last executing test programs: 10.888296793s ago: executing program 1 (id=119): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x38a}) r0 = syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x3, 0xf) getsockopt$sock_int(r1, 0xffff, 0x200, 0x0, 0x0) close(r0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x100, 0x87) fcntl$getown(r2, 0x5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) writev(r4, &(0x7f0000000640)=[{0x0}], 0x1) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) r5 = syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) acct(&(0x7f0000000080)='./file0\x00') readv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000200)=""/184, 0xb8}, {&(0x7f00000002c0)=""/119, 0x77}], 0x3) r6 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r6, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r6, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000400", 0x7}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0x1c, 0x18, 0x2, 0x7fff, "00000000000000000000000006000400", 0x40000ad}, 0x1c) close(r5) socket(0x11, 0x3, 0x0) 10.682351125s ago: executing program 1 (id=124): mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) open$dir(&(0x7f0000000300)='./bus\x00', 0x200, 0x186) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0xc2) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt(r1, 0x0, 0x2, 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x20007461) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000400)=0x7ffffffd) chflagsat(r0, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) 9.998758852s ago: executing program 1 (id=129): r0 = syz_open_pts() readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4081, 0xffffff89}], 0x1) r1 = socket(0x11, 0x3, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba", 0x83, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r1, &(0x7f0000000000)="b1000503000004000000000105000000331c01040100008000000000ff0100007ae302fffe4e3039d2d236acf20b7810be38164991f7c8cf5f881029ffffff7fda0000510100ad090000006c0000009b672f4d335c223e7d0c032bfa896443a42102000000720fc18bfbb670c1f5a8b67114d66e2ec589040000000000800078e36b361b1257aea8063076000000000000000004bfba353e537e2ba37f50b609f4f707e37183f834371205d1a7f1c057aa", 0xb1, 0x804, 0x0, 0x39) (async, rerun: 32) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000300)={0x1000, 0x1, 0xdbfffffe, 0xfffe, "da08904abf7752ded1cc503aeeefde29b800", 0x800, 0x2}) (rerun: 32) syz_open_pts() (async) setegid(0x0) (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0x200079, 0x6, 0xeffd, 0x4de, "5901fe000000000000000074772b00bcf3585900", 0x809, 0x5}) 9.989629411s ago: executing program 4 (id=105): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) (async, rerun: 64) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async, rerun: 64) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000000080)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x8, 0x3}, 0x0, 0x23, 0x0, 0x5, 0x3, 0xff, 0x8, 0x2, 0x528}) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="82e22d9d7d8b9abd6f266c6529a26689749676f2f46cd024121cab6e96f0982841ebd6ca0ecf5694631f162f05cfadd5f35a338b3ff5dc53f44f0b3cbea31967d1b5e4c39c6e0bdbf63e25", 0x4b}], 0x1) sysctl$hw(&(0x7f0000000000)={0x7, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) select(0x40, &(0x7f0000000500)={0x8, 0xf, 0x3, 0x9, 0x1, 0xfffffffffffffffa, 0x3}, &(0x7f0000000540)={0xffffffffffff0001, 0x45d, 0x5, 0x5, 0x1, 0xfffffffffffffff7, 0x9, 0x2}, &(0x7f0000000580)={0xa6d, 0x1, 0x1, 0x6, 0xf69, 0xf, 0x1, 0x388352e}, &(0x7f0000000600)={0x1ff000000, 0xfa6}) (async) ioctl$BIOCIMMEDIATE(r1, 0x8010427e, &(0x7f0000000040)=0x8) sysctl$hw(&(0x7f0000000000)={0x6, 0xd}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) pselect(0x40, &(0x7f0000000440)={0x4, 0x4, 0x5, 0x4, 0x17, 0x1, 0x7, 0x4}, &(0x7f00000005c0)={0x2, 0x8, 0xfffffffffffffffd, 0xfffffffe, 0xce, 0x6, 0x9, 0x3}, 0x0, 0x0, 0x0) 9.42042058s ago: executing program 6 (id=100): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x3}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x5}, {0x2, 0x91}, {}, {0x0, 0x4000001}, {0x3, 0x1}, {0x3, 0x10000000}, {0x0, 0x8a}, {0x3, 0x2}, {0x3, 0xffff}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x1, 0x200060}]}) (async) sysctl$net_inet_tcp(&(0x7f0000001540)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001580), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000002b00fe8000000000000000000000000000bb000000000000000001"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xffb, 0x4e, 0x2100009, 0x5c0, 0x1, 0x3ff, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x7bb, 0x2901f03c}, {0x1000008, 0x8, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000002, 0x99}, {0xce1, 0x5, 0x4f8, 0x3}, {0x6, 0x300, 0x55, 0x40000007}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x7ffd, 0x0, 0x8001}, {0x1cf, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0xb8c, 0x5, 0xc, 0xf}, {0x29a71717, 0x80, 0x1, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x8000001, 0x101002, 0xf}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) minherit(&(0x7f00006cd000/0x1000)=nil, 0x1000, 0x1) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) setuid(0xee01) (async) setgid(0xffffffffffffffff) (async) mmap(&(0x7f000032c000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x7) (async) pwrite(r0, &(0x7f0000000340)="95fec5b49352a04cfc39ebbad4e702d848982f9ff7bf08bb2ed4fe1b163819dc8f31a549cb7b2695f4940ed92ad8e0c3f75b0a6e2a896f558c1ae1596ff6359905c8336b4e857e61290724de13", 0x4d, 0x7) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91504694a14b8e5f84cf71b59c7afec34f82", &(0x7f0000000080)=0x1fde, 0x0, 0xffffffffffffff06) 9.241271149s ago: executing program 4 (id=105): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) (async, rerun: 64) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async, rerun: 64) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000000080)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x8, 0x3}, 0x0, 0x23, 0x0, 0x5, 0x3, 0xff, 0x8, 0x2, 0x528}) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="82e22d9d7d8b9abd6f266c6529a26689749676f2f46cd024121cab6e96f0982841ebd6ca0ecf5694631f162f05cfadd5f35a338b3ff5dc53f44f0b3cbea31967d1b5e4c39c6e0bdbf63e25", 0x4b}], 0x1) sysctl$hw(&(0x7f0000000000)={0x7, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) select(0x40, &(0x7f0000000500)={0x8, 0xf, 0x3, 0x9, 0x1, 0xfffffffffffffffa, 0x3}, &(0x7f0000000540)={0xffffffffffff0001, 0x45d, 0x5, 0x5, 0x1, 0xfffffffffffffff7, 0x9, 0x2}, &(0x7f0000000580)={0xa6d, 0x1, 0x1, 0x6, 0xf69, 0xf, 0x1, 0x388352e}, &(0x7f0000000600)={0x1ff000000, 0xfa6}) (async) ioctl$BIOCIMMEDIATE(r1, 0x8010427e, &(0x7f0000000040)=0x8) sysctl$hw(&(0x7f0000000000)={0x6, 0xd}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) pselect(0x40, &(0x7f0000000440)={0x4, 0x4, 0x5, 0x4, 0x17, 0x1, 0x7, 0x4}, &(0x7f00000005c0)={0x2, 0x8, 0xfffffffffffffffd, 0xfffffffe, 0xce, 0x6, 0x9, 0x3}, 0x0, 0x0, 0x0) 8.560978637s ago: executing program 1 (id=149): chmod(&(0x7f0000000040)='.\x00', 0x35e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) setresgid(r1, r1, 0x0) getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0]) setresgid(r3, r2, r4) setuid(0xee01) open(&(0x7f0000000080)='./file0\x00', 0x615, 0x1) setuid(0xffffffffffffffff) sysctl$hw(0x0, 0x0, &(0x7f0000000000)="06c7a681d33082", 0x0, 0x0, 0x0) r5 = socket(0x18, 0x3, 0xa5) ioctl$FIONREAD(r5, 0x8020697a, &(0x7f0000000000)) r6 = semget$private(0x0, 0x4, 0x9c) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r7, 0x0, 0x64, &(0x7f0000000000)="01000000", 0x4) setsockopt(r7, 0x0, 0x65, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x38a}) r8 = syz_open_pts() close(r8) syz_open_pts() sysctl$kern(0x0, 0x0, &(0x7f0000000080)="d71e1d40", &(0x7f0000001440)=0x4, 0x0, 0x0) writev(r8, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000040)="ab", 0x1}], 0x1) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f00000023c0)={{0x0, 0x0, 0x0, 0x0, 0x186, 0x1002, 0x0, 0x0, 0x200000802d4faac7}, 0x0, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0xffffffffffffffff}) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x577, 0x0, 0x0, 0x57e8, 0x0, 0x6}) open$dir(&(0x7f0000000300)='./bus\x00', 0x200, 0x186) rename(&(0x7f0000000140)='./bus\x00', &(0x7f0000000040)='./file0\x00') openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x20, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) preadv(r9, &(0x7f0000000580)=[{&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/186, 0xba}], 0x3, 0xd824) 8.356423419s ago: executing program 6 (id=100): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x3}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x5}, {0x2, 0x91}, {}, {0x0, 0x4000001}, {0x3, 0x1}, {0x3, 0x10000000}, {0x0, 0x8a}, {0x3, 0x2}, {0x3, 0xffff}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x1, 0x200060}]}) (async) sysctl$net_inet_tcp(&(0x7f0000001540)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001580), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000002b00fe8000000000000000000000000000bb000000000000000001"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xffb, 0x4e, 0x2100009, 0x5c0, 0x1, 0x3ff, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x7bb, 0x2901f03c}, {0x1000008, 0x8, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000002, 0x99}, {0xce1, 0x5, 0x4f8, 0x3}, {0x6, 0x300, 0x55, 0x40000007}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x7ffd, 0x0, 0x8001}, {0x1cf, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0xb8c, 0x5, 