last executing test programs: 5.413621437s ago: executing program 4 (id=2237): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x29fe) (async, rerun: 32) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) (async, rerun: 32) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) syz_emit_ethernet(0x66, &(0x7f0000000580)=ANY=[]) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) 5.279439029s ago: executing program 4 (id=2246): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000002c40)="c198f360e366f84b67da7865362e82", 0xf}], 0x1, 0x1004) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f00000001c0)={0xffffffff, 0x3ff, 0x97, 0xeffdffdd, "8b03007d693ecfd3f82e19c3a306d3c900", 0x19, 0x2}) write(r1, &(0x7f0000000ac0)="db383ac077b5609b978b11cb762d444c69bc576716cb8a359a37a20d3710f2f9138e5decba15fedbc83794a2def1762fab03abeb0800c9d428ef2e5c2b16ec01f7b917adfa99b6014560516e1decd789cc6ee76dfe6315c891dfbd33a1d247636eb4aea7747d47b504b8ba18c372cebd6b243a3f27f39184089582304b8f27698f4360a4988a3d8c3f55bd3067459004a12b7ada1c3a214d19c1de5628997501a537dd5e1d1c6e4c904cd79c69e2843480c4c6f28cb0033dbeaa77d64a00015aab7d938ccb6fae362927193b0832319ab254711b44e1271d808a410a4978a8806a19081845f2c141ef756f86c991dfdf155ebc56c5d120cc68c37007510a10f40709ac6a0641143f663a4ff0dc314ffb0f639076441f639e7669a42e1478701bb0d4e1b72f92368a94ac9cded074d23e8f687935afdaf3c8153f50235f5294f9881c1e7979806092ead4a0b946ebce4fb948a309866a75f2118069d7af46a57faf96a90d0a2aea12ac4526a87e6df365086eb7673e0a30aca875bd04efaf6529f35cb942cf4443c480da43ba13d1223bfac2adc2e044c5f15822bdeab8d6bd800db9456d727fc204e0e01ca982e403a5b145f613d3a4a4e7cb77916983499b705c29", 0x1c2) r3 = socket(0x18, 0x3, 0x3a) sysctl$hw(&(0x7f0000000380)={0x6, 0x12}, 0x2, &(0x7f00000003c0)="602a14903538a3d412c98755d945c6bf2d7d709770905e57ea2c464d421fee36bd1979560a", &(0x7f0000000440)=0x25, &(0x7f0000000480), 0x0) setsockopt(r3, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0x69, &(0x7f0000000200)={{0x18, 0x1, 0xfffffffc}, {0x18, 0x1, 0x8000}}, 0x6e) 4.335763627s ago: executing program 4 (id=2284): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x8, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x8, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x7, 0x5}, {0x8000, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x2e1, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mknod(0x0, 0x2000, 0x40000802) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = msgget$private(0x0, 0x2c) msgrcv(r1, 0x0, 0x0, 0x1, 0x800) setuid(0xee01) sysctl$net_pipex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) msgsnd(r1, 0x0, 0x8, 0x800) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 4.216263885s ago: executing program 4 (id=2293): r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, r0) close(r1) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) (async) r2 = kqueue() kevent(r2, &(0x7f00000002c0)=[{{r2}, 0xfffffffffffffff9, 0x1, 0x12, 0x3ff, 0x2}], 0x4, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async) chroot(&(0x7f0000000080)='./file0\x00') syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x3, 0x1) syz_emit_ethernet(0x103a, &(0x7f0000000480)=ANY=[]) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x79) (async) r6 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000240)='./file0\x00', 0x0, 0x510, r6) (async) setreuid(0xee00, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df99, r6) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, [{[], {0x8100, 0x2, 0x1, 0x2}}], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x4, 0x2c, 0x65, 0x1, 0x2e, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2, {[@noop]}}, @tcp={{0x3, 0x1, r4, r5, 0x0, 0x0, 0x5, 0x1, 0x9, 0x0, 0x7fff}}}}}}) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) sysctl$vm(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) symlink(0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) setreuid(0xee00, 0x0) (async) getuid() (async) r7 = getuid() setreuid(0x0, r7) 3.983281211s ago: executing program 4 (id=2306): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 3.923929485s ago: executing program 4 (id=2309): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc0}, 0xf0ffffffffffffff, 0x1}) r0 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0x37) r1 = semget$private(0x0, 0x4, 0x298) semop(r1, 0x0, 0xfffffffffffffcf2) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {}, {}, {}, {}, {}, {}, {0x1, 0xffffffff}, {}, {}, {0x2}, {}, {0x0, 0x1800}, {0x2}, {}, {0x2, 0x5}, {0x3, 0x4}, {0x3}, {0x0, 0x7ff}, {0x5}, {0x0, 0xffffffff}, {0x3}, {0x0, 0x400}, {}, {0x2, 0x80000}, {0x0, 0xfffffffd}, {0x2}, {0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSFILDROP(r2, 0x80044279, &(0x7f0000000100)=0x2) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1ff, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x8d, 0x48a6}]}) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r3 = shmget$private(0x0, 0x2000, 0x463, &(0x7f0000006000/0x2000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x4, 0x2f01, 0x4, 0x3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0x9, 0x20000001, 0x5b, 0x7b98, 0x1fe, 0x0, 0x0, 0x2], [0x100000001, 0x2, 0x3, 0x0, 0xb, 0xb, 0xffffffff00000000], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffc, 0x80}, {0x3, 0x5, 0x4, 0xffffffffffffffff}, {0x0, 0x2, 0x1000, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0xffde, 0x80000000, 0x6d5, 0x2}}}) recvmmsg(r4, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000480)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x10, 0x0, 0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000040)={{0x1000, 0x0, 0x0, 0x0, 0x0, 0x47, 0x5d}, 0x3ff, 0x3, 0x0, 0x0, 0x1, 0xfffffffffffff15e, 0x2}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000180)={0x7, &(0x7f0000000000)=[{0x8, 0x2, 0x80, 0x9}, {0xbc2, 0xc, 0x7, 0x2}, {0x7fff, 0x9, 0x0, 0x9441}, {0x8, 0xfb, 0x0, 0x6}, {0x0, 0xd, 0x5, 0x6}, {0x7, 0x6, 0x2, 0x6}, {0x81, 0x2, 0xfe}]}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) r5 = syz_open_pts() ioctl$TIOCSTAT(r5, 0x20007465, 0x0) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000040)=0x9) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000000)=0x9) execve(0x0, 0x0, 0x0) 1.818767531s ago: executing program 2 (id=2388): sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x1e, 0x6, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) 1.815892381s ago: executing program 2 (id=2391): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x4}, {0xb1, 0x10, 0xeb, 0x3fa}, {0x6, 0xa, 0x5, 0x400f}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x24, 0xadb}, {0x101}], 0x2}) sysctl$kern(0x0, 0x0, &(0x7f00000004c0)="766b84e07a8f14f74ad13c601b0b001e9df2a52cbc02284fc157cbbd3f2c9772", &(0x7f0000000080)=0x20, 0x0, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0xb}, 0x2, &(0x7f0000000140)="70a52d80d53aa2e50b83654660e824937b6826b37d4d250337413f6ba90c251ff91af80ff24d08186201278447da1a89ab4043f8f4ca6cefb37f5525c8e9f3e0e138c46d0ffb77501a8b37ab627e2eff64798d224723c1a657cc211d5cdaf39cd72cc91b286a7871e2e28111dacdcb", &(0x7f00000001c0)=0x6f, &(0x7f00000002c0)="9679fff6c4a7dd2d20791a57d3de3377252f2f4d2463807c229e3c23b46ad195fcd42e28ddb137dea34b06425acfb26074748c09bee00acce5858b00b52c8766223ed1510e7072e45396b60a044929f64ce5ed8d6e691faa7a2fd2bfb36ad948f2bd7fc826d511f204457d9cbf4999222fe0c7f0229df952f14d52934c08376421848cc9941b8d01762ebef3e450aafa475b36395dd18cf745207032ebbbba727f3ed48b2b42ede7ffb3b6785d84157922f7609ed6133bd428c41290a612526f9567f9bfc2fb34434af4", 0xca) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0xd, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @empty, @broadcast, @broadcast, @multicast2}}}}) r3 = accept$inet(r1, &(0x7f0000000200), &(0x7f0000000240)=0xc) recvmmsg(r3, &(0x7f0000000680)={&(0x7f0000000640)={&(0x7f00000003c0)=@un=@file={0x0, ""/9}, 0xb, &(0x7f0000000400)=[{&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/136, 0x88}], 0x2, &(0x7f0000000480)=""/32, 0x20}, 0x3ff}, 0x10, 0x1, &(0x7f00000006c0)={0x7, 0x4}) 1.762702506s ago: executing program 2 (id=2392): sysctl$vm(&(0x7f0000000840)={0x2, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x4}, 