last executing test programs: 4.541150039s ago: executing program 3 (id=878): sysctl$kern(&(0x7f0000000300)={0x1, 0x28}, 0x2, &(0x7f0000003a80)="ecf971a17c5ac5dbca0b1a45b6a608c7cb03450b5e0a784ed2ff4911875f771363c0b532d71e886fe98d1edb25086243", &(0x7f0000003b80)=0x30, 0x0, 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, ""/47}, &(0x7f0000000040)=0x31) r1 = getpid() ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x1510, r1) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc) r4 = getegid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f00000002c0)=[{&(0x7f0000000580)="5e58cc6e4402bd7575fc459741b8dfc1a93eec101c9fa4e7c2ae6609ac97f8a1346ef57935c2dd82138dcf5a357819b908a76efd45928f1640fb4c7716b4b806b22ff1cd9fb1cb22472519f8ece3f1d86b05d116c8deec2674b304e94a89c9e7781d022b61ed59776bd222e398c829c6df7c7083a1a8ae5aeaea221bd9f31fe585dd5736bbdf6934a94e8a6f6d03531f32cc76db9eaaa3951be459f1bf0aa1f03a09c70a051ff65d71924062f8d139b929826975322ec8f62a03d996", 0xbc}, {&(0x7f0000000180)="103c886bf5367c354c520ffee640dcf44d4f07919a835f3e57e3df81df7b337a202601098dc224924dee0b4ace80f5eb47d06aec5a6b0ebb6c7b55b3811060c7094422fc70f587d6a2f2a011e277391579d3a4aab36a12e8e2c31a0571d346e38c007dfb7232438c4d4c70d4c21d7c134bdf1d72bc4056e01d05927995ced3f8c5575d042847ea59d3c049c74371d1f6bba072a42dc4bec850fd929078ecb185b720ae03b2f9375839a261a433bcd3006261c3b6d4ac6a4b9e5164484fe1400b195ad0f72765bf434003c8d63ee3", 0xce}, {&(0x7f0000000340)="cdb15f1c5f1c63db5a725669031f874ac8237c2925367b4ca3bad0eecb9338b1848de8ab76ceee19815646e526cd8993ceff94d9421c5909b4e14924c15d6eb2561b04a82e63e89089d78697258f9ba7bf6f0f9c3e18932ec8ddd86a4cf0a0340e617034d596d174377ce1882c7a740df4487516525a3026c31a090d673cdd346a7def5ce656d3ff5d634ce5518ba9e396ae95799e3151828c8a826348", 0x9d}, {&(0x7f0000000280)="2bd24a5e92efc3f4ce98de90b404", 0xe}], 0x4, &(0x7f0000000540)=[@cred={0x20, 0xffff, 0x0, r1, r2, r4}, @cred={0x20, 0xffff, 0x0, r1, r5, r3}], 0x40, 0x4}, 0x401) 4.535412397s ago: executing program 3 (id=879): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BIOCIMMEDIATE(r0, 0x8010427e, &(0x7f0000000040)=0xffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) write(r1, &(0x7f0000000100)="00000018", 0x4) socket(0x2, 0x1, 0x6) (async) r2 = socket(0x2, 0x1, 0x6) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0x7ff}, {}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x1, 0x6}, {0x3, 0x4}, {0x3}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x2, 0x7}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x7}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1, 0x3}, {0x2, 0xfffffffd}, {0x1, 0x4000}, {0x3, 0x8001}, {0x0, 0x40}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f00000000c0), &(0x7f0000000100)=0x4) syz_emit_ethernet(0x4a, &(0x7f0000000a00)={@local, @local, [], {@ipv6={0x86dd, {0x4, 0x6, "d83587", 0x14, 0x31, 0xd, @empty, @rand_addr="52e749a5118d42a33c436fba2030dc17", {[], @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0xde0, 0x0, 0x6}}}}}}}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000a00)={@local, @local, [], {@ipv6={0x86dd, {0x4, 0x6, "d83587", 0x14, 0x31, 0xd, @empty, @rand_addr="52e749a5118d42a33c436fba2030dc17", {[], @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0xde0, 0x0, 0x6}}}}}}}) 4.002901906s ago: executing program 3 (id=901): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0xa4, 0x9e, 0x5e}, {0xac, 0x85, 0x3, 0x209}, {0x26, 0x7, 0x3, 0xfffffff2}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) (async) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() r3 = dup2(r1, r2) (async) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x4) (async, rerun: 64) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x28d) (async, rerun: 64) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) (async) r4 = syz_open_pts() close(r4) (async) syz_open_pts() (async) ioctl$FIOASYNC(r4, 0x80047469, &(0x7f00000000c0)=0x40000009) (async) recvmsg(r3, &(0x7f0000000580)={&(0x7f0000000240)=@in6, 0xc, &(0x7f0000000340)=[{&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000480)=""/144, 0x90}], 0x2, &(0x7f0000000540)=""/51, 0x33}, 0x1003) (async, rerun: 64) fchflags(r0, 0x10000) (async, rerun: 64) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100)="812d08f756f417375aae387346ecff010000002f4247fac130c406912818f91356c6ed6cfb3516edeb27f30945326f0a986f36ab93c4540045a5419a8ddc08d141c7f3fc0853a243aebb619fd342d847759f8041a007b7d0dc563fe334247f70774b3c7e62b42b25907396a92a313c97ac57fc0cb1b1d687cf44428a8f636f1764dd7b7bde273b5c8a394353a578edb5722a870bb38c41f0b9349ad472fe0771668eff6693b859339a7d253e3e2498ef12fadd3b6fe94731d3c8cea85e843a5336851a94a3f1323d9ed2e176dd1f172bf6ac7564a7f17afdb3e7d60b800659c83e59ea008a24a2c1329877957255187282e42ee8ce9af589e4348a", 0xfb}, {&(0x7f0000000000)="b3d610b126986ca6dc356211e5e2401aabb18cf93762191105a5899fec6da3599fb3a33d4b305d1b53e397eebae1280bc2083fc9e0", 0x35}], 0x2) (async) syz_emit_ethernet(0x1022, &(0x7f0000000240)=ANY=[]) 3.997263672s ago: executing program 3 (id=903): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x2040, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfe) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd6, 0x8, 0x7, 0x17ffe, 0x10, [{0x0, 0xb1, 0x4, 0xa24}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f05, 0x200, 0x9}, {0x7ffffffe, 0x800, 0xba2, 0x1}, {0x3fe, 0x20007ff, 0x1002802, 0x4d8a}, {0x3, 0x101, 0x3, 0xb4}, {0x8000008, 0xd16f, 0x81e8, 0xa}, {0x4, 0x836, 0x17, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x1000002, 0x90, 0xd1b, 0x88}, {0x1c5, 0x5, 0x4, 0x41ac8391}, {0x100003, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x7, 0x8, 0x2}, {0x69a71720, 0xffffdffa, 0xfffffffe, 0x6}, {0x2, 0x7, 0xfffffff9, 0x100}, {0xfffffffe, 0x8, 0x40004, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r1, 0x0, 0x0) shutdown(r1, 0x2) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) close(r0) syz_emit_ethernet(0x2e, &(0x7f0000000400)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x1, 0x17, 0x20, 0x66, 0x5800, 0x3, 0x72, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0xc, 0x6, 0x5eb22c3e39e1d3b7, 0x9, [{[@loopback], 0x80}]}]}}}}}}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x0, 0x0}) r3 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1021, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$VMM_IOC_RESETCPU(r4, 0x82405605, &(0x7f0000000100)={0x2, 0x0, {[0x10, 0x1, 0x2, 0x1, 0xfffffffffffffffe, 0xffffffffffffffff, 0xdf5a, 0x4, 0x6, 0x2, 0x7fff, 0x3, 0x7ff, 0xfeffffffffffffdf, 0x7fffffe, 0x9, 0x2, 0x100], [0xffdffffffffffffe, 0x1, 0xfffffffffffffffb, 0x20, 0x0, 0x7b99, 0x2, 0xb, 0x1], [0xffffffff, 0x0, 0x40000000, 0x3, 0xfffffffffffffffc, 0x11003, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x401, 0x100000003, 0xffffffffffefffff, 0xa], [{0x2, 0x5, 0x0, 0x7d06}, {0xfffc, 0xb, 0x4, 0x100000002}, {0x10, 0x1, 0x5bea, 0x818}, {0x3, 0x5, 0x7, 0x7fffffff}, {0xc, 0x6, 0x0, 0x808}, {0x400a, 0x2003, 0x40000, 0x7}, {0x2, 0x1fffe, 0x4, 0x9}, {0x5d74, 0x2, 0x351, 0x4}], {0x2000, 0x0, 0x10000, 0x4}, {0x0, 0x1, 0x3, 0x6}}}) connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) r5 = syz_open_pts() poll(0x0, 0x0, 0x0) ioctl$TIOCGWINSZ(r5, 0x40087468, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x17) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r6, 0x0) 2.298649162s ago: executing program 3 (id=936): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mquery(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x3) fchdir(r0) ftruncate(r0, 0xfd0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x19c) recvfrom$unix(r1, &(0x7f0000000080)=""/10, 0xa, 0x40, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) getsockopt$sock_int(r1, 0xffff, 0x80, &(0x7f0000000100), &(0x7f0000000140)=0x4) mmap(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x4, 0x1011, r1, 