last executing test programs: 3.90248285s ago: executing program 1 (id=2): r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r1, 0x0, 0x6d, 0x0, 0x0) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r2, &(0x7f0000000200)=[{&(0x7f0000000000)="72e382", 0x3}, {&(0x7f00000000c0)="0ee33667702b2160a463830450a26ecf1fdcf458bb19af3699f6ee9781ae74930aeb78c70c50a7a91140d2ec4e92fde93accab795fe6be664ff4c95fa4b37048b54e9d3f3ef94b5b537a660b873c2afc9350f9e8be53422d1badf7cd164096ecee63c54bc21c1d82ffdf0a9b67d43f3c", 0x70}, {&(0x7f0000000140)='..', 0x2}], 0x3, 0x4) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x1ff, 0x40, 0x1, 0x800440}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r3, 0xffff, 0x2000, &(0x7f0000000080)=0x4, 0x4) sendmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x4) r4 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x47ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x902, 0x10, [{0x0, 0x9, 0x2, 0x71002}, {0x2, 0xfff, 0x8, 0xfffffff7}, {0x110, 0xfffff4a1, 0x0, 0x9}, {0x1, 0x803, 0x8007, 0xb6b}, {0xa, 0x200727, 0x9f7, 0x7}, {0x1, 0x650, 0x5, 0xc7}, {0xce1, 0xffffffff, 0x1, 0x6d}, {0xffe, 0x7ff, 0x14, 0xc}, {0x2, 0x200083, 0x8000005, 0x5}, {0x6a76, 0x8003, 0x8001, 0x4}, {0x1, 0x10001, 0xe, 0x3}, {0x8, 0xc, 0x8, 0x7}, {0xb8c, 0x555981a7, 0x3, 0x6}, {0x29a71717, 0xfffffff6, 0xffffffff, 0x7}, {0xd, 0x7, 0x5, 0x10000000}, {0x0, 0x1, 0x1002, 0x30004}]}) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000002c0)="23180596c9095449483e68bf39cb85705a226281f2b44595aaedcb5f134c99d5293bc09edcab079034fb4752fe6b83389fcb5279ea8969c4fb347bf688ac55cd175f650b94b946e78421ecdb4000c85d6c18e801a83065f13e012746cb42553f1a742729ae3fc076aed8e69b5730f95f81462e", 0x73}], 0x1) execve(0x0, 0x0, 0x0) 3.893310762s ago: executing program 0 (id=1): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1, 0x2}) ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000140)) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0x69, &(0x7f0000000180)={{0x18, 0x3, 0x9, 0xe0000000}, {0x18, 0x1, 0x6, 0x6}, 0x9, [0x7f, 0x7fffffff, 0x9, 0x9, 0x9, 0x2748, 0x80000000, 0x3]}, 0x3c) fcntl$getown(r0, 0x5) r2 = semget(0x2, 0x1, 0x301) r3 = getuid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000240)={{0x7fffffff, r3, 0xffffffffffffffff, r4, r6, 0x20, 0x8001}, 0x4, 0x1, 0x10}) r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$WSKBDIO_SETENCODING(r7, 0x80045710, &(0x7f0000000300)=0x9) getsockopt(r1, 0x10000, 0x9, &(0x7f0000000340)=""/221, &(0x7f0000000440)=0xdd) fcntl$setflags(r1, 0x2, 0x1) getsockname(r1, &(0x7f0000000480)=@in6, &(0x7f00000004c0)=0xc) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000500), 0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000005c0)={r5, r9, r6}, 0xc) recvmmsg(r1, &(0x7f0000003a40)={&(0x7f0000003a00)={&(0x7f0000000600)=@in6, 0xc, &(0x7f0000003900)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/177, 0xb1}, {&(0x7f0000002700)}, {&(0x7f0000002740)=""/93, 0x5d}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/41, 0x29}, {&(0x7f0000003800)=""/206, 0xce}], 0x8, &(0x7f0000003980)=""/108, 0x6c}, 0x9}, 0x10, 0xcf3b440d62648c42, &(0x7f0000003a80)={0x471, 0x8e}) r10 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000003ac0), 0x10, 0x0) bind$unix(r10, &(0x7f0000003b00)=@file={0x1, './file0\x00'}, 0xa) sendto$inet6(r10, &(0x7f0000003b40)="8f9b05c58a238b9235d83daac8b28fdc65b75b8cdaf6981f54d25da97b23fd6ce59bf59566296cf4e8c5b96943ec480a160793695e204f9cc8e82cc8244a83b0aedc734f248bd81f7bff255f5a47eef5e999fa21890ab852", 0x58, 0xc, &(0x7f0000003bc0)={0x18, 0x2, 0x7, 0x1}, 0xc) setsockopt$sock_linger(r10, 0xffff, 0x80, &(0x7f0000003c00)={0x4, 0x8}, 0x8) ioctl$TIOCSETAW(r10, 0x802c7415, &(0x7f0000003c40)={0xb, 0x6, 0x6, 0x9, "412f7d90116b5d417e32e8543daa4631b63bcc0a", 0x4, 0x3}) getpgid(r8) ioctl$VT_GETMODE(r10, 0x40087603, &(0x7f0000003c80)) unveil(&(0x7f0000003cc0)='./file0\x00', &(0x7f0000003d00)='r\x00') utimensat(r10, &(0x7f0000003d40)='./file1\x00', &(0x7f0000003d80)={{0xffffffff8ab22546, 0x10000}, {0x8ae7, 0x845}}, 0x0) dup(r1) 3.864160965s ago: executing program 2 (id=3): open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x2e) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1, 0x40, 0x200000001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x56, &(0x7f0000000900)={@random="0f42a2516825", @remote, [], {@ipv4={0x800, {{0xd, 0x4, 0x2, 0x1, 0x48, 0x65, 0x0, 0x8e, 0x88, 0x0, @rand_addr=0x4, @multicast1, {[@generic={0x7, 0x3, "b2"}, @timestamp={0x44, 0x1c, 0x17, 0x1, 0x2, [{[], 0x4}, {[@local={0xac, 0x14, 0x0}], 0x6}, {[], 0x80000001}, {[@multicast2]}]}]}}, @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x9, 0x0, 0x8}}}}}}) mknod(&(0x7f00000001c0)='./file0\x00', 0x2006, 0x4f4b) ktrace(&(0x7f0000000380)='./file0\x00', 0x1, 0x40000822, 0x0) 2.65170109s ago: executing program 2 (id=16): syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="e727dc07001f391e7dd7a2d786dd609907a600102c03be697a653e336f000000"]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60ad000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@random="e727dc071f00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "b907a6", 0x1c, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@routing={0x32, 0x0, 0x0, 0x2e}], @tcp={{0x0, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x9}}}}}}}) 2.650713934s ago: executing program 3 (id=17): pwritev(0xffffffffffffffff, 0xffffffffffffffff, 0x28, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VNDIOCSET(r0, 0xc0184406, &(0x7f0000000000)={0x0, 0x9, 0x0}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3a}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000000)={""/16, @ifru_flags}) pwritev(0xffffffffffffffff, 0xffffffffffffffff, 0x28, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) (async) ioctl$VNDIOCSET(r0, 0xc0184406, &(0x7f0000000000)={0x0, 0x9, 0x0}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3a}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0) (async) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000000)={""/16, @ifru_flags}) (async) 2.650006215s ago: executing program 2 (id=18): semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {0x3, 0x0, 0x0, 0x44}]}) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047470, &(0x7f00000000c0)=0x400) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x2, 0x1, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$FIONREAD(r0, 0xc0206923, &(0x7f0000000240)) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffd, 0x0, 0x8, 0x80, 0x6c}], 0x101, 0x0, 0x6, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r1 = socket(0x800000018, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x3, 0x1, 0x410, 0x1}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x1, 0x0) bind(r2, &(0x7f0000000000), 0x10) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x100) ioctl$VNDIOCSET(r3, 