0x2, &(0x7f0000000040)="ee2495", &(0x7f0000000080)=0x3, &(0x7f00000000c0)="b3edecffb615e9fe9306bce57c95d53a508d6d245a524acbadbc8126650400f847", 0x21) sysctl$vm(&(0x7f0000000840)={0x2, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$vm(&(0x7f0000000000)={0x2, 0x4}, 0x2, &(0x7f0000000040)="ee2495", &(0x7f0000000080)=0x3, &(0x7f00000000c0)="b3edecffb615e9fe9306bce57c95d53a508d6d245a524acbadbc8126650400f847", 0x21) (async) 1.709039669s ago: executing program 2 (id=2393): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0x0, 0x2}, {0x6, 0xa, 0x5, 0x400f}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="dd", 0x1}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="00a0a78d0ca82026dec3e59be543bfcb4c969b00000000000000178326909655636e729535f1324bc33cb4ec5598f7125711c01c97c7c4f1623eba9ea5247e1c8810ef8d020264b7", &(0x7f0000000080)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r2, &(0x7f0000000480)='\x00'/14, 0xe) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000000c0)="00800000", 0x4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r3 = syz_open_pts() close(r3) fcntl$dupfd(r0, 0xa, r3) syz_open_pts() r4 = getpgid(0xffffffffffffffff) fcntl$setown(r3, 0x6, r4) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r5, &(0x7f0000000540), 0x0) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') select(0x40, &(0x7f0000000100)={0x3, 0x2}, &(0x7f00000024c0)={0x4, 0x0, 0x0, 0x8, 0xffffffffffffffff, 0x2, 0x1, 0xe}, 0x0, 0x0) 1.322626009s ago: executing program 1 (id=2408): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000280)=ANY=[@ANYBLOB="3817faf8dd1720eab51146a1b49cecf43172fef3536a55fb685af4fe52faf7064961a7db4213876b4189c631813f335a8d264197f158ff6cbe4506cbd2830b3fb7b2759fdd4f960bf9290504ed7d539cc7d15b4ec716731342d0bf066bfbc93855a91bf7371dc839c957c85a3a18bdd402e24ff74f9b3188feeba5d3c682a1633cb873c51dbe23d750c74e3e753bd6cf7656baa5d853318842eb31538cb39a0829b749fb6e8da299661a8655a4b7851c581c9badd722dce19d216621c3c135dcb4", @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT, @ANYBLOB="d8f33cef566808d8cf50c364891862b31d0eb1116af7dae1c36e6118ecfeda9ebb8ecd597f232ab484f0e91a12fd0cb775848264faada4ab4335f55132e74a13a7fdc65b901c220d7cd1260edb5a91c3fa8fefc4d5524bd782c7a4bca90078ffd9c658374813c15f2c70eccf9180663cad6698b8bfa11ae2f6f2"]) mprotect(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000), 0x10) kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x7}], 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) close(r1) 1.322335536s ago: executing program 1 (id=2409): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x820351a, '\t\x00\x00\x00\x00n\x00', 0x0, 0x4}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, &(0x7f0000000100)='q', 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="f968f845920e632101a1a16648a42512d1d22bd616faaba0a30c4a4a", 0x1c}], 0x1) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x58}, 0x2, &(0x7f0000002480)="8bf91eca", &(0x7f0000000080)=0x4, 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3400100fc4cec678a7a9e7924c9e9511450494a7119241fafbf28a5063ba90bda380672f30815a9397", &(0x7f0000000080)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) pwritev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, 0x20000052e5) write(r1, &(0x7f0000000380)="b297d5a01ab90000000000000095d693a22d852185fd0a57b9ae49fd3c4f97461ad826600cf8af54380fd0e97db2a21994019cce896d6bf1f2cd440484bfd46ac38460aeb8c11983c8d455b6b0f38c16493180bc346afb0151f66e40dadd8ce4f2f05e733993a0d46713a41529d2827b1953185232c6002c3833f8b7111a466d1dd9af13c7e329050a732567714904089f172a7e7e", 0xfffffeba) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r3, 0x80184901, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x36, &(0x7f00000024c0)={@random="533ed089f74d", @random="be18f0edadcd", [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x29, 0x28, 0x65, 0x9, 0x1, 0x2e}, @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) 938.905687ms ago: executing program 1 (id=2418): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x2d, 0x6c, &(0x7f0000000080)="e377481d8d6f6e82f406851c2d9a23231f6f32246ec5ecb83bb9228931670127", 0x20) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x13, 0x1}, 0xc) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7fffffff, 0x0, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r0) 925.716118ms ago: executing program 0 (id=2422): mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x4) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000100)='./bus\x00', 0x4, 0x40000a04, 0x0) close(r0) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x48, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x0, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, [@hopopts={0x88, 0x1, '\x00', [@padn, @jumbo, @enc_lim={0x4, 0x1, 0x5}]}]}}}}}}}) r1 = open$dir(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0xb8) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r2, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r3, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r5 = socket(0x18, 0x1, 0x0) dup2(r5, r2) r6 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x182) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002ac0), 0x20, 0x0) mkdirat(r6, &(0x7f0000000a80)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r8 = getuid() setreuid(0x0, r8) r9 = getegid() fchown(r1, r8, r9) fcntl$setstatus(r7, 0x4, 0x8) symlinkat(&(0x7f0000000300)='./file0\x00', r6, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000dc0)='./file0\x00', r6, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r6, &(0x7f0000000600)='./file0\x00', 0x86) symlinkat(&(0x7f0000000440)='./file0\x00', r6, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000180)='{}($\x00', &(0x7f00000004c0)='c\x00', &(0x7f0000000100)='c\x00', &(0x7f0000000640)='\'\x00', &(0x7f0000000140)='^*![)\x00\',\x95\x1fG\xc7\x8b\xc7\xe0\x9aax\x16\x0f\x9fR\x87\x84.\xa3\x95\x9d\xb1Ju\x8dDRC\xe3\xae|m\xbb#5<\x8e\xe7\x84z%\xf6\xd2E'], &(0x7f0000000540)=[&(0x7f0000000240)='c\x00', &(0x7f0000000280)='].\\%}\x00', &(0x7f00000002c0)=')&\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='c\x00', &(0x7f00000003c0)='c\x00', &(0x7f0000000400)='.\x00', &(0x7f0000000480)='{\x8c', &(0x7f00000005c0)='\xebJ\xe4\xa8c\xc9', &(0x7f0000000b80)='c\x00\xd7\x8a:\xf4\x00]\x85\xbf:\xb5\xff\x04\x00\x00\x00\xc1\xc4^\xc0\xe9\xce(\xabg\x15\fk\xbf\x01S\x17\x1e \t\x99\"\x1d\xa1!\fI\x10yf\tm\xbc\x1fbh\xf2\xb4\xf4\"+\xb2\x1bb\x8d\x9a\x941*\xea\xffiF\xff\x10\xd0\xfa\xed\xf2\xb4\xf6\xfc\x12\x9b\xc4\x80.c\x94\x86\xe9\x02\xf6!\xe4\x06\xf6U\x97P\x1b\x84\x9d\xb1m\x86\xa6\xd9F\x96\xd5\x98\xab\x18\xef\xc5\x88\x8f\xbf\x8d\xcb\x9e\xd8\f\xe1\x03\xf7\xe7\xday\xbb{,N8=\x14\xd7\xe5>\xf5\xd7\xe4\x9dY]Q\x0e\x996p7V\x8alXw\x8ay\xe73\x830\xffnd%!\xe5\xaeTwE\x9d_\x99\x04%\xf6\xedZ\x1b\xe1\x14}w\xaeb\x9f\xe6\xb5\x04\x84\x12\x86\xceH}Q\xaa\x80\xa7\xb7$\xcb\x86\xb9\x87S\xedB\f\xac\x17\x13x!u\fNA7\xe8D(Gm']) unveil(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000001c0)='c\x00') 921.325353ms ago: executing program 1 (id=2423): connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r0 = socket(0x18, 0x1, 0x0) close(r0) (async, rerun: 64) socket(0x18, 0x3, 0x3a) (async, rerun: 64) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28140000ffff000001"], 0x28}, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) syz_emit_ethernet(0x10004, &(0x7f0000000240)=ANY=[]) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x34, 0x9, 0xc, 0x2}, {0xdbf, 0x10, 0x1, 0xff}, {0x6, 0xa, 0x83, 0x2}]}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000480)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f000017c000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff78}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x8000000000b932}, {&(0x7f00001da000/0x4000)=nil, &(0x7f000078c000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f000055e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x8}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f000027e000/0x4000)=nil, 0x9}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00002f4000/0x3000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f00001cf000/0x1000)=nil, &(0x7f0000001000/0x800000)=nil, 0x4}], './file0\x00', 