0x101) fcntl$setstatus(r0, 0x4, 0x8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) ioctl$FIONBIO(0xffffffffffffff9c, 0x8004667e, &(0x7f0000000240)=0xea5) getsockopt(0xffffffffffffff9c, 0x4, 0xaed, &(0x7f0000000280)=""/9, &(0x7f00000002c0)=0x9) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000300)={0x101, 0x9, 0x216, 0x8, "90018f07eb15b39c02d90b301e4478962e0fdb75", 0x2, 0x95bc}) r3 = semget(0x0, 0x2, 0xaa) semctl$SETVAL(r3, 0x1, 0x8, &(0x7f0000000340)=0x2) r4 = semget(0x0, 0x1, 0x281) semctl$GETZCNT(r4, 0x0, 0x7, &(0x7f0000000380)=""/254) semctl$GETPID(r3, 0x4, 0x4, &(0x7f0000000480)=""/159) dup2(r2, r0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000540)) semop(r4, &(0x7f0000000580)=[{0x1, 0xe}, {0x0, 0x2}, {0x3, 0x1, 0x1000}, {0x0, 0x2, 0x800}], 0x4) r5 = accept$inet6(r1, &(0x7f00000005c0), &(0x7f0000000600)=0xc) getpeername$inet6(r5, &(0x7f0000000640), &(0x7f0000000680)=0xc) fcntl$lock(r0, 0x0, &(0x7f00000006c0)={0x2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)) r6 = openat$vnd(0xffffffffffffff9c, &(0x7f00000007c0), 0x800, 0x0) ioctl$VNDIOCSET(r6, 0xc0384600, &(0x7f0000000880)={&(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)='./file0\x00', 0x8}) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000008c0)="9de4d897bd7f400178edae6cfa8d344f75be70b746c5a5ad992ef8f680c5dc289e073d8c9dcfe76801f649df4b7c46fc9e21e2019fdcd4ff752f5c68c7440f9b128526f33fcebad80860ffda263932afde82dec974eebb905eb9743ce5011ef3b735f627be129576e398ea5af5817ba91a755ba0ebcd0ce6c7ce8eb0cff95522c4aadd767d0c076c03ec9939f2b96ba37f31a99c83f5c996b90cbb6100a2a94e74a3c9fe1737acbb40621a4789369f9a7f183c601fdde966f063f709f1a17629ed98fc4df898bf31cd333d8da20622095097445f5cb860e1be296a90b4932c3bb3b9", 0xe2) 2.2933673s ago: executing program 3 (id=938): socketpair(0x2, 0x3, 0x81, 0x0) r0 = syz_open_pts() symlink(&(0x7f0000000900)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000740)='.\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$TIOCSTAT(r0, 0x20007465, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) open(&(0x7f00000002c0)='./file0\x00', 0x710, 0xb4) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000100)='./file0\x00', 0x10005, 0x0}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x5) execve(0x0, 0x0, 0x0) 1.915656553s ago: executing program 0 (id=950): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="fe6368ef46735c458754a6780c84d1def5f83533f98bb347783a71f974fb06657c15d65b33ad067271ba7b1da12bf214cc8c3947f37b4946ec497078b815af8143baa972505676a42342b898c0753c5871b8d36b28804e80815630b16c86ade23bd6fa3c5dc91f4811469e75ececa5886d0f13158eecfe012f89b7356fa2b3bb0707498ebb952ba434a7f8401738a7b4c076052dfb4b05da6d001c1f606dce964bcacf15e6734b452d9ba18063bfc2c1df3657fe30eb50f1990a45bc913c6f607ec3203586fd42bc6adb54143eb9acda173f1445b5a6484d76", 0xd9}, {&(0x7f0000000140)="413a5b447abef382a2a90259f155f4405ad56fae85775e7e0f3c7b120c9f1ba1dcab41d7d0e1dc9ca6e623e611141b5bc3603d1715b2598486d541230a67530748e2d409b9c981c43c7392b0dc48396efb39eb28b132476202a3501bf2b5a41f39e2f064ec1a68151fdbdb23f441a61b3d0525d8f3da81f1d11a", 0x7a}, {&(0x7f00000001c0)="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", 0xfa}], 0x3) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x5, 0x9e, 0x8, 0x100, 0x78, 0x80000001, 0x40, 0x10, [{0x10000000, 0x8, 0xc3, 0x71000}, {0x7b86, 0x8, 0x9, 0xffffffed}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x0, 0x7, 0x80000001, 0x2}, {0x401, 0x2, 0x4, 0x7}, {0x2, 0x6, 0x3, 0x1000}, {0xfffffffa, 0x5, 0x1, 0x14}, {0x6, 0x2009, 0x13, 0xb}, {0x2, 0x4, 0x4, 0x3}, {0x4, 0x28101, 0x81, 0x1ff}, {0x1e1, 0x10001, 0x7ff}, {0xa, 0x29, 0x200001, 0x5}, {0xe, 0xc3b, 0x80000003, 0x404}, {0x29a71719, 0xfffffffa, 0x0, 0x100}, {0xc, 0x7, 0x6}, {0xffffff7d, 0x6, 0x1, 0x2}]}) ioctl$VNDIOCSET(r1, 0x80184404, 0x0) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x5, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r2, 0xc020699e, &(0x7f00000001c0)) r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$PCIOCWRITE(r3, 0xc00c7007, &(0x7f00000005c0)={{}, 0x1, 0x8003, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(0x0, 0x0) r4 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCWRITE(r4, 0xc00c7007, &(0x7f00000000c0)={{0xb0, 0xfc, 0x7}, 0x5, 0x565, 0x2}) symlinkat(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') semget(0x2, 0x0, 0x210) mknod(&(0x7f00000000c0)='./bus\x00', 0x3a0914c44f7b202d, 0x65) r5 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x1) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0) ioctl$TIOCSTAT(r5, 0x20007465, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) write(r0, &(0x7f00000003c0)="09202000000069db0000ff4278ad535c2a4146308c2f39e4e6987f31dbf15624b77b6a0a", 0x24) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 1.715948581s ago: executing program 1 (id=968): r0 = socket(0x2, 0x2, 0x0) close(r0) recvfrom$inet(r0, 0x0, 0x0, 0x840, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x285b9a) r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe1c0000000000000000000000000025fe"]) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f00000d6000/0x4000)=nil, 0x2}, {&(0x7f0000530000/0xd000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f00007d8000/0x4000)=nil}, {0x0, &(0x7f00000fa000/0x2000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {0x0, 0x0, 0x20000040}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00002ec000/0x3000)=nil, 0x1ffffffffffe}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000283000/0x4000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00000ce000/0x1000)=nil, 0x9bbf}, {&(0x7f00003a2000/0x1000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil}], './file0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x400, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5dee, 0x91, 0xfd, 0x802}, {0x6c, 0xf2, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="fe6cf8e4850000dbf6829f7d89a54578fc68418d", 0x14}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="50041b02000180000000000000000000020000000f220000000000009a", &(0x7f0000000000)=0x1d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r4, &(0x7f0000000080)="d81a0f0000006b00000100000000", 0xe) write(r2, &(0x7f0000000000)="ed", 0x1) r5 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r5, 0xffff, 0x4, &(0x7f0000001100), &(0x7f0000000000)=0x4) recvmmsg(r3, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2040, 0x0) dup2(r2, r3) unveil(0x0, &(0x7f0000000780)='r\x00') r6 = openat$pci(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) chroot(&(0x7f0000000080)='./file0\x00') ioctl$PCIOCGETROM(r6, 0xc0107005, &(0x7f0000000080)={{}, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) 1.645634964s ago: executing program 5 (id=971): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r0 = open(&(0x7f0000000280)='./file0\x00', 0x80, 0x3cc) mkdir(0x0, 0x8) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000500)="63f866785db122aa7f0800589f01fe08694851420196fb3416b19b0b220ae6c7137d1a5430069c389ee603243eee6fe26ed88fd23ebb0dc39c9f9848ecccabaf7f3581d61f819831377a2398341fe4c833db88eb792ac05ee01d7c5076ec249f4a841511aa9fe3e4d8347d1362d115f1adb76c66da75139f8e4de3f7ac1e704ce7c1daa6f06c26da1b5938472b", 0x8d}], 0x1) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="12fab2dccb915ffc9784bb7f632ff628c49cdc6a02d0b60314ddef88372f6024546331402ff68db5d553", 0x2a}], 0x1) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) mquery(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, r2, 0x100000001) setrlimit(0x3, &(0x7f0000000000)={0x100000, 0x100000}) write(r0, &(0x7f00000000c0)="32dcf50283909bbe3321892ac3be1e0669f22b424844d555e6c6638f5408902c9889ea750604c5e0172931e66ffc9c7255b33157bc945c1405827b32de173ec4e3", 0x41) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) writev(r2, &(0x7f0000000240), 