0xc, 0xf}, {0x29a71717, 0x80, 0x1, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x8000001, 0x101002, 0xf}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) minherit(&(0x7f00006cd000/0x1000)=nil, 0x1000, 0x1) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) setuid(0xee01) (async) setgid(0xffffffffffffffff) (async) mmap(&(0x7f000032c000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x7) (async) pwrite(r0, &(0x7f0000000340)="95fec5b49352a04cfc39ebbad4e702d848982f9ff7bf08bb2ed4fe1b163819dc8f31a549cb7b2695f4940ed92ad8e0c3f75b0a6e2a896f558c1ae1596ff6359905c8336b4e857e61290724de13", 0x4d, 0x7) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91504694a14b8e5f84cf71b59c7afec34f82", &(0x7f0000000080)=0x1fde, 0x0, 0xffffffffffffff06) 7.374410756s ago: executing program 4 (id=105): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) (async, rerun: 64) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async, rerun: 64) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000000080)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x8, 0x3}, 0x0, 0x23, 0x0, 0x5, 0x3, 0xff, 0x8, 0x2, 0x528}) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="82e22d9d7d8b9abd6f266c6529a26689749676f2f46cd024121cab6e96f0982841ebd6ca0ecf5694631f162f05cfadd5f35a338b3ff5dc53f44f0b3cbea31967d1b5e4c39c6e0bdbf63e25", 0x4b}], 0x1) sysctl$hw(&(0x7f0000000000)={0x7, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) select(0x40, &(0x7f0000000500)={0x8, 0xf, 0x3, 0x9, 0x1, 0xfffffffffffffffa, 0x3}, &(0x7f0000000540)={0xffffffffffff0001, 0x45d, 0x5, 0x5, 0x1, 0xfffffffffffffff7, 0x9, 0x2}, &(0x7f0000000580)={0xa6d, 0x1, 0x1, 0x6, 0xf69, 0xf, 0x1, 0x388352e}, &(0x7f0000000600)={0x1ff000000, 0xfa6}) (async) ioctl$BIOCIMMEDIATE(r1, 0x8010427e, &(0x7f0000000040)=0x8) sysctl$hw(&(0x7f0000000000)={0x6, 0xd}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) pselect(0x40, &(0x7f0000000440)={0x4, 0x4, 0x5, 0x4, 0x17, 0x1, 0x7, 0x4}, &(0x7f00000005c0)={0x2, 0x8, 0xfffffffffffffffd, 0xfffffffe, 0xce, 0x6, 0x9, 0x3}, 0x0, 0x0, 0x0) 7.332988757s ago: executing program 6 (id=100): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x3}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x5}, {0x2, 0x91}, {}, {0x0, 0x4000001}, {0x3, 0x1}, {0x3, 0x10000000}, {0x0, 0x8a}, {0x3, 0x2}, {0x3, 0xffff}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x1, 0x200060}]}) (async) sysctl$net_inet_tcp(&(0x7f0000001540)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001580), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000002b00fe8000000000000000000000000000bb000000000000000001"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xffb, 0x4e, 0x2100009, 0x5c0, 0x1, 0x3ff, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x7bb, 0x2901f03c}, {0x1000008, 0x8, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000002, 0x99}, {0xce1, 0x5, 0x4f8, 0x3}, {0x6, 0x300, 0x55, 0x40000007}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x7ffd, 0x0, 0x8001}, {0x1cf, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0xb8c, 0x5, 0xc, 0xf}, {0x29a71717, 0x80, 0x1, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x8000001, 0x101002, 0xf}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) minherit(&(0x7f00006cd000/0x1000)=nil, 0x1000, 0x1) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) setuid(0xee01) (async) setgid(0xffffffffffffffff) (async) mmap(&(0x7f000032c000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x7) (async) pwrite(r0, &(0x7f0000000340)="95fec5b49352a04cfc39ebbad4e702d848982f9ff7bf08bb2ed4fe1b163819dc8f31a549cb7b2695f4940ed92ad8e0c3f75b0a6e2a896f558c1ae1596ff6359905c8336b4e857e61290724de13", 0x4d, 0x7) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91504694a14b8e5f84cf71b59c7afec34f82", &(0x7f0000000080)=0x1fde, 0x0, 0xffffffffffffff06) 5.538080835s ago: executing program 5 (id=168): sendmsg(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xe) clock_getres(0x4, &(0x7f0000000040)) clock_gettime(0x2, &(0x7f0000000000)) r0 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r0, 0x20007461) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) read(r1, &(0x7f0000000440)=""/163, 0xa3) close(r0) socket$inet(0x18, 0x3, 0x102) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x8, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000100)="638802000000339afe51f6f2efa24a85abdd612dd68e59ad6679a213fecf9323100084410a8591426ee03e", 0x2b}, {&(0x7f0000000680)="a2", 0x1}, {&(0x7f00000000c0)="18650297d18c27e873c79572d4f2bfb4353a8723c00f8d8f510dc48a7e4dcefb5b31d161f05858", 0x27}, {&(0x7f0000000140)="86f6aa55af14d56b3a5580666e1a47d7ec17a65b6474e07ebd23503ea17cf136f831ad3003de755321d6520dbadba8728abf3beb3a3207da2157f7aff79ad2a742f2901bf3990d2dd665abeb50b00178ad3c75129fe698aa646047f5d1ec60a3aff6e12f6ecb5f27364b08edf91529690ddf39fba728b6b84da27a8cc2d79c425b39355533a17f472d08bb9ade62d24cb70c0837c66b1b1509b85f68eb00afb35a117b05d73c3563e491f416b35971aff0d538d162e274", 0xb7}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="35987bd1ddb5e179f422ccc0a236a3db2420ace9b876e6e8995c769f39614d1f0c40bc3bb37a2401cebe9c70190fcdbd7fadc587ec462dbcd50782897e9e3da73375a9a287c995adc10280c30717488bfa131bf66a9cb81545d4b2424437c1acf1ff1053f2ad948dedece95295c32e44af634c502afe49d6f187", 0x7a}], 0x6, 0x0}, 0x402) 5.436339898s ago: executing program 7 (id=171): unveil(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='r\x00') kevent(0xffffffffffffffff, &(0x7f0000000b40)=[{{}, 0xfffffffffffffff6, 0x37, 0xe0432b098f4ec41f, 0x3, 0x7}], 0x1, 0x0, 0x9, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000080)={0x10, 0x9, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000279000/0x2000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffff822d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x73}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xb}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000565000/0x4000)=nil, 0x800000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffffff89}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x6c6}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, 0xffffffff}], './file0\x00', 0x5, 0x9, 0x0, 0x8, [0x9, 0x7, 0x6, 0x4, 0x0, 0x3ff, 0x2, 0x8, 0xfff, 0x10003, 0x7, 0x401, 0x1, 0x9, 0x4, 0x8, 0x298, 0x5, 0x100, 0x5, 0x8, 0x7, 0x5, 0xffff, 0x1, 0x8, 0x7, 0x9, 0x5e5, 0x6, 0x0, 0xb677, 0x7f, 0x8, 0xa094, 0x6, 0x100, 0x2, 0x1, 0x4, 0x1, 0x9248, 0x100, 0xb, 0x10000, 0x51, 0xfffffffe, 0x81, 0xa, 0x6, 0xd19d, 0xf, 0x24, 0xabf4, 0x6, 0x3, 0x100, 0x4, 0x2, 0x2, 0xd1, 0xb, 0x4, 0xfffffffe, 0x5, 0x6, 0x7, 0x2, 0x7, 0x5, 0x7, 0xfffffff4, 0x4, 0xb370, 0x2, 0x0, 0x2, 0x3ff, 0xfba, 0x7, 0x0, 0x5, 0x40000007, 0x51, 0xfff, 0xb9, 0x7, 0x5, 0xf, 0x0, 0x1, 0xbe000000, 0x2, 0x1, 0x8, 0xfffffffb, 0x0, 0x7063, 0xa, 0x6, 0x3c, 0xa23d, 0x80000001, 0x8, 0x8, 0x9, 0x2, 0x1, 0x6, 0xbc6, 0x5, 0x6, 0x1, 0x2, 0xffe, 0x2, 0x7fffffff, 0x4, 0xffff, 0x5, 0xfffffffc, 0xa000, 0x9, 0x3, 0x3ff, 0x1, 0xd7d9, 0x100, 0xb, 0x1, 0x9, 0x79, 0x2, 0x5, 0xa, 0xb, 0x3, 0x2, 0x5, 0x7, 0xf, 0x9, 0x8001, 0x80000000, 0x52f, 0x5, 0x2, 0x6, 0x5, 0x7a9f, 0xcf, 0x0, 0xea3c, 0xffff, 0x8, 0x4, 0x0, 0x3, 0xffffffff, 0x2, 0x9, 0x4, 0x80, 0xf5a, 0x200, 0xfffffc8f, 0x2, 0x5, 0x5, 0x101, 0x0, 0xaf, 0x8, 0x4, 0x1, 0x2, 0x2, 0x6, 0x7fd, 0x7, 0x6, 0x7fff, 0x6, 0x800, 0x24, 0x9, 0x5, 0x8, 0x48, 0x64a, 0x5, 0x7c, 0x2204fbed, 0x0, 0x8, 0x1, 0x1, 0x800, 0x9, 0x92f9, 0x0, 0x0, 0x32, 0xe04d, 0x4, 0x2, 0xc, 0x1ff, 0x2, 0x8, 0x9, 0x9229, 0x0, 0xb0, 0xc, 0xe11, 0x891a74b, 0xd39, 0x2, 0x9, 0xe73, 0x6, 0x7, 0x9, 0x7fffffff, 0x5, 0x0, 0x2d5, 0xfffffff7, 0xc74c, 0xff, 0x8, 0x6, 0x4, 0x8a, 0x8, 0x2, 0x4774, 0x7, 0x8003, 0x7, 0x81, 0x3, 0x8, 0x1, 0x2, 0xb, 0x8e6, 0x5, 0x6, 0x80, 0x2, 0x7f, 0xe, 0x80000000, 0x4, 0x4, 0x9, 0x1, 0x1, 0x9, 0x180, 0x401, 0x7, 0x10000, 0x81, 0x4c1, 0x3, 0x6, 0x4, 0xf7ffffff, 0x12000, 0x10001, 0x99, 0xba8, 0x1, 0xfffffffb, 0xa, 0x1, 0x200, 0x7, 0x0, 0x80, 0x8, 0xef2f, 0x9, 0x0, 0x0, 0xffffffd6, 0x80, 0x1b, 0x7f, 0x0, 0x0, 0x1, 0x1, 0x7, 0xffff, 0x99, 0x8, 0x8, 0xe, 0xfff, 0x3, 0x8, 0x3, 0x8, 0xfffffe00, 0x8000, 0x8, 0xd, 0x1, 0x6, 0x5, 0x0, 0x2, 0x401, 0xbf73, 0x3, 0x7ff, 0x0, 0x5, 0xf, 0x0, 0x4, 0xfffffffc, 0x5, 0xa, 0x6, 0x2, 0x800, 0x2, 0x1006, 0x80000000, 0xed, 0x2, 0x7, 0x8, 0x0, 0x6, 0xfffffff9, 0x7, 0x9, 0xffffffff, 0x0, 0x9, 0x1ff, 0xfa7, 0x6, 0x5, 0x9, 0x2c, 0x2, 0xffffffff, 0x7, 0x8, 0x80000000, 0x4ef69553, 0xf, 0xe80, 0x7fffffff, 0x5, 0x1, 0x1, 0x2, 0x61, 0xc, 0x9, 0x800, 0x2, 0x100, 0xfffffffa, 0x2, 0x1, 0x10000, 0x5, 0x51, 0x8, 0xfffffff8, 0x1, 0x5ed, 0x2, 0x9, 0x4, 0x2, 0x8003, 0xdf, 0x5, 0x6, 0x5, 0x4d7e, 0x5, 0x6, 0x62e4, 0x9, 0x7ff, 0x101, 0x5c, 0x95, 0x6, 0xe, 0xe14, 0x6, 0x8, 0x3, 0x101, 0x5, 0x8001, 0x81, 0x0, 0x1, 0x4, 0x1, 0xa, 0xfffffffa, 0x1000, 0xfff, 0x7fff, 0x75da, 0xd8e3, 0x1, 0xb1a, 0x7c, 0x8, 0x9, 0x80000000, 0x9, 0x0, 0x4, 0xd, 0x7, 0xfffffffa, 0x1, 0x1, 0x3, 0x2, 0x50b, 0x10000, 0x5, 0x80e, 0x4, 0xd92, 0x4, 0x40, 0x3, 0xd59, 0x2, 0x4, 0xa53d, 0x8, 0x7, 0xb63, 0xd, 0x4, 0x2, 0x1, 0x5, 0x10, 0x8001, 0x0, 0x8, 0x4, 0x2, 0x9, 0x8001, 0x7fffffff, 0x9, 0x4, 0x4, 0x4, 0x8, 0xffffffff, 0x7f, 0x7fffffff, 0x4, 0x3, 0x7, 0x7, 0x8, 0x10000, 0xb, 0xbb5c, 0x3, 0xa, 0x80000001, 0x3, 0x132, 0x80000001, 0x5, 0xa, 0x9, 0x0, 0x80000000, 0x200, 0xa, 0xa0d, 0xff, 0x4, 0xe, 0x1e46c000, 0x9, 0xe, 0xb, 0xfffffffd, 0xf2, 0x7, 0x1000, 0x9, 0x9, 0x1000, 0x5, 0x80000001]}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1c5) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) setgroups(0x0, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, 