstscr 40 5 0 4 4 3 1 1 0 8 0 pffrag 232 82 0 79 1 0 1 1 0 482 0 pffrnode 88 78 0 75 1 0 1 1 0 8 0 pffrent 40 143 31 140 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 14 0 12 1 0 1 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pftag 88 8 0 1 1 0 1 1 0 8 0 pfstitem 24 6 0 0 1 0 1 1 0 8 0 pfstkey 128 145 0 139 2 1 1 1 0 8 0 pfstate 448 73 0 70 2 1 1 1 0 8 0 pfrule 1360 22 0 12 1 0 1 1 0 8 0 rttmr 136 7 0 7 7 7 0 1 0 8 0 art_heap8 4096 5 0 0 5 0 5 5 0 8 0 art_heap4 256 2345 0 1958 46 16 30 32 0 8 0 art_table 40 2350 0 1958 6 0 6 6 0 8 0 art_node 32 646 0 564 2 1 1 2 0 8 0 sysvmsgpl 40 61 0 46 1 0 1 1 0 8 0 semupl 112 8 0 8 7 7 0 1 0 8 0 semapl 112 368 0 358 1 0 1 1 0 8 0 shmpl 112 12 0 0 1 0 1 1 0 8 0 dirhash 1024 109 0 90 4 1 3 4 0 8 0 dino2pl 256 13757 0 12200 98 0 98 98 0 8 0 ffsino 296 13757 0 12200 121 0 121 121 0 8 0 nchpl 144 22119 0 20345 66 0 66 66 0 8 0 rtmask 32 54 0 54 15 15 0 1 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 83669 0 83669 5 4 1 2 0 8 1 percpumem 16 532 0 484 1 0 1 1 0 8 0 vcpupl 3968 96 0 4 12 0 12 12 0 8 0 vmpool 848 100 0 8 11 0 11 11 0 8 0 kstatmem 264 534 0 512 4 1 3 3 0 8 0 acpiwqpl 32 4 0 4 1 0 1 1 1 8 1 scsiplug 72 32 0 32 10 10 0 1 0 8 0 scxspl 216 155806 0 155806 22 21 1 8 1 8 1 plimitpl 152 1676 0 1658 2 1 1 2 0 8 0 sigapl 424 6557 0 6506 9 1 8 9 0 8 0 knotepl 120 932 0 0 25 0 25 25 0 8 0 kqueuepl 224 2731 0 2718 34 33 1 9 0 8 0 pipepl 344 988 0 957 23 19 4 9 0 8 0 fdescpl 528 6497 0 6464 3 0 3 3 0 8 0 filepl 160 48594 0 48352 70 58 12 22 0 8 0 lockfpl 104 2720 0 2717 3 2 1 2 0 8 0 lockfspl 48 911 0 908 1 0 1 1 0 8 0 sessionpl 144 56 0 47 1 0 1 1 0 8 0 pgrppl 48 196 0 178 1 0 1 1 0 8 0 ucredpl 104 8263 0 8248 1 0 1 1 0 8 0 zombiepl 144 8246 0 8242 2 1 1 1 0 8 0 processpl 1232 6557 0 6506 6 0 6 6 0 8 0 procpl 664 16422 0 16365 9 3 6 8 0 8 0 sosppl 176 54 0 54 16 15 1 1 0 8 1 sockpl 752 14066 0 14031 141 136 5 24 0 8 0 mcl64k 65536 9 0 0 2 0 2 2 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 5 0 0 1 0 1 1 0 8 0 mcl8k 8192 8 0 0 1 0 1 1 0 8 0 mcl4k 4096 130 0 0 15 0 15 15 0 8 0 mcl2k 2048 56 0 0 6 0 6 6 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 1119 0 0 70 0 70 70 0 8 0 bufpl 280 61355 0 55219 439 0 439 439 0 8 0 anonpl 32 17883 0 0 143 0 143 143 0 246 0 amapchunkpl 152 206940 0 206327 88 56 32 43 0 158 1 amappl16 200 23337 0 23303 138 119 19 32 0 8 9 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 6 0 6 1 1 0 1 0 8 0 amappl13 176 735 0 733 1 0 1 1 0 8 0 amappl12 168 7035 0 6991 3 0 3 3 0 8 0 amappl11 160 10 0 9 3 2 1 1 0 8 0 amappl10 152 59 0 45 1 0 1 1 0 8 0 amappl9 144 242 0 241 2 1 1 1 0 8 0 amappl8 136 47 0 44 1 0 1 1 0 8 0 amappl7 128 188 0 186 1 0 1 1 0 8 0 amappl6 120 596 0 580 1 0 1 1 0 8 0 amappl5 112 83 0 71 1 0 1 1 0 8 0 amappl4 104 612 0 579 1 0 1 1 0 8 0 amappl3 96 36222 0 36118 5 1 4 4 0 8 0 amappl2 88 6588 0 6507 2 0 2 2 0 8 0 amappl1 80 36674 0 36059 15 0 15 15 0 8 0 amappl 88 55866 0 55678 6 1 5 6 0 92 0 uvmvnodes 80 269 0 2 6 0 6 6 0 8 0 dma65536 65536 3 0 3 3 3 0 1 0 8 0 dma32768 32768 3 0 3 3 3 0 1 0 8 0 dma8192 8192 2 0 2 2 2 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 9 0 9 4 4 0 2 0 8 0 dma128 128 262 0 262 7 7 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 21 0 20 1 0 1 1 0 8 0 aobjpl 72 114 0 8 2 0 2 2 0 8 0 uaddrrnd 24 6497 0 6464 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 6497 0 6464 1 0 1 1 0 8 0 vmmpekpl 168 42858 0 42784 4 0 4 4 0 8 0 vmmpepl 168 407631 0 405595 173 67 106 114 0 357 0 vmsppl 488 6496 0 6463 5 0 5 5 0 8 0 rwobjpl 80 102801 0 101411 42 6 36 37 0 8 0 pdppl 4096 13201 0 13034 257 88 169 171 0 8 2 pvpl 32 25895 0 0 208 0 208 208 0 265 0 pmappl 256 6596 0 6471 8 0 8 8 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 598 0 185 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff838a8ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839ad440) at __mp_lock+0x19e softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff839ad440) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff839ad440) at __mp_lock+0x1a3 exit1(ffff8000fffe7248,0,0,1) at exit1+0x701 end trace frame: 0xffff80002a3365d0, count: 0 ddb{0}> trace x86_ipi_db(ffffffff838a8ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839ad440) at __mp_lock+0x19e softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff839ad440) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff839ad440) at __mp_lock+0x1a3 exit1(ffff8000fffe7248,0,0,1) at exit1+0x701 sys_exit(ffff8000fffe7248,ffff80002a3366b0,ffff80002a336600) at sys_exit+0x1a syscall(ffff80002a3366b0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7163bbe8bb30, count: -17 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0x7dfb77aa7ad0, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7dfb77aa7ad0, count: -1