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCIMMEDIATE(r3, 0x80044270, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfffffdaf) close(r5) close(r4) ioctl$FIONREAD(r0, 0x4004667f, 0x0) 1.642985345s ago: executing program 1 (id=972): socketpair$unix(0x1, 0x699fa8ca37eae8f0, 0x0, &(0x7f0000000b00)) (async) socketpair$unix(0x1, 0x699fa8ca37eae8f0, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="d9e1", 0x2}], 0x1) write(r0, &(0x7f0000000000)="ed", 0x1) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000080)=0x2, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x2000, 0x801) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x2000, 0x801) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10005, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000180)=0x7) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000000c0)=0x7) (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000000c0)=0x7) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000008c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x202) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x202) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000040)='./file0\x00') mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x1) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') preadv(0xffffffffffffff9c, &(0x7f0000000a00)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f00000008c0)=""/150, 0x96}, {&(0x7f0000000980)=""/126, 0x7e}], 0x9, 0x56f3) (async) preadv(0xffffffffffffff9c, &(0x7f0000000a00)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000580)=""/235, 0xeb}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000740)=""/225, 0xe1}, {&(0x7f00000001c0)=""/42, 0x2a}, {&(0x7f0000000840)=""/117, 0x75}, {&(0x7f00000008c0)=""/150, 0x96}, {&(0x7f0000000980)=""/126, 0x7e}], 0x9, 0x56f3) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x6c, 0xf3, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) ioctl$WSKBDIO_GETBACKLIGHT(0xffffffffffffffff, 0x400c5711, &(0x7f0000000100)) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="00231b000f4070632c2dec30c21761035c2532d7a0ea9200001f00385c24fc3be7b6e1a884658496a8347a5a477e20fb", &(0x7f0000000000)=0x30, 0x0, 0x0) (async) sysctl$hw(0x0, 0x0, &(0x7f00000002c0)="00231b000f4070632c2dec30c21761035c2532d7a0ea9200001f00385c24fc3be7b6e1a884658496a8347a5a477e20fb", &(0x7f0000000000)=0x30, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000000b40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaac8f34b0b08004b06004010640003069d9078ffffffffffffffff82111bea53ef0227e7f12afbb14e0746be8a8b98000000000e009078000b0008000003fc0000000400000009"]) rename(&(0x7f0000000440)='./bus\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') chflags(&(0x7f0000000000)='./bus\x00', 0x1) close(r0) 1.607387292s ago: executing program 2 (id=973): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setreuid(0xee00, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x15, 0x2000007, 0x2, 0x80000001, 0xc, 0x10, 0x10, [{0xa, 0x7, 0x4, 0x71000}, {0x7, 0x2, 0x8, 0x7}, {0x9, 0x0, 0x200000, 0x9}, {0x5e9, 0x903, 0x11, 0x80000000}, {0x1, 0x200326, 0x2800, 0x7}, {0x2, 0x27f3, 0x1000, 0x99}, {0xce5, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x81, 0x207}, {0x2, 0x8, 0x5, 0x9}, {0x2007, 0x100, 0xd1f, 0x3}, {0x1e7, 0x10001, 0x8, 0x3b4}, {0x800, 0x9, 0x2008, 0x5}, {0xb92, 0x4, 0x8, 0x2}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x9, 0xfffffffe}, {0x0, 0x1, 0x3b, 0x8001}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socket$inet(0x2, 0x4003, 0x6b) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) open(&(0x7f0000000040)='./file0\x00', 0x28, 0x45) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet(0x2, 0x4, 0x83) getsockopt(r3, 0xffff, 0x2, &(0x7f0000000040)=""/69, &(0x7f00000000c0)=0x45) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x7ebd, 0x0}) read(r0, &(0x7f0000000540)=""/4096, 0x1000) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0, 0xffffff4f}) socket(0x1e, 0x3, 0x0) r4 = getuid() chown(&(0x7f0000000200)='./file0\x00', r4, 0x0) 1.607119829s ago: executing program 1 (id=974): r0 = socket(0x2, 0x1, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000380)={0x0, &(0x7f0000000180)}) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f00000000c0)=0x8001, 0x4) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$unix(r0, &(0x7f0000000280)="c62ee2e6920df45fa27482e216d8bd6dd8ab63af296abf4b1356d5e6798d01be74f5f595e5153426179b1d0ff40bf49dcd13f09945771738485fcb90035af04054bec38931629d7491943a0fe03fe6550ac4a8ab95d5e75ceb07fd208ea14fb1835aadf2e9a8a9daf805c323f829a7ddb78dac083b38c20c326041cf0fa2276fbcaf415537f1c94f951cd5e0ad3b00c942c890cd8dcf4ec45222d24660348a3f36c43952de565eb9d815606ae54a7b175d3564f6eb0e31580e1531305421000899feaeeb9c82ee643ded912e0fef22445bd9fcad09fff6196b9f762ee40e4a26914003a9f72b6aa6c8dbad6a", 0xec, 0x408, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x42876) r2 = semget(0x0, 0x1, 0x281) semop(r2, &(0x7f00000002c0)=[{0x0, 0x7, 0x1800}], 0x1) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, 0x0) semget(0x0, 0x1, 0x281) r3 = semget(0x0, 0x1, 0x281) semop(r3, &(0x7f00000002c0)=[{0x0, 0x7, 0x800}, {0x0, 0xfff9, 0x1000}], 0x2) semop(r3, &(0x7f0000000180)=[{0x0, 0x8, 0x1000}, {0x4, 0x1, 0x1000}], 0x2) writev(0xffffffffffffffff, &(0x7f00000001c0), 0x0) r4 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x0) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f00000000c0)={0x5, 0x3, 0x2, 0x8623, "0100012d131000000000001fb203be00000200"}) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x202) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000040)='./file0\x00') 1.606632885s ago: executing program 2 (id=975): r0 = socket(0x2, 0x3, 0x11) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) setitimer(0x1, &(0x7f0000000100)={{0x49, 0x7}, {0x20000, 0xa}}, &(0x7f0000000080)) syz_emit_ethernet(0x138, &(0x7f0000000180)=ANY=[@ANYRES16=r0]) bind(0xffffffffffffff9c, &(0x7f0000000040)=@in={0x2, 0x1}, 0xc) r1 = socket(0x2, 0x5, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) accept$unix(r1, &(0x7f0000000080)=@abs, &(0x7f00000000c0)=0x8) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x0}, 0x8) r2 = socket$unix(0x1, 0x3, 0x0) fchdir(r2) shmget(0x0, 0x3000, 0x2, &(0x7f000078f000/0x3000)=nil) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x2, 0x812, r1, 0x2) 1.583698297s ago: executing program 2 (id=976): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001400)={0x0, 0xfff}, 0x10, 0x1802, &(0x7f0000001440)={0x6}) bind(r0, &(0x7f0000000080)=@un=@file={0x41a0805bbded0123, './file0\x00'}, 0x4) (async) bind(r0, &(0x7f0000000080)=@un=@file={0x41a0805bbded0123, './file0\x00'}, 0x4) 1.549173008s ago: executing program 2 (id=978): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) chroot(&(0x7f0000000740)='.