0x0) (async) setitimer(0x1, &(0x7f0000000140)={{0x1, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "200000000a4fc6d700", 0x8, 0x6}) (async) socket$unix(0x1, 0x1, 0x0) (async) r1 = socket$inet(0x18, 0x3, 0x102) sendmsg(r1, 0x0, 0x402) (async) openat$vmm(0xffffffffffffff9c, 0x0, 0x40, 0x0) setuid(0xffffffffffffffff) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x88) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async) socket(0x18, 0x2, 0x0) (async) getpeername$inet6(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) r3 = kqueue() kevent(r3, &(0x7f0000000540)=[{{}, 0xfffffffffffffff6, 0x93, 0x85019b080740e49b, 0x2, 0x8}], 0x138, 0x0, 0xffffffff, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x200, 0x12) 5.435964996s ago: executing program 7 (id=172): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f4) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket(0x1, 0x8002, 0x1) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r3, &(0x7f0000000300)={{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/20}, {&(0x7f00000003c0)=""/184}, {&(0x7f0000000480)=""/124}], 0x0, &(0x7f0000000000), 0xfffffffffffffedd}, 0x800}, 0x10, 0x1840, 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x20) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x200, 0x268) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x8000000000000002, 0x10002f0000002}) fchown(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 5.385541785s ago: executing program 6 (id=100): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x3}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x5}, {0x2, 0x91}, {}, {0x0, 0x4000001}, {0x3, 0x1}, {0x3, 0x10000000}, {0x0, 0x8a}, {0x3, 0x2}, {0x3, 0xffff}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x1, 0x200060}]}) (async) sysctl$net_inet_tcp(&(0x7f0000001540)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001580), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000002b00fe8000000000000000000000000000bb000000000000000001"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xffb, 0x4e, 0x2100009, 0x5c0, 0x1, 0x3ff, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x7bb, 0x2901f03c}, {0x1000008, 0x8, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000002, 0x99}, {0xce1, 0x5, 0x4f8, 0x3}, {0x6, 0x300, 0x55, 0x40000007}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x7ffd, 0x0, 0x8001}, {0x1cf, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0xb8c, 0x5, 0xc, 0xf}, {0x29a71717, 0x80, 0x1, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x8000001, 0x101002, 0xf}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) minherit(&(0x7f00006cd000/0x1000)=nil, 0x1000, 0x1) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) setuid(0xee01) (async) setgid(0xffffffffffffffff) (async) mmap(&(0x7f000032c000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x7) (async) pwrite(r0, &(0x7f0000000340)="95fec5b49352a04cfc39ebbad4e702d848982f9ff7bf08bb2ed4fe1b163819dc8f31a549cb7b2695f4940ed92ad8e0c3f75b0a6e2a896f558c1ae1596ff6359905c8336b4e857e61290724de13", 0x4d, 0x7) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91504694a14b8e5f84cf71b59c7afec34f82", &(0x7f0000000080)=0x1fde, 0x0, 0xffffffffffffff06) 5.18168087s ago: executing program 4 (id=105): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) (async, rerun: 64) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async, rerun: 64) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000000080)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x8, 0x3}, 0x0, 0x23, 0x0, 0x5, 0x3, 0xff, 0x8, 0x2, 0x528}) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="82e22d9d7d8b9abd6f266c6529a26689749676f2f46cd024121cab6e96f0982841ebd6ca0ecf5694631f162f05cfadd5f35a338b3ff5dc53f44f0b3cbea31967d1b5e4c39c6e0bdbf63e25", 0x4b}], 0x1) sysctl$hw(&(0x7f0000000000)={0x7, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) select(0x40, &(0x7f0000000500)={0x8, 0xf, 0x3, 0x9, 0x1, 0xfffffffffffffffa, 0x3}, &(0x7f0000000540)={0xffffffffffff0001, 0x45d, 0x5, 0x5, 0x1, 0xfffffffffffffff7, 0x9, 0x2}, &(0x7f0000000580)={0xa6d, 0x1, 0x1, 0x6, 0xf69, 0xf, 0x1, 0x388352e}, &(0x7f0000000600)={0x1ff000000, 0xfa6}) (async) ioctl$BIOCIMMEDIATE(r1, 0x8010427e, &(0x7f0000000040)=0x8) sysctl$hw(&(0x7f0000000000)={0x6, 0xd}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) pselect(0x40, &(0x7f0000000440)={0x4, 0x4, 0x5, 0x4, 0x17, 0x1, 0x7, 0x4}, &(0x7f00000005c0)={0x2, 0x8, 0xfffffffffffffffd, 0xfffffffe, 0xce, 0x6, 0x9, 0x3}, 0x0, 0x0, 0x0) 4.630747817s ago: executing program 3 (id=174): r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000040)={0x9d, 0x2, 0x8, 0x2776, "77e0397a71fa18b86c20df471b7fd02f379c3341", 0xfffffffb, 0x3ff}) setreuid(0xee00, 0x0) r1 = getuid() r2 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) chmod(&(0x7f0000000100)='./file0\x00', 0xe0) r3 = kqueue() kevent(r3, &(0x7f0000000000)=[{{r2}, 0xfffffffffffffffc, 0x59, 0x2, 0x2}], 0x7, 0x0, 0xa924, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r1, r4) setuid(r1) r5 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSBRK(r5, 0x2000747b) 4.235821972s ago: executing program 5 (id=175): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000080)={&(0x7f0000000000)=[{0x6, 0x6}, {0x5, 0x2}], 0x2}) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) fcntl$dupfd(r1, 0x0, r1) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f0000000180)={&(0x7f0000000100)='./file0\x00', 0x71c, &(0x7f0000000140)='./file0\x00', 0x8}) ioctl$DIOCSETSYNCOOKIES(r2, 0xc0014462, &(0x7f0000000200)=0x2) 4.235100454s ago: executing program 0 (id=176): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x1, 0x0) setgid(0xffffffffffffffff) setuid(0xffffffffffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) setgid(r2) lseek(r1, 0xb66, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x3, 0x1, 0x1, 0x3}, {0x40, 0x9, 0x7, 0x10000}, {0x9b1e, 0x6, 0x10, 0x3}]}) syz_emit_ethernet(0x22, &(0x7f0000000140)={@random="485e0600", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x41, 0x0, 0x3, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}}}}}) r4 = getegid() setresgid(r4, 0x0, r4) ioctl$FIONREAD(r0, 0x80606955, &(0x7f00000001c0)) 4.234693549s ago: executing program 2 (id=177): chmod(&(0x7f0000000080)='.\x00', 0x3db) setuid(0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000340)=@file={0xd1653077bafa0114, 0x1}, 0x2) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x3, 0xffffffff, 0xffffffc0, 0x8623, "0100012d29fb000700000000098002005e00", 0x2}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dee2ebb83bdabb1a482a434cb226982b61251875ea9f8e163607cd9028623c57c3bbc52fe4f81316b8b8755cef4e4e912eb503dc2228e788dd2dbd04bd5ed71ab13d7f6f79c5c413165778144c7e4e262a62458a76d2b9c9e85925d5dc7d4fc91bce47ad6346d3b25d14db3432fa96810273b7670a", 0x75}], 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) access(&(0x7f0000000040)='./file0\x00', 0x1) 4.23417557s ago: executing program 3 (id=178): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x40, 0xb, 0x8, 0x6}, {0x84, 0x7, 0x63, 0x1001}, {0x1b1e, 0x4, 0xff, 0x1fffff}]}) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[]) setresuid(0x0, 0xee00, 0x0) r2 = socket(0x2, 0x1, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r3 = syz_open_pts() mknod(&(0x7f0000000540)='./file0\x00', 0x2000, 0x5200) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x102) read(r4, &(0x7f0000000280)=""/35, 0x23) close(r3) r5 = open(&(0x7f0000000000)='./bus\x00', 0x8, 0x80) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f00000000c0)=0x4) select(0x7, &(0x7f00000002c0)={0xfffffffffffffffc}, 0x0, 0x0, 0x0) setsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) close(r0) syz_open_pts() r6 = open$dir(&(0x7f0000000040)='./bus\x00', 0x80, 0x82) writev(r6, &(0x7f0000000840)=[{&(0x7f0000000200)="9ab017d37757b32347b38c7d4394ba2d4612711c38ae2c4dc960dc8e17c88eb6849f9e9c22776d189182794ae8c1609c12f2997126929d43d9e42a2477db4a8f7781f7eeaaf2881888c2f89ee2e7fe0cba94ee38347b89fef320bd68be3acce5cc70e2b057071fa63ea0ec53791e41b8cedc006ccd8176afa1091a92404d03ee0935bcd3f7cc705f2a70e82ff0be029e48891dbbd3bde81be9f07f799019a0aadf69a0", 0xa3}, {&(0x7f0000000300)="262fdc655f5cfaca1d6e87cd65295f9e8bac9d6871492f77bd737fd8076adbad3d3bf8e851f6d51519f1a805cd3bc854", 0x30}, {&(0x7f0000000340)="25d81a277e81ea9c68223c7057fe5377cf4830b4b861131e5c2e5239fe1a7255055cc46fe0871777612358e3b5885d124e40a4d8f403d4e36c74d8cf22c57318", 0x40}, {&(0x7f0000000380)="745ae0c1c5c7a98d7edde2439ee688885fb3fadd62463edd462f10", 0x1b}, {&(0x7f00000003c0)="41dc49ef77fe8bfe5b81bd5f022a63d8be71fc116061aeed546a84acb96c3defcee036442c53d27ef5a70ea4bda212e8df3b03166e26663f51c9bbebaf344ba18147f783a07f4777624bc6771c6341d6c59f0af7263977c385d7bd9e07c571eb39e1372f7df0bd6e75f4aae53d2abf433731e54c7f7fe0b6246b3ba811cbeca3187b37301b08b5c8cb7e06f93e7463ea30a90d9ea214add8337dea7b40d645222589a0e5e6b9cbe4e71de9decc0e964838d2621309ab7465c355b621d78b3754f78dacc081dfa55287945f7a5adb584ed527e0e45660dd1ca3821326c415314aa68281eecfe1ca11ce358d3ba36ebc5c9327e5", 0xf3}, {&(0x7f00000004c0)="8a03ed8bb3ab99277e7c68a314f24344b457126456d941bf9520e7b92c67d007b25b51c1daadcfe586944d367380b5fb11c5c1ccc137cf011fc96d1174f1717266449b2d553bf18602ef76f70492cdf3c605dc7440290340b6c5eb69095720b272e0e9", 0x63}, {&(0x7f00000005c0)="bbf5486cfa3d7b55869dba6fb130c946b790876a891bc9353b3784aca6aa6f34e4304b7dacf56cb1324cf0c2677c725b4f506cd9f6929978e8eae5b63599007da8e07e7d7c70f6108cab496aac2b4a5bdb6a472d521647a3832e43e8a0bbdbd1f9b6ff", 