last executing test programs: 8.531694249s ago: executing program 7 (id=85): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) ftruncate(r1, 0x79c8) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000001dc0)="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", 0x241}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000002d00)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x80000004}, {0x16, 0x6, 0x8}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000480)="00041b000f3e8095043fa8885d012c00000100c65e1017c53fcb7c7f40b4bf66108039750000007ab7739bf920", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000080)=0xfffffffa) r2 = syz_open_pts() ioctl$TIOCGETD(r2, 0x4004741a, &(0x7f00000000c0)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) (async) ftruncate(r1, 0x79c8) (async) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000001dc0)="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", 0x241}], 0x1) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async) ioctl$FIOASYNC(0xffffffffffffffff, 0x8004667d, &(0x7f0000002d00)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x80000004}, {0x16, 0x6, 0x8}]}) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000480)="00041b000f3e8095043fa8885d012c00000100c65e1017c53fcb7c7f40b4bf66108039750000007ab7739bf920", &(0x7f0000000000)=0x2d, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[]) (async) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000080)=0xfffffffa) (async) syz_open_pts() (async) ioctl$TIOCGETD(r2, 0x4004741a, &(0x7f00000000c0)) (async) 8.35361658s ago: executing program 7 (id=95): setuid(0xffffffffffffffff) r0 = msgget$private(0x0, 0x144) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x10) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0xfffffffc, "07080900001316000005f5ffffffffffffff00", 0x0, 0x7f7}) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000017c000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000748000/0x4000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8000000000b936}, {&(0x7f00001da000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xfffffffffffffffb}, {&(0x7f0000643000/0x3000)=nil, &(0x7f00000f4000/0x3000)=nil, 0x6}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000095000/0x3000)=nil, 0x5b}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0xa}, {&(0x7f0000406000/0x3000)=nil, &(0x7f000066a000/0x1000)=nil, 0x800}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x2}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000800000/0x1000)=nil, 0x9}, {&(0x7f0000241000/0x2000)=nil, &(0x7f0000706000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x768}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000135000/0x1000)=nil, &(0x7f0000241000/0x2000)=nil, 0x2}], './file0/file0\x00', 0x2}) select(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffffffffffffff08, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f00007ea000/0x4000)=nil, 0x4000, 0x1) msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x1ff, 0x11, 0x0, 0x0, 0xffffffffffff75ba, 0xfffffffffffffff9, 0x8abd, 0x5}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xbffd, 0x72, 0x1}]}) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000300)={0x0, 0x1}, 0x10, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='x\x00') mkdir(&(0x7f0000000440)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000000040)={0x3, 0x9}) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0x2, 0xffff0001, 0x2, 0x81, "6f4b52774609dbe71aaf8dd3df05a3b5531bcd2a", 0x1c00000, 0x5}) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_STAT(r0, 0x2, 0x0) 6.896437122s ago: executing program 7 (id=125): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x56}) (async) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x56}) syz_open_pts() (async) r0 = syz_open_pts() close(r0) (async) close(r0) r1 = syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f00000001c0)={0x40978b, 0xc, 0x7, 0x800033, "3b08000100f167c99e3bb0c69d73230100040c00", 0x200, 0x81}) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) open(&(0x7f0000000340)='./file0\x00', 0x0, 0x10) (async) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x10) socket$inet(0x2, 0x3, 0x2) (async) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r3, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r3, 0x0, 0x6a, 0x0, 0x0) (async) getsockopt(r3, 0x0, 0x6a, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a67f0f0000cb697a653e336f000000500000000000ff020000000000000000000000000001020090780000000369c46dea0006060800000026e50100e851d2299ecfd40b7399e6e400000000000000000000000001ff02c56b3ec2be255bfb4c7c10dc38eb9b87bf7fadc150467b8124289bc739a13505d8269f090a8fbe8999250d7fd9c1f91e2fdbfa9ec01c6853b385746ad34ecf2514cd89b2339c42c3d8b869674b22b041c145f03e5fba1dd3ff87ce1f13cad832ddaf26e56ce2be249908"]) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a5a12ad7f460032b34b77a382526b1572da73c6d", 0x31}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a5a12ad7f460032b34b77a382526b1572da73c6d", 0x31}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x18, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20}, 0x4) setuid(0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x800000) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) write(r0, &(0x7f0000000340)='\f', 0x1) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) read(r5, &(0x7f0000000240)=""/44, 0x2c) r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000000180), 0x242, 0x0) r7 = open$dir(&(0x7f0000000280)='./file0\x00', 0x2, 0x4) open(&(0x7f00000002c0)='./file0\x00', 0x400, 0x100) (async) r8 = open(&(0x7f00000002c0)='./file0\x00', 0x400, 0x100) kevent(r2, &(0x7f0000000400)=[{{r0}, 0xfffffffffffffff9, 0x30, 0x8, 0x0, 0x1}, {{r0}, 0xfffffffffffffffd, 0x0, 0xf0000000, 0x4000000000003, 0x7ff}, {{r2}, 0xffffffffffffffff, 0x2, 0xf0000000, 0x6}, {{r3}, 0xfffffffffffffffa, 0x0, 0x4, 0xb30, 0x99e}, {{r0}, 0xfffffffffffffffe, 0x81, 0x8, 0xc5, 0x2}, {{r3}, 0xfffffffffffffffa, 0x4a, 0xfffff, 0x0, 0x5}, {{r4}, 0xfffffffffffffffa, 0x1, 0x2, 0x5, 0x9}], 0x277, &(0x7f0000000500)=[{{r1}, 0xffffffffffffffff, 0x6, 0x20, 0x7fffffff, 0xf}, {{r4}, 0xfffffffffffffff9, 0x2, 0x8, 0x3, 0x7}, {{r5}, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x2}, {{r6}, 0xfffffffffffffffb, 0x8, 0x1, 0x1, 0x4}, {{r7}, 0xfffffffffffffffe, 0x8, 0x1, 0x7f, 0x5}, {{r3}, 0xfffffffffffffff8, 0x30, 0x20, 0x3}, {{r0}, 0xfffffffffffffff8, 0x122, 0x8, 0x10000, 0x2}, {{r8}, 0xfffffffffffffff8, 0x44, 0x2, 0x7, 0x4}], 0x200, &(0x7f0000000300)={0xfffffffffffffff8, 0x2}) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000000)) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket(0x18, 0x2, 0x0) setsockopt(r9, 0x1000000000029, 0x28, &(0x7f0000000040)="00fb6c4f", 0x4) 6.839805633s ago: executing program 0 (id=129): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1dd47e34, 0x0, {[0xfffffbeffffffffb, 0xf7, 0x1000000000004787, 0x8, 0x400000000009, 0xc70, 0x6, 0x9, 0x0, 0x80000001, 0x100, 0x3, 0xfffffffffffbffff, 0x5, 0x0, 0xffffffffffffffa8, 0x7, 0xce5], [0xfffffffffffffffe, 0x400, 0xfffffffffffffffd, 0x2, 0xffff, 0x1000000000007b9a, 0x2, 0x0, 0x2, 0x3], [0x5ad7, 0x2000000000000000, 0x8000000000000001, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000003, 0xfffffffffffffffc, 0x8000000100000000, 0x1, 0x3], [{0x1, 0xfffffffd, 0x0, 0x7d09}, {0x7, 0x8000000, 0x2, 0x7b}, {0x0, 0x4, 0xfffffffb, 0x81}, {0x3, 0x100, 0x3, 0xfffffffffffffffd}, {0x3, 0x2, 0x19045d4c, 0x7ffffffffffffffd}, {0x0, 0x2006, 0x40000, 0x2080000000000000}, {0x6a7, 0x7ce5, 0xf689, 0xfffffffffffffc00}, {0x2008, 0x96b, 0x0, 0x8}], {0x2, 0x9, 0x6, 0xbfe}, {0x21, 0x6, 0x100000b0, 0x2}}}) setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x809789, 0x859a, 0xd3, 0x80a19f, "bf08000100f1675910812cc900", 0x1, 0xfb}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r2 = getuid() r3 = dup2(r0, r1) ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f0000000340)={'./file0\x00', 0x3, 0x0, 0x6, 0x0, 0x745, 0x9d86, 0x8, 0x2, 0x1, 0x7, 0x2}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0xae0e, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x200}, 0x0, 0x7}) chown(&(0x7f0000000000)='./file0\x00', r2, 0xffffffffffffffff) 6.8388112s ago: executing program 7 (id=131): syz_open_pts() (async) r0 = syz_open_pts() mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sysctl$kern(&(0x7f0000000a00)={0x1, 0x28}, 