\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) rmdir(&(0x7f0000000140)='./file0\x00') setuid(0xee01) semctl$GETVAL(0x0, 0x1, 0x5, 0x0) sendmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, 0x8) 1.548018962s ago: executing program 4 (id=979): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5df0, 0x91, 0xdd, 0x802}, {0x6c, 0xf2, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) dup(r0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="fe6c7a4022fa6edbf6829f7d89a54578fc2d2be8dcd4ea47f568418d", 0xffffffffffffff41}, {&(0x7f0000000100)="10370a1d109b3b64aa34f64b3cac51cdd46a8a3156503787f86067cf032fc808fe379650bd20c70fb58896eb0ce98731a1b9e5cbc8a5d2412bb2875665fab0c46d8e670c5de68c3c400d1f951ea556865808d71bae70476bc4758dc81c72e5084363689792180f62662d3b2ec2e6dcdbb6da06c2ebdfc54d90c2d809c5a7495ec8005fc700ce842f7ecd0c3ee07e712a1e57d5b0ee13ae0cbf323ea4f31b3144f673fbcdd6148e4838"}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000002c0)=ANY=[]) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5df0, 0x91, 0xdd, 0x802}, {0x6c, 0xf2, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) (async) dup(r0) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000200)="fe6c7a4022fa6edbf6829f7d89a54578fc2d2be8dcd4ea47f568418d", 0xffffffffffffff41}, {&(0x7f0000000100)="10370a1d109b3b64aa34f64b3cac51cdd46a8a3156503787f86067cf032fc808fe379650bd20c70fb58896eb0ce98731a1b9e5cbc8a5d2412bb2875665fab0c46d8e670c5de68c3c400d1f951ea556865808d71bae70476bc4758dc81c72e5084363689792180f62662d3b2ec2e6dcdbb6da06c2ebdfc54d90c2d809c5a7495ec8005fc700ce842f7ecd0c3ee07e712a1e57d5b0ee13ae0cbf323ea4f31b3144f673fbcdd6148e4838"}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f00000002c0)=ANY=[]) (async) 1.547528418s ago: executing program 6 (id=980): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(0xffffffffffffffff) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETA(r1, 0xc0284457, &(0x7f00000000c0)={0x10000002, 0xfffffffb, 0xfeefffff, 0x2, "080054d1000000010000000100000f1e0400", 0xd50, 0x10000}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x6, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x0, 0x3, 0x71000}, {0x101, 0x8, 0x9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x401, 0x8, 0x27ff, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0x9, 0x16, 0xb}, {0xffffffff, 0x84, 0x4, 0x3}, {0x4, 0x7, 0x93, 0x1ff}, {0x1e0, 0xffff, 0x7ff, 0x7}, {0x9, 0x29, 0x9, 0x5}, {0xb8c, 0x401, 0x80000003}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0xf8f, 0x6}, {0xfffffffd, 0x800bc3d, 0x4, 0x30005}]}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_pts() ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x3, 0x3) connect$unix(r3, &(0x7f0000000000), 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000000000)=""/202, 0xca) close(r0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="820000ec3d1e6ed7eda0f59047bf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493857d65d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) r4 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r4) getpgid(r4) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) ioctl$TIOCSETA(r5, 0xc4504449, &(0x7f0000000740)={0x0, 0x4, 0x2f00, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x7, 0x10}) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000480)={0x2df57366, 0x8, 0x5, 0xfffffff4, "0a6400b72860147bcc0100d49a4184de82e1c800", 0x2, 0x100000c}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x2, 0x7, 0x6, 0x4, "00000bafcfb308828e069be500", 0x5, 0x10007}) 1.535175765s ago: executing program 2 (id=981): unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='x\x00') sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) unveil(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)='W\x00') 1.522396647s ago: executing program 4 (id=982): openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x80, 0x44) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000600), 0x10, 0x0) ioctl$WSKBDIO_SETBELL(r0, 0x80105703, &(0x7f0000000640)) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r1 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) acct(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x20, 0x12) close(r1) r2 = socket$unix(0x1, 0x0, 0x0) sendmsg$unix(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000080)=[{&(0x7f0000000040)="a848a995d6a21315", 0x8}], 0x1, 0x0, 0x0, 0x4}, 0x2) 1.522099249s ago: executing program 6 (id=983): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x107, 0xf88, 0x0, 0x87f}, {0x4, 0x7fe, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) syz_emit_ethernet(0x72, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xf, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}}}}}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0xfffffffffffffffc) (async) setuid(0xee01) r1 = getpgrp() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x60, 0x2}, 0xc, 0x2a2, 0x0, r1, 0x7ff, 0x800000000000013, 0x6, 0x40}) (async) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005030000040005", 0x9, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 373.88851ms ago: executing program 7 (id=984): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1}, 0xc) (async) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3f, 0x1, 0x10, 0x3, 0xfffffff8}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) write(r1, &(0x7f00000002c0)="ed", 0x1) (async) recvmmsg(r2, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x2042, 0x0) (async) read(r2, 0x0, 0x0) (async) sendmsg(0xffffffffffffffff, 0xffffffffffffffff, 0x80b) r3 = socket(0x11, 0x3, 0x0) setsockopt(r3, 0x11, 0x1, 0x0, 0x0) (async) unveil(0x0, &(0x7f0000000300)='W\x00') (async) open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, 0x0) 373.549041ms ago: executing program 2 (id=985): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) kqueue() r0 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) syz_emit_ethernet(0x1b0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)={&(0x7f0000000380)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/270, 0x10e}], 0x1, 0x0}, 0x80002007}, 0x10, 0x40, 0x0) close(r2) r3 = socket$unix(0x1, 0x5, 0x0) execve(0x0, 0x0, 0x0) bind$unix(r3, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0xa) listen(r3, 0x300000) accept$unix(r3, 0x0, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x257bf7, 0xff, 0x4003, 0x0, 0x5, 0x6, 0x4000004, 0x0, 0x0, 0x800000000101, 0x9}) r4 = socket(0x18, 0x3, 0x0) setsockopt(r4, 0x1000000000029, 0xb, &(0x7f0000000040)="f1efff78", 0x4) setsockopt(r4, 0x1000000000029, 0xb, &(0x7f0000000340)="01220000", 0x4) mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) r5 = open(&(0x7f0000000080)='./bus\x00', 0x400, 0x0) readv(r5, &(0x7f0000000240)=[{&(0x7f0000002140)=""/4103, 0x1007}, {&(0x7f0000003180)=""/4103, 0x1007}, {&(0x7f0000000140)=""/223, 0xdf}], 0x3) mkdir(&(0x7f00000003c0)='./file0/file0\x00', 0x2) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) sysctl$vm(&(0x7f0000000040)={0x2, 0x7}, 0x2, &(0x7f0000001240)="08640ca5", &(0x7f0000000000)=0x4, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./file0/file0/..\x00') ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5) sysctl$hw(&(0x7f0000000100)={0x6, 0x5}, 0x2, &(0x7f0000001080)="e19ec996", &(0x7f0000000140)=0x4, &(0x7f0000000200), 0x0) sysctl$kern(&(0x7f0000000280)={0x1, 0x5b}, 0x2, &(0x7f00000002c0)="ac44eb3e", &(0x7f0000000300)=0x4, &(0x7f0000000340)="4d42a57f", 0x4) 373.318322ms ago: executing program 0 (id=986): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) getsockopt(r0, 0x29, 0xb, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x14}, 0x4, 0x0, 0x0, &(0x7f00000014c0)='\x00\x00\x00\x00', 0x4) 372.271472ms ago: executing program 0 (id=987): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) close(r1) fchdir(r1) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000380), 0x8, 0x0) ioctl$WSKBDIO_SETMODE(r2, 0x80045713, &(0x7f00000003c0)=0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000000, [{&(0x7f0000791000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x7}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil, 0xffffffffffffbffc}, {&(0x7f00003f8000/0x2000)=nil, &(0x7f00002b1000/0x2000)=nil, 0x8}, {&(0x7f0000393000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000512000/0x2000)=nil, 0x4}, {&(0x7f000051c000/0x800000)=nil, &(0x7f0000049000/0x3000)=nil, 0x3}, {&(0x7f000055e000/0x4000)=nil, &(0x7f0000676000/0x3000)=nil, 0x1000004}, {&(0x7f00002c5000/0x3000)=nil, &(0x7f00004de000/0x2000)=nil, 0x6}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f000014e000/0x1000)=nil, 0x2}, {&(0x7f000015b000/0x3000)=nil, &(0x7f0000048000/0x1000)=nil}, {&(0x7f0000693000/0x4000)=nil, &(0x7f00004e6000/0x3000)=nil, 