0x40204402, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r4}) close(r4) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.64887796s ago: executing program 3 (id=19): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000029, 0xb, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000af7000/0x4000)=nil, &(0x7f00003f9000/0x3000)=nil}, {&(0x7f00004f8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil, 0x4}, {&(0x7f0000987000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000989000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000690000/0x4000)=nil, &(0x7f00007e6000/0x3000)=nil}, {&(0x7f00004f7000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000203000/0x2000)=nil, &(0x7f0000673000/0x2000)=nil, 0x800000000002}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f000071b000/0x3000)=nil}, {&(0x7f000008a000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000dcf000/0x1000)=nil, 0x14b}, {&(0x7f00008c9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x6}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00009a6000/0x1000)=nil}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil, 0x502daf1e}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ead000/0x1000)=nil}], './file0\x00', 0x4}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpid() readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000840)=0x81) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) setuid(0xee01) r4 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x16, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) ioctl$FIONREAD(r4, 0x80286987, &(0x7f00000001c0)) fchflags(r3, 0x10000) close(r1) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 1.508168398s ago: executing program 5 (id=25): r0 = socket(0x18, 0x1, 0x6) (async, rerun: 64) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async, rerun: 64) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1ff}) (async, rerun: 32) r1 = getpid() (rerun: 32) setgroups(0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) (async) setuid(0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) (async, rerun: 64) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') (async, rerun: 64) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000100), 0x0) 1.480728377s ago: executing program 5 (id=26): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) r0 = open(&(0x7f0000000280)='./bus\x00', 0x10080, 0x0) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f00000000c0)=0x400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = accept$unix(r0, &(0x7f0000000180)=@file={0x0, ""/250}, &(0x7f0000000040)=0xfc) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000000)='./bus/file0\x00', r1, 0x5}) close(r0) ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)) ioctl$VNDIOCCLR(r0, 0x80047460, &(0x7f0000000140)={0x0, 0x4, 0x0}) munlock(&(0x7f0000423000/0x4000)=nil, 0x4000) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) (async) open(&(0x7f0000000280)='./bus\x00', 0x10080, 0x0) (async) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) (async) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f00000000c0)=0x400) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) accept$unix(r0, &(0x7f0000000180)=@file={0x0, ""/250}, &(0x7f0000000040)=0xfc) (async) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000000)='./bus/file0\x00', r1, 0x5}) (async) close(r0) (async) ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)) (async) ioctl$VNDIOCCLR(r0, 0x80047460, &(0x7f0000000140)={0x0, 0x4, 0x0}) (async) munlock(&(0x7f0000423000/0x4000)=nil, 0x4000) (async) 1.479792422s ago: executing program 1 (id=27): r0 = socket(0x1, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000140)="b1000502000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) poll(&(0x7f0000000080)=[{r3, 0xab6cc3d7ffaa0897}], 0x1, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0x0) 1.425352283s ago: executing program 0 (id=28): seteuid(0xffffffffffffffff) (async) r0 = geteuid() setreuid(r0, 0x0) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 1.418862452s ago: executing program 1 (id=29): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x22, 0x411}, 0x4, 0x10003, 0x0, 0x0, 0x0, 0x2, 0x40000000000, 0xe63}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) socket(0x18, 0x2, 0x0) (async) r0 = socket(0x18, 0x2, 0x0) close(r0) (async) close(r0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) msync(&(0x7f0000290000/0x2000)=nil, 0x2000, 0x6) socket(0x800000018, 0x2, 0x0) (async) r1 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf95}, 0x6, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff61, 0x9, 0x4000000000000002}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) close(r1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x2d87) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x2d87) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r2, 0x27}], 0x1, 0x0) poll(0x0, 0x0, 0x8e69) close(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x10, 0x1, 0x0) (async) r3 = socket(0x10, 0x1, 0x0) close(r3) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 1.417466485s ago: executing program 2 (id=30): r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x32, &(0x7f00000000c0)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) r2 = socket(0x18, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) semop(0x0, &(0x7f00000000c0)=[{}, {0x0, 0x2ff}], 0x2) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r0, &(0x7f0000000180)=[{0x0}], 0x1) r3 = socket(0x6, 0x5, 0x3) socket$inet(0x2, 0x2, 0xcf) r4 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed0919d07d6cceb9f9203162e14437d0300000008089f981aa6a78ef1d00000000616bf6932da738", 0x2f}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000000040)={&(0x7f00000018c0)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x20, 0x2}, 0x6) r5 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f0000000040)=0xb, 0x1) setsockopt(r3, 0x88c, 0x2, 0x0, 0x1a) 1.414408793s ago: executing program 4 (id=31): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='P3', 0x2}, {&(0x7f00000000c0)="2e03", 0x2}], 0x2) r1 = socket(0x2, 0x1, 0x7d) mknod(&(0x7f0000000280)='./file0\x00', 0x6000, 0x400) kqueue() bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r2 = geteuid() chroot(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) lchown(&(0x7f0000000040)='./file0\x00', r2, r3) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) setsockopt(r1, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04a1190", 0x4) socket$unix(0x1, 0x4, 0x0) 1.409046899s ago: executing program 5 (id=32): sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0) r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000008c0)=0x3) unveil(0x0, &(0x7f0000004300)='W\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0) (async) syz_open_pts() (async) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) (async) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000008c0)=0x3) (async) unveil(0x0, &(0x7f0000004300)='W\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) (async) 