0x2, &(0x7f0000000a40)="26d45add560933c3ac1da0268a0efffa8559e99c4ec27ff69f7b63ba16b20112fa1893d689721703c0cf13e2410d24a9462c8558696d07e8155ac407e95f5e9defdb5836a581edfd27e7f83cacade531041b28bc70e5638cfb8deb4bbba0d31254dc8e8ab6fe30ab1ab235400b4d0b536278582403b2a123e3319be24ebaf33d1e5633fc3e7a814aa4c9fd4b3187d11f92f3afa024f320416801c275ebb107", &(0x7f0000000b00)=0x9f, &(0x7f0000000b40)="cac28e03485478ca6cceb910f7ad03ac33537617ed839e5c7cbba02c1458b3b22d545838aa8e393d30683cbcadaff3979bc71133bc34aa0e5dff57e3619bc0896f5fcb9b07cb5b7156971cbdb8c4d94e004bdc8abaa824613299f4bfbf7ad8c89ed6b52871063c7f7d448bf1f8b1b5fe9c30203a5d678e46b5a4ed27dc285e231fb3babf5ee38a89c6345f09b2267036fcb794642d4f38a5a1d7b21036ce0797141f450cbab1c45ec8b5e8c7b21b7fa0c76f963ee623beb34ffa7279a22019988d39c36fa698206b23e411cbebb79619", 0xd0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000200)='./bus\x00', 0x8003, 0x0}) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000240)="a7aba1439cad4ec9bc256d60268861b73cf360df6e1f9edc0b34d0c5d60ffd3ab6d234677b01565a1c29413d8161eac160362f52423176d97282b8dfec87a9c608969954b837fc9a50e20743855220d7dd492a11fffe1383ba4d0f9b48a59a3dd2f8f8c88c9232869c75f7b15248f6759a8f6dc1235f09dec78487ac31f362efcd08d47270e6", 0x86}, {&(0x7f0000000480)="73df5db46c3e8cf5134a4d78146a92ea57b11c1812c0862ede9340631697c3ffeb78e8f1fbcf8f161c88956a003eadd04b196a64dbab19310b4ba78d7fd31da7a24af1c1b4762b532b1be0a44cd878196c86dad0ff3bb02b041b4f6ab671404b2470c60dab153dfc50e070772941a3005b8ddd86a8d428f14fd6295cf91c05c952b8d038376c73d0aa660537962ed0f1059aeda4609cfa1f2d3b90999fdc48d5d50ce410dd4758a61e784cbf7ba67148b2f3989767d15ce4a7266f0feef4784942d6608238d830ac4efe4d83266755225e91b8", 0xd3}, {&(0x7f0000000580)="0626f2efe305392d22c472a359be94491d60e4fb6d84d406701b9b19e0dd1b6330287a6d8cda8c4fab949c43f3a41c6eda5119de5ad3d91de2feaf4309c717ab2c6f3c5017d6ddb04730fc4d29eca3860842da3014d6e330e20c52fcbcf66386", 0x60}, {&(0x7f0000000600)="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", 0xfb}, {&(0x7f0000000700)="013ba3bda7086acc5803034f04ecd82150bdbc2348eb26cfedefabeff60dfa1e0d005ada5c50370aa07f81fee685b3e54536cbbc710fda26bcda9ed0fc840c380f74ccccb5fa31b4024a7127cf46174b8f6f547559448aa3", 0x58}, {&(0x7f0000000780)="18e720cffc37b04cf1882f2c8b3e7152b71d387ddaf3528c459ea172c92820fcffe78f746958aeebb50eb04fd55b6d390d82aadc3ff766a21a268da019d3397fd2ec4f196303a82053c96297b48f35b2df92db128e2a4252c93029a3e129157d6218dd2ed9ca36176cfcdfeceb0e63794857b014761e68e10bf1154c77d58ef570021224c06b", 0x86}, {&(0x7f0000000840)="9eb2c9af0403adff67547e90c56f38f1bcf92597cc56bec5cbbcee157c647c5389420c25de3899562b18a4413dfca82892ad79856871e3e16a681d009cbd4996af9897ba6c30e34f0b64e74c37eb5b2db3793336b9e489491692b22322954ea29a21560b2309048b73838d4f134089a2b0e5dd3d07fe06678a560867468e5837bd61aef3a2cbfc30243725fbe3a025f96cbf5cccaf88eb99de0d6a695836af318dda059a4ce00ac085f0c055f5c14d4e23c3c7215d9141b095b71cc4fe01bea9f8fa4e81358745f388b77b7d0867b07b62adffbe15859e743119a349", 0xdc}], 0x7) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) ioctl$BIOCGDLTLIST(0xffffffffffffffff, 0xc010427b, &(0x7f00000009c0)={0x6, &(0x7f0000000400)=[0x2, 0x3, 0x4, 0x8, 0x10001, 0x1]}) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104, 0xa00}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) (async) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104, 0xa00}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 5.303555376s ago: executing program 0 (id=161): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5200) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) connect(r0, &(0x7f0000000140)=@in6={0x18, 0x0, 0xfffffffa, 0x2}, 0xc) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f00000000c0)={'./file0\x00', 0xf, 0x200, 0x7, 0x1, 0x6, 0x4, 0x7fff, 0x1, 0x1, 0x4}) r1 = kqueue() kevent(0xffffffffffffffff, 0x0, 0x40, 0x0, 0xa, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x17, 0x10, 0x5}], 0x2a1, 0x0, 0x8001, 0x0) kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, &(0x7f0000000100), 0x5, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r3 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0xc0206925, &(0x7f00000001c0)) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x0, 0xa4, 0x1, 0xfff}, {0x54, 0xf, 0xff, 0x7}, {0x406, 0x1, 0x8b, 0x4000}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) kevent(r1, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0x1, 0x80, 0x9, 0x7ff}], 0x2, 0x0, 0x2, 0x0) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) 5.203302243s ago: executing program 0 (id=166): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x10, 0x8}, {0x2, 0xf, 0xff, 0x9}, {0x6, 0x80, 0x48}]}) r1 = getuid() r2 = getuid() r3 = geteuid() setreuid(r2, r3) setreuid(r1, r2) sysctl$hw(0x0, 0x0, &(0x7f0000000280)="00041b000f3e8095043fa8985d012c000001003d0817c53fcb7c7d40b5bf66108039750000007ab791f608f7", &(0x7f0000000000)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f00000001c0)=[{0x84, 0x1, 0x7, 0x5}, {0x0, 0x3d, 0x4, 0xc}, {0x406, 0x1, 0x24, 0x80207}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) r6 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x7fff, 0xffff, 0x0, 0x21, 0x2, 0x4000001, 0x2, 0x1, 0x1, 0xf1d}) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x2) write(0xffffffffffffff9c, &(0x7f00000000c0)="02f97a6d0c2301e31a643a65ce450a3508df7780c2ed8ce9cd1c4ae956bfc28dd922074047117c9537c4328f6b3cd6191f483a1a6ba6be3f2cc5cce9e3897f190e", 0x41) setuid(0xffffffffffffffff) r7 = getuid() r8 = geteuid() setreuid(r7, r8) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 4.871225166s ago: executing program 0 (id=180): kqueue() open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) nanosleep(&(0x7f00000025c0)={0x0, 0x20}, &(0x7f0000000080)) 4.87066496s ago: executing program 0 (id=181): symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/197, 0xc5) (async) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000300), 0x40, 0x0) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000340)={'./file0\x00', 0x4, 0x27f4, 0xb35e, 0x1, 0x8, 0x2, 0x1, 0x1, 0x1, 0xfffffffffffffffd, 0x4000000000}) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f00000002c0)={&(0x7f0000000240)='./file0\x00', 0x1ff, &(0x7f0000000280)='./file0\x00', 0x8}) (async) chroot(&(0x7f00000001c0)='./file0\x00') 4.828545582s ago: executing program 0 (id=182): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f0000000040)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) r2 = socket$inet(0x2, 0x3, 0x102) sendmsg(r2, &(0x7f0000000280)={&(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000980)=[{0x10, 0xffff, 0x5}], 0x10}, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f0000000080)=[{0x81, 0x2d, 0x0, 0x8}, {0x50, 0xf, 0xff, 0x7}, {0x6, 0x80, 0x8}, {0xff00, 0xf7, 0x0, 0x2}]}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200000000000) sysctl$vm(&(0x7f0000000000)={0x2, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = syz_open_pts() ioctl$TIOCSTAT(r3, 0x20007465, 0x0) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000240)=0x8) unveil(0x0, &(0x7f00000003c0)='c\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) dup(0xffffffffffffffff) ioctl$BIOCFLUSH(r0, 0x20004268) 1.930179669s ago: executing program 6 (id=253): r0 = socket$inet(0x2, 0x1, 0x0) poll(&(0x7f0000000240)=[{r0, 0x40}], 0x1, 0xffffffff) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x1b2) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r2, 0xc028575d, &(0x7f0000000100)={0x3, 0x7533, './file0\x00', 0xf50, 0x3, 0x9, 0xb3}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x10}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e486b0a", 0x6f}], 0x2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) unveil(0x0, &(0x7f00000000c0)='x\x00') r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$WSKBDIO_GETMODE(r3, 0x40045714, &(0x7f0000000040)) 1.820446404s ago: executing program 6 (id=257): openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) symlink(0x0, &(0x7f0000000180)='./file0\x00') (async) symlink(0x0, &(0x7f0000000180)='./file0\x00') setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) munmap(&(0x7f00002c5000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x5012, 0xffffffffffffffff, 0x9) openat$bpf(0xffffffffffffff9c, 0x0, 0x10, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) semget(0x0, 0x1, 0x281) (async) r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f00000002c0)=[{0x2, 0xff79, 0x1800}], 0x1) r1 = syz_open_pts() close(r1) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) r2 = syz_open_pts() r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r3, 0x9, &(0x7f00000003c0)={0x1, 0x0, 0x7fffbfdfffffffff, 0x200000000}) (async) fcntl$lock(r3, 0x9, &(0x7f00000003c0)={0x1, 0x0, 0x7fffbfdfffffffff, 0x200000000}) fcntl$lock(r3, 0x8, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x100000002}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x7, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x8000004, 0x4}) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x7, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x8000004, 