0x13}, {&(0x7f00007aa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x3}, {&(0x7f00001ba000/0x2000)=nil, &(0x7f000069b000/0x3000)=nil}, {&(0x7f0000169000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x39f7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x3}], './file1\x00', 0x8}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0xd, 0x51, 0x6, 0x2}, {0xaaa2, 0x2, 0x3, 0x2}]}) ioctl$KDMKTONE(r3, 0x20004b08, &(0x7f0000000340)=0x1) ioctl$WSKBDIO_GETENCODINGS(r0, 0xc0105715, &(0x7f0000000140)) 331.665787ms ago: executing program 7 (id=988): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="ed", 0x1) (async, rerun: 64) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) (rerun: 64) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000680)={&(0x7f0000000000)=[{0x1, 0x1ff}, {0x24, 0x200}], 0x2}) (async) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)=""/173, 0xad}], 0x1, 0x0}, 0xfffffffc}, 0xfffffffffffffed1, 0xc2, 0x0) (async) execve(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) (async, rerun: 32) r4 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x80) (rerun: 32) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="cc60", 0x2}], 0x1) setuid(0xffffffffffffffff) (async) ftruncate(r3, 0x10000) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r5 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) read(r5, &(0x7f0000000480)=""/4096, 0x1000) r6 = socket(0x6, 0x4000, 0x0) setsockopt(r6, 0x1000000029, 0x28, &(0x7f0000000000)="5ab7776a", 0x4) 331.406747ms ago: executing program 4 (id=989): getitimer(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x2042, 0x0) read(r1, 0x0, 0x0) setuid(0xee01) r2 = socket(0x18, 0x2, 0x0) r3 = socket(0x18, 0x2, 0x0) r4 = dup2(r2, r3) setsockopt(r4, 0x1000000029, 0x32, 0x0, 0x0) unveil(0x0, &(0x7f0000000300)='W\x00') 331.227349ms ago: executing program 0 (id=990): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) ioctl$BIOCSRSIG(r1, 0x80044272, &(0x7f0000000100)=0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x2f}, 0x2, &(0x7f0000000180)="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", &(0x7f0000000280)=0xfd, &(0x7f00000002c0)="399b9fe29a2d17b5a2484f26d1bc3fa43c2c4d77be1ea395718edabd1eff7063eae1bdabf211f8cc426732076e73e633a60905cb90146e43e3fd201e29abf351f780dcdcffc9124ef872ac3633f6c32051b5db7cb876ccd29d11e16a1f736980c14bf93347ce92f397ca3ea442d862e923f1d41b7f86553d4135443516b808fc4c111153020350c33fd685963cfa855673ac87cabb0838cc8866925a7122384097f3dee3f3929f32d08a732aef274e45ea3594", 0xb3) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000040)={0x19be, &(0x7f0000000080)=[{}, {}, {}]}) 331.083887ms ago: executing program 0 (id=991): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{0x101, 0xf}, {0x8c, 0x7}, {0x84, 0x1007}], 0x3}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000180)="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", &(0x7f0000000080)=0xaa, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xffffff25) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) write(r0, &(0x7f00000003c0)="e8042000000069db0000ff4278ad535c2a4146308c2f39e4e6987f31dff15624b77b6a0a", 0x24) (async) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) r1 = syz_open_pts() (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0xdcf1ca96fb78e28b, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000200)={0x2, &(0x7f00000000c0)=[{0x5c, 0x6, 0x5c, 0x6}, {0x6, 0x2, 0x2, 0x3}]}) (async) pread(r1, &(0x7f0000000000)="47d49b5611679eb761fe23c581693e7de9d6aded44a455ef203614bd024b418f4a0c5e08b2cb0d9cefe6a04e1413d89e78f2d913d663885812a0b2614986d1723bfa230d00000000000000a8ca5bcb1ab52ba889dbd5ea04facc897e8ee1be4938a357175264", 0x66, 0xd) (async) ioctl$BIOCSRTIMEOUT(r2, 0x8010426d, &(0x7f0000000080)={0x3, 0x700000}) 320.049441ms ago: executing program 7 (id=992): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000004c0)={0x3, &(0x7f00000000c0)=[{}, {0x2, 0x0, 0x0, 0x1}, {0x83, 0x0, 0x0, 0x1}]}) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x1000, 0x205318) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r0, 0x20004109, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 282.688593ms ago: executing program 0 (id=993): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f000000f000/0x3000)=nil) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x100) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$TIOCSTOP(r1, 0x2000746f) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0x4, "070609000013160000050800", 0x0, 0x7f7}) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) ftruncate(0xffffffffffffffff, 0x8531) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_pts() close(r2) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0x0, 0xcf, 0xd, 0x203519, "1bb7e60ab87aa57800000000d0d200000000fd00"}) r4 = socket(0x18, 0x1, 0x0) getsockopt$sock_int(r1, 0xffff, 0x4, &(0x7f0000000680), &(0x7f00000000c0)=0x4) ioctl$FIOASYNC(r4, 0x8004667d, &(0x7f0000000000)=0x7) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000180)="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", 0x4f5}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="ed", 0x1) recvmmsg(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x3841, 0x0) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) execve(0x0, 0x0, 0x0) writev(r2, &(0x7f0000001000), 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_pts() mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) writev(0xffffffffffffffff, 0x0, 0x0) 281.651374ms ago: executing program 7 (id=994): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000381210089}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfe) bind$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x3}, 0x8) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000008, 0xfd6, 0x8, 0x7, 0x17ffe, 0x10, [{0x0, 0xb1, 0x4, 0xa24}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f05, 0x200, 0x9}, {0x7ffffffe, 0x800, 0xba2, 0x1}, {0x3fe, 0x20007ff, 0x1002802, 0x4d8a}, {0x3, 0x101, 0x3, 0xb4}, {0x7, 0xd16f, 0x81e8, 0xa}, {0x4, 0x836, 0x17, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x1000002, 0x90, 0xd1b, 0x88}, {0x1c5, 0x5, 0x4, 0x41ac8391}, {0x100003, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x7, 0x8, 0x2}, {0x69a71720, 0xffffdff6, 0xfffffffe, 0x6}, {0x2, 0x7, 0xfffffff9, 0xfc}, {0xfffffffe, 0x8, 0x40004, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000002c0)={0xfe, 0x6b, 0xa, 0x80, "6b7fd728ab04f084e6e08e16e5a20bf2a9fea67d", 0x5, 0xe8}) 281.44652ms ago: executing program 6 (id=995): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) setsockopt(0xffffffffffffffff, 0x1000000000029, 0xc, 0x0, 0x0) r0 = semget(0x0, 0x1, 0x281) setuid(0xffffffffffffffff) semctl$GETALL(r0, 0x0, 0x6, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x3, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x33, &(0x7f0000000200)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x3, 0x8}, {"e3c4fc107f71ed734b"}}}}}}) r1 = socket(0x1, 0x2, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) link(&(0x7f0000000340)='./bus\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) close(r2) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0xc0206911, &(0x7f00000001c0)) readv(0xffffffffffffffff, &(0x7f0000000040), 0x0) kqueue() 195.525943ms ago: executing program 5 (id=996): sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x8000, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) sendmsg$unix(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x411}, 0x7) 194.466883ms ago: executing program 5 (id=997): sysctl$net_pipex(&(0x7f0000000400)={0x6, 0x1b, 0x2}, 0x3, &(0x7f0000000080), 0x0, 0x0, 0x0) 193.945942ms ago: executing program 6 (id=998): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@in6, 0xc, &(0x7f0000000100)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000140)=""/145, 0x91}, 0x1) 192.716934ms ago: executing program 7 (id=999): sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, &(0x7f0000000240)="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", 0x14b) 117.358503ms ago: executing program 5 (id=1000): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x84, 0x5, 0xfc, 0x102}, {0x26, 0x5, 0x7}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="0002"]) syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast, @random="5924d0feb5ec", [], {@generic={0x8035}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGHDRCMPLT(r1, 0x40044274, &(0x7f0000000100)) r2 = socket(0x2, 0x3, 0x0) bind(r2, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x22, &(0x7f00000016c0)=ANY=[]) 115.798765ms ago: executing program 6 (id=1001): madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, &(0x7f00000000c0)="9d0f8a8377d83d4712576f85276629c625198f1d009e619d2688c20c071b43101e47c8ffd78fff57cb138f00ac95d79caf6bc232bdde4eb34fc86dc5f473eacffaf48a7e433e1d3d9c000000001642f467144c14e0a7f4b9e8f1b69a6c24a74a0ef3ce688cb057a9c0faa35d6c6257dbe002a3be98f76c31ed1f706f77d053df6ab5e3593e8e95856e9b9d3678", &(0x7f0000000080)=0x8d, 0x0, 0x32) 115.456547ms ago: executing program 7 (id=1002): r0 = socket(0x18, 0x2, 0x0) (async, rerun: 64) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1, 0x2}) close(r1) (async) execve(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000001c0)={0x10, 0x9, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000a5000/0x2000)=nil, 0x10}, {&(0x7f00003c6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3}, {&(0x7f0000301000/0x1000)=nil, &(0x7f0000ff6000/0x8000)=nil, 0xa}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000507000/0x3000)=nil}, {&(0x7f00001dd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x9}, {&(0x7f00002b8000/0x4000)=nil, &(0x7f00003d0000/0xa000)=nil, 0x2dc}, {&(0x7f0000110000/0x3000)=nil, &(0x7f00000ce000/0x3000)=nil, 0x9}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000019e000/0x4000)=nil, 0xffffffff}, {&(0x7f000013a000/0x2000)=nil, &(0x7f0000375000/0x1000)=nil, 0x4}, {&(0x7f0000164000/0x6000)=nil, &(0x7f0000591000/0x2000)=nil, 0x3ff}, {&(0x7f0000312000/0x1000)=nil, &(0x7f00005b1000/0x4000)=nil, 0x2}, {&(0x7f000073b000/0x1000)=nil, &(0x7f0000168000/0x1000)=nil, 0x4}, {&(0x7f00000c8000/0x4000)=nil, &(0x7f00001f4000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f00003f2000/0x3000)=nil, &(0x7f00002e4000/0x3000)=nil, 0x16629c0e}, {&(0x7f0000027000/0x4000)=nil, &(0x7f0000448000/0x2000)=nil}, {&(0x7f00000f7000/0x1000)=nil, &(0x7f00000cc000/0x3000)=nil, 0xfffffffffffffff8}], './file0\x00', 0x84}) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0}, 0x10, 0x1, 0x0) r3 = socket(0x800000018, 0x2, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) recvmmsg(r3, &(0x7f0000000440)={&(0x7f0000000400)={&(0x7f0000000080)=@in, 0xc, &(0x7f00000003c0)=[{&(0x7f00000026c0)=""/4096, 0x1000}, {&(0x7f0000000100)=""/141, 0x8d}], 0x2, &(0x7f00000016c0)=""/4096, 0x1000}, 0x3}, 0x10, 0x803, &(0x7f00000004c0)={0x400, 0x3}) (async, rerun: 32) r4 = syz_open_pts() (rerun: 32) r5 = kqueue() kevent(r5, &(0x7f0000000000)=[{{r4}, 0xfffffffffffffffc, 0x1, 0x20, 0x1ff, 0xf7}], 0x5, 0x0, 0x5, 0x0) (async) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="3000000000000000ffff00000500000080d63e9fd165fab263274bf1356106fb30ea8b394b6c80272e00000000000000180000000000000000080000070000005571164bef65b80040"], 0x88}, 0x8) 115.248583ms ago: executing program 1 (id=1003): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = socket$unix(0x1, 0x3, 0x0) r1 = socket$inet6(0x18, 0x3, 0x2) getsockopt(r1, 0x26f2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x20000, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x1}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000180)="f208324a372abfe38130df9ab588b8977c788975a4230bc04f66214f6c5ff2962789b91d3465dad1518a8dc4a238e5851f093d7937a82a040e5caaefb1d30884f55c4c839914b911e44064341e3b27b42c6908e7888d92671eae1a8fc5611f72b25f8fc416d0d182675be246ed1af6b67ecdde32d5528e92a2819b2aa15e612639c7c403c326d110c22fbf619d982d450e8ae06f247b14447250b3f6981a08e8961936cd2b401743a12e2a4a342fba20b489a72e807fc85d7129d738eba616d61429ca49cfeab80848fef85eae7c841267edfedf7b1464e00c7c0684bab7788e804cffd915", 0xe5}], 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, 0x10, r4, 0x0) r5 = getuid() chown(&(0x7f0000000200)='./file0\x00', r5, 0xffffffffffffffff) setreuid(0xee00, r5) chown(&(0x7f0000000140)='./file0\x00', r5, 0x0) seteuid(r5) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) ioctl$TIOCDRAIN(r2, 0x2000745e) execve(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20, 0x30) 111.522497ms ago: executing program 5 (id=1004): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x3e61) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') mkdir(&(0x7f0000000200)='./file0\x00', 0x4) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) openat$pci(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x1, 0x83, 0x7}]}) 111.248917ms ago: executing program 6 (id=1005): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ftruncate(r0, 0x8531) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000012c0)=[{{r0}, 0xfffffffffffffffa, 0x10, 0x1, 0x3, 0x70000000000000}], 0xe4a, 0x0, 0x727a7841, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x100) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) ftruncate(r3, 0x8531) sendmsg$unix(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001200)='P', 0x1}], 0x1, 0x0, 0x0, 0x2}, 0xf) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 109.079943ms ago: executing program 1 (id=1006): unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) unveil(&(0x7f00000001c0)='./bus/\x00', &(0x7f0000000140)='r\x00') r0 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r0) truncate(&(0x7f0000000400)='./file0\x00', 0x1) clock_gettime(0x3, 0xfffffffffffffffe) mkdir(&(0x7f0000000200)='./file0\x00', 0x4) 5.452689ms ago: executing program 5 (id=1007): sysctl$net_inet6_ip6(&(0x7f0000000580)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) mkdir(&(0x7f0000000500)='./file0\x00', 0x20) setreuid(0xee00, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e50000b9", 0x4) 2.450711ms ago: executing program 4 (id=1008): r0 = socket(0x1, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) sendmmsg(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3}, 0x10, 0x0) r1 = open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x8531) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 1.60598ms ago: executing program 4 (id=1009): fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r0 = socket(0x800000018, 0x3, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6081, 0x8000404) open(&(0x7f0000000180)='./file0\x00', 0x20, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="57001000", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x1, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@generic={0x22, 0x2, 0x0, "a759442b"}}}}}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x35, 0x0, 0x0) syz_emit_ethernet(0xde, &(0x7f00000000c0)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "765203", 0xa8, 0x0, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x32, 0x14, 0x0, 0x4, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @mcast2, @empty, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="9314c7acef4e66c6f3f000", @empty, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}]}]}}}}}) socketpair(0x20, 0x4000, 0x95, &(0x7f0000000040)={0xffffffffffffffff}) listen(r2, 0x2b) ioctl$LIOCSFD(0xffffffffffffffff, 0x80046c7f, &(0x7f0000000200)=r2) 991.674µs ago: executing program 4 (id=1010): mknod(&(0x7f0000000080)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x5c) fcntl$dupfd(r0, 0x0, r0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_pts() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0, 0xc}, 0xf8ffffffffbfffff, 0x6}) r2 