304.391003ms ago: executing program 0 (id=34): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sysctl$net_inet6_icmp6(&(0x7f0000000080)={0x4, 0x18, 0x3a, 0xf}, 0x4, &(0x7f00000000c0)="3b9b6669880da912bd5f2e208007165420ac1098dc7bef4f54db03e1cc8e", &(0x7f0000000280)=0x1e, &(0x7f00000002c0)="a2083a6cb7078c2f63ebea7e0e913afa099d410824dadbcf789fbc07af12795c46dc7fd9ddea1555ff67592b9eb91fdfb203047949c92f55e9298c8eb96ea1e8751048a4c064e1", 0x47) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$WSKBDIO_GETBELL(r2, 0x40105704, &(0x7f0000000380)) (async) sendmmsg(r1, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0xe) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=""/250, 0xfa}], 0x1, 0x0}, 0x840) 303.208186ms ago: executing program 3 (id=35): ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc2585601, &(0x7f0000000780)={0x10, 0x21ac00000, [{&(0x7f0000f36000/0x4000)=nil, &(0x7f0000685000/0x3000)=nil}, {&(0x7f0000ccb000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f00009f1000/0x4000)=nil, 0x7}, {&(0x7f0000672000/0x3000)=nil, &(0x7f00004ed000/0x800000)=nil, 0x7fffffff}, {&(0x7f00004a3000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000775000/0x3000)=nil, &(0x7f000068e000/0x12000)=nil, 0x8000000000000001}, {&(0x7f000005b000/0x2000)=nil, &(0x7f00005b7000/0xf000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f0000018000/0x1000)=nil, 0x20000002}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00006ed000/0x1000)=nil}, {&(0x7f0000e90000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x800000002fe}, {&(0x7f000000e000/0x4000)=nil, &(0x7f000069c000/0x2000)=nil, 0x7fffffff}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000015a000/0x1000)=nil, 0x101}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00002f6000/0x3000)=nil, &(0x7f000010e000/0x1000)=nil, 0x8000000000000001}], './bus/file0\x00'}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000340)={0x2, &(0x7f0000000080)=[{0x81, 0x0, 0xf0, 0x6453}, {0x34, 0x6, 0x12}]}) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x2e) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001280), 0x0, 0x0) fchmod(r2, 0x28) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x0, 0x1, 0x40, 0x200000001}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000500)=@un=@file={0x0, ""/542}, 0x220, 0x0, 0x0, 0x0}, 0xfffffffa}, 0x10, 0x1040, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x20000, 0x0) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000000, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x7}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil, 0x9}, {&(0x7f00007ea000/0x4000)=nil, &(0x7f00002b1000/0x2000)=nil, 0x7}, {&(0x7f00000de000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1}, {&(0x7f000024d000/0x1000)=nil, &(0x7f00006af000/0x4000)=nil, 0xa84}, {&(0x7f000007b000/0x4000)=nil, &(0x7f0000049000/0x3000)=nil, 0x3}, {&(0x7f00002d1000/0x4000)=nil, &(0x7f0000676000/0x3000)=nil, 0x3}, {&(0x7f0000402000/0x4000)=nil, &(0x7f000056f000/0x2000)=nil, 0x403}, {&(0x7f000036f000/0x2000)=nil, &(0x7f000014e000/0x1000)=nil, 0xb13e}, {&(0x7f000015b000/0x3000)=nil, &(0x7f0000437000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f0000693000/0x4000)=nil, &(0x7f00004e6000/0x3000)=nil, 0x800000000000013}, {&(0x7f00006e7000/0x2000)=nil, &(0x7f000010d000/0x3000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x7ffffffffffffffe}, {&(0x7f00001ba000/0x2000)=nil, &(0x7f000053a000/0x1000)=nil}, {&(0x7f00005ec000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x39f8}, {&(0x7f00004af000/0x3000)=nil, &(0x7f0000001000/0x800000)=nil, 0x3}], './file0\x00', 0x8}) ioctl$WSKBDIO_GETENCODINGS(r5, 0xc0105715, &(0x7f0000000140)) fcntl$lock(r4, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x100, 0x101) fcntl$lock(r6, 0x9, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x269010000, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r8 = getuid() setreuid(0xee00, r8) setuid(r8) syz_emit_ethernet(0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaea"]) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x8}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r7, 0xc4504445, &(0x7f0000000740)={0x8, 0x3, 0x0, 0x20000023, "040000000000000100", 0x5, 0x2}) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bind$unix(r0, &(0x7f0000000000)=@file={0x1, './bus/file0\x00'}, 0xe) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 264.790856ms ago: executing program 2 (id=37): sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000340)={0x2, &(0x7f0000000080)=[{0x9, 0xb, 0x1, 0xd}, {0x80, 0x7, 0x8, 0x85}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f000009c000/0x3000)=nil, 0x3000) munmap(&(0x7f0000363000/0x2000)=nil, 0x20001) sysctl$hw(&(0x7f0000000000)={0x6, 0x5}, 0x2, &(0x7f0000000040)="f24f76a2c5319c51e418f0b5d410afb593348bb9949ecbdc8f359984310a8b1a8b09884940cd88529f3ed60cf0b6c9d3aed475106e73a5457689c2a19b0c270388bcc76c1aef156ac465e3abfb128b1e46f6459991ec8641", &(0x7f00000000c0)=0x58, &(0x7f0000000240)="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", 0x1c9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180), &(0x7f00000001c0)=0xc) 256.315253ms ago: executing program 6 (id=38): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x44) 255.832841ms ago: executing program 5 (id=39): r0 = syz_open_pts() (async) syz_open_pts() (async) r1 = syz_open_pts() fcntl$lock(r1, 0x7, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x10006fffffffc}) syz_open_pts() (async) lseek(r0, 0x4, 0x1) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) 223.891688ms ago: executing program 5 (id=41): r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x8) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="82b0c7dda0a07a1c01f2facb708fb83f7c2460572da54fe989e031549b", 0x1d}], 0x1, 0x0, 0x0, 0x6}, 0x807) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000480)="000000005efb72ca001e00ff0000", 0xe) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) 223.44741ms ago: executing program 6 (id=42): r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x12a) chmod(&(0x7f0000000080)='./file0\x00', 0x40) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="23211f", 0x3}], 0x1) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 218.869388ms ago: executing program 7 (id=43): r0 = msgget(0x0, 0x711) msgrcv(r0, 0x0, 0x0, 0x1, 0x1000) (async) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) pipe(&(0x7f0000000000)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x7c}, 0x6, 0x7ffffffffffffffe, 0x0, 0x0, 0x4, 0x2000000009, 0x9a, 0x7}) (async) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xfffffffffffffffc, 0x8}) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x80, 