0x63}, {&(0x7f0000000740)="eb03bee81415ce5685dc51b3f097b1f257c92f08ad0b7ce633eb27f843ca97059f9d57d639e4867e305062bdfe82417b989adf77e6984d968976d3e4939577baa666a934cbad405ee2b1fe11f7c6ad1d5b750561a1e3a94c63714b97c5f1e5579ab47e4769d5b43576620be233c639252a76549867869e90ee87abe8054de5e16c55b2363a0fd2190a377f8f6c8b78d5abfe6f2f3904e223a4512acf34f8a134598156abb1cd62a7e8e18e1ece06def74fdcb6348b0ed936dc82b2f47f554abf60f5890eb67953b5", 0xc8}], 0x8) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x4, 0x7ffffffe, 0x180007, 0x86a1a3, "bb080006020900d910040801b7cd0d8c00004000", 0x5, 0x8}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) socket$unix(0x1, 0x1, 0x0) r7 = socket(0x18, 0x2, 0x0) setsockopt(r7, 0x1000000000029, 0x9, &(0x7f0000000080)='\t\x00\x00\x00', 0x4) connect(r7, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x8f38, "ffe54a09470300261febf2fc8dc83304", 0x1}, 0x1c) write(r7, &(0x7f00000000c0)="9389af2ab4d1ffd84d59ef02ccf591b28729514cf815e6c544a38332209a0410c0bd409e77392e039c305e667ce28c286812a924cf1c6779785940e784d43baa74cbb496b837b6c4ee78797dfb9001005beec530760d408a50e9c15fe0c618a65e99760a88e894c309fdccab10f5f4073a000200005b92615ffc5a78cb44ad3fc1074ac73cf64dd2e390435ba494664134fccc3e66863018f27559b05717536a0e928733e2dc023c66531bbd74467a2a7b72e545ed3dc03c502a65c1778bb49f9dd231eec6fcc7db6c1c815710dbcb8000"/219, 0xdb) 4.233910857s ago: executing program 6 (id=100): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x3}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x5}, {0x2, 0x91}, {}, {0x0, 0x4000001}, {0x3, 0x1}, {0x3, 0x10000000}, {0x0, 0x8a}, {0x3, 0x2}, {0x3, 0xffff}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x1, 0x200060}]}) (async) sysctl$net_inet_tcp(&(0x7f0000001540)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001580), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000002b00fe8000000000000000000000000000bb000000000000000001"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xffb, 0x4e, 0x2100009, 0x5c0, 0x1, 0x3ff, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x7bb, 0x2901f03c}, {0x1000008, 0x8, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000002, 0x99}, {0xce1, 0x5, 0x4f8, 0x3}, {0x6, 0x300, 0x55, 0x40000007}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x7ffd, 0x0, 0x8001}, {0x1cf, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0xb8c, 0x5, 0xc, 0xf}, {0x29a71717, 0x80, 0x1, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x8000001, 0x101002, 0xf}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) minherit(&(0x7f00006cd000/0x1000)=nil, 0x1000, 0x1) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) setuid(0xee01) (async) setgid(0xffffffffffffffff) (async) mmap(&(0x7f000032c000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x7) (async) pwrite(r0, &(0x7f0000000340)="95fec5b49352a04cfc39ebbad4e702d848982f9ff7bf08bb2ed4fe1b163819dc8f31a549cb7b2695f4940ed92ad8e0c3f75b0a6e2a896f558c1ae1596ff6359905c8336b4e857e61290724de13", 0x4d, 0x7) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91504694a14b8e5f84cf71b59c7afec34f82", &(0x7f0000000080)=0x1fde, 0x0, 0xffffffffffffff06) 4.01152395s ago: executing program 2 (id=179): sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000001500), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) (async) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x10000, 0x0) (async) kill(0xffffffffffffffff, 0xe) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000340)={0xc9, 0xffffffee, 0xe150, 0xfffffffd, "000f0000e1e5c867c07b7d280000000000f70080"}) (async) mknod(0x0, 0x2000, 0x1e60) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, &(0x7f00000001c0)={0x0, 0x800, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x4000000000, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000011f000/0x3000)=nil, 0x401}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000551000/0x3000)=nil, 0x2}, {&(0x7f000029b000/0x11000)=nil, &(0x7f00001c2000/0x4000)=nil, 0x800}, {&(0x7f00000a9000/0x1000)=nil, &(0x7f000072c000/0x3000)=nil, 0xe}, {&(0x7f000025b000/0x1000)=nil, &(0x7f000058e000/0x2000)=nil, 0x6}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000401000/0x1000)=nil, 0x1b8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00001dd000/0x2000)=nil, 0x2}, {&(0x7f000021f000/0x1000)=nil, &(0x7f000011b000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x10000000f977}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xd}, {&(0x7f00004c3000/0x4000)=nil, &(0x7f000038f000/0x4000)=nil, 0x7}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00006b4000/0x11000)=nil, 0x1000009}, {&(0x7f0000108000/0x11000)=nil, &(0x7f0000714000/0x3000)=nil, 0xa8}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffffff8001}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00006c9000/0x1000)=nil, 0x5b3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001000/0x800000)=nil, 0x400000000005}], './file0\x00', 0x1, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4000, 0xfffffffe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff76, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80]}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCNATLOOK(r1, 0xc0504417, &(0x7f0000000140)={@v4, @v4, @v6=@mcast1, @v6=@mcast1, 0x2, 0x9, 0xfff, 0xb, 0x4, 0x7, 0x18, 0x3, 0x3}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setuid(0xffffffffffffffff) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x20000000000001fe, &(0x7f00000000c0)=[{0xfffe}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0xfffffffd}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2db) ioctl$BIOCSETIF(r2, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETIF(r2, 0x40384900, 0x0) (async) ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0x801c4903, &(0x7f00000000c0)={0x6, '.\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r4 = syz_open_pts() writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1c) (async) closefrom(r3) 4.011169367s ago: executing program 0 (id=180): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x6, 0x1, './file0\x00'}, 0x19) listen(r0, 0xe) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r2, &(0x7f0000000600)={{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/174, 0xae}, {&(0x7f00000003c0)=""/44, 0x2c}], 0x2, 0x0}, 0x800}, 0x38, 0x842, 0x0) shmctl$IPC_RMID(0xffffffffffffffff, 0x0) kqueue() dup2(r2, r3) 4.010794053s ago: executing program 4 (id=105): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) (async, rerun: 64) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async, rerun: 64) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000000080)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x8, 0x3}, 0x0, 0x23, 0x0, 0x5, 0x3, 0xff, 0x8, 0x2, 0x528}) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="82e22d9d7d8b9abd6f266c6529a26689749676f2f46cd024121cab6e96f0982841ebd6ca0ecf5694631f162f05cfadd5f35a338b3ff5dc53f44f0b3cbea31967d1b5e4c39c6e0bdbf63e25", 0x4b}], 0x1) sysctl$hw(&(0x7f0000000000)={0x7, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) select(0x40, &(0x7f0000000500)={0x8, 0xf, 0x3, 0x9, 0x1, 0xfffffffffffffffa, 0x3}, &(0x7f0000000540)={0xffffffffffff0001, 0x45d, 0x5, 0x5, 0x1, 0xfffffffffffffff7, 0x9, 0x2}, &(0x7f0000000580)={0xa6d, 0x1, 0x1, 0x6, 0xf69, 0xf, 0x1, 0x388352e}, &(0x7f0000000600)={0x1ff000000, 0xfa6}) (async) ioctl$BIOCIMMEDIATE(r1, 0x8010427e, &(0x7f0000000040)=0x8) sysctl$hw(&(0x7f0000000000)={0x6, 0xd}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) pselect(0x40, &(0x7f0000000440)={0x4, 0x4, 0x5, 0x4, 0x17, 0x1, 0x7, 0x4}, &(0x7f00000005c0)={0x2, 0x8, 0xfffffffffffffffd, 0xfffffffe, 0xce, 0x6, 0x9, 0x3}, 0x0, 0x0, 0x0) 3.627771863s ago: executing program 0 (id=181): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x4e, 0x2100009, 0x5c0, 0x1, 0x3, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x2, 0x71001}, {0x9, 0xc, 0x1, 0x2901f03c}, {0x1000008, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x203, 0x2000002, 0x99}, {0xce1, 0x15, 0x4f8, 0xa}, {0x6, 0x300, 0x55, 0x40000008}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x8001, 0x0, 0x103}, {0x1cc, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0x7, 0x5, 0x200008, 0xb}, {0x29a71717, 0x80, 0x0, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x8000001, 0x101002, 0x30004}]}) writev(0xffffffffffffffff, 0x0, 0x0) (async) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000000140)={0x0, 0x1000002, 0x405, 0x1, 0xfeffffff, 0xa}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x2, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x41, &(0x7f0000000000), 0x14) fcntl$setflags(r0, 0x2, 0x4) r3 = syz_open_pts() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x2ff, 0x100000001}) (async) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x2ff, 0x100000001}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x1, 0x4001, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) (async) close(r6) socket(0x18, 0x5001, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x2, 0x4) fcntl$lock(r3, 0x9, &(0x7f00000001c0)={0x3, 0x2, 0x20000000000008, 0x300000001}) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000000240), 0x0) 3.627272555s ago: executing program 2 (id=182): r0 = syz_open_pts() syz_open_pts() mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) kqueue() ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f00000000c0)={0x9, 0x62c8ab76, 0x6, 0x10001, "af4f2f873602d7d8bbd6280e28714383ad1315a8", 0x1, 0x5}) syz_open_pts() r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7952) writev(r1, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) ktrace(&(0x7f0000000000)='./bus\x00', 0x1, 