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) setitimer(0x0, &(0x7f00000000c0)={{0xffffffff}, {0xffffffff}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x11, 0x3, 0x0) setsockopt(r3, 0x11, 0x1, &(0x7f00000000c0)="0c581201", 0x4) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) fcntl$lock(r1, 0x9, &(0x7f00000000c0)={0x3, 0x0, 0x7, 0x1000300000000}) close(r0) 0s ago: executing program 1 (id=1011): r0 = socket(0x18, 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfc}, 0x10, 0x4000000, 0x0, 0x0, 0x800004, 0x2, 0xfffffffffffffffd, 0x100000012}) (async) r2 = msgget(0x1, 0x80) msgctl$IPC_RMID(r2, 0x0) setuid(0xffffffffffffffff) setuid(0xee01) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffffffff2bee4c4026cf8e281c006809a707019078e0000010e9727d13f739ce58598564af573cf8953d915c25f1a8a287450900000000000000c266937fe02836ef81f0dc2e57800afa11a9379f13a6128e901bf8fdf3b5da3f888dfcc245fdf84f4e298ccb3f2480ff112beca24b40944aff8096b87bed17f0d647a2c877f8af5a5aab0b0f0a5a0b000000000000000000000000a3fc66197032cefc0e22"]) (async) r3 = socket(0x800000018, 0x3, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff000000000000000000000000ffff"]) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x404) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x5, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e69dac610a4fb5eaf3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5d879fac2492f4a0491b1ea3359aa5c5164ad97ac7c3aaddd498c0f962f5167b69cfdc8287fc34b8138340e60c404a855858ea5fc", &(0x7f0000000000)=0x59, 0x0, 0xfffffdfd) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) (async) close(r0) r4 = socket(0x20, 0x8000, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10, 0x2040, 0x0) (async) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) r5 = getpid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x10000, 0xffffffffffffffff, r5, 0x400000000, 0x7, 0x1, 0x4}) (async) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa) (async) r6 = socket(0x800000018, 0x2, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000480)={0x0, [{0x2}, {0x3, 0x408}, {0x1, 0x8}, {0x1, 0x7f}, {0x2, 0xd}, {0x2, 0x8}, {0x1, 0x7}, {0x3, 0x4}, {0x3, 0x401}, {0x3, 0x3}, {0x2, 0x80}, {0x3, 0xdeee}, {0x1, 0x1}, {0x1, 0x400}, {0x2, 0x1}, {0x1, 0x8001}, {0x1, 0xe86}, {0x3, 0x5}, {0x2, 0x6}, {0x2}, {0x1, 0x7}, {0x2, 0xffff}, {0x3, 0x1}, {0x1, 0x80000003}, {0x3, 0xfffffff5}, {0x3, 0x8}, {0x1, 0x5}, {0x1, 0x6e}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0x4}, {0x2, 0x1}]}) (async) sysctl$net_inet_ip(&(0x7f00000001c0)={0x4, 0x2, 0x0, 0xb}, 0x4, &(0x7f0000000740)="1c10ffc14d79b045c3bcf873e6ff93e167da06faa2c75be5105351846c649e030bd0c0a04fa0338023a0527aa0339829aa9d790d58b9193829fc0e028af7bef4dead79527ee27cffda0e119411db1536752becae4eee4e34c44bab23f3b44a66a5e55a121570f2dc4ed36d887cb65f3cf0ebd03665847d3ca8291fecd3e466907ef8b9997da6067de1904a10ab0b46969c6f50e62f95be7082078182b24a192c1e440a2dd6d90c8c6be567c77596bf2a44d722550b819b8c55df5c1f2fab1f493815cbbd996c76dde44048443c88acac6bad7821e00f1ff15ded29307839a4d26e14ed6d6a806cdb019be39ac927290400"/253, &(0x7f0000000200)=0xfd, &(0x7f0000000380)="a55518b816f595abc9d8254a34e37e566ba76a470e696ed6d156a1653930df51928b21916615e33fad90977faf2e991ec2b68c398c323f1b8e71bc3f9f52931ea1d887e471ff9c2ae5e6728e5d908c9d46ab1367f03bfc7878e4acf0007134fbc658a79d21b6e34a9b83fcf5dd77da96b42e0438111879b3b4da38579184a7739a1231c2b3c5e28f6b686389c91040079aee833a4496941e79f5b32ea0f0d4baf3e51deeaab00956f86fc7fc6315925ae5b43edf8760569ee7ce86c1c3667ca46cad22fa5472e12d7453451b730308787a8045f93c4536bd5a32a4aa0fa8e7d97304575d85e29ea3636505eae50d54c546bf", 0xf2) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.183' (ED25519) to the list of known hosts. pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (ci-openbsd-main-7.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pckbd_enable: command error load: 4.27 cmd: denied attempt to set clock forward to 495890607918 getty 59629 [ttyin] 0.00u 0.00s 0% 327k pckbd_enable: command error pckbd_enable: command error vm_create: uvm_map failed: 12 pckbd_enable: command error pckbd_enable: command error panic: kernel diagnostic assertion "pg->wire_count == 0" failed: file "/syzkaller/managers/main/kernel/sys/uvm/uvm_page.c", line 1326 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *455669 48081 0 0 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff8337b37c) at panic+0x1cf __assert(ffffffff833ba7b3,ffffffff833a3e01,52e,ffffffff833d457a) at __assert+0x29 uvm_pagedequeue(fffffd800706b580) at uvm_pagedequeue+0x2cd uvm_pageclean(fffffd800706b580) at uvm_pageclean+0x2ac uvm_pagefree(fffffd800706b580) at uvm_pagefree+0x26 uvm_anfree(fffffd806ad1aab0) at uvm_anfree+0xe9 amap_wipeout(fffffd806fc7b640) at amap_wipeout+0x246 uvm_unmap_detach(ffff80003c951bb0,0) at uvm_unmap_detach+0x8a uvm_mapanon(fffffd806cb03460,ffff80003c951dd8,400000,0,3090713) at uvm_mapanon+0x854 uvm_mmapanon(fffffd806cb03460,ffff80003c951dd8,400000,3,7,5012,5125c0e282b9b220,fffffd806cb03460) at uvm_mmapanon+0x1d0 sys_mmap(ffff80003c929780,ffff80003c951f30,ffff80003c951e80) at sys_mmap+0xa60 syscall(ffff80003c951f30) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc0e0f478640, count: 1 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: kernel diagnostic assertion "pg->wire_count == 0" failed: file "/syzkaller/managers/main/kernel/sys/uvm/uvm_page.c", line 1326 ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8337b37c) at panic+0x1cf __assert(ffffffff833ba7b3,ffffffff833a3e01,52e,ffffffff833d457a) at __assert+0x29 uvm_pagedequeue(fffffd800706b580) at uvm_pagedequeue+0x2cd uvm_pageclean(fffffd800706b580) at uvm_pageclean+0x2ac uvm_pagefree(fffffd800706b580) at uvm_pagefree+0x26 uvm_anfree(fffffd806ad1aab0) at uvm_anfree+0xe9 amap_wipeout(fffffd806fc7b640) at amap_wipeout+0x246 uvm_unmap_detach(ffff80003c951bb0,0) at uvm_unmap_detach+0x8a uvm_mapanon(fffffd806cb03460,ffff80003c951dd8,400000,0,3090713) at uvm_mapanon+0x854 uvm_mmapanon(fffffd806cb03460,ffff80003c951dd8,400000,3,7,5012,5125c0e282b9b220,fffffd806cb03460) at uvm_mmapanon+0x1d0 sys_mmap(ffff80003c929780,ffff80003c951f30,ffff80003c951e80) at sys_mmap+0xa60 syscall(ffff80003c951f30) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc0e0f478640, count: -14 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003c951930 rbx 0x1 rdx 0xffff8000014346c0 rcx 0 rax 0xffff80003c929780 r8 0x101010101010101 r9 0x8080808080808080 r10 0x93d877bb04112016 r11 0x1895718708e39e7e r12 0 r13 0xfffffd806ad1aab0 r14 0 r15 0x1 rip 0xffffffff820dbab5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c951920 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=455669 pid=48081 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=82, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c929a18,0xffff80002f0fd258 process=0xffff80002f0f8498 user=0xffff80003c94c000, vmspace=0xfffffd806cb03460 estcpu=32, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 20613 122536 10449 0 2 0 syz-executor 20613 57281 10449 0 3 0x4000000 biowait syz-executor 48081 195412 88685 0 2 0 syz-executor *48081 455669 88685 0 7 0x4000000 syz-executor 52632 93226 3940 0 2 0 syz-executor 52632 118813 3940 0 3 0x4000080 ttyretype syz-executor 52632 227881 3940 0 3 0x4000080 fsleep syz-executor 72489 183946 1 0 3 0x82 nanoslp getty 88685 380127 73744 0 3 0x82 nanoslp syz-executor 10449 233091 73744 0 3 0x82 nanoslp syz-executor 86424 79666 0 0 3 0x14280 nfsidl nfsio 60764 129968 73744 0 2 0x2 syz-executor 4988 201949 73744 0 2 0x2 syz-executor 30237 33042 73744 0 3 0x82 nanoslp syz-executor 64818 174870 73744 0 3 0x82 nanoslp syz-executor 65471 8323 73744 0 3 0x2 biowait syz-executor 3940 260493 73744 0 3 0x82 nanoslp syz-executor 73744 122240 4298 0 3 0x82 kqread syz-executor 4298 130198 30913 0 3 0x10008a sigsusp ksh 30913 59785 53736 0 3 0x98 