0xd01) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000340)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668242482243879e85c7b74efd4260627186c0900000008e371a3f8343712051eea040000000000", 0xb3, 0x0, 0x0, 0x0) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x2, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x200, 0xc, 0x3}, {0x0, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) (async) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) sysctl$kern(&(0x7f0000000400)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) (async) open(&(0x7f0000000240)='./file0/file0\x00', 0x400, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r6, r5, r6, 0x1, 0xfffc}, 0x4, 0x8000, 0x7fffffffffffffff}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) r7 = geteuid() r8 = open(&(0x7f0000000340)='./file1\x00', 0x200, 0xc) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x1, 0x8011, r8, 0x100000000000000) (async) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) msgctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x5, r5, r6, r7, r6, 0x13c, 0x2}, 0x8, 0xfffffffffffffffd, r4, r4, 0x3, 0xffffffffffff8a61, 0x7, 0x6}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 218.147477ms ago: executing program 4 (id=44): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) semget(0x0, 0x3c, 0x681) (async) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') (async, rerun: 32) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 32) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r0, 0x400c570a, &(0x7f0000000080)) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0x0, 0x564, 0xffffffffffffffff, 0x8000000000000000, 0x0, 0x1}, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async, rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) r1 = socket(0x2, 0xc001, 0x0) (rerun: 64) connect$unix(r1, &(0x7f0000000000), 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r2 = syz_open_pts() (async) close(r0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x2) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 217.35668ms ago: executing program 6 (id=45): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) ioctl$BIOCLOCK(r0, 0x20004276) seteuid(0xffffffffffffffff) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$BIOCIMMEDIATE(r0, 0x8010427e, 0x0) socket(0x18, 0x5, 0x0) openat$pf(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$vmm(0xffffffffffffff9c, 0x0, 0x80, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x1, 0x5, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) openat$klog(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$BIOCFLUSH(r0, 0x20004268) 214.659651ms ago: executing program 4 (id=46): openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000300)={0x0, 0x1}, 0x10, 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) 206.292606ms ago: executing program 7 (id=47): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x40) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="23211f", 0x3}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="20092000019c0a", 0x7}], 0x1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000b80)="cc60d3d79a", 0x5}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r0, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 205.811868ms ago: executing program 6 (id=48): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x3, 0x3ff, 0x80000001, 0x1fffd, 0x10, [{0x0, 0x3, 0x4, 0xa28}, {0xc5f, 0x400000b, 0x7, 0xfffffff9}, {0x8, 0x8, 0x4, 0x9}, {0x80000000, 0xc, 0x103, 0x5}, {0x401, 0x7ff, 0x1002805, 0x4d8a}, {0x20002, 0x86, 0x2, 0xb4}, {0xce1, 0xd16f, 0x4f5, 0x20b3}, {0x2, 0x801, 0xfffffffe, 0xb}, {0x2, 0x1, 0x6, 0x9}, {0x5, 0x90, 0xd1b, 0x88}, {0x1be, 0x40000005, 0x2, 0x3}, {0x2, 0x6, 0x7, 0xa}, {0xb8c, 0x4, 0xc, 0x2c4}, {0x29a71716, 0xfffffffa, 0x1, 0x6}, {0x2, 0x5, 0xfffffff9}, {0x0, 0x1, 0x1002, 0x20000c}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) unveil(&(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='r\x00') ioctl$WSKBDIO_SETBACKLIGHT(r0, 0x800c5712, &(0x7f0000000040)) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x40006dd) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, 0x0, 0x0) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') chdir(&(0x7f0000000140)='./file0\x00') utimes(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000180)={{0x0, 0x4}, {0xa73, 0x4}}) r3 = kqueue() write(r3, 0x0, 0x0) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0/file0/../../file0\x00') open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x10000, 0x84) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0/../../file0\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x1) 204.887898ms ago: executing program 4 (id=49): r0 = syz_open_pts() pledge(&(0x7f0000000080)='\x00', &(0x7f0000000100)='%\x00') (async) pledge(&(0x7f0000000080)='\x00', &(0x7f0000000100)='%\x00') kqueue() setuid(0xee01) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000500)=0x7) 163.744049ms ago: executing program 7 (id=50): kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001}], 0x203, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) getpgrp() (async) r1 = getpgrp() fcntl$setown(r0, 0x6, r1) fcntl$setown(r0, 0x6, r1) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x3}}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x3}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) shutdown(r2, 0x2) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0xb, {0x0, 0x1}}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 163.051695ms ago: executing program 3 (id=51): sync() socket(0x24, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)=@in={0x2, 0x1}, 0xc, 0x0, 0x0, &(0x7f0000000700)}, 0x14) 158.962326ms ago: executing program 7 (id=52): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x20010, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) kevent(0xffffffffffffff9c, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffffc, 0xc, 0x4, 0x3ff, 0x3}, {{r1}, 0xfffffffffffffffd, 0x2, 0x4, 0x9, 0xffffffffffff0001}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x54, 0x80000000, 0x0, 0x8}, {{r3}, 0xfffffffffffffffe, 0x18, 0x40, 0x3ff, 0x3}], 0x3a4, &(0x7f0000000200)=[{{r4}, 0xfffffffffffffffa, 0x19, 0x0, 0x0, 0x5}, {{r5}, 0xfffffffffffffffd, 0x9, 0x4a, 0x7fff, 0x5}, {{r7}, 0xfffffffffffffffe, 0x82, 0x1, 0x4, 0x8}], 0x9, &(0x7f0000000280)={0x6, 0x2}) ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f00000002c0)={0x3, [0x0, 0x0, 0x0]}) pwrite(r0, &(0x7f0000000300)="769d581705cba5f157d3c83db2b4029491e7787d11d29baeeb2688cdb7dec1cc332bf522cf3d812f7a3258fe3611d8052fcd581830a820a83109ffe607356f4d1fc283ee76cd32d6d4b2996622465996610f2a29152b5830d356e10cac83305805395a3f415e6673d12e4e7a0cf3ad9b82ed8bff36cdea5f5da5173a9d72a9847de9ebd79e02fd9438040cc71720c439cf59a79e04d9b3e54ab99db1093605eb665124e33d4a450805cc1a8275591e8686ce35697db6f50b6c8c620d267df1df0a1e0d", 0xc3, 