0x40000c08, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x2812, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[@cred={0x18}, @cred={0x18, 0xffff, 0x0, 0x0, 0x0, r3}], 0x30, 0x2}, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r4, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "200000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x7}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc0286988, &(0x7f00000001c0)) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000280)={0x80, 0x4e52, 0x2, 0x4, "7916b913124c93b0ba9eb46ee5727c66a6eb7210", 0xf1, 0x4c3}) 3.62696923s ago: executing program 3 (id=183): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) sendto$inet(r0, &(0x7f0000000000)="2090d25ca173b304a228b3c68c3fc185ccaa0766de45b107601843ce6245ba05ef77a3f418bce74579c0818ce1bb4f48e8", 0x31, 0x4, &(0x7f0000000040)={0x10, 0x2, 0x2, 0x9}, 0x10) 3.626736202s ago: executing program 5 (id=184): mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040), 0x4) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000200)={0x5, 0x6, 0x2, 0x7b3d, 0x8001, 0x800, 0x7, 0x10, [{0x9, 0xb0c3, 0x4, 0x40}, {0x1df, 0x9, 0x8000, 0x2}, {0x0, 0x4, 0x3d9e, 0x4}, {0x7f, 0x3, 0x6, 0x100}, {0xef4, 0x2, 0xb1a, 0x7fff}, {0xfffffffc, 0x82, 0x35, 0x32}, {0x8, 0x3, 0x2, 0x158}, {0x4, 0x9, 0x9, 0x800}, {0x2b, 0x152, 0x4, 0x80000000}, {0x355, 0xad7, 0x2, 0xbf36}, {0x70c5946e, 0x3, 0xf, 0x75c4f107}, {0x7, 0xd3, 0x800, 0x1b18}, {0x0, 0xd, 0xfffffffb, 0x1}, {0x5, 0xa, 0x10001, 0x7}, {0xf3, 0x40, 0x2, 0x12b6}, {0x2, 0x81, 0x5, 0x1}]}) 1.671511944s ago: executing program 7 (id=185): shutdown(0xffffffffffffff9c, 0x1) r0 = open(&(0x7f0000000000)='./file0\x00', 0x20, 0x184) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) r3 = kqueue() r4 = syz_open_pts() r5 = socket$unix(0x1, 0x5, 0x0) r6 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000240), 0x10000, 0x0) sendmsg$unix(r0, &(0x7f00000002c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x0, 0x2}, 0x8, &(0x7f0000000180)=[{&(0x7f0000000080)="deb088bffa854be0cf23743cf14e22d806907e0062eff33695f7b906c2fe48a71e738ff0c7a10c1a5e346b7ca236207670af22fc22e10dd554dbf1390e0a66516b8545716b297c2aeac0f233d6735e163d7a9df21c669891d8840a69e4570d2bbfdf7469e39902a5d09977cc1f377a6299362cf69570689cf220634ed5139de40f264f5b21e8e36d6a7e4fd51a27b4777e64872f050bccf5d5292bba5ae6e4983fbc5202d975b691e9e29980e1a0f12b8d8bb35d6fa1a2445e04b879b4a834b8acd14390c3974165e14b7740d95832cd5821220eb9f04247f4c1c7613483", 0xde}], 0x1, &(0x7f0000000280)=[@rights={0x28, 0xffff, 0x1, [r1, r2, r3, r4, r5, 0xffffffffffffffff, r6]}], 0x28, 0x409}, 0x4) ioctl$VT_GETSTATE(r0, 0x40067664, &(0x7f0000000300)) getresuid(&(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)=0x0) chown(&(0x7f0000000340)='./file0\x00', r7, 0xffffffffffffffff) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f0000000440)) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) setitimer(0x0, &(0x7f0000000480)={{0x1, 0x10}, {0x8000, 0x9}}, &(0x7f00000004c0)) ioctl$TIOCMBIC(r4, 0x8004746b, &(0x7f0000000500)=0x6) getsockopt$sock_int(r5, 0xffff, 0x1021, &(0x7f0000000540), &(0x7f0000000580)=0x4) getresuid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000680)={0xff, 0x37, 0x200, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$WSDISPLAYIO_GMODE(r0, 0x4004574b, &(0x7f0000000700)) ioctl$VT_GETSTATE(r0, 0x40067664, &(0x7f0000000740)) closefrom(r8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) r10 = accept4(r9, 0x0, &(0x7f00000007c0), 0x6000) sendmsg(r10, &(0x7f0000000e80)={&(0x7f0000000800)=@in6={0x1c, 0x18, 0x0, 0x4, "f4369bed5ffa50aa0aeebc2e2f092864", 0xfffffffd}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000840)="7401155bf628e0f69019b3ee0fa7183f4322a5583df2740ee7789d595d2d2dfba00dcc473cb02e184e1d7609810bed345e6cab198c3ddda55ea8e1fdefa32d547d0c6121603ab6d35f8f62688aeeccd72540687f6604f325f932213dfc53a70f30bea9e567dbd332e060eb0b7501a5bdf2e8eadd558178e833badba3", 0x7c}, {&(0x7f00000008c0)="ae75483c48f0f23ac03a2ebe5e8c1bcb7c089b0a16084ca0b852c086867c51d265cd3c00931d41e1ab7f2836ec0b8225d7281e0d3028b1bdc06e10a29f5f3f50066878021031f082991179d9cbd534b2967743468179b7fe98aeb66063513fc50c6311ab589a5da1c1426a45a921e6e08f6508692950c72282c576ee52b7b62008dc0abcd5b9405ee13d1c5c983aabe555f476347342e7ddf5844d9de9b88728067efb8d3a5208e8aa56e57692c4993073be52d72d5c7a2b0909", 0xba}], 0x2, &(0x7f00000009c0)=[{0x58, 0x1, 0x100, "7afe1b79de5fbb8f6f6f53b7a93232569395ff7b327b39b3ed198f8a245e7d3265005346a84c8364c314d6ee3fb54cbe7405b3c18189fa3d15472a67526620eee7bb25432d65113a55"}, {0xa4, 0xffff, 0xc, "ede8a418c8216a7d32a93b69f537aeae6eab0d272b19a13796b6a975785323d5f89247172d960bf2b6f18129c6fdb5c04ae8653d21c88588df73dcdb3e49517c17ecb41e9c837f9d4d09dd04c44e4e19f6fab9ff3481785b50634349168f849b406d5ba12df48ed6880b7cb970bba075f5ecdb084855fa477507da97e1b0bfc3f1af001ae285aea47e18ce31226336c8878314ed50b0"}, {0x108, 0xffff, 0x8001, "4987dcbc005fa151b1c6f769afebe27576e2c0c8f7e350dc14733a96c595baa037037185aeaed11329e6ad48ed8bda9479f60fbfe7c817d28b19dd9eaca4d57a7f04d0e11e2aefe4640c927bbd428d772e9c82f244f48f43c64d8f9d2232d19366b76206908c87ccd7c025b098e585b9c0c95831a1d18226ce349c1775aa0116bb3de5d4fe09136ae889d6645f99d69d503900177461732fdab5e4a1a1f7c20497db855e11757b1a34160afca8dd98e368bdb9a79a88e9eec130c54bd4ca6bc85f863b3515959c320fc2724c7b8f1e664584c03b25b68745cceaca125a00b546f344804a662b38f7a0eb11ba7b94f7a346785e2807275b7db1"}, {0x18, 0x1, 0x40, "b37b8ef64bf13cd473"}, {0x84, 0xffff, 0xfff, "3ce6bb66a1037d53ed7c9db023afbd5290962f00419ff62b7aa5f9f095ae08ad344b31a613039af8f19df93ad0ff7ce1ff5330713d06ed3d56a80f7ba51bee6ec12db328cab308c78a3cdfbd07d8bec568087b82ee6002d60a1ab0c3bfde606dbfa0e2141e38a7da58e356004eb48bcf88e3bfc12e65"}, {0xfc, 0x1, 0x3, "3d97e5e89314b397646769da82611695db27cf0609fc5a3c4ab2ab2679dbb08246649395c63cfb31df2325cc312457b76773f9437678f08b9fdd6cab4c45a7881595217322657d721acc2ddca7096e92e87fd2a5e81a83150d05d3469f14d3de3562379381acc2e2fcddc55430398276cb359dbd82c04dc4fa76585916bfd80dda75d815e1a7c4b7a41f1c6e5ca37d4332dd5cb1537d0bc5a8e7c413b8fd469e024f5a20af42bad8b12849780964e02b116a13b92927f0eba90abbe670d986740c51b9726b878ecafa5708b1cc56e2e5d87018959d4195c98f821f30991b4cf85c2e9e35232563745bb8c982d7e9"}, {0xb8, 0xffff, 0xfffffbff, "6dd2d9cd686e3487953bae6aabb233ff0298bade7169fad9725fc2b1358aa95cf81e48afa532fe5aa0996fb4bd42da3f33f3519bd532df49184e8706546281f5a7f20059f4cfdd1efa5a31b6d65f9ee67f1635cf7dec742ff811729f7d898e2ea00b81be5234897795a980f609731e7b4e60d42bdddbdd40cf76ea6a7b8a9665af42f26947c1a0000886e24789f90f0cf48b26814b595605f67b262b84f2c9d5a3b3288e47568dde11f846"}, {0x64, 0xffff, 0x1, "587de451c4f6ba1800b950a4f5bae1c8aed8f31a07b9a0efe8b2bd3775672577b1e0c50495f4361f10e0a72f759fcc1ecb93d7b9991b9482452d3343df566edc8f8b2ee0d51951de1955a95e31e096f959e6533fc04391"}], 0x4b8}, 0x2) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ec0)=""/40, 0x28}, {&(0x7f0000000f00)=""/29, 0x1d}, {&(0x7f0000000f40)=""/37, 0x25}], 0x3, &(0x7f0000000fc0)=""/60, 0x3c}, 0x0) ioctl$AUDIO_GETDEV(r0, 0x4030411b, &(0x7f0000001040)) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000001080)={'./file0\x00', 0xbb, 0x5, 0x8000, 0x0, 0x4, 0x7, 0x554, 0x2, 0x0, 0x50b7, 0xffff}) accept4(0xffffffffffffffff, &(0x7f0000001180)=@un=@file={0x0, 0x0, ""/503}, &(0x7f0000001380)=0x1f9, 0x6000) 1.629492937s ago: executing program 0 (id=186): sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x18}, 0x4, 0x0, 0x0, &(0x7f0000000180), 0x0) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x24, 0x2, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') readlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x7c110232708317ba) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffe, 0x0, 0x20002, 0x100200000, 0x6, 0x17, 0xdf60, 0xfffffffffffffffe, 0x80, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x3], [0xfffffffffffffffe, 0x80000001, 0x0, 0x20000001, 0x5e, 0x7, 0x80000000000001fe, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x1], [0x100000003, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xd, 0x10001], [{0x3, 0x0, 0xfffffffe, 0x8000000000007d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x1, 0x7, 0x80}, {0x3, 0x4, 0x9, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x7, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9, 0x100000000000000}, {0x10, 0x100, 0x1, 0x4}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x1}}}) r0 = socket(0x18, 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000280)={0x3, &(0x7f0000000080)=[{0x7, 0x3, 0x1, 0x9}, {0x2c, 0x9, 0x8, 0x9}, {0x9b1e, 0x2, 0x0, 0x1}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[]) sendmmsg(r0, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000000000000000000000000001", 0x6}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) 1.629000951s ago: executing program 1 (id=187): sysctl$net_inet_icmp(&(0x7f00000000c0)={0x4, 0x12, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x6b}, 0x2, &(0x7f0000000140)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec3708252b5a1d1d326527759e5a8193817d1dc0057ca984496ab09b8a7e3dedb847519821627807b35dc9727860cfb54b7683d3ba8698ba2a968112efa8edb71224fe8b93fff47067ce2c838d6cc38947e3f877fcd5f52ac1c66dc698f1efdcedd2b7e387cc62eb3f45e42c34b45e5f23fbbe73fbbe207ed5673db00f905c98358a09865d8f50cef35268a38d423ea0f958206c42136dce96a8d57d457751579c5e4d0d95a1e82dc92ac0f4dcff1719712707d1f50ea39a8b998f838867387210a668d00"/231, &(0x7f0000000080)=0xe7, 0x0, 0x0) (async) setuid(0xee01) (async) r0 = syz_open_pts() fchmod(r0, 0xc92) 1.628703241s ago: executing program 2 (id=188): sysctl$net_inet6_icmp6(&(0x7f00000000c0)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000080)="ad", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = dup2(r0, r0) ioctl$SPKRTONE(r1, 0x80085301, &(0x7f0000000380)={0x3, 0x80000001}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) 1.337251742s ago: executing program 3 (id=189): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0x0, 0x0, ""/2}, &(0x7f0000000080)=0x4) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x2040a, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r3 = dup3(r0, r1, 0x10000) r4 = socket(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f00000001c0)={0x10, 0x2, 0x2, 0x200000e3}, 0x10) (async) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0x4) (async, rerun: 64) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0x4) (async, rerun: 64) mmap(&(0x7f0000404000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000234000/0x3000)=nil, 0x3000, 0x5, 0x11, 0xffffffffffffffff, 0x0) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x3db) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$LIOCSFD(r5, 0x80046c7f, &(0x7f0000000000)=r6) (async) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000140)=0x3) (async, rerun: 32) chdir(&(0x7f0000000180)='./file0\x00') (async, rerun: 32) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='c\x00') (async) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r7, 0x0) (async) ftruncate(r7, 0x8531) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) sysctl$hw(&(0x7f0000000000)={0x6, 0xc}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (rerun: 32) 1.336975136s ago: executing program 4 (id=105): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) (async, rerun: 64) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async, rerun: 64) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$DIOCRCLRADDRS(r0, 0xc4504442, &(0x7f0000000080)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x8, 0x3}, 0x0, 0x23, 0x0, 0x5, 0x3, 0xff, 0x8, 0x2, 0x528}) (async) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="82e22d9d7d8b9abd6f266c6529a26689749676f2f46cd024121cab6e96f0982841ebd6ca0ecf5694631f162f05cfadd5f35a338b3ff5dc53f44f0b3cbea31967d1b5e4c39c6e0bdbf63e25", 0x4b}], 0x1) sysctl$hw(&(0x7f0000000000)={0x7, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x10000, 0x0) select(0x40, &(0x7f0000000500)={0x8, 0xf, 0x3, 0x9, 0x1, 0xfffffffffffffffa, 0x3}, &(0x7f0000000540)={0xffffffffffff0001, 0x45d, 0x5, 0x5, 0x1, 0xfffffffffffffff7, 0x9, 0x2}, &(0x7f0000000580)={0xa6d, 0x1, 0x1, 0x6, 0xf69, 0xf, 0x1, 0x388352e}, &(0x7f0000000600)={0x1ff000000, 0xfa6}) (async) ioctl$BIOCIMMEDIATE(r1, 0x8010427e, &(0x7f0000000040)=0x8) sysctl$hw(&(0x7f0000000000)={0x6, 0xd}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) pselect(0x40, &(0x7f0000000440)={0x4, 0x4, 0x5, 0x4, 0x17, 0x1, 0x7, 0x4}, &(0x7f00000005c0)={0x2, 0x8, 0xfffffffffffffffd, 0xfffffffe, 0xce, 0x6, 0x9, 0x3}, 0x0, 0x0, 0x0) 1.33659325s ago: executing program 5 (id=190): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x60, 0x0, 0x6, 0xc}, {0x9b1e, 0x7, 0xff, 0x200000}]}) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "965217", 0x8, 0x3c, 0x3, @rand_addr="0401faffffff0000000c000000013a00", @mcast2, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x5, 0x400}}}}}}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) ioctl$DIOCCLRSTATUS(0xffffffffffffff9c, 0xc0284416, &(0x7f0000000280)={'./file0\x00', &(0x7f00000001c0)=""/68, 0x0, 0x9, 0x87c, 0x8}) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) read$audioctl(r1, &(0x7f0000000140)=""/76, 0x4c) unveil(0x0, &(0x7f0000000440)='r\x00') unveil(&(0x7f0000000000)='./bus\x00', &(0x7f0000000300)='x\x00') utimensat(0xffffffffffffffff, 0x0, 0x0, 0x663f33b2b8a94331) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x4003487) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 1.296312492s ago: executing program 0 (id=191): openat$klog(0xffffffffffffff9c, &(0x7f0000001440), 0x58933d7098ee4eed, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) r1 = socket(0x1, 0x5, 0x4) setsockopt(r1, 0x11, 0x2, &(0x7f0000000000), 0x4) r2 = dup(r0) ioctl$DIOCRCLRTSTATS(r2, 0xc4504441, &(0x7f0000000180)={{'./file0\x00', './file0\x00', 0x20, 0xfd}, &(0x7f0000001040), 0x428, 0x0, 0x6, 0x4, 0x9, 0x8001, 0x12, 0x8}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) closefrom(r3) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000000)=0x8) 1.295208146s ago: executing program 2 (id=192): setuid(0xee01) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) select(0x40, &(0x7f0000000180)={0xffffdffffffffff9, 0x44809e9d, 0x1, 0xfffffffffffffffd, 0x9, 0x400000000181c, 0x9, 0x2000000000000024}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0x2b) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f00000023c0)="b1000501600000000000000007000000331c13fecea10500fefd6ecfc72fd3357ae320b37b673039d2d236acf20b7804be64174991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d323e7d026ba8af630037282102000000500fd38bfbbf70c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb001ff1edc7ea24551761d12767e371a3f83437120557adb71d89e000040781e4b2fff840ff00", 0xb1, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) 1.279018004s ago: executing program 3 (id=193): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) r0 = syz_open_pts() (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x8, 0x8, 0x7, 0x2, 0x8, 0x3, 0x43, 0x10, [{0x3, 0x3, 0x7fff, 0x80000204}, {0x4, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x2}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x3, 0xf11, 0x7}, {0x800, 0x0, 0x8b}, {0x7, 0x5, 0x85, 0x2}, {0x2, 0xfffffffe, 0xfffffffa, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x17fff}, {0x101, 0x0, 0x5, 0x7}, {0x8, 0x8000004, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x116, 0x6, 0x9}, {0x200003, 0xee2, 0x6, 0x5}, {0x7fff, 0x5, 0x3, 0x7fff}, {0xffffffff, 0x8005, 0x6, 0x7}]}) (async) poll(&(0x7f0000000000), 0x35, 0x0) write(r0, &(0x7f0000000180)="120d05be8e33a62a64a0410a38eb8f18eee25d160dad30aef871552e05f4174925cb4050be51b7c3cdada34177bf542f70a6989e7a1e2428793a00a7f045eafe7a29d09d76721c917f57bcfa6c9d7de1b8af38c4479ea94b9c71d7e6a3bfc26241e1c7f4b52515bdab4bd20788be45479981a490feff3b90066425c22aff452feac9d39c07337a06d0651ed5bdff2e75ee91bd82cc0f3b6d6b30a1914f875fce7edfcd3c490c1fbc70d809836d90885b9a6d9197f1483accd28b004cbb2831bb91c65c61a81e9a371a8a293705a0d918f226699dfb66bc2b2a54a6421af3de53af9ce5150b618d23eabc849bb639087c479d11a45841", 0xf6) close(r0) 1.129145322s ago: executing program 7 (id=194): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) (async) r1 = open(&(0x7f0000000240)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x51, 0x2100007, 0x6, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x3, 0x7, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x4000, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x4, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x7, 0x8001, 0xd1b, 0x100}, {0x1ce, 0x10001, 0xf7, 0x3}, {0x200007ff, 0x9, 0xfffffffd, 0x9}, {0xb8c, 0x5, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0xc373}, {0xb6f, 0x406, 0x5}, {0x8000, 0x1, 0x101002, 0x30004}]}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x3, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) write(r0, &(0x7f0000000080)="0700000000000000000100000000", 0xf802) 219.26106ms ago: executing program 0 (id=195): sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) ioctl$DIOCSETSYNFLWATS(r0, 0xc0084461, &(0x7f0000000040)={0xb2}) setitimer(0x1, &(0x7f0000000140)={{0x1, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSETA(r0, 0xcd60441a, &(0x7f0000000140)={0x8, 0x100, 0x8001, 0x403, "200000000a4fc6d700", 0x8, 0x3}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x6, 0x1, './file0\x00'}, 0x19) accept4(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x2) msgsnd(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB], 0xe1, 0x800) 217.497703ms ago: executing program 1 (id=187): sysctl$net_inet_icmp(&(0x7f00000000c0)={0x4, 0x12, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x6b}, 0x2, &(0x7f0000000140)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec3708252b5a1d1d326527759e5a8193817d1dc0057ca984496ab09b8a7e3dedb847519821627807b35dc9727860cfb54b7683d3ba8698ba2a968112efa8edb71224fe8b93fff47067ce2c838d6cc38947e3f877fcd5f52ac1c66dc698f1efdcedd2b7e387cc62eb3f45e42c34b45e5f23fbbe73fbbe207ed5673db00f905c98358a09865d8f50cef35268a38d423ea0f958206c42136dce96a8d57d457751579c5e4d0d95a1e82dc92ac0f4dcff1719712707d1f50ea39a8b998f838867387210a668d00"/231, &(0x7f0000000080)=0xe7, 0x0, 0x0) (async) setuid(0xee01) (async) r0 = syz_open_pts() fchmod(r0, 0xc92) 217.079723ms ago: executing program 2 (id=196): sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0xc2d04227, &(0x7f00000001c0)) open(&(0x7f0000000300)='./file0\x00', 0x75f493fec6515f78, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0xfffffeff}, {0x3, 0x8}, {0x1, 0x2}, {0x1, 0xd}, {0x0, 0x4}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x400}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x1}, {0x0, 0x20}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x1, 0x800}, {0x1}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x3, 0x8001}, {0x1, 0x200060}]}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4000001, 0x0, {[0xfffefbfffffffffa, 0x10000000000001, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0xfffff7fffffffeff, 0x0, 0x2efe, 0x80000000, 0x9, 0xffffffffffffffff, 0x4, 0x8000000, 0xa8, 0x3, 0xce7], [0xfffffffffffffffe, 0x1, 