0x4}) getegid() (async) getegid() writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r4 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000)) (async) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000)) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r6, 0x9, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x300000003}) fchflags(r6, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001b00)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffffffdd605f6ad900383a0000000000000000000000000000000000ff02000000000000000000000000000102009078000000006006c33e00003a80fe800000000000000000000000089f70818399531d0000f58b000000000000aa6c00000000000000"]) fcntl$lock(r5, 0x8, &(0x7f0000000040)={0x2, 0x0, 0x6, 0x100000006}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) 1.600469357s ago: executing program 7 (id=259): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0xffffffffffffffeb, &(0x7f0000000080)=[{0x0}], 0x1000000000000126, 0x0}, 0x3}, 0x4, 0x1082, 0x0) read(r1, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) fchmod(r4, 0x88) write(r2, &(0x7f0000000000)="ed", 0x1) recvmmsg(r3, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup2(r2, r5) sysctl$net_inet_tcp(&(0x7f0000000200)={0x4, 0x2, 0x6, 0x11}, 0x4, 0xfffffffffffffffe, &(0x7f0000000080), 0x0, 0x0) recvmmsg(r3, &(0x7f00000009c0)={0x0, 0x7fa}, 0x10, 0x800, 0x0) read(r4, &(0x7f00000002c0)=""/207, 0xcf) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x4, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x5, 0x2a3, 0xffffffffffffffff, 0x0, 0x8000000000000003, 0x80000000000000c, 0x100000001, 0x40}) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) listen(r2, 0x4) link(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='./file0\x00') open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(r6, &(0x7f00000006c0)={&(0x7f0000000480)={&(0x7f0000000400)=@un=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000440)=[{&(0x7f0000000500)="d6862dbcf911994159b847827a363b447353db147cc7a5a7b62fcd73a5f70878e19a883a0e0d0dbbb843bdeead3dde2af1481bb15ce01da11afcaf133a43c5b5fa7fbb944d5a721d95c0eca534c8b333cee97ab5a6bfc321bc1e19a5d5cf3a2d5050eee83764b5d0e73d4de08f41d929906a61128b47fa2704cc61057df335d409e1b97b027e981c3cd595bccffaed935827650e86bc552ac9d85331077a273dfc5042e9785d5b8180e30faaf436eb21138264518eb584c4e07dd9", 0xbb}, {&(0x7f00000005c0)="ee430108aa64e81f140043f5e74e80bf92ea41dd8506d550808ee0f7abea2d7a589d6f4524da0452009c7fcba1e1ccf86f160c8c6eeb3b3a842ef01577dd9dd89223f7f5d6db9bea6fd2398f77fab7d6d04103ef0045414f7259f8af21fdba0fb8b06d17502cf6ca0ee4de933b39d0bf2830bfdc348818a842d65b7ab91b51c47f8cbc523eedd015407c954dbdfec2637c4e6a0fc8f97fc11bceeaf18740cd370d31618ed783657d32d9faa126395d28c43947ad5240b01d27859042fb73005b7fcb6dffeeac8d5ba51bb2fcdddce88c49e6d5479cf6e33d49264b44d80cf5100cbfb8ae0e0692f979ee24c38bffb5bd9b3d6ab503fe2578", 0xf8}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x288}, 0x7}, 0x10, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) unveil(0x0, &(0x7f0000000780)='r\x00') readv(r1, &(0x7f0000001ec0)=[{&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/26, 0x1a}, {&(0x7f0000000740)=""/12, 0xc}, {&(0x7f00000007c0)=""/84, 0x54}, {&(0x7f00000008c0)=""/94, 0x5e}, {&(0x7f0000000940)=""/117, 0x75}, {&(0x7f0000001dc0)=""/221, 0xdd}, {&(0x7f0000000a00)=""/84, 0x54}], 0x8) sendmmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x210}, 0xfffffffa}, 0x10, 0x1) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7}, 0x85c, 0xa, 0x0, 0x0, 0x1, 0x7b, 0x4, 0x4}) r7 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1000, &(0x7f0000000280)=0x8cf04, 0x4) bind$unix(r7, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 1.598336693s ago: executing program 1 (id=260): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x400}, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x100000001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) shmget$private(0x0, 0x2000, 0x604, &(0x7f000002a000/0x2000)=nil) (async) r3 = shmget$private(0x0, 0x2000, 0x604, &(0x7f000002a000/0x2000)=nil) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000100)={{0x10000, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x70, 0xfe00}, 0xf, 0x800, 0x0, 0xffffffffffffffff, 0x7fffffff, 0xad6, 0x7b}) setreuid(0x0, 0xee01) (async) setreuid(0x0, 0xee01) shmat(r3, &(0x7f00001be000/0x2000)=nil, 0x1000) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) mknod(0x0, 0x2000, 0x6381) (async) mknod(0x0, 0x2000, 0x6381) r4 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) ioctl$TIOCGETA(r4, 0x402c7413, &(0x7f0000000080)) flock(r2, 0x3) (async) flock(r2, 0x3) r5 = getpid() openat$klog(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) (async) r6 = openat$klog(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) pwritev(r6, &(0x7f0000000480)=[{&(0x7f0000000400)="1817bde1897fb70bda580dc63126a8ab06e9e312d5600ae8cf0276d81c82fdc93398d26b7848ebb58a4d23b4f2bb4b4bd8a4edc9a76b71d2ca5c8db1dc861c054882335d929f4a8e272f95a39dd0eded1fc74e0b4b22135d6c0842f29fad074151c4d1de905a23f8c0048fdcd9f70ee889ba90", 0x73}, {&(0x7f0000000280)="0a02", 0x2}], 0x2, 0x7) (async) pwritev(r6, &(0x7f0000000480)=[{&(0x7f0000000400)="1817bde1897fb70bda580dc63126a8ab06e9e312d5600ae8cf0276d81c82fdc93398d26b7848ebb58a4d23b4f2bb4b4bd8a4edc9a76b71d2ca5c8db1dc861c054882335d929f4a8e272f95a39dd0eded1fc74e0b4b22135d6c0842f29fad074151c4d1de905a23f8c0048fdcd9f70ee889ba90", 0x73}, {&(0x7f0000000280)="0a02", 0x2}], 0x2, 0x7) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0xf00, r5) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0xf00, r5) fcntl$lock(r2, 0x8, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x26900fffb, r5}) recvmsg(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffff8, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/263, 0x107}], 0x1, 0x0}, 0x40) sendto(r1, &(0x7f0000000240)="8f766ea0", 0x4, 0x0, 0x0, 0x0) 1.307009399s ago: executing program 5 (id=274): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) rename(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x2a, &(0x7f0000000140)={@random="91a6e341d8bb", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x3a, 0x0, @broadcast, @rand_addr}, @icmp=@generic={0x0, 0x0, 0x0, "2d917dcb"}}}}}) socket(0x2, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x1b6, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.305524255s ago: executing program 5 (id=276): mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) chroot(&(0x7f0000000740)='.\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') setuid(0xffffffffffffffff) socket(0x1, 0x5, 0x80) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) 1.240710772s ago: executing program 5 (id=277): mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) mknod(&(0x7f0000000180)='./bus\x00', 0x1, 0xd01) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x20006470, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8000, 0x0) fcntl$setown(r1, 0x6, 0x0) 1.234792113s ago: executing program 5 (id=280): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r0 = semget$private(0x0, 0x1, 0x60) r1 = getuid() setreuid(0xee00, r1) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000380)={{0x51, r1, 0x0, r2, 0x0, 0x0, 0x1}, 0x6, 0x10001, 0xf5}) syz_emit_ethernet(0x6e, &(0x7f0000000280)=ANY=[@ANYRES64=r2]) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x8}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4bb6}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001cf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000212000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000501000/0x1000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000027000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000012e000/0x2000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xfffffff9}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$WSDISPLAYIO_GETSCREENTYPE(r3, 0xc028575d, &(0x7f0000000240)={0xa, 0x1, './file0\x00', 0xff, 0x6, 0x7fff, 0x1}) (async) ioctl$WSDISPLAYIO_GETSCREENTYPE(r3, 0xc028575d, &(0x7f0000000240)={0xa, 0x1, './file0\x00', 0xff, 0x6, 0x7fff, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r4 = socket(0x18, 0x1, 0x0) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) close(r4) (async) close(r4) pipe(&(0x7f0000000400)) (async) pipe(&(0x7f0000000400)={0xffffffffffffffff}) read(r6, &(0x7f0000000440)=""/243, 0xf3) socket(0x20, 0x1, 0xf) (async) r7 = socket(0x20, 0x1, 0xf) setsockopt(r7, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 1.222275098s ago: executing program 5 (id=282): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xa8) ktrace(&(0x7f0000000180)='./file0\x00', 0x2f, 0x51d73188af82c397, 0xffffffffffffffff) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setreuid(0x0, 