0xfffffffe}) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) (async) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 64) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="00e0ae5b7e0d0000bc5a91501d94b74b8e5f84cf71b59c7afec370e482", &(0x7f0000000080)=0x1d, 0x0, 0xffffffffffffff7f) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0xce, 0x0}) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x102) read(r5, &(0x7f00000001c0)=""/22, 0x16) (async) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[]) (async) ioctl$BIOCSDIRFILT(r5, 0x8004427d, &(0x7f0000000240)=0xd) syz_emit_ethernet(0x26, &(0x7f0000000180)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x8, 0x1, 0x0, @broadcast, @rand_addr=0x80000000}, @icmp=@generic={0xc, 0x6}}}}}) 871.078523ms ago: executing program 2 (id=2426): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCWRITE(r1, 0xc00c7007, &(0x7f00000005c0)={{0x9}, 0x1000, 0x1, 0x3128ee68}) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x32, 0x0, 0x0) poll(&(0x7f0000000080)=[{r1, 0x40}, {r1, 0x4}, {r2, 0x2}, {r1, 0xc0}, {r1, 0x4}, {r0, 0x100}, {r1, 0x1}, {r3, 0x80}], 0x8, 0x1) syz_emit_ethernet(0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100000088a8"]) accept$inet(r0, 0x0, &(0x7f00000000c0)) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000004c0)="ee08665d19ac14d5e51348771197a7728420aef61715f7b1c3d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) 782.410603ms ago: executing program 1 (id=2429): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x4}, 0x1, 0x6a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x4}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x4}, 0x1, 0x6a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x40, 0x4}) r1 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000680)=0x2, 0x4) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @random="d0e99f3ded1b", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @rand_addr="78042000000014000001000000086500", @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote={0xfe, 0x80, '\x00', 0x0}, @empty}}}}}}) setsockopt(r0, 0x1000000029, 0x39, &(0x7f0000000000)="5ab7776a", 0x4) 779.257207ms ago: executing program 1 (id=2431): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair(0x6, 0x8000, 0x6, &(0x7f0000000000)) r0 = kqueue() mprotect(&(0x7f00002ca000/0x2000)=nil, 0x2000, 0x1) kevent(r0, 0x0, 0xe4a, 0x0, 0x4000a9fa, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendto(r1, &(0x7f0000000080)="7743d0eadb5590905ecf49ba2846a2cd1c07a04be5bf99cf12abc96b37810e142aa909562c6f74751320da7b429cc82ed38297d736c417dcdb8307d5c4cf1eaaa83f7c0721f066808faec10b08e2f2f3e5e332dcaa9f7adc1ff8f77fde3d1af259f2f31442b45cc23f437ecd08085369c30eb500c95a060be00472ed8b5935692223d2b7ecd67c3a1f22030042cf798536eb2c81b520ebb46b331d62ce983c99cbba851402253d915cf691030f1d891073837b934de00acebe6b71197817eec87292292fc3c0", 0xc6, 0x0, 0x0, 0x0) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) socketpair(0x6, 0x8000, 0x6, &(0x7f0000000000)) (async) kqueue() (async) mprotect(&(0x7f00002ca000/0x2000)=nil, 0x2000, 0x1) (async) kevent(r0, 0x0, 0xe4a, 0x0, 0x4000a9fa, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) sendto(r1, &(0x7f0000000080)="7743d0eadb5590905ecf49ba2846a2cd1c07a04be5bf99cf12abc96b37810e142aa909562c6f74751320da7b429cc82ed38297d736c417dcdb8307d5c4cf1eaaa83f7c0721f066808faec10b08e2f2f3e5e332dcaa9f7adc1ff8f77fde3d1af259f2f31442b45cc23f437ecd08085369c30eb500c95a060be00472ed8b5935692223d2b7ecd67c3a1f22030042cf798536eb2c81b520ebb46b331d62ce983c99cbba851402253d915cf691030f1d891073837b934de00acebe6b71197817eec87292292fc3c0", 0xc6, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x10004, &(0x7f0000000000)=ANY=[]) (async) 778.946257ms ago: executing program 2 (id=2432): r0 = socket$inet(0x2, 0x8003, 0x0) recvmmsg(r0, &(0x7f0000000040)={0x0, 0x6}, 0x10, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x5, [{&(0x7f000062c000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xd3b5}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8100000000b936}, {&(0x7f0000418000/0x1000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f000052e000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f000076e000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x4}, {&(0x7f000041f000/0x3000)=nil, &(0x7f0000441000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00002d0000/0x4000)=nil, 0x1}, {&(0x7f000069e000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x4}, {&(0x7f0000002000/0x1000)=nil, &(0x7f000038f000/0x4000)=nil, 0x3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f000005d000/0x4000)=nil, 0xb}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00007e8000/0x4000)=nil, 0x7}], './file0\x00', 0xfffffffe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB], 0x10, 0x400}, 0xa) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x8003, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/76, 0x4c}, 0x800) setsockopt(r2, 0x0, 0x1e, &(0x7f0000000340)="15337ac0", 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1, 0x0, 0x0, 0x16, 0x0, @multicast2}, @udp={{0x0, 0x0, 0x8}}}}}}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x28, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x0, 0xfffff115, 0x80000000}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x7, 0x8001}, {0x4, 0x6, 0x7, 0x100}, {0x3, 0x80040b, 0xf11, 0x2}, {0x9cb, 0xfffc, 0xc, 0x9}, {0x4, 0x800, 0x3, 0x9}, {0x9, 0x9, 0x28000, 0xb7}, {0x9, 0x1, 0x6, 0x7fff}, {0x3, 0xffffff7c, 0x8, 0x28bfd}, {0x0, 0x2, 0x8, 0x7}, {0x3, 0xc7cb, 0x7ffffe, 0x2}, {0x401, 0x10, 0xd1b, 0xa2}, {0x3, 0x1006e2, 0x2, 0x6f5fc4cb}, {0x3, 0x101, 0x5, 0x9}, {0x9be2, 0x2, 0x2, 0x3ff}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) symlink(0x0, 0x0) r4 = socket(0x18, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x2, r4) close(r5) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd}) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000000029, 0xa, &(0x7f0000000040)="0300", 0x2) setsockopt(r6, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) chdir(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setuid(0xffffffffffffffff) fchdir(r7) syz_emit_ethernet(0x6a, 0x0) 657.535965ms ago: executing program 5 (id=2437): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil}, {&(0x7f0000605000/0x1000)=nil, &(0x7f0000698000/0x1000)=nil, 0x10000001}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000797000/0x2000)=nil, 0x100000000002}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x200000000000}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00007bd000/0x1000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000699000/0x4000)=nil, 0x40003}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00005e4000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000745000/0x3000)=nil, &(0x7f000021b000/0x4000)=nil, 0x8}], './file0/file0\x00'}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) 551.662749ms ago: executing program 0 (id=2440): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) (async) r0 = syz_open_pts() (async) syz_open_pts() (async) bind$unix(0xffffffffffffffff, 0x0, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x310, 0x4000}, 0x100000000006, 0x861, 0xffffffffffffffff, 0x0, 0x80000000000000, 0xfffffffe, 0xb, 0x7}) (async) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, 0x0, 0x0) bind$unix(r1, 0x0, 0x0) syz_open_pts() r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r2, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x9, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1], [], [], [0x0, 0x0, 0xffffffffffffffff], [{}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x800000000000}, {0x0, 0x800}], {0x0, 0x0, 0xffffffff}}}) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) (async) select(0xe, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000300)={0xcea, 0x20000, 0x80000002, 0x1, 0x1, 0x80, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)='n', 0x1}], 0x1, 0xd) (async) close(r0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x800, 0x7) ioctl$WSMUXIO_INJECTEVENT(r6, 0x80185760, &(0x7f0000000080)={0xfffffffc, 0x0, {0x7d, 0x6}}) (async) ioctl$VT_WAITACTIVE(r6, 