0xfffffffffffffffa, 0x8000ffffffff, 0x200100, 0x7b96, 0x1fe, 0xb, 0x1, 0x8], [0x100000001, 0xffffffffffff2815, 0x40000000, 0x6, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe], [0x102, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x40006], [{0x4, 0x6, 0x0, 0x1000055f}, {0xfffc, 0x7, 0x8000009}, {0x6, 0x2001, 0x5bea, 0x814}, {0xf7fe, 0x5, 0x3, 0x8000000c}, {0x13, 0x2, 0xb, 0x80c}, {0x400b, 0x40, 0x40000, 0x4}, {0x800a, 0x6, 0x4, 0x8}, {0x0, 0x965, 0x400, 0x4}], {0x2000, 0x8000000b, 0x10000}, {0x4, 0x7, 0x3, 0x2}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0)) socket(0x2, 0x2, 0x0) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0206923, &(0x7f00000001c0)) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f00000000c0)="40cea6923e90b2c9ef2017082c42eb1ab6fd5a27f84fcc0a33bafccd623900d5cb958bd15460f872803363d8db4510989cad072ccb504bb68a32d145d6ed05b49315606e7bcac61238e3f2a864232f609c8f09c79a22b221b65b46a03a1400"/120, 0x0, 0x0, 0xffffffffffffff2f) 211.730254ms ago: executing program 3 (id=197): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x3}, {}, {0x0, 0x7f}, {0x3}, {0x0, 0x9}, {0x2, 0x7fffffff}, {}, {0x3, 0x40}, {0x0, 0x1ff}, {0x3}, {0x0, 0x1000}, {0x2, 0x4}, {}, {0x2, 0x3}, {0x2}, {0x0, 0x9}, {0x0, 0x10000800}, {0x5}, {}, {0x5, 0x5b75}, {0x2, 0x400}, {}, {0x2}, {0x1, 0xfffffffd}, {0x3}, {0x1, 0xfffffffa}, {0x3}, {0x3, 0x4}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) socketpair(0x18, 0x4, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000002f40), 0x40000, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r2 = open(&(0x7f0000000440)='./file0\x00', 0x80, 0x48) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2, 0xffffaf35, 0x7f, 0x3, 0x84000001, 0x7fbefffd, 0x5, 0x10, [{0x10000000, 0x5, 0x3, 0x9}, {0xffffff73, 0xfffffffa, 0x100001, 0x3}, {0xc7, 0x7, 0x6, 0x9}, {0x80007, 0x46, 0xfffffff6, 0x200}, {0xac2, 0x8, 0x1002, 0x5}, {0x24020002, 0x8, 0x7, 0xd}, {0x9, 0xdf61, 0x200004f8, 0x14}, {0x6, 0x11, 0x5, 0x6b}, {0x1, 0x10, 0x40000003, 0xa}, {0x0, 0x3, 0x400, 0x1ff}, {0x1e6, 0x500fff9, 0x10927c, 0x4}, {0x3, 0x25, 0x19, 0x2d0b}, {0xfffffffe, 0x2, 0x80002004, 0x408}, {0x2, 0x8, 0x0, 0x200}, {0x7ffe, 0x1, 0x8, 0x5}, {0xfffffffd, 0xfffffffd, 0xf779, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x10, 0x0, 0x0) ioctl$DIOCNATLOOK(r1, 0xc080446a, &(0x7f0000002f80)={@v4=@multicast1, @v6=@mcast1, @v6=@mcast1, @v6=@empty, 0x1, 0x0, 0x800, 0x3, 0x924, 0xe, 0x1a, 0x11, 0x2}) setsockopt(r0, 0x10000, 0x702, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r4, 0xc020697e, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x33, 0x0, 0x37) 210.82807ms ago: executing program 5 (id=198): r0 = socket(0x2, 0x3, 0x11) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x3, 0x564, 0x9ce8, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt(r0, 0x800, 0x1, &(0x7f0000000040)=""/230, &(0x7f0000000140)=0xe6) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000200)="d266a0e659c5d87a164d718c2648efd9c0236a40", 0x14) 205.188711ms ago: executing program 6 (id=100): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x3}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x5}, {0x2, 0x91}, {}, {0x0, 0x4000001}, {0x3, 0x1}, {0x3, 0x10000000}, {0x0, 0x8a}, {0x3, 0x2}, {0x3, 0xffff}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x1, 0x200060}]}) (async) sysctl$net_inet_tcp(&(0x7f0000001540)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001580), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000000002b00fe8000000000000000000000000000bb000000000000000001"]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0xffb, 0x4e, 0x2100009, 0x5c0, 0x1, 0x3ff, 0x5d7227f9, 0x10, [{0x3, 0x10007, 0x6, 0x71001}, {0x9, 0xc, 0x7bb, 0x2901f03c}, {0x1000008, 0x8, 0x0, 0x9}, {0x7, 0x800, 0x800a}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x7, 0x2000002, 0x99}, {0xce1, 0x5, 0x4f8, 0x3}, {0x6, 0x300, 0x55, 0x40000007}, {0x2, 0x100, 0x7, 0x8}, {0x8007, 0x7ffd, 0x0, 0x8001}, {0x1cf, 0x10001, 0xfa, 0x1}, {0x5b9a, 0x0, 0xfffffffd, 0x1}, {0xb8c, 0x5, 0xc, 0xf}, {0x29a71717, 0x80, 0x1, 0xc377}, {0x0, 0x427, 0x69}, {0x8000, 0x8000001, 0x101002, 0xf}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) minherit(&(0x7f00006cd000/0x1000)=nil, 0x1000, 0x1) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) setuid(0xee01) (async) setgid(0xffffffffffffffff) (async) mmap(&(0x7f000032c000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x7) (async) pwrite(r0, &(0x7f0000000340)="95fec5b49352a04cfc39ebbad4e702d848982f9ff7bf08bb2ed4fe1b163819dc8f31a549cb7b2695f4940ed92ad8e0c3f75b0a6e2a896f558c1ae1596ff6359905c8336b4e857e61290724de13", 0x4d, 0x7) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91504694a14b8e5f84cf71b59c7afec34f82", &(0x7f0000000080)=0x1fde, 0x0, 0xffffffffffffff06) 1.834125ms ago: executing program 7 (id=199): openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (rerun: 64) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) 567.346µs ago: executing program 5 (id=200): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) writev(r1, &(0x7f0000000200)=[{0x0}], 0x1) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000100)=0x8) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x4ebfac6bbaf7817) r3 = semget$private(0x0, 0x4, 0x11) semctl$SETALL(r3, 0x0, 0x9, 0xffffffffffffffff) r4 = socket(0x18, 0x3, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) sendmsg(r6, &(0x7f0000000680)={&(0x7f0000000080)=@in={0x2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xe) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x40, 0x2, {[0xfffffbfffffffff9, 0x0, 0x2, 0xc, 0x6, 0xc0000000000, 0x80000000, 0xfffffffffffffffe, 0xfffffffffffffff8, 0x2f01, 0x2, 0xa, 0xffffffffffffffff, 0x0, 0x5, 0x4, 0xfffffffffffffffa, 0x100], [0x5305, 0x80000001, 0xfffffffffffffffd, 0x9e33, 0x5e, 0x60000000000000, 0x1fe, 0x3, 0x0, 0x9467], [0x2, 0x0, 0x2, 0x5, 0xe, 0x11000, 0xffffffff00000000], [0x100, 0xffd6, 0x6, 0x100020000, 0xfffffffffffffffa, 0x100], [{0x1000, 0x4, 0x0, 0x7d02}, {0xfffc, 0x402, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x3, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0x4000009, 0xfffffffffffffffb}, {0x0, 0x28291c58, 0x9, 0x2000000000000004}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0xfffc, 0x100, 0x0, 0x8}], {0x9, 0x5, 0x800}, {0xfffe, 0x80000000, 0x8, 0x4}}}) ioctl$FIONREAD(r4, 0x4004667f, &(0x7f0000000040)) r7 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r8 = kqueue() kevent(r8, &(0x7f0000000000), 0x95, &(0x7f0000000540), 0xfffa4961, 0x0) ioctl$BIOCGETIF(r2, 0x4020426b, &(0x7f0000000140)={""/16, @ifru_flags}) truncate(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$TIOCSETA(r7, 0xcd604404, &(0x7f00000005c0)={0x1080ff68, 0x2, 0x80c, 0xa, "74de6800", 0x5, 0xdb60}) 0s ago: executing program 7 (id=201): open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) r0 = getpid() ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r1, 0x80206910, &(0x7f00000001c0)) setgroups(0x0, 0x0) ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x300, r0) setuid(0xee01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x6, 0x1, './file0\x00'}, 0x19) listen(r2, 0xe) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) accept4(r2, &(0x7f00000006c0)=@un=@file={0x0, 0x0, ""/250}, &(0x7f0000000040)=0xfc, 0x0) r4 = socket(0x2, 0x1, 0x0) getsockname(r4, 0x0, &(0x7f0000002280)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error Connection to 10.128.1.85 closed by remote host. 0#+"$%.!",%: #/--!.$ %22/2 OpenBSD/amd64 (ci-openbsd-main-6.us-central1-f.c.syzkaller.internal) (tty00) login: ktrace write failed, errno 27, tracing stopped Data modified on freelist: word -35183662790112 of object 0xffff800000c55960 size 0x10 previous type free (invalid addr 0xc17dcc26192f2762) panic: free: size too large 40 > 16 (0xffff800000c55a60) type rtable Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND db_enter() at db_enter+0x25 panic(ffffffff834c8626) at panic+0x1cf free(ffff800000c55a60,5,28) at free+0x690 rtfree(fffff9006d6f49a8) at rtfree+0x34e rt_ifa_dellocal(ffff80000160c600) at rt_ifa_dellocal+0x1ea in_purgeaddr(ffff80000160c600) at in_purgeaddr+0x1c5 in_ifdetach(ffff800001586800) at in_ifdetach+0x7e if_detach(ffff800001586800) at if_detach+0x322 tun_clone_destroy(ffff800001586800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a8076b0) at if_clone_destroy+0x1d5 tun_dev_close(5d01,7) at tun_dev_close+0x1d9 spec_close(ffff80002a807770) at spec_close+0x417 VOP_CLOSE(fffff9007a621898,7,fffff90007ffd000,ffff80002a7a0548) at VOP_CLOSE+0x129 vn_closefile(fffff9006d62cda8,ffff80002a7a0548) at vn_closefile+0x11d end trace frame: 0xffff80002a807890, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: free: size too large 40 > 16 (0xffff800000c55a60) type rtable ddb> show kasan No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834c8626) at panic+0x1cf free(ffff800000c55a60,5,28) at free+0x690 rtfree(fffff9006d6f49a8) at rtfree+0x34e rt_ifa_dellocal(ffff80000160c600) at rt_ifa_dellocal+0x1ea in_purgeaddr(ffff80000160c600) at in_purgeaddr+0x1c5 in_ifdetach(ffff800001586800) at in_ifdetach+0x7e if_detach(ffff800001586800) at if_detach+0x322 tun_clone_destroy(ffff800001586800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a8076b0) at if_clone_destroy+0x1d5 tun_dev_close(5d01,7) at tun_dev_close+0x1d9 spec_close(ffff80002a807770) at spec_close+0x417 VOP_CLOSE(fffff9007a621898,7,fffff90007ffd000,ffff80002a7a0548) at VOP_CLOSE+0x129 vn_closefile(fffff9006d62cda8,ffff80002a7a0548) at vn_closefile+0x11d