0xee01) r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x3, 0xc) bind(r1, &(0x7f0000000000), 0x10) r2 = socket(0x11, 0x3, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000280)="e33745e8", &(0x7f00000000c0)=0x4, 0x0, 0x0) sendto$unix(r2, &(0x7f00000000c0)="b10005010000009f05003f0107000000211c13fecea79c5dfaf66e8d030100000000000000ef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f8343712050500b71d8000090005080000fca65361ba84913f01000008000000000000000000", 0xb1, 0x408, 0x0, 0x0) 1.112848782s ago: executing program 5 (id=285): setrlimit(0x6, &(0x7f0000000400)={0x5, 0x54}) r0 = syz_open_pts() close(r0) ioctl$TIOCSTOP(r0, 0x2000746f) syz_open_pts() writev(r0, &(0x7f0000000380)=[{&(0x7f0000000180)="3736fab014cd276dbde589a65ef109995662d1af85a830a4b1153a4a998b0cfd5d1312024f027d9103f6f9af79a95910a3b37902724dfb938747d228df388832a661242a33f5be39b3da189f0d", 0x4d}], 0x1) 1.108750217s ago: executing program 2 (id=287): r0 = syz_open_pts() r1 = syz_open_pts() unveil(&(0x7f0000000040)='./bus/\x00', &(0x7f0000000080)='c\x00') r2 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) fchmod(r2, 0x100) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000340)={&(0x7f0000000140)=[{0x1, 0x101}], 0x1}) setuid(0xee01) fchdir(r1) fchdir(r2) poll(&(0x7f0000000140)=[{r0, 0x40}], 0x1, 0x4) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000000)=0x6) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f00000000c0)) 1.073796886s ago: executing program 2 (id=289): setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r0 = syz_open_pts() syz_emit_ethernet(0x91, &(0x7f0000000840)=ANY=[@ANYBLOB="a6ef00810023006558bfdc6cbacf6fea97935c407901bcab47cbd3f924fdb068d09dce3ae3aeb90ae9c5275c9ddadff21cc126a1fa98c09c1bfdbe9923596b5692fa8a612e0a47ed7ed410405a722605d59b2c3630d290bdcf17e8044e937d2ee8edb5b2e4638042bfd8c94b8a1cc73452befe891e77420ebeca96043781444ffba55d1606f68b27a03312243a860000000000000000000000000009dbd48736a078ae44ac36ec1bdddaa20b0583f510bffbec492b0c83d030862f3eb67a5f33e664c5147ec709f28454330a95e60bd165307cd8bdf329e3889338d8ca2819c6117a9e3a1f3c9b19d59b5d297d840e08c783baaaddf336265294ac13b243a4fb36a59447c1ac1142415c0b13e89fa18a3f84df5d8ccc3361008f8b0c8a8202a57a781bd2b4de9529b37220c6d0089848fae9a06d22c4e73794875744befa3c3e3ddca3f72557ecb1fdda7675de1f08751cadde0afe83e5abf8d785b5855bb0f407a2af"]) close(r0) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0xbd, 0x7fffffff, 0xffd7fdff, 0xfffffffd, "09032e4faceb089b351c0a164dc016b0763047c9", 0x26, 0x4}) writev(r0, &(0x7f0000001bc0)=[{&(0x7f00000000c0)="57a62b619011b34398c8af608700000000af12e8c4355e2cd36a", 0x1a}, {&(0x7f00000002c0)="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", 0x560}, {&(0x7f0000000200)="20e558e8c3dd22cdf5e40614791da4ef970d19ecde934f80e9a854b18d50274f36b2b87bc5d17636fda6eb822602772524a905af060000002309", 0x3a}], 0x3) 941.482443ms ago: executing program 6 (id=294): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) ftruncate(r0, 0x37cd8cac) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x810, r2, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000697000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00'}) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) (async) pipe2(&(0x7f0000000040), 0x10000) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0xadb5, 0x8000000, 0x2, 0x8, "c5f7c3945cd590917d477836b2a451962da2aab3", 0x5, 0xffffffff}) 937.431241ms ago: executing program 6 (id=296): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) (async) r2 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r2, &(0x7f0000000000), 0x10) (async) close(r1) (async) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) (async) r5 = socket(0x18, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x2, r5) close(r6) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0x400, 0x40000010000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x6}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x9, 0x17, 0xffffffff}, {0x44, 0x12, 0xbe, 0x10}, {0x400e, 0x4, 0x5a, 0x7ffffeff}]}) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="0033c53e2cffec01ed2d4adf0000f4ffffffffffffffddffffff0084ee65bf3a8d8f9cc73fb996d1817b46cb9dd70edf22a9e7066d62527fbd0100000047b5e110d08b7be8586ba8", &(0x7f0000000000)=0x48, 0x0, 0x0) (async) mprotect(&(0x7f00005de000/0x3000)=nil, 0x3000, 0x2) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r8, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r8, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 934.044336ms ago: executing program 6 (id=298): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x5a}) r0 = syz_open_pts() close(r0) (async, rerun: 32) syz_open_pts() (rerun: 32) ioctl$WSDISPLAYIO_GETEMULTYPE(0xffffffffffffffff, 0xc014575e, &(0x7f0000000180)={0xb, './file0\x00'}) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000500)={0x80000002, 0x5, 0x1f, 0xfffff7b4, "8b02000300090a7837b13e13355f4fa7c2f4e300", 0xfffffffd, 0x2}) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x2}, {0x0, 0xfffffffb}, {}, {0x1, 0x1}, {0x0, 0x62}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x1, 0x2}, {0x0, 0x101}, {0x2, 0xffffffff}, {0x3}, {0x1, 0xfffffffd}, {}, {0x0, 0x4}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x3}, {0x0, 0x48}, {0x1, 0xfffffffc}, {0x2}, {}, {}, {0x2}, {0x0, 0x3}, {0x2}, {}, {}, {}, {0x1, 0x57fd}]}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) getrlimit(0x4, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) (async) kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0xfffffffffffffff8, 0x0, 0x44, 0x6}], 0xffffffd8, 0x0, 0x2, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ftruncate(r1, 0x9ab4) (async) pipe(&(0x7f0000000080)) chmod(&(0x7f0000000200)='./file0\x00', 0x136) 833.005494ms ago: executing program 2 (id=299): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105727, &(0x7f0000000300)={&(0x7f0000000040)=[{0x100, 0x9710}, {0x101, 0x3}, {0x2, 0xe748}, {0x26, 0x7}], 0x4}) rmdir(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x2000007, 0x101, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8000, 0xfffffff9}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0xfffd}, {0x6, 0x803, 0x8, 0x8}, {0x2, 0x5, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x7, 0x10001, 0xc, 0x3}, {0x408, 0x5, 0x8}, {0x6, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffd, 0x60, 0x6}, {0x1000c, 0x5, 0x9, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) read(r1, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x6, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x7f, {[@mss={0x2, 0x4, 0x5005}]}}}}}}}) ioctl$WSDISPLAYIO_ADDSCREEN(r4, 0x80245753, &(0x7f0000000080)={0x677c, './file0\x00', './file0/file0\x00'}) pwritev(r4, &(0x7f0000002740), 0x1000000000000362, 0x3fffe) 828.867623ms ago: executing program 1 (id=303): symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') shmat(0xffffffffffffffff, &(0x7f0000ffa000/0x3000)=nil, 0x2000) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) sysctl$vm_swapencrypt(0x0, 0x0, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2", 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc1126939, &(0x7f00000001c0)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000000)="543a628baa360d5ae91a", 0xa}], 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x101, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x7, 0x0, 0x71003}, {0xd8, 0x8, 0x8, 0xfffffff9}, {0x0, 0x8, 0x8, 0x8}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x6}, {0x40000002, 0x1, 0x8, 0x95}, {0x82ce1, 0x800, 0x9c29, 0x400006d}, {0x3, 0x803, 0x14, 0x6}, {0xffffffff, 0x82, 0x4, 0x400009}, {0x5, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x10001, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0xffe}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x3, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 733.354567ms ago: executing program 7 (id=304): sysctl$kern(0x0, 0x0, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34b8e5ff49ead69c9b3b32c84f8d320018983cea251ec000050c127dcdfdf5b16134f032c75405a000048044f2c0495f1496131b46051a74f58c9fcbec9fd0312aa24f63eb91489a05c8c796b67310f648b950e7e7ca075ed83ed454a949c585f359084bd96d93a33c830e1124227ed69ab8942a9ab7ed9ce964bd8447ba799bb22e1b3fec93d9bf8692c2f819943cbfdb5e8b1c8c4046da548cfdefae14f2154da26b3eafb169f6e0ccd457ddb226fa2d32ba256e0665cc352e68df80a", 0x0, 0x0, 0x0) r0 = syz_open_pts() ioctl$TIOCSTOP(r0, 0x2000746f) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="00efaddeec", 0x1f38}], 0x1) unveil(0x0, &(0x7f0000000080)='r\x00') setuid(0xee01) r1 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x5b) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r2 = socket(0x18, 0xc003, 