0x7) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) fcntl$getown(r8, 0x5) close(r7) r9 = fcntl$dupfd(r4, 0x0, r5) ioctl$KDMKTONE(r4, 0x20004b08, &(0x7f0000000440)=0x2) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) ioctl$FIONBIO(r9, 0x8004667e, &(0x7f0000000480)=0x100) kevent(r7, &(0x7f00000004c0)=[{{r5}, 0xfffffffffffffffd, 0x40, 0x2, 0xd12, 0xc959}], 0x800000, &(0x7f0000000500)=[{{r4}, 0xfffffffffffffffc, 0x25, 0x8, 0x0, 0x6}, {{r2}, 0xfffffffffffffffc, 0x1, 0x4, 0x7, 0x9}, {{r2}, 0xfffffffffffffff9, 0x1, 0x2, 0x2, 0x40}, {{r0}, 0xfffffffffffffff8, 0x86, 0x8, 0x8, 0x9}], 0x4, &(0x7f0000000580)={0x2, 0xfffffffffffffe00}) r10 = accept$inet(r4, 0x0, &(0x7f00000005c0)) r11 = fcntl$getown(r10, 0x5) ioctl$FIONREAD(0xffffffffffffff9c, 0x4004667f, &(0x7f0000000600)) r12 = dup(r2) ioctl$WSMUXIO_REMOVE_DEVICE(r12, 0x80085762, &(0x7f0000000640)={0x2, 0xc6}) close(0xffffffffffffff9c) ioctl$FIOGETOWN(0xffffffffffffff9c, 0x4004667b, &(0x7f0000000680)) mknod(&(0x7f00000006c0)='./file0\x00', 0xc000, 0x5) ioctl$TIOCMSET(r6, 0x8004746d, &(0x7f0000000700)=0xffffffff) bind$unix(r2, &(0x7f0000000740)=@abs={0x1, 0x0, 0x1}, 0x8) execve(&(0x7f0000000780)='./file0\x00', &(0x7f0000000a00)=[&(0x7f00000007c0)='*,-\x00', &(0x7f0000000800)='/dev/ttyCcfg\x00', &(0x7f0000000840)='.$\xd7[\x00', &(0x7f0000000880)='\x00', &(0x7f00000008c0)='/dev/diskmap\x00', &(0x7f0000000900)='#$@@-.\'\xc1%:\x00', &(0x7f0000000940)='/dev/wsmouse\x00', &(0x7f0000000980)='$.%[\x00', &(0x7f00000009c0)='/dev/vmm\x00'], &(0x7f0000000bc0)=[&(0x7f0000000a80)='-:\x00', &(0x7f0000000ac0)='/dev/bpf\x00', &(0x7f0000000b00)='\x00', &(0x7f0000000b40)='}\x00', &(0x7f0000000b80)='\x84\\}]\x00']) fcntl$setown(r3, 0x6, r11) getppid() 140.285944ms ago: executing program 4 (id=53): open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x20) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) r0 = open(&(0x7f00000005c0)='./file0\x00', 0x0, 0x46) (async) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x100, 0x1000009}, {0x21, 0x4bb48d52}], 0x2}) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='r\x00') (async) r2 = socket$inet(0x2, 0x3, 0x102) shutdown(r2, 0x2) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x139, 0x6}, 0x80000004, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x5644}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x18, 0x3, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r3, 0x2c, 0x2e, &(0x7f0000000600)="ebffcbdf13b9fd812eaa4e713048e69931929648092ac8ec024f99bf96d7016530ea8f0718ca1cf77fadee1bba439d59e4b3ef098cc818dbd4dc60add57c89481a1100000000954b564ab663910e052263d8036d5413ed01596229349242ffa81587139c75da7d9a39a3a018dff255ce933a28e87d5ac35a9b3ce3950eadb62a69ce70caf783b06e3443bcb836d400fce0fc76e9ee0dc1a0ec254b22ccdfddc294b16b66afb70d4ed171640c2a8478fc9e0c892b09c692cd6c58f30eea84c4660e4c3f8b8f8b25a8addb62c31f68440ef1c96be957a100469c4cdee8a41dac8c282cb49ec503458584870b6f0cae5b9706a4ada375d8694b1e2e130da4af368acdaa778461596517a608e2c4db43ec076022dd6b", 0x6c) (async) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (async) r6 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r6, 0x802069c3, &(0x7f0000000100)) r7 = kqueue() kevent(r7, &(0x7f00000000c0), 0x138, &(0x7f0000000100)=[{{}, 0xfffffffffffffff9, 0x1d, 0x0, 0x8100000000000000}], 0xffffffff, 0x0) (async) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000340)='O', 0x1}, {&(0x7f0000000180)='99', 0x2}], 0x2) (async) syz_emit_ethernet(0x147, &(0x7f0000000140)=ANY=[@ANYBLOB="df914a05a680aaaaaaaaaabb080041"]) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="000000003d1e6ed7eda0f59047bf65b18d7c51f78306ccffb4050000000000009dd52840fafd3493857d65d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) (async) r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$VNDIOCGET(0xffffffffffffffff, 0x81946466, &(0x7f0000000740)={'./file0/file0\x00', 0xffffffff, 0x8, 0xfffffffffffffff7}) (async) ioctl$TIOCSETA(r8, 0xc4504446, &(0x7f0000000740)={0x2, 0x8, 0xa9, 0xc, "0400000000800000ebb178d952d6d31962fff0d1", 0x9, 0x3}) (async) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104, 0x68}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000240)=""/18, 0x12}], 0x4, 0x0) 70.324166ms ago: executing program 3 (id=54): r0 = socket(0x1, 0x5, 0x0) close(r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) ioctl$WSKBDIO_GETMAP(r2, 0x40047477, &(0x7f0000000180)={0x0, 0x0}) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) write(r0, &(0x7f0000000200)="24bdfa5d1d2873c63e35348295b299ab09dbd0734449c365d05ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688a858b8cf6bbca32ec975d185cfcadf68ed7796e53e0000400007a20746f313da7dc6c5133407dbcafaea3077475df6575658bc77274869b4cf11d1374cacc8af0e650876593f6a8822b437639678a1cc3702368dc70dcf2429a7e1582005bed8a072a9c3310cdeeb79f221bda2b2cce0d51b12ea84e60e401ed6abbac6c034a7d182a13e31f491b6f62414871", 0x10099) socket(0x1, 0x5, 0x0) (async) close(r0) (async) close(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x200, 0x0) (async) fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) (async) ioctl$WSKBDIO_GETMAP(r2, 0x40047477, &(0x7f0000000180)={0x0, 0x0}) (async) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) write(r0, &(0x7f0000000200)="24bdfa5d1d2873c63e35348295b299ab09dbd0734449c365d05ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688a858b8cf6bbca32ec975d185cfcadf68ed7796e53e0000400007a20746f313da7dc6c5133407dbcafaea3077475df6575658bc77274869b4cf11d1374cacc8af0e650876593f6a8822b437639678a1cc3702368dc70dcf2429a7e1582005bed8a072a9c3310cdeeb79f221bda2b2cce0d51b12ea84e60e401ed6abbac6c034a7d182a13e31f491b6f62414871", 0x10099) (async) 68.799958ms ago: executing program 5 (id=55): sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0x8, 0x8, 0x10, [{0x0, 0x7, 0x0, 0x71000}, {0x7, 0x8b, 0x8, 0x7}, {0x8, 0x7, 0x0, 0x9}, {0x9, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x2, 0x27f3, 0x3, 0x3}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0xd6, 0xc, 0x7}, {0x2, 0x101, 0x5, 0x9}, {0x7, 0x100, 0xd1a, 0x1}, {0x1e7, 0x10001, 0xc, 0x80006}, {0x800, 0x9, 0x8, 0x6}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171a, 0x8, 0x53, 0x4}, {0xc, 0x8ca8, 0x1, 0xfffffffe}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f0000685000/0x3000)=nil, 0xd}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x4}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2fe}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc0206925, &(0x7f00000001c0)) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) syz_open_pts() mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)}) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f00000002c0)={0xa9b9, 0x1, 0x68, 0x4, 0x372, 0x645, 0xffffffb1, 0x10, [{0x10000, 0x1, 0x30000, 0xfcd9}, {0x3bb, 0xae, 0x4b19, 0x3}, {0x10000, 0x81, 0x400, 0x6}, {0x80000000, 0x10, 0x8001, 0xe}, {0x3, 0x2, 0x77, 0x2}, {0x8, 0xb1, 0x2, 0x4}, {0x6, 0x0, 0x9, 0x3}, {0x3, 0x9, 0x3, 