0x20007606, &(0x7f0000000000)=0x4) ioctl$KDENABIO(r6, 0x20004b3c) 551.346403ms ago: executing program 6 (id=2441): sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7a", &(0x7f0000000180)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e570400"/151, &(0x7f0000000180)=0x97, &(0x7f00000001c0), 0x4) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) socket(0x11, 0x3, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x3, 0x0, 0x0) dup2(r0, r1) setitimer(0x0, &(0x7f0000000040)={{0x1c780000, 0xfffffffffffffffe}, {0x1009, 0xb}}, 0x0) socket(0x2, 0x8000, 0x37) 548.020177ms ago: executing program 5 (id=2442): writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000280)="d3db8d03bbee21d224ec13f6354b068085de4c35951a9f4c60f3df51f60f94c2bacbd7a8f73b65e86275e8018d740daa0af97cf10c29d977a1ec45a55b69e7cd515fece9c90062df8bfaf4f58b6df549110301", 0x53}], 0x1) (async) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) r0 = syz_open_pts() close(r0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x892, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff}, 0x402}) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) open(&(0x7f00000001c0)='./bus\x00', 0x20, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$TIOCSETA(r1, 0xc0104453, &(0x7f0000000000)={0x5, 0x408, 0x6, 0x10000009, "45060007000007000000000000c600", 0x6, 0x44}) (async, rerun: 64) r3 = syz_open_pts() (async, rerun: 64) writev(r2, &(0x7f0000000180)=[{&(0x7f00000002c0)="0002000004", 0x5}], 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0xfbe, 0x0, 0x3, 0xffffffdd, "0900010000000000000000000000004f1300", 0x461b, 0x1}) (async) readv(r3, &(0x7f0000000280)=[{&(0x7f0000000480)=""/131, 0x83}], 0x1) (async) setitimer(0x2, &(0x7f00000000c0)={{0xc}, {0x257a, 0xa3f}}, &(0x7f0000000100)) (async) r4 = socket(0x2, 0x3, 0x1) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000700)={0x2, &(0x7f00000000c0)=[{0x0, 0x4, 0x0, 0x5}, {0x3, 0x0, 0x0, 0x49}]}) (async) kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x1, 0x5}], 0x40, 0x0, 0x1000, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1934, 0x0, 0x94e88e483d20a485) (async, rerun: 32) r5 = socket$inet(0x2, 0x2, 0x0) (async, rerun: 32) r6 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r6, &(0x7f00000011c0)=[{&(0x7f0000001200)='#!', 0x2}], 0x1) (async) write(r6, &(0x7f00000000c0)=' \n', 0x2) (async) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async, rerun: 32) setsockopt$inet_opts(r5, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (rerun: 32) bind$inet(r4, &(0x7f0000000140)={0x2, 0x2}, 0xc) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000200), 0x0) 547.405221ms ago: executing program 0 (id=2443): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async, rerun: 32) r1 = socket(0x2, 0x1, 0x0) (rerun: 32) shutdown(r1, 0x1) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000640)={0x3, 0x8, 0x9, {[0xc7, 0x9, 0x2, 0xfffffffffffffff9, 0x3, 0x9, 0x1, 0x0, 0x9, 0x6, 0xfffffffffffffff8, 0x2, 0x7, 0xfff, 0x4, 0x21e, 0xffff, 0xa3d], [0x3a1e, 0x3, 0x9, 0x18000000000, 0xa10, 0x3, 0x9, 0x8, 0x2d99cf7f, 0x100000000], [0x0, 0xfffffffffffff0e3, 0x6, 0x2, 0x7fffffff, 0x8, 0x73c2], [0x40, 0x9970, 0x81, 0x6, 0x6, 0x200], [{0x6, 0x6, 0x101, 0xfff}, {0x6, 0x7, 0x80, 0x3}, {0x3, 0x1f, 0x3ff, 0x7}, {0x88f, 0x6bd, 0xa}, {0x4, 0x1, 0x7, 0x4}, {0x7, 0x2, 0x5}, {0x401, 0x8, 0x4, 0x1}, {0xd, 0x80, 0x9, 0x80000000}], {0xd, 0xee7f, 0x5fa}, {0x5, 0x7, 0x38dd}}}) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) r3 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (rerun: 64) setreuid(0xee00, 0x0) (async, rerun: 64) r4 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) (async, rerun: 64) r5 = getuid() fchown(r4, r5, 0xffffffffffffffff) (async) setreuid(0x0, r5) (async) fchdir(r4) (async) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x8a, &(0x7f0000000000)={@local, @random="5fbb8af09d48", [], {@ipv6={0x86dd, {0x6, 0x6, "e22945", 0x54, 0x33, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="b13c0811bdcbcd4b93f63f5806ba09f1", {[@hopopts={0x6, 0x1, '\x00', [@jumbo, @padn={0x1, 0x1, [0x0]}]}, @hopopts={0x62, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @pad1, @ra={0x5, 0x2, 0x5}, @jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0x8}, @padn, @enc_lim={0x4, 0x1, 0x6}]}], @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x80, 0x4, 0x0, 0x4}}}}}}}) 430.187771ms ago: executing program 6 (id=2444): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x2b, 0x2d, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x20) chroot(&(0x7f0000000040)='./file0/file0/../file0\x00') unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') sysctl$net_inet_ah(&(0x7f0000000000)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) 427.173932ms ago: executing program 5 (id=2446): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) r0 = syz_open_pts() close(r0) syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000480)={0xf66c, 0x21e, 0xffffffff, 0x5ffbfb5b, "428f000000000000009b362c883e9b819200", 0x10003fd, 0xfffffffd}) ioctl$TIOCSTOP(r0, 0x2000746f) write(r0, &(0x7f0000000cc0)='F', 0x1) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 370.257078ms ago: executing program 7 (id=2448): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x1, 0xb, 0xfffffff4, 0x260, "001e3c36dbddfc0000004800cf00", 0x545, 0x5}) read(r0, &(0x7f0000000200)=""/255, 0xff) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="673bb5b8cc0c16ed08f1b8d24e2207f981aa6a78ef1d35e6abbbdabb26a52ad7f46003d52c000f06c166b28e8db79f701681", 0x32}], 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') kevent(r1, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{r1}, 0xfffffffffffffff9, 0x2, 0x40, 0x0, 0x40000000000005}, {{r1}, 0xfffffffffffffffc, 0xc0, 0x20000000, 0x4000000000005, 0x46ad}, {{}, 0xfffffffffffffff8, 0x1, 0x8, 0x1, 0x400000000000008}, {{r1}, 0xfffffffffffffffe, 0x6e, 0x4, 0xffffffff, 0xc3b}, {{}, 0xfffffffffffffffb, 0x6b28b7731859c8bc, 0x40000000, 0x9, 0x3}, {{r1}, 0xffffffffffffffff, 0x1d5, 0x80, 0xe, 0x10000}, {{r1}, 0xfffffffffffffff9, 0x14, 0x10, 0x5, 0x100000001}, {{r1}, 0xfffffffffffffffe, 0x38, 0x20000000, 0x103, 0xfffdfffffffffffb}], 0x282, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x3) 369.97495ms ago: executing program 5 (id=2449): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x2000, 0x0, {[0xfffffbeffffffffb, 0x4, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x8, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffe], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x400, 0x8}, {0x0, 0x2003, 0xffff, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x9}], {0x2000, 0x6, 0x5}, {0x129, 0x6, 0xb0, 0x2}}}) socket(0x18, 0x2, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x3}, 0x8) r2 = getpid() ktrace(0x0, 0x1, 0x1806, r2) stat(&(0x7f0000000100)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001100)) setitimer(0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x8000, 0x2) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xa, &(0x7f0000000000), 0x0) seteuid(0xffffffffffffffff) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000000)) 369.809823ms ago: executing program 6 (id=2450): open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@broadcast, @random="d722ca6fdffa", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @generic="0a6921374c6442a6"}}}}) r0 = socket$inet(0x2, 0x3, 0x10) getsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) mknod(0x0, 0x2000, 0x1e5f) getpeername(r0, &(0x7f0000000080)=@in6, &(0x7f00000000c0)=0xc) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$TIOCSETA(r1, 0xcd504406, &(0x7f0000000740)={0xd, 0x4, 0x0, 0x0, "97aa224f0cf3d71bffc1f892ff0587956d4726d1", 0x1bf, 0x7fffefff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r1, 0xcd504406, &(0x7f0000000740)={0x0, 0x1, 0x7, 0x0, "97aa74c2bd06a600", 0xfffffffc}) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000140)={0x5, &(0x7f0000000280)=[{0x0, 0x1, 0x7, 0x202}, {0x35, 0x0, 0x0, 0x3}, {0x24, 0x7e, 0x2f, 0x6}, {0x200, 0x8, 0xaa, 0x7}, {0x6, 0x4, 0x2, 0x207fd}]}) write(r2, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 326.383939ms ago: executing program 5 (id=2452): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mknod(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xfffdff7e, 0x160350d, "04e4ee0d090000deffffffff0fe0ff0405080800", 0x200001, 0x9}) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000009c0)="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", 0xf01}], 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000080)={&(0x7f00000000c0)=[{0xad}, {0xc9, 0x7}], 0x2}) ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000080)={&(0x7f0000000240)=[{0x20, 0x20000001}, {0x4}], 0x2}) r3 = socket(0x6, 0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) pledge(&(0x7f0000000080)='tty V\xef\x86\xce3|#\xcb\x13\x12\xc0\r\x9c\xe6\x00E\xbd\x81+r9\xbc\xda\f\xeb\x13\x96\xdbY\x91\x0e\x17\x95 \x00\xa6\x9ca\x00\x00\x00\x00\x00\x00\xbe\xa4kG\x00\x00\x00\x00\x00^\x00\x01\x04\x00\xeb\x91vr)\\\xf2:\'2.