0x3a) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f0000000200)={0xff, 0x1, 0x10, 0x45ae, 0x3549}, 0xc) fchmod(r1, 0xff) setuid(0xffffffffffffffff) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2}, 0xa, 0x2a2, 0xffffffffffffffff, 0x0, 0x3, 0x40, 0x7, 0x911}) mprotect(&(0x7f0000171000/0x3000)=nil, 0x3000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 732.843141ms ago: executing program 2 (id=305): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0xba, 0x5a, 0xfff}, {0x3, 0xf, 0xfe, 0x7}, {0x406, 0x1, 0x8b, 0x4000}]}) bind$unix(0xffffffffffffffff, 0x0, 0x0) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1", 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f00000000c0)) write(r1, &(0x7f0000000740)="002020c9c5e943ca8bf2eeebece66b7e4229ba53cde5e4090900db00d206000000a11f077f9575159a6b5aba577d4b8fceb3677ab3e90000000000000000e8500a8ae2bb16939750384e4165de6e35a7303966506ddfa487941243ffa688b24c27b497c730", 0x65) 683.03884ms ago: executing program 2 (id=307): sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x2, 0xf0}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sysctl$hw(0x0, 0x0, &(0x7f0000000280)="00041b000f3e8095", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000280)='./file0\x00', 0x80, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x417}, 0x404) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x20, 0xc}, 0x6) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd4, 0x8, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x3, 0xa24}, {0xc5c, 0xb, 0x8, 0x1ff}, {0x800008, 0x20f05, 0x200, 0x6}, {0x7ffffffe, 0x6, 0x3, 0x1}, {0x3fd, 0xd, 0x1002802, 0x4d8a}, {0x3, 0xff, 0x3, 0xb}, {0x8000008, 0x7, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x1000004, 0xa74d925a, 0xd1b, 0x88}, {0x1c4, 0x5, 0x4, 0x412c8391}, {0x3, 0x6, 0x20002, 0x4000000c}, {0xb8d, 0x7e9, 0x8, 0x2}, {0x29a7171f, 0xffffdffa, 0x1, 0x6}, {0x6, 0x7, 0xfffffff9, 0x200100}, {0x0, 0x8, 0x1002, 0x8c}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5c}) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000280)={0x0, 0x7f}) mknod(&(0x7f0000000040)='./file0\x00', 0x1ffa, 0x0) r2 = open$dir(&(0x7f0000000280)='./file0\x00', 0x40, 0x392) mquery(&(0x7f0000122000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x5) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x5, &(0x7f00000002c0)=[{0xfffb, 0x4, 0x3, 0x9}, {0x8, 0xc, 0x4, 0x1000}, {0x7ff, 0x85, 0x7, 0xb}, {0x5, 0x5, 0x6, 0xfffffff9}, {0x8, 0x7, 0x2, 0x7}]}) socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0900dd600000c0001400f900000000000000000000ffffac1400aa00fe000001000800001a0000000000044e204e20", @ANYRES32=0x41424344, @ANYRES8, @ANYRES16]) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f0000000240)) ioctl$FIONREAD(r2, 0xc0206983, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{}, 0xfffffffffffffffc, 0x1, 0x80, 0x48, 0x80000000000096}], 0x0, 0x0, 0x0, 0x0) 676.466573ms ago: executing program 2 (id=309): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000040)}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000000180)=""/144, 0x90}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000000380)=""/6, 0x6}, {&(0x7f0000000400)=""/62, 0x3e}, {&(0x7f0000000440)=""/60, 0x3c}], 0x7, 0x40) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/201, 0xc9}], 0x1, 0x0}, 0x1000) sendmmsg(r1, &(0x7f0000000340)={0x0, 0x6}, 0x10, 0x408) 334.243222ms ago: executing program 3 (id=327): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x0, 0x8}, {0x50, 0xf, 0xff, 0x7}, {0x6, 0x80, 0x8}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x1a3, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0xfffffffffffffffc, 0xb}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sysctl$hw(0x0, 0x0, &(0x7f0000000280)="00041b000f3e8095043fa8985d012c000001003d0817c53fcb7c7d40b5bf66108039750000007ab791f608f7b2", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) 333.214927ms ago: executing program 4 (id=328): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) (async) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xd27d43220c7d18f, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000198000/0x3000)=nil, 0x3000, 0x2, 0x3010, r0, 0x100000000000000) (async, rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000180)=ANY=[@ANYBLOB="ff02", @ANYRES32=r0]) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x20, &(0x7f0000000080)="01000000", 0x4) (async) dup2(r2, r1) bind(r1, &(0x7f0000000000), 0x10) (async, rerun: 32) r3 = socket(0x2, 0x2, 0x0) (rerun: 32) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r3, &(0x7f0000000000), 0x10) (async, rerun: 64) write(r3, 0x0, 0x0) (rerun: 64) 318.232424ms ago: executing program 3 (id=329): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x1000000, 0x80, 0x0, 0x1, '\x00', 0x11, 0x1400a}) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='r\x00') ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0xffffff80, 0x7, 0xd7, '\x00', 0x2000003, 0x3}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r1, 0xc290560b, &(0x7f0000000040)={0x3, 0x3, 0xfffe}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 266.829455ms ago: executing program 4 (id=330): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) sysctl$net_inet_icmp(&(0x7f0000000100)={0x4, 0x2, 0x1, 0x3}, 0x4, &(0x7f0000000140)="792b658fd9375a22d25500d2ca7c832fce961ccc3dbff64300eaa9ea705748f4235f9440800f0341343b97ad76364961cba0eb44f5917eb55358576d06cb867d75e000d472892352baafc1b949495c6c2def3cd9b7e8287ddf3c20e1b0fd307506bef3757fd85570a4df75d057da405027d38d3e82f986945cd03b4244f0db12f30947ba625bf79c9e76ee2e44c09264f2d595e424382acaadbaea7fa420ab20ef585b225678187f288e79dde4ac40176cb0c5", &(0x7f0000000200)=0xffffffffffffffc4, &(0x7f0000000240)="0699f5f46d39d2dd7e52b2864a80b5cc4237111d1b5ed7c929dc1c2f325913002d389d43aab9d0aafe31c1fc0a4f53841d4c0ccf81cf343585846884a02f1800a6afee17955a5964261b8a60aed4967b44742300", 0x54) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) r2 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10c) readv(r2, &(0x7f0000001f80)=[{&(0x7f0000000e40)=""/177, 0xb1}, {&(0x7f0000000f40)=""/4096, 0x1000}], 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) r3 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0xc0206917, &(0x7f00000001c0)) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0xe, &(0x7f00000002c0)={@random="05db4cc555f9", @random="bd013cec2aab", [], {@generic={0x4321}}}) setsockopt$sock_int(r4, 0xffff, 0x1001, &(0x7f0000000000)=0xef000, 0x4) sendto(r4, &(0x7f0000000300)="0814883b798a67b633dd655bfa79ba05a408668b60c756793771929bc45ba2e1394d73283f697c37f72fa0c8d04d7759b7647eaeff609a37718d7486c33859d34a2c4bba320cb5d08fc26730cab962b608c632c8cc923deb54e2461942717d99412dc946c342204ba361a3bb877a4446b3ba0c00"/128, 0x4a15fa9c8a077d79, 0x100, 0x0, 0x0) 265.814083ms ago: executing program 3 (id=331): execve(0x0, &(0x7f00000005c0)=[&(0x7f0000000480)='@,*)%$$\xa0@,}\x7f\x00', &(0x7f00000004c0)='tap', &(0x7f0000000500)='r\x00', &(0x7f0000000540)='tap', &(0x7f0000000580)='r\x00'], 0x0) r0 = socket(0x20, 0x2, 0xfd) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffaa7f000001000e009078000b0008000003fc0000000400000009"]) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206919, &(0x7f00000001c0)) r3 = socket(0x2, 0x3, 0x0) r4 = socket(0x2, 0x2, 0x0) r5 = socket(0x6, 0x400000000002, 0x0) r6 = dup2(r5, r4) recvmsg(r6, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0xc}, 0x3, 0x1001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r7, &(0x7f0000000080)={0x0}, 0x6a, 0x0) close(r7) unveil(0x0, &(0x7f00000000c0)='r\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r8 = socket(0x18, 0x2, 0x0) r9 = fcntl$getown(r3, 0x5) fcntl$lock(r8, 0x9, &(0x7f0000000000)={0x1, 0x1, 0xf79d, 0x100000000, r9}) r10 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r10, 0xc0106924, &(0x7f0000000200)) r11 = socket(0x18, 0x3, 0x4) setitimer(0x1, &(0x7f0000000140)={{0x8001, 0x10080000000000a}, {0x1ff, 0xfffffffffffffffe}}, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc444443a, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r11, 0x8080691a, &(0x7f0000000100)) 265.383403ms ago: executing program 4 (id=332): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mkdir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) (async, rerun: 32) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) sysctl$net_inet_ip(0x0, 0x0, &(0x7f0000000140)="e33745e84d", 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0xc) ktrace(0x0, 0x5, 0x128, r1) (async) sysctl$vm(&(0x7f0000000080)={0x2, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') (async, rerun: 64) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 263.964344ms ago: executing program 3 (id=333): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r0 = socket$inet(0x2, 0x3, 0x1) (rerun: 32) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea", 0x1) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, 0x0, 0x0) (async, rerun: 32) r1 = socket(0x2, 0x3, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffdf0}], 0x1) (async) r4 = socket(0x2, 0x1, 0x0) getpgid(0xffffffffffffffff) (async) ioctl$VNDIOCSET(r4, 0xc0387200, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0x0}) (async) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000340)="38a7aec1", 0x4}], 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) connect$unix(r1, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x5) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TIOCSETA(r6, 0x0, 0x0) (async, rerun: 64) ioctl$TIOCSETA(r5, 0xcd504406, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "97a2224faf891c15ebb178926cc9795a6b47c1d1"}) (rerun: 64) 176.664953ms ago: executing program 4 (id=334): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x400e, 0x0, 0x50, 0xffffffaf}]}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412e03) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0xb, 0x0, 0x36}) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 169.882078ms ago: executing program 3 (id=335): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0xc0) write(r1, &(0x7f00000002c0)="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", 0xfffffdaf) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x1, 0x0) writev(r2, &(0x7f00000040c0)=[{&(0x7f0000003b00)="cc", 0x1}, {&(0x7f0000003bc0)="1b", 0x1}], 0x2) execve(0x0, 0x0, 0x0) 168.101224ms ago: executing program 1 (id=336): open(&(0x7f0000000000)='./file0\x00', 0x800, 0x162) (async) r0 = kqueue() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) (async) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r2, 0xc0107004, &(0x7f0000000080)=0x7f) connect$unix(r1, 0x0, 0x43) (async) close(r0) kevent(r0, 0x0, 0xe4a, 0x0, 0xa9fa, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) r3 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) (async) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) r4 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc, 0x48e}, 0x3, 0x8000, 0x0, 0x0, 0x5, 0xb000000200004000, 0xe72b, 0x4}) (async) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) truncate(&(0x7f0000000080)='./file0\x00', 0xffff) (async) close(0xffffffffffffffff) (async) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x3, 0x100000000, 0x7}) (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r5, 0xffff, 0x2, &(0x7f0000000b40)=""/167, &(0x7f0000000c00)=0xa7) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) ioctl$TIOCSETA(r6, 0xc4504446, &(0x7f0000000740)={0x8, 0x5, 0x2, 0x4, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x28, 0x4042}) socket(0x800000018, 0x2, 0x0) 163.2786ms ago: executing program 1 (id=337): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) ioctl$TIOCSETA(r0, 0xc444443a, &(0x7f0000000040)={0x6, 0x0, 0x6, 0x422, "6374224ff1c14649ebb1789280c9795a6b47c1d1", 0x3, 0x2}) (async) ioctl$TIOCSETA(r0, 0xc444443a, &(0x7f0000000040)={0x6, 0x0, 0x6, 0x422, "6374224ff1c14649ebb1789280c9795a6b47c1d1", 0x3, 0x2}) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0xe0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x46, 0x39c0, 0x1}, 0xc) (async) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x46, 0x39c0, 0x1}, 0xc) 163.000839ms ago: executing program 3 (id=338): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) kqueue() mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) kqueue() ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x1, 0x297, 0x7a, 0x1, 0x5, 0xd87, 0x8000000c, 0x0, 0x0, 0xaf, 0xffffffffffffffc8}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) close(r2) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "0000c0", 0x14, 0x0, 0xf9, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @rand_addr="00fe000001000800001a000000000004", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x8003, 0x0, 0x7ffe}}}}}}}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) 161.875676ms ago: executing program 4 (id=339): r0 = open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x10000000000001b4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f000020f000/0x1000)=nil, 0x1000, 0x6) getsockname$inet(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) open(&(0x7f0000000240)='.\x00', 0xa40, 0x1a) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000000029, 0xb, 0x0, 0x0) ftruncate(r0, 0x9) 159.857777ms ago: executing program 1 (id=340): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x7, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0xae, 0x200, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x3, 0x6], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x8, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x4, 0x7, 0x80000000, 0x101, "6958f922923d73262afa6ca0e517d3a656cbab31", 0x2}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc0206925, &(0x7f00000001c0)) 2.505691ms ago: executing program 4 (id=341): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r0 = syz_open_pts() close(r0) (async) writev(r0, 0x0, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x3, 0x5, "001a3cfcff000b00000000000000f5ff00", 0x10003, 0xc04}) (async) sysctl$net_inet_carp(0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)="e1", 0x1) (async) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000000300)="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", 0x1a8) (async) writev(r0, &(0x7f0000000580), 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/255, 0xff) (async) execve(0x0, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000000100)='\x00\x00\x00\x00', &(0x7f0000000b00)=0x4, &(0x7f0000000b40)='\b\x00\x00\x00', 0x4) (async) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) pread(r1, &(0x7f0000000040)="3cd15db7c30016", 0x50cc00, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x2, &(0x7f0000000240)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec370", &(0x7f0000000000)=0x1b, 0x0, 0x0) (async) munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) select(0x40, &(0x7f0000000180)={0x9, 0x44809e9d, 0xd599, 0x7ff, 0x2000000000000000, 0x211, 0x80000000004008, 0x7}, 0x0, 0x0, 0x0) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) 1.813882ms ago: executing program 1 (id=342): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x21, 0x189) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0x8}, {}, {0x0, 0x101}, {0x0, 0x200000}, {0x0, 0x3}, {}, {0x3}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x100004}, {0x4}, {0x2, 0xf}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {0x2, 0xd}, {0x2}]}) sysctl$kern(&(0x7f0000000180)={0x1, 0x48}, 0x2, &(0x7f00000001c0)="71f91e3471", &(0x7f0000000100)=0x5, 0x0, 0x0) setsockopt(r0, 0x7, 0x4, &(0x7f00000003c0)="a6843b72acf631c95d944c8de3488d9748e1ee3b7a4716737e5f1988bcde051c76aadb713d12ce72f4970e4929ab65750250c6af80738dae77cb89b1ec9a6c0fa33f6a79ca8ff2faf8673c798d2768dde36be7c6ad757e2a2091e2f0abece7cdfee2ca15ca9e", 0x66) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) setuid(0xee01) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='x\x00') ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xff, 0x10000001, 0x2, 0x5, 0xfffffffffffffffa, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x3, 0xfffffffffffffeff, 0x0, 0x3, 0xa4, 0x7, 0xff], [0xfffffffffffffffc, 0x80000003, 0x59, 0xffffffff, 0x100, 0x7b99, 0x200, 0x3, 0xffffffffffffffff, 0xfffffffffffffffc], [0x100000001, 0xfff, 0x4, 0x5, 0xfffffffffffffffe, 0x11000, 0xfffffffffffffffe], [0xfffffffffffffffe, 0x20000000000, 0x401, 0x100000000, 0xfffffeffffeffffe, 0x100000005], [{0x0, 0x20000007, 0x0, 0x5}, {0xfffc, 0x2, 0x200000c9, 0x2}, {0x0, 0x0, 0xfffffffe, 0xfffffffffffffffd}, {0xfffe, 0x5, 0x6, 0x3e}, {0x6, 0x2, 0x0, 0x80b}, {0x6, 0x2000, 0xe, 0x1ffffffffffffffd}, {0xffff, 0x0, 0x0, 0x7}, {0x3, 0x965, 0x8, 0x1004}], {0x2000, 0x7aae, 0x3ff, 0xb7f}, {0xfffe, 0x0, 0x73e8, 0x1}}}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff5, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = getpid() r2 = getppid() setpgid(r1, r2) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) r3 = kqueue() open$dir(&(0x7f0000000340)='./file0\x00', 0x8, 0x100) kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000280)=ANY=[@ANYBLOB="2bf43505669c00000000000008004508005c00671000012e9078ac1400aae000000144380833e000000200007fffa51701cb000000030000000000001000ac1400bb00000006ac1400bb0000000400000200000000810000000907077f00000005004e204e2300089078"]) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 0s ago: executing program 6 (id=343): setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6284d4599233ea96b1b7d4f136d1472ebced95a9ba8b7e5ef3a68e66ffac83adb4e3511e375e0605ecf99e3dfa6232f1e56b9f", 