0x1}, {0xfffffff9, 0x2, 0x5eb6, 0x4e08}, {0x2, 0x8, 0x6, 0x1ff}, {0x1ff, 0x3606cf7e, 0x87c, 0x6}, {0xfffffffa, 0x7db, 0x0, 0x2}, {0xff, 0x4, 0x9e6e, 0x5}, {0x1, 0x42a1, 0x5, 0x2343}, {0x5, 0x3, 0x15d, 0x400}, {0x6, 0xf, 0x8, 0x2}]}) mprotect(&(0x7f000059c000/0x400000)=nil, 0x400000, 0x2) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8007, 0x2000007, 0x101, 0x80000001, 0x80008001, 0x10001, 0x10, [{0x0, 0x9, 0x7, 0x71000}, {0xc, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x7, 0x3}, {0x401, 0x726, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x90099}, {0xcdf, 0x1, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x20008}, {0x2, 0x81, 0x1, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1, 0x10001, 0xc, 0x4d}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x6, 0x80000006}, {0x29a71717, 0xfffffffb, 0x6, 0x6}, {0x4, 0x7, 0x6}, {0x200, 0x1, 0x4, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x40000000000009, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) close(r2) socket(0x2, 0x4001, 0x0) r3 = socket(0x2, 0x4001, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r3, 0x2, r3) dup2(r3, r5) listen(r4, 0xb) 65.408748ms ago: executing program 6 (id=56): r0 = socket(0x2, 0x3, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = socket(0x2, 0x1, 0x0) setsockopt(r1, 0x6, 0x4, &(0x7f0000000140)="aef43c05", 0x4) r2 = socket(0x2, 0x2, 0x0) r3 = dup(r2) setsockopt$inet_opts(r3, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) r4 = dup2(r3, r0) sendto$unix(r4, 0x0, 0x0, 0x0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x1}, 0x8) 61.376156ms ago: executing program 7 (id=57): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, @multicast2}, @icmp=@echo={0x8, 0x0, 0x0, 0x0, 0x100}}}}}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto$unix(r3, &(0x7f0000000540)="b1000501600000041600000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c100002012010000de500000000000000000000001000000000000004cc3c82d193868db1f00000000000000", 0xfffffffffffffd7c, 0x404, 0x0, 0x0) close(r0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 54.164494ms ago: executing program 1 (id=58): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0x3, 0x4, 0x2f01, 0x4, 0x3, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xf, 0x8000, 0x5b, 0x4, 0x1fe, 0x0, 0x9, 0x2], [0x100000001, 0x2, 0x0, 0x0, 0xb, 0xffffffff, 0x8], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xffff, 0x2, 0x5}, {0x6, 0x2000008, 0xfffffffc, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x6, 0x2, 0x35f1f1b3, 0x8}, {0x0, 0x2007, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0x5, 0x80000000, 0x6d5, 0x2}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) r1 = socket$unix(0x1, 0x2, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x1d}]}) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x100) open(&(0x7f0000000180)='./bus\x00', 0x4900, 0x106) unlink(&(0x7f0000000380)='./bus\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x2, 0x0) r4 = socket(0x2, 0x400000000002, 0x0) setsockopt(r4, 0x0, 0x23, &(0x7f0000000180)="b1f5d915", 0x4) dup2(r4, r3) bind(r3, &(0x7f0000000000), 0x10) r5 = socket(0x2, 0x2, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) sendmsg$unix(r5, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r6 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r6, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0x8) r7 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r7) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x3f6, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x4}, 0x4, 0x361, 0x0, r7, 0x0, 0x4, 0x200, 0x6}) 6.18496ms ago: executing program 6 (id=59): openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000016000/0x3000)=nil, 0x3000, 0x4) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000af7000/0x4000)=nil, &(0x7f0000604000/0x2000)=nil}, {&(0x7f00004f8000/0x1000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil, 0x20000}, {&(0x7f0000987000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f00004f3000/0xa000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000690000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000b76000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000673000/0x2000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f000071b000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f00002e1000/0xc00000)=nil, 0x14b}, {&(0x7f00008c9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x5}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x6}, {&(0x7f00004f6000/0x2000)=nil, &(0x7f00009a6000/0x1000)=nil}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ead000/0x1000)=nil}], './file0\x00'}) r0 = getpid() open(&(0x7f0000000080)='./file0\x00', 0x615, 0x1) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40001738, r0) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xc, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x9, 0x900, 0xe}, {0x401, 0x200326, 0x8002800, 0x7}, {0x2, 0x27f3, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0x6, 0x801, 0xc, 0x7}, {0x2, 0x82, 0x4, 0x9}, {0x7, 0x100, 0xd1a, 0x1088}, {0x1e7, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1004, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r2 = socket(0x800000018, 0x3, 0x0) shutdown(r2, 0x2) symlink(&(0x7f0000002680)='./file0\x00', &(0x7f00000026c0)='./file0\x00') r3 = socket(0x2, 0x3, 0x0) recvmmsg(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=""/180, 0xb4}], 0x1, 0x0}, 0xfd}, 0x10, 0x1000, &(0x7f0000000300)={0x7, 0x1}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) readv(r4, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/148, 0x94}], 0x1) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) 5.53067ms ago: executing program 7 (id=60): sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000040)={0x2, 0x2, 0x1, 0x2, "cd0022000400", 0x40048000, 0x6}) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) setreuid(0x0, 0xee01) fchdir(r0) mkdir(&(0x7f0000000100)='./file1\x00', 0x20) chdir(&(0x7f0000000100)='./file0\x00') setreuid(0xee00, 0x0) r1 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) r2 = getuid() fchown(r1, r2, 0xffffffffffffffff) r3 = getuid() setreuid(0xee00, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) r5 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0xd) poll(&(0x7f0000000000)=[{r5, 0x1}, {r5, 0x1}], 0x2, 0x0) r6 = syz_open_pts() ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f00000008c0)=0x8) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r7 = socket(0x18, 0x3, 0x0) socket(0x18, 0x3, 0x3a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0x2}) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r7, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x10}, 0x400) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="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", 0x4) 3.9491ms ago: executing program 