\xee\xb6\xd9P#\x0f\xcd\x80\x8b\xa3 \x06\xe6{\xc3\x8e\xd7bN\x81\x9ess\x13\x06\xc6S\xe7\x1c\xfc\xec\xb0\x18\xf5\xb4H\xf8\x9el\x03(r\xd4\x9a\x0f\f\xdb', 0x0) close(r3) 325.700628ms ago: executing program 6 (id=2453): r0 = socket(0x24, 0x2, 0xfc) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$VNDIOCSET(r1, 0xc0285108, &(0x7f0000000040)={0x0, 0x9, 0x0}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0}, 0xc) 325.485523ms ago: executing program 3 (id=2454): mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0xa}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x8a38, 0x0, "07160a009cef01098b748200"}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000340)="b0e58ad79772d3ae6dc0e2e2ee61552493b9ba60db86effd501ab68f9a89a6d65339e698f529652aed5df58bc304877c6d78278b17a2d452fec1179699185decb5fadb3b892f5c3bb154f45020f214fb4a3c997f90e2627f24fcf86e320877c521b5017a52c1a0887e4225cd9e7ed0e179", 0x71}], 0x1) r2 = dup2(r1, r0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0xfffffffe, 0xfffffff8, 0x8f4, 0x7fe, "2cf9e13145b4d700000000000000001200", 0x4, 0x9}) poll(&(0x7f0000000000)=[{r2, 0x40}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x400000, 0x80, 0x5, 0x7, "11eddeec306a88b1670e527e4916d91f5762f39d", 0x9, 0x3}) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) unlink(&(0x7f0000000040)='./file0\x00') connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) 323.45089ms ago: executing program 0 (id=2455): r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x4ebfac6bbaf7864) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) r2 = socket(0x18, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = kqueue() kevent(r4, &(0x7f0000000380)=[{{r3}, 0xfffffffffffffffb, 0x51, 0xf0000000, 0xffffffffffffffe9, 0x3}], 0x1005, 0x0, 0xc, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x2) acct(0x0) acct(&(0x7f0000000080)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x2, 0x4ebfac6bbaf7864) (async) socket(0x18, 0x2, 0x0) (async) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x0) (async) socket(0x18, 0x1, 0x0) (async) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) (async) kqueue() (async) kevent(r4, &(0x7f0000000380)=[{{r3}, 0xfffffffffffffffb, 0x51, 0xf0000000, 0xffffffffffffffe9, 0x3}], 0x1005, 0x0, 0xc, 0x0) (async) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x2) (async) acct(0x0) (async) acct(&(0x7f0000000080)='./file0\x00') (async) 250.687992ms ago: executing program 3 (id=2456): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf8, 0x3}, 0x6, 0x10025, 0x0, 0x0, 0x9, 0x9, 0x8000000000000000}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='r\x00') execve(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 249.896025ms ago: executing program 6 (id=2457): setrlimit(0x2, &(0x7f00000000c0)={0x60000000, 0x60000000}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0x7}, {0x16, 0x3, 0x0, 0x48a6}]}) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) ioctl$BIOCSBLEN(r2, 0xc0044266, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f91e3471ac0058bc5af58e3316918f5f0ae7ddb70a231e47f1b30e1a55fa790d84cd71b59c7a480e9fb5c1", &(0x7f0000000080)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[]) r4 = syz_open_pts() close(r4) rename(0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="b273a18160be077e7ecce2945464df218ec9aa8b737dc1b3411461b170f76b77bd1a56ba8ad5f7492176f8375d400405", 0x30}], 0x1) 247.390125ms ago: executing program 7 (id=2458): r0 = socket$inet(0x2, 0x8007, 0x0) close(r0) (async) r1 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) (async) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) mknod(0x0, 0x2000, 0x6381) (async) r3 = open(0x0, 0x80, 0x8) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000200)=0x6) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x1ff, 0x40, 0x1, 0xa00440}, {0x80, 0x85, 0x0, 0xa}]}) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) writev(r4, &(0x7f0000000080)=[{0x0}], 0x1) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x38}, 0x2, &(0x7f0000000240)="92cc7ec84a161155288516453b9a8b1bf3975775782b5b7e4c3a07b0c01a690b7264f06b816247d71678d0070af8337b0efba4c9fb833883d063ddf9d34faa28fd0e9a4f3edb0a3ab0813d7b545c90966b14ae157277dbb2f7a16814b6ffea784757d352acede0066a9c1dca8a6d1d7348d6ca09a85323683015663a3131fb18bca4ca0fbf9e1ea8c47f0b1234c982efd8f9e318fcbe01724e77dabd3ac77f5a008547917eb66652f3728d7a8fd193fc5bbf30256413ebab758e40e49dc9b3dec9c83ca2ac19d108b6dfb760a9", &(0x7f0000000100)=0xcd, &(0x7f0000000180)="b6ee349d7559f8d262d34657adfde205fc9144ae1fb989db5fb10b88f599d47bf46b0b0316012eedc0347ed810ef505b70b7bf82eb0906761c0ddf5d79", 0x3d) (async) ioctl$VNDIOCGET(r2, 0xc4104603, &(0x7f0000000480)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffff, 0x8000, 0x63}) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="e600100000000000", 0x8) 159.752368ms ago: executing program 3 (id=2459): r0 = socket$inet(0x2, 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2}, {0x14, 0x10, 0x1, 0xff}, {0x6, 0x5, 0x83, 0x400f}]}) sysctl$kern(0x0, 0x0, &(0x7f0000004540)="0100e666ecef978ded988b26cc3d82403c83209a6faa5d73ed0fbcde781a50f577b1f772024a5ac94298335ee714e680b0f6fbdee04f797faa5ff077414689e7a7c54ac241ef12a2a93f1ccd751bae8ad10a9de402d1f91d3a943bd7f4a45b2fff1fa98eda0c88ecbb70ece3e44a035698a394e12a3b41ebd61476b90700"/135, &(0x7f0000000080)=0x87, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[]) setsockopt$inet_opts(r0, 0x0, 0x14, 0x0, 0x0) 158.664221ms ago: executing program 6 (id=2460): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000080)=0xc) (async) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='x\x00') (async, rerun: 64) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (rerun: 64) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x0) (async) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) fcntl$setown(r1, 0x6, 0x0) (async) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r2, 0x8010570e, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x1ba, 0x1, 0x3, 0xfffe, 0x101}]}) (async, rerun: 64) open$dir(&(0x7f0000000040)='./file0\x00', 0x20, 0x152) (rerun: 64) r3 = getuid() getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setregid(r7, r7) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpgid(0x0) fcntl$setown(r8, 0x6, r9) (async) r10 = getppid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x8, r3, r4, r5, r7, 0x80, 0xe}, 0x1ff80, 0x8, r9, r10, 0x6, 0xd8c1, 0x6}) 135.86801ms ago: executing program 5 (id=2461): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0x9, 0x8, 0xfffffff7}, {0x100, 0x1, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0xfff, 0x7ff, 0x1, 0x8}, {0x2, 0x82, 0x1, 0x5}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1c8, 0x10001, 0x0, 0x3}, {0x8, 0xd5, 0x8, 0x8000002}, {0xb89, 0x555981a8, 0x8, 0x112b}, {0x29a71717, 0x8, 0xffffffff, 0x6}, {0xc, 0x2000005, 0x5, 0x848}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000005, 0x0, 0x80, 0x5, 0x4000008, 0x10, [{0x10000000, 0x7, 0x2, 0x71002}, {0x9, 0x6, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x400009}, {0x1, 0x800, 0x8007}, {0x20401, 0x200727, 0x2800, 0x7}, {0x5, 0x650, 0x9, 0x98}, {0xce1, 0xffffffff, 0x0, 0x6b}, {0x6, 0x10001, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x7fff, 0xd3b, 0x4}, {0x8, 0x10001, 0x5, 0x4}, {0x9, 