0x33}, {&(0x7f0000000480)="c26834b12c47efbbf646ace3f4f96573dcbdc4bec11ab30629506ad5dc7144551fd8fa65e50d38b941a87ef97401f9f035545ed11983ddf360f840173e610dfa3d95bad6ed7fa013f4db71503a31945d8df973af28ed74b6c3b741e199e9a8190bd040907fcbc11cb7b69cae9facc71ef0d1c00e2962aa35fd9defd42e29a249b883fc38642d577e5c17b174ec2d3996738fcf7982d169b561040430663407137f345e8d4923ed164f2d8f06247091bc97526da510c266157e2a9223761b34fcf6e1974dae32dc10e54736c21cf6e907c9173138330b485b2c42cdb670fac6383ddf0f322f4173af59231c53037b568653306d832d", 0xf5}, {&(0x7f0000000580)="ce69ca3dd983ff1fd1abc1187ac14ce7d13ddd6f031e6cd30f4fac3e85ba58f3098e726097707d32ce0b8cdd8cb2609341d123e774d89e1c074f77f8f69f68e2199f6a34b9288ebb723a99453f83346977b87c6a04d04e467f8970d530b65b29b5e42f071c716c1fa463dc3bb8d74fd7869d1d80714ed7af7fa2aeaef46ec3e26dd7cbce5c2b99206fba34c69a35eeb4e5989ea39796ea007c115517f1bcde673b66dfba09b23536f9d93ce467", 0xad}, {&(0x7f0000000280)="dd3e8428f73de5a36b3437992fb9f2a6d0d8f355da697aefe8ad547b7703a33be27b824b259a2f774c9482d5a3a2fb4003e0ba08238decb7ff65a621301ce731efba78dde7049481072eeaa3fdc2afd3e11c81d67ade72f23792c395b677a57a4c1cc66bbea192bf2d7bb4107793a771", 0x70}, {&(0x7f00000006c0)="170272f2fb93b67b30b6b8c5ebaca1d599d8286c8f4e2ae46325f6eebe009f415b798ec5c76db0a9e488bbe7adaf6b60674bccc84d60ee7e40d3b7a38d96e6f5fcd6ffb091d37fbb53fed5b805b0b9d98ca0104e673f2ea9a80229591ebe54bf961262f4dbe77342a80bf8be1e51f947da4a7d9cae4af2fc37296617fb5d79897425d598229eab1815537d0fa23996fb84ac93a1221e99475af5f128a1d2e243b48e2c45f9239f93c5e352a708f5fd68fa7a4afb36873a1af98c396ab9ba0d0da5c241ce2c6d2e2bd083d67f0c264b177c241976", 0xd4}, {&(0x7f0000000300)="97de553b65435e32882e4ee2cbcdbfe63d1cd23e365e", 0x16}, {&(0x7f00000007c0)="d4daf634f946670047c237d714e62ab7e1a8982592defe26", 0x18}, {&(0x7f0000000800)="a94f5242706543ed6763e4750021dd7e5b508fc90bca9b05f55608d2281885133bd8f70e9e7167dad0fed853092b292e8b132f669e0893bc82bb86e49285e3ba01a8f544f1dd1684b0cc8a6616f057ff668100bed012a8a6a936ceb9ad31fdc49c06af46112717bc6c82231bbc6e2d453aee0a74fcdb3eb645d6581772833e5cecc51e865bbbff5008e9fa3a2bc0c2e5ede9b321a839cf0aa41c73b04f1e67519945535904b99b9b27f6484a1d7b88a8b3", 0xb1}], 0x8) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async) syz_open_pts() (async) close(r0) (async) syz_open_pts() (async) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) (async) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000240)="6284d4599233ea96b1b7d4f136d1472ebced95a9ba8b7e5ef3a68e66ffac83adb4e3511e375e0605ecf99e3dfa6232f1e56b9f", 0x33}, {&(0x7f0000000480)="c26834b12c47efbbf646ace3f4f96573dcbdc4bec11ab30629506ad5dc7144551fd8fa65e50d38b941a87ef97401f9f035545ed11983ddf360f840173e610dfa3d95bad6ed7fa013f4db71503a31945d8df973af28ed74b6c3b741e199e9a8190bd040907fcbc11cb7b69cae9facc71ef0d1c00e2962aa35fd9defd42e29a249b883fc38642d577e5c17b174ec2d3996738fcf7982d169b561040430663407137f345e8d4923ed164f2d8f06247091bc97526da510c266157e2a9223761b34fcf6e1974dae32dc10e54736c21cf6e907c9173138330b485b2c42cdb670fac6383ddf0f322f4173af59231c53037b568653306d832d", 0xf5}, {&(0x7f0000000580)="ce69ca3dd983ff1fd1abc1187ac14ce7d13ddd6f031e6cd30f4fac3e85ba58f3098e726097707d32ce0b8cdd8cb2609341d123e774d89e1c074f77f8f69f68e2199f6a34b9288ebb723a99453f83346977b87c6a04d04e467f8970d530b65b29b5e42f071c716c1fa463dc3bb8d74fd7869d1d80714ed7af7fa2aeaef46ec3e26dd7cbce5c2b99206fba34c69a35eeb4e5989ea39796ea007c115517f1bcde673b66dfba09b23536f9d93ce467", 0xad}, {&(0x7f0000000280)="dd3e8428f73de5a36b3437992fb9f2a6d0d8f355da697aefe8ad547b7703a33be27b824b259a2f774c9482d5a3a2fb4003e0ba08238decb7ff65a621301ce731efba78dde7049481072eeaa3fdc2afd3e11c81d67ade72f23792c395b677a57a4c1cc66bbea192bf2d7bb4107793a771", 0x70}, {&(0x7f00000006c0)="170272f2fb93b67b30b6b8c5ebaca1d599d8286c8f4e2ae46325f6eebe009f415b798ec5c76db0a9e488bbe7adaf6b60674bccc84d60ee7e40d3b7a38d96e6f5fcd6ffb091d37fbb53fed5b805b0b9d98ca0104e673f2ea9a80229591ebe54bf961262f4dbe77342a80bf8be1e51f947da4a7d9cae4af2fc37296617fb5d79897425d598229eab1815537d0fa23996fb84ac93a1221e99475af5f128a1d2e243b48e2c45f9239f93c5e352a708f5fd68fa7a4afb36873a1af98c396ab9ba0d0da5c241ce2c6d2e2bd083d67f0c264b177c241976", 0xd4}, {&(0x7f0000000300)="97de553b65435e32882e4ee2cbcdbfe63d1cd23e365e", 0x16}, {&(0x7f00000007c0)="d4daf634f946670047c237d714e62ab7e1a8982592defe26", 0x18}, {&(0x7f0000000800)="a94f5242706543ed6763e4750021dd7e5b508fc90bca9b05f55608d2281885133bd8f70e9e7167dad0fed853092b292e8b132f669e0893bc82bb86e49285e3ba01a8f544f1dd1684b0cc8a6616f057ff668100bed012a8a6a936ceb9ad31fdc49c06af46112717bc6c82231bbc6e2d453aee0a74fcdb3eb645d6581772833e5cecc51e865bbbff5008e9fa3a2bc0c2e5ede9b321a839cf0aa41c73b04f1e67519945535904b99b9b27f6484a1d7b88a8b3", 0xb1}], 0x8) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. Ì`Ó×load: 1.38 not a controlling terminal OpenBSD/amd64 (ci-openbsd-multicore-8.us-central1-b.c.syzkaller.internal) (tty00) login: denied attempt to set clock forward to 52172937113390 denied attempt to set clock forward to 52172937113390 pckbd_enable: command error panic: uvm_fault_unwire_locked: address not in map Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 9810 15044 0 0 0x4000000 0K syz-executor 163574 4848 0 0x14000 0x200 1 reaper db_enter() at db_enter+0x25 panic(ffffffff833e5d61) at panic+0x1e5 uvm_fault_unwire_locked(fffffd80730639b0,200000170000,200000175000) at uvm_fault_unwire_locked+0x4ee uvm_fault_wire(fffffd80730639b0,200000170000,200000181000,3) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80003c410fb8,200000170040,10000,3,ffff80002a325f58) at uvm_vslock_device+0x112 physio(ffffffff81e0ec10,d02,8000,ffffffff81e0f460,ffff80002a326238) at physio+0x257 spec_read(ffff80002a326090) at spec_read+0x14b VOP_READ(fffffd806be217a8,ffff80002a326238,0,fffffd80097fb3a8) at VOP_READ+0x101 vn_read(fffffd806bd60088,ffff80002a326238,1) at vn_read+0x17b dofilereadv(ffff80003c410fb8,3,ffff80002a326238,1,ffff80002a3262f0) at dofilereadv+0x25a sys_pread(ffff80003c410fb8,ffff80002a3263a0,ffff80002a3262f0) at sys_pread+0xae syscall(ffff80002a3263a0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76db4f21a20, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault_unwire_locked: address not in map ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff833e5d61) at panic+0x1e5 uvm_fault_unwire_locked(fffffd80730639b0,200000170000,200000175000) at uvm_fault_unwire_locked+0x4ee uvm_fault_wire(fffffd80730639b0,200000170000,200000181000,3) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80003c410fb8,200000170040,10000,3,ffff80002a325f58) at uvm_vslock_device+0x112 physio(ffffffff81e0ec10,d02,8000,ffffffff81e0f460,ffff80002a326238) at physio+0x257 spec_read(ffff80002a326090) at spec_read+0x14b VOP_READ(fffffd806be217a8,ffff80002a326238,0,fffffd80097fb3a8) at VOP_READ+0x101 vn_read(fffffd806bd60088,ffff80002a326238,1) at vn_read+0x17b dofilereadv(ffff80003c410fb8,3,ffff80002a326238,1,ffff80002a3262f0) at dofilereadv+0x25a sys_pread(ffff80003c410fb8,ffff80002a3263a0,ffff80002a3262f0) at sys_pread+0xae syscall(ffff80002a3263a0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76db4f21a20, count: -13 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a325ca0 rbx 0xffffffff8387cddf cpu_info_full_primary+0x2ddf rdx 0 rcx 0xffff80003c410fb8 rax 0xffffffff8387bff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x380cc3ccc43355cd r11 0xd7d2ef27692f1e56 r12 0xffffffff8387cbe0 cpu_info_full_primary+0x2be0 r13 0 r14 0 r15 0x1 rip 0xffffffff82e3cc45 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a325c90 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=9810 pid=15044 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=36, usrpri=50, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c411a18,0xffff80003c410d30 process=0xffff8000fffec9b8 user=0xffff80002a321000, vmspace=0xfffffd80730639b0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 85880 456485 25309 0 2 0 syz-executor 85880 387271 25309 0 2 0x4000000 syz-executor 52699 255767 67896 0 2 0 syz-executor 52699 226918 67896 0 3 0x4000080 fifow syz-executor 15044 171908 94437 0 2 0 syz-executor *15044 9810 94437 0 7 0x4000000 syz-executor 15044 126395 94437 0 2 0x4000000 syz-executor 15044 22932 94437 0 3 0x4000000 inode syz-executor 13730 414747 85365 0 3 0x80 nanoslp syz-executor 13730 384795 85365 0 3 0x4000080 sbwait syz-executor 13730 123540 85365 0 3 0x4000080 fsleep syz-executor 85365 462792 34402 0 3 0x82 nanoslp syz-executor 73300 194856 0 0 3 0x14200 acct acct 52043 67539 1 0 3 0x100083 ttyin getty 92169 226371 34402 0 3 0x82 nanoslp syz-executor 58201 417980 34402 0 3 0x82 nanoslp syz-executor 77726 329080 34402 0 3 0x82 nanoslp syz-executor 94437 35952 34402 0 3 0x82 nanoslp syz-executor 