fdrop(fffff9006d62cda8,ffff80002a7a0548) at fdrop+0x121 closef(fffff9006d62cda8,ffff80002a7a0548) at closef+0x190 fdfree(ffff80002a7a0548) at fdfree+0x115 exit1(ffff80002a7a0548,43,0,1) at exit1+0x595 sys_exit(ffff80002a7a0548,ffff80002a807ad0,ffff80002a807a20) at sys_exit+0x1a syscall(ffff80002a807ad0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73acd1bcfa00, count: -21 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80002a807330 rbx 0x10 rdx 0 rcx 0 rax 0xffff80002a7a0548 r8 0x101010101010101 r9 0x8080808080808080 r10 0x55ccc66ec802d211 r11 0x36f1ae6ce073c3f9 r12 0 r13 0x28 r14 0 r15 0x1 rip 0xffffffff83139585 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a807320 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=385808 pid=7681 tcnt=0 stat=onproc flags process=a proc=2000 runpri=32, usrpri=69, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003a4f2fb8,0xffff80003a4f34f8 process=0xffff80002a744908 user=0xffff80002a802000, vmspace=0xfffff9007a9072e8 estcpu=19, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 75082 187673 15276 0 2 0 0xc80 syz-executor 75082 29070 15276 0 3 0 0x4000080 piperd syz-executor 75082 335551 15276 0 3 0 0x4000000 clonelk syz-executor 75082 436304 15276 0 3 0 0x4000000 clonelk syz-executor 75082 305621 15276 0 3 0 0x4000080 fsleep syz-executor 66112 98242 73247 0 3 0x2 0 clonelk ifconfig 73247 8467 41374 0 3 0x100002 0x88 sigsusp sh 41374 10039 61237 0 3 0x2 0x80 wait syz-executor 40403 349390 1 0 3 0x100003 0x80 ttyin getty 29955 449370 61237 0 3 0x2 0x80 piperd syz-executor 28162 112656 61237 0 3 0x2 0x80 piperd syz-executor 68413 165719 61237 0 3 0x2 0x80 piperd syz-executor 79484 106087 61237 0 2 0x10000002 0 syz-executor 15276 466781 61237 0 3 0x2 0x80 nanoslp syz-executor 61237 378468 1 0 3 0x2 0x80 wait syz-executor 88045 175054 0 0 3 0x14000 0x200 bored smr 49555 256323 0 0 2 0x14000 0x200 zerothread 74740 508352 0 0 3 0x14000 0x200 aiodoned aiodoned 61463 470248 0 0 3 0x14000 0x200 syncer update 54607 325819 0 0 3 0x14000 0x200 cleaner cleaner 17802 83889 0 0 3 0x14000 0x200 reaper reaper 78302 398045 0 0 3 0x14000 0x200 pgdaemon pagedaemon 59044 367001 0 0 3 0x14000 0x200 bored viomb 63458 503771 0 0 3 0x14000 0x40000200 acpi0 acpi0 49955 260553 0 0 2 0x14000 0x200 softnet0 93810 302367 0 0 2 0x14000 0x200 systqmp 27895 332503 0 0 3 0x14000 0x200 bored systq 93754 462493 0 0 3 0x14000 0x40000200 tmoslp softclock 3726 319418 0 0 3 0x14000 0x40000200 idle0 1 484041 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11028 12099K 12640K 166960K 12623 0 pcb 18 12K 12K 166960K 53 0 rtable 239 8K 9K 166960K 1574 0 pf 31 13K 17K 166960K 144 0 ifaddr 34 6K 7K 166960K 194 0 ifgroup 46 2K 2K 166960K 220 0 sysctl 3 1K 9K 166960K 8 0 counters 32 17K 18K 166960K 77 0 ioctlops 0 0K 4K 166960K 135 0 iov 1 1K 16K 166960K 8 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1393 88K 88K 166960K 2091 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 14 0K 0K 166960K 17 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 12 45K 224K 166960K 893 0 proc 27 33K 108K 166960K 1492 0 subproc 72 4K 4K 166960K 387 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 27 0 in_multi 76 5K 6K 166960K 478 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 27 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 834 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 93 82K 167K 166960K 7906 0 UVM aobj 11 2K 2K 166960K 11 0 pinsyscall 15 30K 94K 166960K 2882 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 6 0 NDP 10 0K 2K 166960K 138 0 temp 37 9106K 9170K 166960K 25157 0 kqueue 3 4K 25K 166960K 70 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 120 0 120 1 0 1 1 0 8 1 rtentry 136 524 0 439 4 0 4 4 0 8 0 unpcb 144 311 0 311 3 0 3 3 0 8 3 syncache 336 9 0 9 1 0 1 1 0 8 1 tcpcb 736 130 0 129 7 0 7 7 0 8 6 arp 96 86 0 74 1 0 1 1 0 8 0 ipq 40 4 0 0 1 0 1 1 0 8 0 ipqe 40 5 0 1 1 0 1 1 0 8 0 inpcb 328 453 0 449 7 0 7 7 0 8 6 ip6q 80 33 0 32 1 0 1 1 0 8 0 ip6af 40 65 0 64 1 0 1 1 0 8 0 nd6 112 127 0 109 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 43 0 35 1 0 1 1 0 8 0 ppxss 1072 4 0 4 1 0 1 1 0 8 1 pppxif 1416 1 0 1 1 0 1 1 0 8 1 pfstscr 40 2 0 0 1 0 1 1 0 8 0 pfrktable 1344 4 0 4 1 0 1 1 0 8 1 pfsrclim 320 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 2 0 2 1 0 1 1 0 8 1 pfstitem 24 4 0 0 1 0 1 1 0 8 0 pfstkey 128 6 0 2 1 0 1 1 0 8 0 pfstate 384 3 0 1 1 0 1 1 0 8 0 pfrule 1360 5 0 5 1 0 1 1 0 8 1 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 1978 0 1608 32 1 31 32 0 8 5 art_table 40 1981 0 1608 6 0 6 6 0 8 0 art_node 32 523 0 445 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 3 1 0 1 1 0 8 1 semupl 112 5 0 5 1 0 1 1 0 8 1 semapl 72 15 0 3 1 0 1 1 0 8 0 shmpl 112 8 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2100 0 569 96 0 96 96 0 8 0 ffsino 256 2100 0 569 96 0 96 96 0 8 0 nchpl 144 2656 0 805 69 0 69 69 0 8 0 vnodes 216 2769 0 0 154 0 154 154 0 8 0 namei 1024 14060 0 14060 4 0 4 4 0 8 4 pfiaddrpl 120 1 0 1 1 0 1 1 0 8 1 kstatmem 264 109 0 88 2 0 2 2 0 8 0 scxspl 216 10810 0 10810 8 0 8 8 1 8 8 plimitpl 152 98 0 88 1 0 1 1 0 8 0 sigapl 424 1109 0 1080 6 0 6 6 0 8 0 knotepl 120 8167 0 8146 9 0 9 9 0 8 6 kqueuepl 184 82 0 80 1 0 1 1 0 8 0 pipepl 304 243 0 215 3 0 3 3 0 8 0 fdescpl 448 1096 0 1081 5 0 5 5 0 8 2 filepl 120 4851 0 4694 11 0 11 11 0 8 4 lockfpl 104 74 0 74 1 0 1 1 0 8 1 lockfspl 48 34 0 34 1 0 1 1 0 8 1 sessionpl 144 134 0 131 1 0 1 1 0 8 0 pgrppl 48 182 0 171 1 0 1 1 0 8 0 ucredpl 104 543 0 540 1 0 1 1 0 8 0 zombiepl 144 1083 0 1080 1 0 1 1 0 8 0 processpl 1152 1109 0 1080 4 0 4 4 0 8 0 procpl 664 1577 0 1544 6 0 6 6 0 8 1 sockpl 552 897 0 893 7 0 7 7 0 8 6 mcl64k 65536 107 0 106 1 0 1 1 0 8 0 mcl8k 8192 5 0 5 1 0 1 1 0 8 1 mcl4k 4096 2802 0 2738 16 1 15 16 0 8 7 mcl2k2 2112 1 0 1 1 0 1 1 0 8 1 mcl2k 2048 844 0 843 4 0 4 4 0 8 3 mextrefs 64 237 0 237 1 0 1 1 0 8 1 mtagpl 96 5 0 5 1 0 1 1 0 8 1 mbufpl 256 9393 0 9257 18 0 18 18 0 8 4 bufpl 272 3948 0 103 257 0 257 257 0 8 0 anonpl 24 149798 0 148577 42 0 42 42 0 187 20 amapchunkpl 152 22362 0 22141 26 0 26 26 0 158 11 amappl16 200 2176 0 2167 14 4 10 14 0 8 8 amappl15 192 5 0 5 1 0 1 1 0 8 1 amappl14 184 824 0 823 1 0 1 1 0 8 0 amappl13 176 219 0 218 1 0 1 1 0 8 0 amappl12 168 1471 0 1458 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 0 1 1 0 8 1 amappl10 152 58 0 58 1 0 1 1 0 8 1 amappl9 144 293 0 293 1 0 1 1 0 8 1 amappl8 136 232 0 231 1 0 1 1 0 8 0 amappl7 128 217 0 215 1 0 1 1 0 8 0 amappl6 120 492 0 490 1 0 1 1 0 8 0 amappl5 112 94 0 93 1 0 1 1 0 8 0 amappl4 104 401 0 399 1 0 1 1 0 8 0 amappl3 96 4157 0 4121 3 0 3 3 0 8 0 amappl2 88 1081 0 1062 2 0 2 2 0 8 0 amappl1 80 15480 0 15379 13 0 13 13 0 8 6 amappl 88 6597 0 6519 5 0 5 5 0 92 1 uvmvnodes 80 100 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 10 0 0 1 0 1 1 0 8 0 uaddrrnd 24 1096 0 1081 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1096 0 1081 1 0 1 1 0 8 0 vmmpekpl 168 10277 0 10220 3 0 3 3 0 8 0 vmmpepl 168 78981 0 78422 88 0 88 88 0 357 55 vmsppl 368 1095 0 1081 4 0 4 4 0 8 1 rwobjpl 40 24574 0 24192 13 0 13 13 0 8 2 pdppl 4096 2198 0 2162 112 66 46 80 0 8 10 pvpl 32 422551 0 419556 101 0 101 101 0 265 57 pmappl 216 1095 0 1081 3 0 3 3 0 8 1 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 664 0 68 18 0 18 18 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834c8626) at panic+0x1cf free(ffff800000c55a60,5,28) at free+0x690 rtfree(fffff9006d6f49a8) at rtfree+0x34e rt_ifa_dellocal(ffff80000160c600) at rt_ifa_dellocal+0x1ea in_purgeaddr(ffff80000160c600) at in_purgeaddr+0x1c5 in_ifdetach(ffff800001586800) at in_ifdetach+0x7e if_detach(ffff800001586800) at if_detach+0x322 tun_clone_destroy(ffff800001586800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a8076b0) at if_clone_destroy+0x1d5 tun_dev_close(5d01,7) at tun_dev_close+0x1d9 spec_close(ffff80002a807770) at spec_close+0x417 VOP_CLOSE(fffff9007a621898,7,fffff90007ffd000,ffff80002a7a0548) at VOP_CLOSE+0x129 vn_closefile(fffff9006d62cda8,ffff80002a7a0548) at vn_closefile+0x11d fdrop(fffff9006d62cda8,ffff80002a7a0548) at fdrop+0x121 closef(fffff9006d62cda8,ffff80002a7a0548) at closef+0x190 fdfree(ffff80002a7a0548) at fdfree+0x115 exit1(ffff80002a7a0548,43,0,1) at exit1+0x595 sys_exit(ffff80002a7a0548,ffff80002a807ad0,ffff80002a807a20) at sys_exit+0x1a syscall(ffff80002a807ad0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73acd1bcfa00, count: -21 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff834c8626) at panic+0x1cf free(ffff800000c55a60,5,28) at free+0x690 rtfree(fffff9006d6f49a8) at rtfree+0x34e rt_ifa_dellocal(ffff80000160c600) at rt_ifa_dellocal+0x1ea in_purgeaddr(ffff80000160c600) at in_purgeaddr+0x1c5 in_ifdetach(ffff800001586800) at in_ifdetach+0x7e if_detach(ffff800001586800) at if_detach+0x322 tun_clone_destroy(ffff800001586800) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a8076b0) at if_clone_destroy+0x1d5 tun_dev_close(5d01,7) at tun_dev_close+0x1d9 spec_close(ffff80002a807770) at spec_close+0x417 VOP_CLOSE(fffff9007a621898,7,fffff90007ffd000,ffff80002a7a0548) at VOP_CLOSE+0x129 vn_closefile(fffff9006d62cda8,ffff80002a7a0548) at vn_closefile+0x11d fdrop(fffff9006d62cda8,ffff80002a7a0548) at fdrop+0x121 closef(fffff9006d62cda8,ffff80002a7a0548) at closef+0x190 fdfree(ffff80002a7a0548) at fdfree+0x115 exit1(ffff80002a7a0548,43,0,1) at exit1+0x595 sys_exit(ffff80002a7a0548,ffff80002a807ad0,ffff80002a807a20) at sys_exit+0x1a syscall(ffff80002a807ad0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x73acd1bcfa00, count: -21 ddb>