4 (id=61): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x33, &(0x7f0000000040)="ebffcbff", 0x4) mknod(0x0, 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0xfd, 0x80000001, 0x80000001, 0x10001, 0x10, [{0xfffffffe, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0xd, 0xfffffff9}, {0x8, 0x8000b86, 0xffffbf7d, 0x9}, {0x1002, 0x8800, 0x7, 0x4}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0xd8, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x8, 0x82, 0x50, 0x4}, {0x4, 0x3, 0xd1b, 0x88}, {0x1e0, 0x10001, 0xc, 0x3}, {0x7ff, 0xf, 0x9, 0x5}, {0xb8c, 0xc3a, 0x80, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6, 0xfffffff7}, {0xfffffffd, 0x2000009, 0x40004, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r2, 0xcd504406, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, "97a2224faf891c15ebb178926cc9795a6b47c1d1", 0x1000000}) recvmsg(r2, &(0x7f00000006c0)={&(0x7f0000000000)=@in, 0xc, &(0x7f0000000940)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f00000000c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/115, 0x73}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/230, 0xe6}, {&(0x7f0000000580)=""/253, 0xfd}, {&(0x7f0000000740)=""/232, 0xe8}, {&(0x7f0000000840)=""/210, 0xd2}], 0x9, &(0x7f0000000680)=""/7, 0x7}, 0x1000) close(r2) 0s ago: executing program 3 (id=62): sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, 0x0, 0x0, &(0x7f00000001c0), 0x0) (async) r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x84, 0x48e}, 0x0, 0x9, 0x0, 0x0, 0x40, 0xb000000000004000, 0x3, 0x1838}) (async) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x2}, 0x10, 0x1000, 0x0) (async) setitimer(0x0, &(0x7f0000000140)={{0x6, 0x100000000}, {0x31c6edcb, 0x40}}, &(0x7f0000000180)) (async) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_emit_ethernet(0x2a, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0xf9) close(r2) (async) r3 = kqueue() close(r3) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0x2, 0x8, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x4, 0x0, 0x0, 0x1, 0x7, 0x0, 0x2, 0x100], [0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0xb81], [0x8, 0x0, 0x8f, 0x0, 0x800000, 0x0, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffd], [{0x0, 0xc, 0x0, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0x0, 0xfff7fffe, 0x1000}, {0x1108, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x6, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x200, 0x8}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) (async) r4 = kqueue() kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000180)=[{{r4}, 0xffffffffffffffff, 0xdcd8c4bc089e63ad}], 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000000200)={0x9, 0x6}) (async) kevent(r4, &(0x7f0000000140)=[{{r5}, 0xfffffffffffffffe, 0x2c5d36d679bbff67}], 0xe4a, 0x0, 0xa9f9, 0x0) (async) kevent(r3, 0x0, 0x0, 0x0, 0x4, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) (async) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r7, 0xffff, 0x1024, &(0x7f0000001840)={0x0}, &(0x7f0000001880)=0xc) setpgid(0x0, r8) select(0x40, &(0x7f0000000040)={0x0, 0x4, 0x7, 0x8000000000000001, 0xffffffffffffffa5, 0x5, 0x3, 0xaeb3}, &(0x7f0000000080)={0xde4, 0x7, 0x1000, 0x1, 0x6, 0x6, 0x0, 0x4}, 0x0, &(0x7f0000000100)={0x0, 0x86c4}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. pckbd_enable: command error uvn_flush: obj=0xfffffd806b8ae400, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error uvm_fault(0xfffffd806ba45460, 0x18, 0, 1) -> e kernel: page fault trap, code=0 Stopped at mtx_enter+0x6e: movq 0(%r14),%rax TID PID UID PRFLAGS PFLAGS CPU COMMAND mtx_enter(18) at mtx_enter+0x6e clockintr_unbind(ffff800001499d30,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000149a980) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff80003c996d20) at dtclose+0xd9 spec_close(ffff8000389471d0) at spec_close+0x466 VOP_CLOSE(fffffd807e172ea0,1,fffffd8007bfb5b0,ffff80003c996d20) at VOP_CLOSE+0x129 vn_closefile(fffffd80758a95a0,ffff80003c996d20) at vn_closefile+0x11d fdrop(fffffd80758a95a0,ffff80003c996d20) at fdrop+0x121 closef(fffffd80758a95a0,ffff80003c996d20) at closef+0x190 fdfree(ffff80003c996d20) at fdfree+0x115 exit1(ffff80003c996d20,0,0,1) at exit1+0x576 sys_exit(ffff80003c996d20,ffff800038947530,ffff800038947480) at sys_exit+0x1a syscall(ffff800038947530) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76066a895050, count: 1 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xfffffd806ba45460, 0x18, 0, 1) -> e ddb> trace mtx_enter(18) at mtx_enter+0x6e clockintr_unbind(ffff800001499d30,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000149a980) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff80003c996d20) at dtclose+0xd9 spec_close(ffff8000389471d0) at spec_close+0x466 VOP_CLOSE(fffffd807e172ea0,1,fffffd8007bfb5b0,ffff80003c996d20) at VOP_CLOSE+0x129 vn_closefile(fffffd80758a95a0,ffff80003c996d20) at vn_closefile+0x11d fdrop(fffffd80758a95a0,ffff80003c996d20) at fdrop+0x121 closef(fffffd80758a95a0,ffff80003c996d20) at closef+0x190 fdfree(ffff80003c996d20) at fdfree+0x115 exit1(ffff80003c996d20,0,0,1) at exit1+0x576 sys_exit(ffff80003c996d20,ffff800038947530,ffff800038947480) at sys_exit+0x1a syscall(ffff800038947530) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76066a895050, count: -14 ddb> show registers rdi 0 rsi 0 rbp 0xffff800038947080 rbx 0 rdx 0 rcx 0xffff80003c996d20 rax 0xffff80003c996d00 r8 0xffffffffffffffff r9 0 r10 0x401532e112068d5 r11 0x18046796ccf18f6b r12 0x1 r13 0 r14 0x18 r15 0 rip 0xffffffff815d4e0e mtx_enter+0x6e cs 0x8 rflags 0x10297 __ALIGN_SIZE+0xf297 rsp 0xffff800038947050 ss 0x10 mtx_enter+0x6e: movq 0(%r14),%rax ddb> show proc PROC (syz-executor) tid=484389 pid=44188 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=77, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c996d20 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a81e018,0xffff80002a81efb8 process=0xffff8000ffff44a0 user=0xffff800038942000, vmspace=0xfffffd806ba45460 estcpu=27, cpticks=1, pctcpu=0.1, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 91967 289831 81548 0 2 0 syz-executor 91967 297062 81548 0 3 0x4000080 fsleep syz-executor 91967 399230 81548 0 3 0x4000080 fsleep syz-executor 34432 76064 11620 0 2 0x10 syz-executor 34432 471222 11620 0 3 0x4000090 fsleep syz-executor 7209 132639 1755 0 2 0 syz-executor 7209 153184 1755 0 2 0x4000000 syz-executor 11620 237123 4711 0 2 0xc82 syz-executor 24824 334383 4711 0 2 0x2 syz-executor 23454 244716 4711 0 2 0xc82 syz-executor 97995 87054 4711 0 2 0x2 syz-executor 81548 111176 4711 0 3 0x82 nanoslp syz-executor 81070 215893 4711 0 2 0x2 syz-executor 1755 131427 4711 0 2 0xc82 syz-executor 88351 174774 4711 0 2 0x10000c82 syz-executor 4711 208655 66239 0 3 0x82 kqread syz-executor 66239 390866 58956 0 3 0x10008a sigsusp ksh 58956 182133 96065 0 3 0x98 kqread sshd-session 