25309 12796 34402 0 3 0x82 nanoslp syz-executor 67896 46519 34402 0 3 0x82 nanoslp syz-executor 58997 113546 34402 0 3 0x82 wait syz-executor 34402 485446 56772 0 3 0x82 kqread syz-executor 56772 488479 79387 0 3 0x10008a sigsusp ksh 79387 495278 87554 0 3 0x98 kqread sshd-session 87554 230175 40486 0 3 0x92 kqread sshd-session 40486 68234 1 0 3 0x88 kqread sshd 4442 101064 34188 74 3 0x1100092 bpf pflogd 34188 152692 1 0 3 0x80 sbwait pflogd 61659 442359 55681 73 2 0x1100010 syslogd 55681 386928 1 0 3 0x100082 sbwait syslogd 25821 444001 1 0 3 0x100080 kqread resolvd 98506 419237 783 77 3 0x100092 kqread dhcpleased 12429 172779 783 77 3 0x100092 kqread dhcpleased 783 66618 1 0 3 0x80 kqread dhcpleased 75830 66105 0 0 3 0x14200 bored smr 99706 282607 0 0 2 0x14200 zerothread 12236 417415 0 0 3 0x14200 aiodoned aiodoned 39623 364514 0 0 3 0x14200 syncer update 23170 276946 0 0 3 0x14200 cleaner cleaner 4848 163574 0 0 7 0x14200 reaper 32286 332789 0 0 3 0x14200 pgdaemon pagedaemon 65503 359971 0 0 3 0x14200 bored viomb 51457 25834 0 0 3 0x40014200 acpi0 acpi0 91993 66071 0 0 3 0x40014200 idle1 54604 131702 0 0 3 0x14200 bored softnet1 19955 181554 0 0 3 0x14200 bored softnet0 29931 341840 0 0 3 0x14200 bored systqmp 34603 322702 0 0 3 0x14200 bored systq 73366 407327 0 0 3 0x14200 tmoslp softclockmp 488 96859 0 0 3 0x40014200 tmoslp softclock 59536 306350 0 0 3 0x40014200 idle0 1 192056 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks Process 15044 (syz-executor) thread 0xffff80003c410fb8 (9810) shared rwlock vmmaplk r = 0 (0xfffffd8073063ab0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_wire+0x116 #3 uvm_vslock_device+0x112 #4 physio+0x257 #5 spec_read+0x14b #6 VOP_READ+0x101 #7 vn_read+0x17b #8 dofilereadv+0x25a #9 sys_pread+0xae #10 syscall+0xbd4 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839be788) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 rw_do_enter_read+0x309 #4 uvmfault_lookup+0x122 #5 uvm_fault_check+0x4f #6 uvm_fault+0x106 #7 uvm_fault_wire+0x73 #8 uvm_vslock_device+0x112 #9 physio+0x257 #10 spec_read+0x14b #11 VOP_READ+0x101 #12 vn_read+0x17b #13 dofilereadv+0x25a #14 sys_pread+0xae #15 syscall+0xbd4 #16 Xsyscall+0x128 Process 15044 (syz-executor) thread 0xffff80003c410d20 (126395) exclusive rrwlock inode r = 0 (0xfffffd806c0b57d0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_makeinode+0xcd #8 ufs_mknod+0x5b #9 VOP_MKNOD+0x101 #10 domknodat+0x469 #11 syscall+0xb17 #12 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd8071f96c88) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domknodat+0xb4 #8 syscall+0xb17 #9 Xsyscall+0x128 Process 4848 (reaper) thread 0xffff8000ffffdc90 (163574) exclusive rwlock kmmaplk r = 0 (0xffffffff8395f480) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvm_unmap+0x7d #4 km_free+0x87 #5 uvm_uarea_free+0x4f #6 reaper+0x1ca #7 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10193 11023K 11304K 166960K 12069 0 pcb 17 14K 15K 166960K 121 0 rtable 210 8K 8K 166960K 453 0 pf 36 18K 21K 166960K 85 0 ifaddr 41 7K 7K 166960K 71 0 ifgroup 51 2K 2K 166960K 95 0 sysctl 4 1K 9K 166960K 9 0 counters 66 36K 37K 166960K 104 0 ioctlops 0 0K 4K 166960K 1557 0 iov 0 0K 16K 166960K 23 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1469 92K 93K 166960K 1802 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 9 0K 0K 166960K 11 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 110K 166960K 497 0 sigio 0 0K 0K 166960K 9 0 proc 72 115K 196K 166960K 614 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 38 0 in_multi 94 6K 7K 166960K 135 0 ether_multi 1 0K 0K 166960K 4 0 mrt 1 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 428 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 247 163K 176K 166960K 6165 0 UVM aobj 11 4K 4K 166960K 12 0 pinsyscall 42 84K 101K 166960K 1644 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 18 0 NDP 11 0K 2K 166960K 43 0 temp 47 8652K 8716K 166960K 19135 0 kqueue 14 22K 26K 166960K 85 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 64 0 61 1 0 1 1 0 8 0 rtentry 176 133 0 45 5 0 5 5 0 8 0 unpcb 144 450 0 429 6 0 6 6 0 8 5 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 736 187 0 183 7 3 4 7 0 8 3 arp 136 22 0 5 1 0 1 1 0 8 0 inpcb 328 643 0 636 9 2 7 9 0 8 6 nd6 152 28 0 6 1 0 1 1 0 8 0 pkpcb 40 4 0 4 1 0 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 0 1 1 0 8 1 ppxss 1192 13 0 13 1 0 1 1 0 8 1 pppxif 1504 1 0 1 1 1 0 1 0 8 0 pffrag 232 3 0 0 1 0 1 1 0 482 0 pffrnode 88 2 0 0 1 0 1 1 0 8 0 pffrent 40 4 0 1 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 45 0 0 1 0 1 1 0 8 0 pfstkey 128 45 0 0 2 0 2 2 0 8 0 pfstate 384 42 0 0 5 0 5 5 0 8 0 pfrule 1344 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 605 0 198 29 2 27 29 0 8 1 art_table 40 607 0 198 5 0 5 5 0 8 0 art_node 32 133 0 54 1 0 1 1 0 8 0 sysvmsgpl 40 7 0 4 1 0 1 1 0 8 0 semapl 112 9 0 2 1 0 1 1 0 8 0 shmpl 112 8 0 1 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 2216 0 707 95 0 95 95 0 8 0 ffsino 296 2216 0 707 117 0 117 117 0 8 0 nchpl 144 2893 0 1188 64 0 64 64 0 8 0 rtmask 32 2 0 2 1 1 0 1 0 8 0 vnodes 216 2620 0 0 146 0 146 146 0 8 0 namei 1024 9632 0 9630 1 0 1 1 0 8 0 percpumem 16 67 0 19 1 0 1 1 0 8 0 vcpupl 3968 1 0 0 1 0 1 1 0 8 0 vmpool 840 1 0 0 1 0 1 1 0 8 0 kstatmem 264 52 0 28 3 0 3 3 0 8 1 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 9532 0 9532 9 3 6 8 1 8 6 plimitpl 152 75 0 55 1 0 1 1 0 8 0 sigapl 424 799 0 750 7 1 6 7 0 8 0 knotepl 120 539 0 0 17 0 17 17 0 8 0 kqueuepl 224 123 0 113 1 0 1 1 0 8 0 pipepl 344 171 0 144 6 0 6 6 0 8 3 fdescpl 528 781 0 750 3 0 3 3 0 8 0 filepl 160 4663 0 4443 21 3 18 21 0 8 7 lockfpl 104 237 0 235 2 0 2 2 0 8 1 lockfspl 48 104 0 102 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 37 0 20 1 0 1 1 0 8 0 ucredpl 104 400 0 386 1 0 1 1 0 8 0 zombiepl 144 754 0 750 1 0 1 1 0 8 0 processpl 1232 799 0 750 5 1 4 5 0 8 0 procpl 664 1377 0 1321 6 0 6 6 0 8 0 sosppl 176 2 0 2 1 0 1 1 0 8 1 sockpl 752 1170 0 1139 19 8 11 17 0 8 7 mcl64k 65536 7 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 115 0 0 15 0 15 15 0 8 0 mcl2k 2048 25 0 0 4 0 4 4 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 152 0 0 10 0 10 10 0 8 0 bufpl 280 3119 0 130 214 0 214 214 0 8 0 anonpl 32 5497 0 0 46 1 45 45 0 246 0 amapchunkpl 152 19318 0 18817 31 0 31 31 0 158 7 amappl16 200 1685 0 1655 5 2 3 4 0 8 0 amappl15 192 30 0 30 1 1 0 1 0 8 0 amappl14 184 3 0 3 1 1 0 1 0 8 0 amappl13 176 432 0 431 1 0 1 1 0 8 0 amappl12 168 1148 0 1106 3 0 3 3 0 8 0 amappl11 160 18 0 18 2 2 0 1 0 8 0 amappl10 152 50 0 36 1 0 1 1 0 8 0 amappl9 144 255 0 255 1 1 0 1 0 8 0 amappl8 136 26 0 24 1 0 1 1 0 8 0 amappl7 128 84 0 83 1 0 1 1 0 8 0 amappl6 120 286 0 273 1 0 1 1 0 8 0 amappl5 112 81 0 70 1 0 1 1 0 8 0 amappl4 104 420 0 392 1 0 1 1 0 8 0 amappl3 96 3286 0 3193 4 1 3 3 0 8 0 amappl2 88 886 0 811 2 0 2 2 0 8 0 amappl1 80 10554 0 9964 14 1 13 14 0 8 0 amappl 88 5360 0 5192 5 0 5 5 0 92 0 uvmvnodes 80 111 0 0 3 0 3 3 0 8 0 dma65536 65536 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 11 0 1 1 0 1 1 0 8 0 uaddrrnd 24 781 0 750 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 781 0 750 1 0 1 1 0 8 0 vmmpekpl 168 7982 0 7936 3 0 3 3 0 8 0 vmmpepl 168 55047 0 53128 88 0 88 88 0 357 1 vmsppl 488 780 0 750 6 1 5 5 0 8 0 rwobjpl 80 16875 0 15831 23 0 23 23 0 8 0 pdppl 4096 1571 0 1501 98 24 74 83 0 8 4 pvpl 32 12732 0 0 103 0 103 103 0 265 0 pmappl 256 781 0 750 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 275 0 32 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff833e5d61) at panic+0x1e5 uvm_fault_unwire_locked(fffffd80730639b0,200000170000,200000175000) at uvm_fault_unwire_locked+0x4ee uvm_fault_wire(fffffd80730639b0,200000170000,200000181000,3) at uvm_fault_wire+0x12d uvm_vslock_device(ffff80003c410fb8,200000170040,10000,3,ffff80002a325f58) at uvm_vslock_device+0x112 physio(ffffffff81e0ec10,d02,8000,ffffffff81e0f460,ffff80002a326238) at physio+0x257 spec_read(ffff80002a326090) at spec_read+0x14b VOP_READ(fffffd806be217a8,ffff80002a326238,0,fffffd80097fb3a8) at VOP_READ+0x101 vn_read(fffffd806bd60088,ffff80002a326238,1) at vn_read+0x17b dofilereadv(ffff80003c410fb8,3,ffff80002a326238,1,ffff80002a3262f0) at dofilereadv+0x25a sys_pread(ffff80003c410fb8,ffff80002a3263a0,ffff80002a3262f0) at sys_pread+0xae syscall(ffff80002a3263a0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76db4f21a20, count: -13 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839be580) at __mp_lock+0x192 reaper(ffff8000ffffdc90) at reaper+0x211 end trace frame: 0x0, count: 10 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839be580) at __mp_lock+0x192 reaper(ffff8000ffffdc90) at reaper+0x211 end trace frame: 0x0, count: -5