kqread sshd-session 53736 15472 26019 0 3 0x92 kqread sshd-session 26019 393733 1 0 3 0x88 kqread sshd 30454 227029 3983 73 3 0x1100090 kqread syslogd 3983 472726 1 0 3 0x100082 sbwait syslogd 49648 94318 1 0 3 0x100080 kqread resolvd 92257 166756 53548 77 3 0x100092 kqread dhcpleased 85367 127192 53548 77 3 0x100092 kqread dhcpleased 53548 6425 1 0 3 0x80 kqread dhcpleased 54810 500951 0 0 3 0x14200 bored smr 75259 516207 0 0 2 0x14200 zerothread 24319 381529 0 0 3 0x14200 aiodoned aiodoned 76303 48584 0 0 3 0x14200 syncer update 57131 266657 0 0 3 0x14200 cleaner cleaner 58381 329548 0 0 3 0x14200 reaper reaper 88126 125985 0 0 3 0x14200 pgdaemon pagedaemon 2364 239292 0 0 3 0x14200 bored viomb 9425 471242 0 0 3 0x40014200 acpi0 acpi0 90668 68092 0 0 3 0x14200 bored softnet0 80163 271894 0 0 3 0x14200 smrbar systqmp 32334 385176 0 0 3 0x14200 bored systq 82399 434948 0 0 3 0x40014200 tmoslp softclock 80719 285645 0 0 3 0x40014200 idle0 1 13232 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10181 11128K 15488K 166960K 13593 0 pcb 18 18K 20K 166960K 399 0 rtable 232 9K 9K 166960K 558 0 pf 34 13K 20K 166960K 118 0 ifaddr 44 8K 8K 166960K 90 0 ifgroup 52 2K 2K 166960K 136 0 sysctl 4 1K 9K 166960K 10 0 counters 34 17K 18K 166960K 77 0 ioctlops 0 0K 4K 166960K 223 0 iov 0 0K 20K 166960K 130 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1428 90K 90K 166960K 2586 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 24 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 75 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 236K 166960K 1186 0 sigio 0 0K 0K 166960K 18 0 proc 60 59K 83K 166960K 660 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 169 0 in_multi 103 7K 7K 166960K 171 0 ether_multi 1 0K 0K 166960K 16 0 mrt 0 0K 0K 166960K 10 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 486 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 219 170K 176K 166960K 11869 0 UVM aobj 44 14K 16K 166960K 52 0 pinsyscall 36 72K 94K 166960K 2311 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 51 0 NDP 12 0K 2K 166960K 58 0 temp 77 8672K 8743K 166960K 44525 0 kqueue 13 20K 34K 166960K 205 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 116 0 113 1 0 1 1 0 8 0 rtentry 136 170 0 71 4 0 4 4 0 8 0 unpcb 144 1202 0 1183 15 6 9 10 0 8 8 syncache 336 9 0 9 4 3 1 1 0 8 1 tcpqe 32 4 0 4 2 1 1 1 0 8 1 tcpcb 736 370 0 361 5 3 2 4 0 8 1 arp 96 29 0 12 1 0 1 1 0 8 0 ipq 40 6 0 1 1 0 1 1 0 8 0 ipqe 40 10 0 4 1 0 1 1 0 8 0 inpcb 328 1582 0 1569 27 20 7 15 0 8 4 ip6q 72 21 0 18 1 0 1 1 0 8 0 ip6af 40 38 0 36 1 0 1 1 0 8 0 nd6 112 35 0 11 1 0 1 1 0 8 0 pkpcb 40 12 0 12 3 2 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 ppxss 1072 32 0 31 3 2 1 1 0 8 0 pppxif 1384 5 0 5 2 2 0 1 0 8 0 pfrktable 1344 3 0 3 1 1 0 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 2 0 0 1 0 1 1 0 8 0 pfstkey 128 4 0 2 1 0 1 1 0 8 0 pfstate 384 2 0 1 1 0 1 1 0 8 0 pfrule 1344 1 0 1 1 1 0 1 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 639 0 193 32 4 28 30 0 8 0 art_table 40 641 0 193 5 0 5 5 0 8 0 art_node 32 168 0 79 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 2 1 1 1 0 8 0 semupl 112 2 0 2 1 1 0 1 0 8 0 semapl 112 72 0 62 1 0 1 1 0 8 0 shmpl 112 42 0 7 1 0 1 1 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 3736 0 2232 95 0 95 95 0 8 0 ffsino 256 3736 0 2232 95 0 95 95 0 8 0 nchpl 144 5474 0 3771 64 0 64 64 0 8 0 rtmask 32 9 0 9 2 2 0 1 0 8 0 vnodes 216 4416 0 0 246 0 246 246 0 8 0 namei 1024 18408 0 18407 2 1 1 1 0 8 0 vcpupl 3904 6 0 0 1 0 1 1 0 8 0 vmpool 808 7 0 1 1 0 1 1 0 8 0 kstatmem 264 76 0 52 2 0 2 2 0 8 0 scsiplug 72 7 0 7 3 2 1 1 0 8 1 scxspl 216 15826 0 15823 11 8 3 8 1 8 2 plimitpl 152 420 0 403 1 0 1 1 0 8 0 sigapl 424 1463 0 1422 7 1 6 6 0 8 0 knotepl 120 41204 0 41157 46 35 11 22 0 8 8 kqueuepl 184 411 0 401 3 2 1 3 0 8 0 pipepl 304 268 0 241 8 5 3 8 0 8 0 fdescpl 448 1446 0 1419 5 1 4 5 0 8 0 filepl 120 10614 0 10393 18 3 15 15 0 8 5 lockfpl 104 472 0 468 2 0 2 2 0 8 1 lockfspl 48 172 0 169 1 0 1 1 0 8 0 sessionpl 144 26 0 19 1 0 1 1 0 8 0 pgrppl 48 56 0 41 1 0 1 1 0 8 0 ucredpl 104 2088 0 2077 1 0 1 1 0 8 0 zombiepl 144 1424 0 1422 2 1 1 1 0 8 0 processpl 1152 1463 0 1422 4 0 4 4 0 8 0 procpl 664 2939 0 2894 6 0 6 6 0 8 1 sosppl 176 9 0 9 3 2 1 1 0 8 1 sockpl 552 2948 0 2913 31 19 12 20 0 8 8 mcl64k 65536 195 0 194 2 1 1 1 0 8 0 mcl16k 16384 3 0 3 2 2 0 1 0 8 0 mcl9k 9216 1 0 1 1 1 0 1 0 8 0 mcl8k 8192 17 0 17 4 3 1 1 0 8 1 mcl4k 4096 3819 0 3762 16 7 9 14 0 8 1 mcl2k2 2112 3 0 3 2 2 0 1 0 8 0 mcl2k 2048 1942 0 1934 4 2 2 3 0 8 0 mtagpl 96 180 0 12 5 0 5 5 0 8 0 mbufpl 256 16036 0 15687 27 3 24 24 0 8 0 bufpl 280 5701 0 124 399 0 399 399 0 8 0 anonpl 24 230775 0 225461 96 51 45 57 0 187 12 amapchunkpl 152 47509 0 46831 58 26 32 38 0 158 3 amappl16 200 4002 0 3955 43 30 13 16 0 8 8 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 4 0 4 1 1 0 1 0 8 0 amappl13 176 430 0 429 1 0 1 1 0 8 0 amappl12 168 1829 0 1793 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 1 0 1 0 8 0 amappl10 152 44 0 34 1 0 1 1 0 8 0 amappl9 144 251 0 250 2 1 1 1 0 8 0 amappl8 136 46 0 45 1 0 1 1 0 8 0 amappl7 128 92 0 91 1 0 1 1 0 8 0 amappl6 120 297 0 285 1 0 1 1 0 8 0 amappl5 112 71 0 63 1 0 1 1 0 8 0 amappl4 104 430 0 405 1 0 1 1 0 8 0 amappl3 96 8053 0 7958 3 0 3 3 0 8 0 amappl2 88 563 0 508 2 0 2 2 0 8 0 amappl1 80 13763 0 13230 14 1 13 13 0 8 0 amappl 88 10924 0 10778 4 0 4 4 0 92 0 uvmvnodes 80 137 0 0 3 0 3 3 0 8 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 255 0 255 3 2 1 1 0 8 1 dma64 64 9 0 9 3 3 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 51 0 8 1 0 1 1 0 8 0 uaddrrnd 24 1446 0 1419 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1446 0 1419 1 0 1 1 0 8 0 vmmpekpl 168 12439 0 12399 3 0 3 3 0 8 0 vmmpepl 168 96091 0 94380 115 23 92 92 0 357 10 vmsppl 368 1445 0 1419 4 1 3 4 0 8 0 rwobjpl 40 26149 0 25123 13 0 13 13 0 8 0 pdppl 4096 2912 0 2846 117 45 72 80 0 8 6 pvpl 32 640443 0 628607 210 87 123 131 0 265 21 pmappl 216 1452 0 1420 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 426 0 81 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8337b37c) at panic+0x1cf __assert(ffffffff833ba7b3,ffffffff833a3e01,52e,ffffffff833d457a) at __assert+0x29 uvm_pagedequeue(fffffd800706b580) at uvm_pagedequeue+0x2cd uvm_pageclean(fffffd800706b580) at uvm_pageclean+0x2ac uvm_pagefree(fffffd800706b580) at uvm_pagefree+0x26 uvm_anfree(fffffd806ad1aab0) at uvm_anfree+0xe9 amap_wipeout(fffffd806fc7b640) at amap_wipeout+0x246 uvm_unmap_detach(ffff80003c951bb0,0) at uvm_unmap_detach+0x8a uvm_mapanon(fffffd806cb03460,ffff80003c951dd8,400000,0,3090713) at uvm_mapanon+0x854 uvm_mmapanon(fffffd806cb03460,ffff80003c951dd8,400000,3,7,5012,5125c0e282b9b220,fffffd806cb03460) at uvm_mmapanon+0x1d0 sys_mmap(ffff80003c929780,ffff80003c951f30,ffff80003c951e80) at sys_mmap+0xa60 syscall(ffff80003c951f30) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc0e0f478640, count: -14 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8337b37c) at panic+0x1cf __assert(ffffffff833ba7b3,ffffffff833a3e01,52e,ffffffff833d457a) at __assert+0x29 uvm_pagedequeue(fffffd800706b580) at uvm_pagedequeue+0x2cd uvm_pageclean(fffffd800706b580) at uvm_pageclean+0x2ac uvm_pagefree(fffffd800706b580) at uvm_pagefree+0x26 uvm_anfree(fffffd806ad1aab0) at uvm_anfree+0xe9 amap_wipeout(fffffd806fc7b640) at amap_wipeout+0x246 uvm_unmap_detach(ffff80003c951bb0,0) at uvm_unmap_detach+0x8a uvm_mapanon(fffffd806cb03460,ffff80003c951dd8,400000,0,3090713) at uvm_mapanon+0x854 uvm_mmapanon(fffffd806cb03460,ffff80003c951dd8,400000,3,7,5012,5125c0e282b9b220,fffffd806cb03460) at uvm_mmapanon+0x1d0 sys_mmap(ffff80003c929780,ffff80003c951f30,ffff80003c951e80) at sys_mmap+0xa60 syscall(ffff80003c951f30) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc0e0f478640, count: -14