96065 17794 59446 0 3 0x92 kqread sshd-session 29172 467188 1 0 3 0x100083 ttyin getty 59446 17490 1 0 3 0x88 kqread sshd 28640 259498 52345 73 3 0x1100090 kqread syslogd 52345 63677 1 0 3 0x100082 sbwait syslogd 27789 168968 1 0 3 0x100080 kqread resolvd 62676 501960 96850 77 3 0x100092 kqread dhcpleased 74316 516071 96850 77 3 0x100092 kqread dhcpleased 96850 110055 1 0 3 0x80 kqread dhcpleased 84260 97345 0 0 3 0x14200 bored smr 50592 441677 0 0 2 0x14200 zerothread 61094 410551 0 0 3 0x14200 aiodoned aiodoned 79132 54917 0 0 3 0x14200 syncer update 48906 289359 0 0 3 0x14200 cleaner cleaner 12073 308090 0 0 3 0x14200 reaper reaper 82585 281545 0 0 3 0x14200 pgdaemon pagedaemon 17516 351102 0 0 3 0x14200 bored viomb 34529 347125 0 0 3 0x40014200 acpi0 acpi0 23906 97872 0 0 3 0x14200 bored softnet7 58975 510728 0 0 3 0x14200 bored softnet6 69427 159864 0 0 3 0x14200 bored softnet5 49156 184127 0 0 3 0x14200 bored softnet4 77540 215721 0 0 3 0x14200 bored softnet3 37527 350434 0 0 3 0x14200 bored softnet2 78576 353273 0 0 3 0x14200 bored softnet1 3498 336621 0 0 3 0x14200 bored softnet0 82572 387107 0 0 3 0x14200 bored systqmp 64214 379072 0 0 3 0x14200 bored systq 63519 379494 0 0 3 0x40014200 tmoslp softclock 76718 469104 0 0 3 0x40014200 idle0 1 381680 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10181 11061K 12401K 166960K 11650 0 pcb 17 12K 12K 166960K 30 0 rtable 205 5K 5K 166960K 259 0 pf 30 12K 13K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 32 17K 17K 166960K 32 0 ioctlops 0 0K 4K 166960K 36 0 iov 0 0K 12K 166960K 7 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1423 90K 90K 166960K 1483 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 14 49K 97K 166960K 192 0 sigio 0 0K 0K 166960K 3 0 proc 60 59K 124K 166960K 485 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 7 0 in_multi 99 7K 7K 166960K 103 0 ether_multi 1 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 355 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 196 158K 168K 166960K 3195 0 UVM aobj 5 2K 2K 166960K 5 0 pinsyscall 35 70K 96K 166960K 1224 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 6 0 NDP 11 0K 2K 166960K 27 0 temp 35 8630K 8694K 166960K 7160 0 kqueue 13 20K 24K 166960K 27 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 72 0 69 2 0 2 2 0 8 1 rtentry 136 95 0 1 4 0 4 4 0 8 0 unpcb 144 82 0 64 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 22 0 12 1 0 1 1 0 8 0 arp 88 10 0 0 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 1 0 0 1 0 1 1 0 8 0 inpcb 328 101 0 88 2 0 2 2 0 8 0 ip6q 72 1 0 1 1 0 1 1 0 8 1 ip6af 40 2 0 2 1 0 1 1 0 8 1 nd6 104 16 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 436 0 0 28 0 28 28 0 8 0 art_table 40 437 0 0 5 0 5 5 0 8 0 art_node 32 95 0 11 1 0 1 1 0 8 0 semapl 112 1 0 0 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1648 0 143 95 0 95 95 0 8 0 ffsino 256 1649 0 143 95 0 95 95 0 8 0 nchpl 144 1922 0 245 63 0 63 63 0 8 0 uvmvnodes 80 1835 0 0 38 0 38 38 0 8 0 vnodes 216 1835 0 0 102 0 102 102 0 8 0 namei 1024 5728 0 5725 2 0 2 2 0 8 1 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 6879 0 6879 8 0 8 8 1 8 8 plimitpl 152 31 0 15 1 0 1 1 0 8 0 sigapl 424 476 0 429 7 0 7 7 0 8 1 knotepl 120 5283 0 5236 10 0 10 10 0 8 8 kqueuepl 184 31 0 21 1 0 1 1 0 8 0 pipepl 304 105 0 78 3 0 3 3 0 8 0 fdescpl 448 456 0 430 5 0 5 5 0 8 1 filepl 120 1707 0 1488 11 0 11 11 0 8 3 lockfpl 104 25 0 23 1 0 1 1 0 8 0 lockfspl 48 13 0 11 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 29 0 13 1 0 1 1 0 8 0 ucredpl 104 189 0 177 1 0 1 1 0 8 0 zombiepl 144 431 0 429 1 0 1 1 0 8 0 processpl 1152 476 0 429 5 0 5 5 0 8 1 procpl 664 581 0 530 6 0 6 6 0 8 1 sockpl 552 259 0 225 5 0 5 5 0 8 2 mcl64k 65536 3 0 3 1 0 1 1 0 8 1 mcl16k 16384 2 0 2 1 0 1 1 0 8 1 mcl8k 8192 5 0 5 1 0 1 1 0 8 1 mcl4k 4096 2514 0 2463 13 0 13 13 0 8 6 mcl2k 2048 230 0 226 3 0 3 3 0 8 2 mtagpl 96 5 0 4 1 0 1 1 0 8 0 mbufpl 256 4320 0 4164 13 0 13 13 0 8 1 bufpl 280 2932 0 117 202 0 202 202 0 8 0 anonpl 24 105141 0 102272 44 0 44 44 0 187 22 amapchunkpl 152 9679 0 9309 30 0 30 30 0 158 12 amappl16 200 1890 0 1873 5 0 5 5 0 8 3 amappl15 192 5 0 5 1 0 1 1 0 8 1 amappl14 184 109 0 99 1 0 1 1 0 8 0 amappl13 176 4 0 4 1 0 1 1 0 8 1 amappl12 168 1066 0 1040 2 0 2 2 0 8 0 amappl11 160 43 0 33 1 0 1 1 0 8 0 amappl10 152 4 0 4 1 0 1 1 0 8 1 amappl9 144 261 0 260 1 0 1 1 0 8 0 amappl8 136 16 0 15 1 0 1 1 0 8 0 amappl7 128 102 0 92 1 0 1 1 0 8 0 amappl6 120 172 0 169 1 0 1 1 0 8 0 amappl5 112 112 0 106 1 0 1 1 0 8 0 amappl4 104 266 0 249 1 0 1 1 0 8 0 amappl3 96 1560 0 1477 3 0 3 3 0 8 0 amappl2 88 607 0 553 2 0 2 2 0 8 0 amappl1 80 8077 0 7535 13 0 13 13 0 8 1 amappl 88 2553 0 2423 4 0 4 4 0 92 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 456 0 430 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 456 0 430 1 0 1 1 0 8 0 vmmpekpl 168 5159 0 5129 2 0 2 2 0 8 0 vmmpepl 168 35064 0 33404 83 0 83 83 0 357 4 vmsppl 368 455 0 430 4 0 4 4 0 8 1 rwobjpl 40 14329 0 11698 27 0 27 27 0 8 0 pdppl 4096 918 0 860 96 30 66 82 0 8 8 pvpl 32 229039 0 221362 110 0 110 110 0 265 38 pmappl 216 455 0 430 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 366 0 30 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace mtx_enter(18) at mtx_enter+0x6e clockintr_unbind(ffff800001499d30,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000149a980) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff80003c996d20) at dtclose+0xd9 spec_close(ffff8000389471d0) at spec_close+0x466 VOP_CLOSE(fffffd807e172ea0,1,fffffd8007bfb5b0,ffff80003c996d20) at VOP_CLOSE+0x129 vn_closefile(fffffd80758a95a0,ffff80003c996d20) at vn_closefile+0x11d fdrop(fffffd80758a95a0,ffff80003c996d20) at fdrop+0x121 closef(fffffd80758a95a0,ffff80003c996d20) at closef+0x190 fdfree(ffff80003c996d20) at fdfree+0x115 exit1(ffff80003c996d20,0,0,1) at exit1+0x576 sys_exit(ffff80003c996d20,ffff800038947530,ffff800038947480) at sys_exit+0x1a syscall(ffff800038947530) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76066a895050, count: -14 ddb> machine ddbcpu 1 No such command ddb> trace mtx_enter(18) at mtx_enter+0x6e clockintr_unbind(ffff800001499d30,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000149a980) at dt_ioctl_record_stop+0xbc dtclose(11e5f,1,2000,ffff80003c996d20) at dtclose+0xd9 spec_close(ffff8000389471d0) at spec_close+0x466 VOP_CLOSE(fffffd807e172ea0,1,fffffd8007bfb5b0,ffff80003c996d20) at VOP_CLOSE+0x129 vn_closefile(fffffd80758a95a0,ffff80003c996d20) at vn_closefile+0x11d fdrop(fffffd80758a95a0,ffff80003c996d20) at fdrop+0x121 closef(fffffd80758a95a0,ffff80003c996d20) at closef+0x190 fdfree(ffff80003c996d20) at fdfree+0x115 exit1(ffff80003c996d20,0,0,1) at exit1+0x576 sys_exit(ffff80003c996d20,ffff800038947530,ffff800038947480) at sys_exit+0x1a syscall(ffff800038947530) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76066a895050, count: -14