0xb, 0x9, 0x1002}, {0xb8c, 0xa, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0xe, 0x10000a}, {0xc, 0x5, 0x2000005, 0x10000000}, {0x0, 0xaf7, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) syz_extract_tcp_res(0x0, 0x9, 0x800) r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) poll(&(0x7f0000000000)=[{r2, 0x2}], 0x1, 0x4d) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0x9, 0x8, 0xfffffff7}, {0x100, 0x1, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0xfff, 0x7ff, 0x1, 0x8}, {0x2, 0x82, 0x1, 0x5}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1c8, 0x10001, 0x0, 0x3}, {0x8, 0xd5, 0x8, 0x8000002}, {0xb89, 0x555981a8, 0x8, 0x112b}, {0x29a71717, 0x8, 0xffffffff, 0x6}, {0xc, 0x2000005, 0x5, 0x848}, {0x0, 0x1, 0x1002, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000005, 0x0, 0x80, 0x5, 0x4000008, 0x10, [{0x10000000, 0x7, 0x2, 0x71002}, {0x9, 0x6, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x400009}, {0x1, 0x800, 0x8007}, {0x20401, 0x200727, 0x2800, 0x7}, {0x5, 0x650, 0x9, 0x98}, {0xce1, 0xffffffff, 0x0, 0x6b}, {0x6, 0x10001, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x7fff, 0xd3b, 0x4}, {0x8, 0x10001, 0x5, 0x4}, {0x9, 0xb, 0x9, 0x1002}, {0xb8c, 0xa, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0xe, 0x10000a}, {0xc, 0x5, 0x2000005, 0x10000000}, {0x0, 0xaf7, 0xfff, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) syz_extract_tcp_res(0x0, 0x9, 0x800) (async) openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) poll(&(0x7f0000000000)=[{r2, 0x2}], 0x1, 0x4d) (async) 135.550559ms ago: executing program 0 (id=2462): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0206983, &(0x7f00000001c0)) socket(0x11, 0x3, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b10005166000009f050000002005000000000934ed0a0500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4d0800000000000000f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b671f4d335d223e7db3009b95665b00e32118eab0000000cc00fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4abd1182d000000002002fb1c0c2300008abfba09000000d8e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x0, 0x0, 0x0) (async) sendto$unix(r1, &(0x7f0000000000)="b10005166000009f050000002005000000000934ed0a0500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4d0800000000000000f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b671f4d335d223e7db3009b95665b00e32118eab0000000cc00fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4abd1182d000000002002fb1c0c2300008abfba09000000d8e37f71a3f8343712051eeab71d89e000040381ecb664000000", 0xb1, 0x0, 0x0, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) (async) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$kern(&(0x7f0000000040)={0x1, 0x29}, 0x2, 0x0, 0x0, &(0x7f0000000200), 0x0) ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f0000000140)={0x10, 0x99f, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4}, {&(0x7f0000400000/0xc00000)=nil, &(0x7f00004b2000/0x3000)=nil, 0x4}, {&(0x7f000052d000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffff}, {&(0x7f00009cb000/0x3000)=nil, &(0x7f0000a4a000/0x1000)=nil, 0x401}, {&(0x7f0000ead000/0x1000)=nil, &(0x7f00009a4000/0x3000)=nil, 0xc93}, {&(0x7f0000646000/0x2000)=nil, &(0x7f0000638000/0x2000)=nil, 0x9}, {&(0x7f0000845000/0x4000)=nil, &(0x7f0000665000/0x2000)=nil, 0x3ff}, {&(0x7f0000f41000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x10000}, {&(0x7f000092f000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x61}, {&(0x7f00004b1000/0x3000)=nil, &(0x7f0000f67000/0x1000)=nil, 0x6}, {&(0x7f0000d19000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f00009b7000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x401}], './file0\x00', 0x800}) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) 135.326156ms ago: executing program 3 (id=2463): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) seteuid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x36, &(0x7f0000000000)="03000000", 0x4) r1 = kqueue() openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r3, 0x200074c4, 0x0) (async) ioctl$FIONREAD(r3, 0x200074c4, 0x0) kevent(r1, &(0x7f0000000200)=[{{}, 0xfffffffffffffffe, 0x29, 0x80, 0xffffffffffffffff, 0xc}, {{}, 0xfffffffffffffffe, 0xa0, 0x10, 0x6, 0x8000000000000000}], 0x6, 0x0, 0x1ff, 0x0) 131.770708ms ago: executing program 7 (id=2464): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) connect(r0, &(0x7f0000000080)=@in6={0x18, 0x1, 0x9}, 0xc) sysctl$net_inet6_icmp6(&(0x7f0000000180)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000001c0), 0x0) 6.66625ms ago: executing program 0 (id=2465): nanosleep(&(0x7f00000002c0)={0x2, 0xfb}, &(0x7f0000000300)) r0 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r0, 0x3a, 0x12, 0x0, 0x0) unveil(&(0x7f0000000a80)='./file0/file0\x00', &(0x7f0000000ac0)='W\x00') 5.912491ms ago: executing program 7 (id=2466): semget$private(0x0, 0x7, 0xc4) (async) r0 = semget$private(0x0, 0x7, 0xc4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) r2 = socket(0x18, 0x2, 0x0) r3 = socket(0x18, 0x2, 0x0) syz_emit_ethernet(0x208, &(0x7f0000000a00)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x1d2, 0x6, 0x30, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x16, 0x4, '\x00', [@pad1, @ra={0x5, 0x2, 0x6}, @ra={0x5, 0x2, 0xb}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x80000000}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x2b, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}, @routing={0x4, 0x6, 0x0, 0x0, 0x0, [@mcast1, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="ba97af7ca1081335a40c315f284f3ea1"]}, @fragment={0x16, 0x0, 0x7, 0x1, 0x0, 0x1, 0x65}, @routing={0x16, 0x14, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @empty, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, @loopback, @mcast2, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @rand_addr}]}, @hopopts={0x70, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}]}, @dstopts={0x16, 0x3, '\x00', [@generic={0x4b, 0x1d, "054100f86c632dc38f9feb16ff05d2bcd9e27b85370dffe3764d38848d"}]}, @routing={0x16, 0x4, 0x0, 0x7, 0x0, [@rand_addr="620de1163a46dbf793e80b74e34f2ac4", @remote={0xfe, 0x80, '\x00', 0x0}]}], @generic="4cef3bee785e139aed70a331103d5ba08d38fcde0def76aea219bc749984b4e23c34e895d2f18d8f7fc771adfdc2cfdcd312d82eb8fa5f7ecb70d9f13bd2797e75485af842afc7a0cf31"}}}}}) r4 = dup2(r2, r3) setsockopt(r4, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) (async) setsockopt(r4, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) sendmsg$unix(r3, &(0x7f0000000480)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000400)=[@rights={0x10}], 0x10, 0x40a}, 0x2) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="f97b6d849b386b8a3438c8bd0000000e632101a1a17348e1de1e1ca6f96c0bbc", 0x20}], 0x1) (async) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000340)="f97b6d849b386b8a3438c8bd0000000e632101a1a17348e1de1e1ca6f96c0bbc", 0x20}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="09009abb7f912a0e30640ccaacf186da70c66b44ff3210b6548ffc5c12c6cf06000400dbaf4840ca4da58a2665ad02877fdeb78ff9b629a9dec557ee9790c49a5310c00f3872fde5ab1a2b81de0e3153051e31777819da46b59fcb84cfd1b806fbebf70700000000000000000000000000ab0855a6b8d8ff1eeeb6c3", &(0x7f0000000080)=0x7c, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="09009abb7f912a0e30640ccaacf186da70c66b44ff3210b6548ffc5c12c6cf06000400dbaf4840ca4da58a2665ad02877fdeb78ff9b629a9dec557ee9790c49a5310c00f3872fde5ab1a2b81de0e3153051e31777819da46b59fcb84cfd1b806fbebf70700000000000000000000000000ab0855a6b8d8ff1eeeb6c3", &(0x7f0000000080)=0x7c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r6 = socket(0x18, 0x2, 0x0) r7 = socket(0x18, 0x1, 0x0) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt(r6, 0x1000000029, 0x2f, 0x0, 0x0) (async) setsockopt(r6, 0x1000000029, 0x2f, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) sendto$unix(0xffffffffffffff9c, &(0x7f0000000200)="5741df6d8d65a7c6025e5dd476f54716222b386e1e8f30240d9073e0bf8899fbea88695b63ce2dbb4e2d65a1fc5947e94a329e6a65b78e38338bd5bd", 0x3c, 0x8, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000100)=""/193) 5.222184ms ago: executing program 3 (id=2467): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x200, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x65, 0x3d0, 0xffffffffffffffff, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x4}) (async) r0 = socket(0x10, 0x8002, 0xff) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1) (async) close(r0) (async) r1 = socket(0x2, 0x1, 0x0) r2 = dup(r1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) r4 = dup(r3) dup2(r2, r4) (async) getsockname(r4, 0x0, &(0x7f0000000100)) (async, rerun: 64) r5 = socket(0x800000018, 0x2, 0x0) (rerun: 64) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r5], 0x10}, 0x400) 4.457772ms ago: executing program 7 (id=2468): getdents(0xffffffffffffffff, 0x0, 0x0) (async) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="f1196c00", 0x4) (async) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10, 0x22) symlinkat(&(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000140)='./file0\x00') setreuid(0x0, 0xee01) (async, rerun: 64) unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') (rerun: 64) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x0) (async) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000540)='./file0\x00') (async) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sysctl$net_inet6_ip6(&(0x7f00000000c0)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, &(0x7f0000000100), 0x0, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x93) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000040)=0x7d) (async) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000000)={0x1ff, 0x2, 0x6, 0x8, "2c15f9472f164d5ec705fd431bd87f19bd17fbf8", 0x7, 0x9}) 463.109µs ago: executing program 7 (id=2469): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) close(r0) r1 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setsockopt$sock_int(r0, 0xffff, 0x2000, &(0x7f0000000180)=0xfffffffe, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) write(r0, &(0x7f00000017c0)="fd77752c6afb5027ec9473975598fd05ef", 0x11) sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001300), 0x4) 0s ago: executing program 3 (id=2470): r0 = socket(0x18, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="9725db874b5776d5676fed1ea73f98a0c434268a8320db3eab6b66f85fc6c3e3784eea0a60bdf4f4428f0b0f73d3d47237f91da5d2059c1266e040db88848df71ab56420823a1aba3070fb930a29ddebb11cfe86730eec721e0af6bc406cd3f2d2d584822e5a2dca988b787135219952d8f7402de7b9291c788fea559f86c9ffda5f03d0c9559630", 0x88}], 0x1, 0x0, 0x0, 0x4}, 0xc) ioctl$FIONREAD(r0, 0x8020697a, &(0x7f00000001c0)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) chown(&(0x7f0000000040)='./file0\x00', 0x0, r3) setgid(r3) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f0000000100)={""/16, @ifru_dstaddr=@in6}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 6, size = 287762939904 in6_ifawithscope: output interface is not specified pckbd_enable: command error pckbd_enable: command error in6_ifawithscope: output interface is not specified pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (13665) exits with status -1 WARNING: thread `nfsio' (415604) exits with status -1 WARNING: thread `nfsio' (261280) exits with status -1 WARNING: thread `nfsio' (482678) exits with status -1 WARNING: thread `nfsio' (417977) exits with status -1 WARNING: thread `nfsio' (326150) exits with status -1 WARNING: thread `nfsio' (206634) exits with status -1 WARNING: thread `nfsio' (172884) exits with status -1 WARNING: thread `nfsio' (441773) exits with status -1 WARNING: thread `nfsio' (234212) exits with status -1 WARNING: thread `nfsio' (487574) exits with status -1 WARNING: thread `nfsio' (503749) exits with status -1 WARNING: thread `nfsio' (516828) exits with status -1 WARNING: thread `nfsio' (206566) exits with status -1 WARNING: thread `nfsio' (324827) exits with status -1 WARNING: thread `nfsio' (440765) exits with status -1 WARNING: thread `nfsio' (60724) exits with status -1 WARNING: thread `nfsio' (419685) exits with status -1 WARNING: thread `nfsio' (508440) exits with status -1 WARNING: thread `nfsio' (156095) exits with status -1 pckbd_enable: command error wskbd0: can't attach mux (error=5) pckbd_enable: command error denied attempt to set clock back 134217760 seconds pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: in6_ifawithscope: output interface is not specified pckbd_enable: command error ¹jpckbd_enable: command error denied attempt to set clock back 16 seconds pckbd_enable: command error denied attempt to set clock back 536870932 seconds OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error in6_ifawithscope: output interface is not specified load: 8.88 cmd: getty 76072 [ttyin] 0.00u 0.01s 0% 340k pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 6, size = 287762939904 OpenBSD/amd64 (Amnesiac) (tty00) login: pppx: unable to set addresses for pppx1, error=17 uvm_fault(0xfffffd806eef23c8, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff82aae000 cs 8 rflags 10246 cr2 0 cpl 0 rsp ffff80002a2f9fc0 gsbase 0xffff8000299ddff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff82aae000 Starting stack trace... panic(ffffffff833414b8) at panic+0x1d0 kerntrap(ffff80002a2f9f10) at kerntrap+0x2cb alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff8000015f5000) at dt_ioctl_record_stop+0xf0 dtioctl(11e5f,80044403,ffff80002a2fa250,81,ffff8000347ebc58) at dtioctl+0x536 VOP_IOCTL(fffffd806a1c27b0,80044403,ffff80002a2fa250,81,fffffd80097fb548,ffff8000347ebc58) at VOP_IOCTL+0xac vn_ioctl(fffffd805eaef260,80044403,ffff80002a2fa250,ffff8000347ebc58) at vn_ioctl+0xf8 sys_ioctl(ffff8000347ebc58,ffff80002a2fa430,ffff80002a2fa380) at sys_ioctl+0x5c3 syscall(ffff80002a2fa430) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x86050a03640, count: 247 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 83 907335024 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *438572 47306 0 0 0 1 syz-executor 503624 17957 0 0x14000 0x200 0 reaper savectx() at savectx+0xae end of kernel end trace frame: 0x77444dfb0f80, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806eef23c8, 0x0, 0, 1) -> e ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x77444dfb0f80, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80002a3abe10 rbx 0 rdx 0 rcx 0xffff80002a297c50 rax 0x3a r8 0xffff80002a3abd40 r9 0x1 r10 0x46cf52e366822c9f r11 0xf9205797e22a6fa7 r12 0 r13 0 r14 0xffff80002a297c50 r15 0 rip 0xffffffff81c423ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80002a3abd90 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=438572 pid=47306 tcnt=4 stat=onproc flags process=0 proc=0 runpri=86, usrpri=86, slppri=16, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a2bb9b8,0xffff80002a296f90 process=0xffff8000347ef568 user=0xffff80002a3a6000, vmspace=0xfffffd806a315028 estcpu=36, cpticks=3, pctcpu=0.0, user=2, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 88678 47309 71105 0 2 0 syz-executor 88678 76589 71105 0 3 0x4000080 kqread syz-executor 88678 66046 71105 0 3 0x4000080 fsleep syz-executor 88678 497034 71105 0 3 0x4000000 sbar syz-executor *47306 438572 78153 0 7 0 syz-executor 47306 461012 78153 0 3 0x4000080 fsleep syz-executor 47306 384740 78153 0 3 0x4000080 fsleep syz-executor 47306 346955 78153 0 3 0x4000080 fsleep syz-executor 18656 361716 18388 -1 3 0x90 nanoslp syz-executor 18656 232199 18388 -1 3 0x4000090 sbwait syz-executor 18656 266805 18388 -1 3 0x4000090 fsleep syz-executor 15827 78617 41898 0 3 0x80 nanoslp syz-executor 15827 46313 41898 0 3 0x4000080 lockf syz-executor 15827 136479 41898 0 3 0x4000080 fsleep syz-executor 78153 475210 63395 0 3 0x82 nanoslp syz-executor 62341 3791 63395 0 3 0x82 nanoslp syz-executor 41898 365414 63395 0 3 0x82 nanoslp syz-executor 99469 89821 1 0 3 0x100083 ttyin getty 71105 321188 63395 0 3 0x82 nanoslp syz-executor 1128 265399 63395 0 2 0x2 syz-executor 18388 144388 63395 0 3 0x82 nanoslp syz-executor 12174 177456 63395 0 2 0x2 syz-executor 89098 11611 0 0 3 0x14200 bored sosplice 46651 311271 63395 0 3 0x82 wait syz-executor 63395 3380 87750 0 3 0x82 kqread syz-executor 87750 343803 26537 0 3 0x10008a sigsusp ksh 26537 37029 80503 0 3 0x98 kqread sshd-session 80503 242368 19538 0 3 0x92 kqread sshd-session 19538 452386 1 0 3 0x88 kqread sshd 76720 409667 1552 74 3 0x1100092 bpf pflogd 1552 432480 1 0 3 0x80 sbwait pflogd 75172 209363 69036 73 3 0x1100090 kqread syslogd 69036 99001 1 0 3 0x100082 sbwait syslogd 39262 431123 1 0 3 0x100080 kqread resolvd 67 208883 48930 77 3 0x100092 kqread dhcpleased 6405 154548 48930 77 3 0x100092 kqread dhcpleased 48930 91318 1 0 3 0x80 kqread dhcpleased 11534 175676 0 0 3 0x14200 bored smr 20293 222446 0 0 2 0x14200 zerothread 87229 68601 0 0 3 0x14200 aiodoned aiodoned 70315 136885 0 0 3 0x14200 syncer update 75205 64621 0 0 3 0x14200 cleaner cleaner 17957 503624 0 0 7 0x14200 reaper 65085 214800 0 0 3 0x14200 pgdaemon pagedaemon 13741 117974 0 0 3 0x14200 bored viomb 34155 336560 0 0 3 0x40014200 acpi0 acpi0 22596 122911 0 0 3 0x40014200 idle1 28166 374820 0 0 3 0x14200 bored softnet3 34156 304532 0 0 3 0x14200 bored softnet2 73478 313679 0 0 3 0x14200 bored softnet1 22565 404986 0 0 3 0x14200 bored softnet0 33991 286771 0 0 2 0x40014200 systqmp 46133 68062 0 0 3 0x14200 bored systq 3741 231586 0 0 3 0x14200 tmoslp softclockmp 54401 119424 0 0 3 0x40014200 tmoslp softclock 45187 452248 0 0 3 0x40014200 idle0 1 234458 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &(curpg)->mdpage.pv_mtx r = 0 (0xfffffd80091b72a0) #0 witness_lock+0x5bb #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pmap_remove_ptes+0x297 #4 pmap_do_remove+0x533 #5 uvm_unmap_kill_entry_withlock+0x26f #6 uvm_map_teardown+0x117 #7 exit1+0x723 #8 sys_exit+0x1a #9 syscall+0xb08 #10 Xsyscall+0x128 exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806bfc8310) #0 witness_lock+0x5bb #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pmap_do_remove+0xa9 #4 uvm_unmap_kill_entry_withlock+0x26f #5 uvm_map_teardown+0x117 #6 exit1+0x723 #7 sys_exit+0x1a #8 syscall+0xb08 #9 Xsyscall+0x128 Process 88678 (syz-executor) thread 0xffff8000347ebc58 (497034) Process 1128 (syz-executor) thread 0xffff8000347eb218 (265399) Process 12174 (syz-executor) thread 0xffff80002a2962b0 (177456) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10271 11149K 12477K 166960K 13614 0 pcb 17 15K 17K 166960K 684 0 rtable 181 9K 11K 166960K 1022 0 pf 38 18K 67486K 166960K 243 0 ifaddr 40 7K 10K 166960K 184 0 ifgroup 59 2K 2K 166960K 296 0 sysctl 4 1K 9K 166960K 51 0 counters 70 37K 38K 166960K 436 0 ioctlops 0 0K 4K 166960K 2236 0 iov 0 0K 24K 166960K 260 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1519 96K 96K 166960K 3512 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 38 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 123 0 dirhash 12 2K 2K 166960K 60 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 110K 166960K 2767 0 sigio 0 0K 0K 166960K 80 0 proc 76 103K 128K 166960K 1041 0 subproc 72 4K 4K 166960K 163 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 569 0 in_multi 66 4K 7K 166960K 299 0 ether_multi 1 0K 0K 166960K 22 0 mrt 1 0K 0K 166960K 17 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 271 1208K 1208K 166960K 271 0 exec 0 0K 1K 166960K 953 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 7 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 237 152K 175K 166960K 26628 0 UVM aobj 65 3K 4K 166960K 71 0 pinsyscall 40 80K 104K 166960K 4200 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 137 0 NDP 13 0K 2K 166960K 124 0 temp 78 8696K 8947K 166960K 114320 0 kqueue 15 24K 32K 166960K 520 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 340 0 337 5 4 1 3 0 8 0 rtentry 176 340 0 267 6 1 5 6 0 8 0 unpcb 144 2401 0 2379 25 23 2 8 0 8 1 syncache 336 13 0 13 7 7 0 1 0 8 0 tcpqe 32 6 0 6 3 3 0 1 0 8 0 tcpcb 736 964 0 957 21 17 4 7 0 8 2 arp 128 62 0 47 1 0 1 1 0 8 0 inpcb 328 3177 0 3164 27 20 7 8 0 8 4 nd6 144 78 0 63 2 1 1 2 0 8 0 pkpcb 40 101 0 101 8 8 0 1 0 8 0 kcovpl 48 18 0 10 1 0 1 1 0 8 0 mppekey 1024 3 0 3 2 2 0 1 0 8 0 ppxss 1192 147 0 147 5 4 1 1 0 8 1 pppxif 1504 15 0 15 6 6 0 1 0 8 0 pfstscr 40 1 0 1 1 1 0 1 0 8 0 pffrag 232 48 0 41 1 0 1 1 0 482 0 pffrnode 88 15 0 8 1 0 1 1 0 8 0 pffrent 40 162 0 155 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pftag 88 3 0 1 1 0 1 1 0 8 0 pfstitem 24 26 0 23 1 0 1 1 0 8 0 pfstkey 128 28 0 25 1 0 1 1 0 8 0 pfstate 384 27 0 24 3 1 2 3 0 8 0 pfrule 1344 24 0 18 2 1 1 2 0 8 0 rttmr 136 2 0 2 2 2 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 1393 0 1076 42 18 24 38 0 8 0 art_table 32 1395 0 1076 5 0 5 5 0 8 0 art_node 16 332 0 271 1 0 1 1 0 8 0 sysvmsgpl 40 17 0 9 1 0 1 1 0 8 0 semupl 112 2 0 2 2 2 0 1 0 8 0 semapl 112 121 0 111 1 0 1 1 0 8 0 shmpl 112 68 0 6 2 0 2 2 0 8 0 dirhash 1024 50 0 33 3 0 3 3 0 8 0 dino2pl 256 6335 0 4817 96 0 96 96 0 8 0 ffsino 288 6335 0 4817 110 1 109 109 0 8 0 nchpl 144 9982 0 8259 65 0 65 65 0 8 0 rtmask 32 13 0 13 3 3 0 1 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 36707 0 36705 3 2 1 2 0 8 0 percpumem 16 233 0 183 1 0 1 1 0 8 0 kstatmem 264 180 0 148 3 0 3 3 0 8 0 scsiplug 72 12 0 12 6 6 0 1 0 8 0 scxspl 216 67647 0 67647 16 15 1 8 1 8 1 plimitpl 152 656 0 639 1 0 1 1 0 8 0 sigapl 424 3088 0 3039 10 3 7 9 0 8 0 knotepl 120 635 0 0 18 0 18 18 0 8 0 kqueuepl 224 1042 0 1029 13 12 1 5 0 8 0 pipepl 336 638 0 611 17 14 3 8 0 8 0 fdescpl 520 3045 0 3016 3 0 3 3 0 8 0 filepl 160 21769 0 21539 36 22 14 22 0 8 0 lockfpl 104 1825 0 1821 3 2 1 2 0 8 0 lockfspl 48 622 0 619 1 0 1 1 0 8 0 sessionpl 144 45 0 36 1 0 1 1 0 8 0 pgrppl 48 115 0 98 1 0 1 1 0 8 0 ucredpl 104 3709 0 3694 1 0 1 1 0 8 0 zombiepl 144 3041 0 3039 1 0 1 1 0 8 0 processpl 1240 3088 0 3039 6 1 5 6 0 8 0 procpl 656 7445 0 7386 9 3 6 8 0 8 0 srpgc 96 29 0 29 6 6 0 1 0 8 0 sosppl 168 28 0 28 6 6 0 1 0 8 0 sockpl 728 6075 0 6037 53 43 10 24 0 8 5 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 121 0 0 15 0 15 15 0 8 0 mcl2k 2048 70 0 0 6 0 6 6 0 8 0 mtagpl 96 42 0 0 2 0 2 2 0 8 0 mbufpl 256 1227 0 0 72 0 72 72 0 8 0 bufpl 280 26749 0 20607 439 0 439 439 0 8 0 anonpl 32 13716 0 0 111 0 111 111 0 246 0 amapchunkpl 152 92537 0 92003 72 46 26 42 0 158 0 amappl16 200 10496 0 10440 74 59 15 27 0 8 1 amappl15 192 28 0 28 1 1 0 1 0 8 0 amappl14 184 191 0 178 1 0 1 1 0 8 0 amappl13 176 6 0 5 1 0 1 1 0 8 0 amappl12 168 3880 0 3851 4 2 2 3 0 8 0 amappl11 160 54 0 40 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 1 0 1 0 8 0 amappl9 144 250 0 250 1 1 0 1 0 8 0 amappl8 136 25 0 22 1 0 1 1 0 8 0 amappl7 128 143 0 130 1 0 1 1 0 8 0 amappl6 120 296 0 292 1 0 1 1 0 8 0 amappl5 112 179 0 169 1 0 1 1 0 8 0 amappl4 104 399 0 381 1 0 1 1 0 8 0 amappl3 96 18725 0 18620 5 1 4 4 0 8 0 amappl2 88 891 0 826 2 0 2 2 0 8 0 amappl1 80 22318 0 21721 16 1 15 15 0 8 0 amappl 88 25228 0 25064 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 258 0 258 5 5 0 1 0 8 0 dma64 64 8 0 8 3 3 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 70 0 6 2 0 2 2 0 8 0 uaddrrnd 24 3045 0 3016 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 3045 0 3016 1 0 1 1 0 8 0 vmmpekpl 168 25654 0 25594 3 0 3 3 0 8 0 vmmpepl 168 197565 0 195606 134 30 104 112 0 357 1 vmsppl 480 3044 0 3015 6 1 5 5 0 8 0 rwobjpl 72 57521 0 50568 139 7 132 136 0 8 0 pdppl 4096 6097 0 6030 143 72 71 85 0 8 4 pvpl 32 21355 0 0 172 0 172 172 0 265 0 pmappl 256 3044 0 3015 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 549 0 136 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83816ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 uvm_pmr_freepageq(ffff80002a240460) at uvm_pmr_freepageq+0x201 km_free(ffff80003c506000,6000,ffffffff8363f5e0,ffffffff835b9f20) at km_free+0x36f uvm_uarea_free(ffff8000ffff2f70) at uvm_uarea_free+0x4f reaper(ffff8000ffffccd8) at reaper+0x1cb end trace frame: 0x0, count: 8 ddb{0}> trace x86_ipi_db(ffffffff83816ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 uvm_pmr_freepageq(ffff80002a240460) at uvm_pmr_freepageq+0x201 km_free(ffff80003c506000,6000,ffffffff8363f5e0,ffffffff835b9f20) at km_free+0x36f uvm_uarea_free(ffff8000ffff2f70) at uvm_uarea_free+0x4f reaper(ffff8000ffffccd8) at reaper+0x1cb end trace frame: 0x0, count: -7 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0x77444dfb0f80, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x77444dfb0f80, count: -1