last executing test programs: 4.527288468s ago: executing program 6 (id=3062): mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x5}, 0x2, &(0x7f00000011c0)="5bf91e34", &(0x7f0000000000)=0x4, 0x0, 0x0) (async) mkdir(&(0x7f0000000080)='.\x00', 0x0) 4.516369648s ago: executing program 5 (id=3063): ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x1, 0x80000001, 0x2, 0x0, "00000100000000000000908b7f7f00", 0x1, 0x2}) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) (async) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) select(0x40, &(0x7f0000000000)={0x800, 0x0, 0x4, 0x567, 0x8009ce7, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="280000000000000001000000370000006302267c0e16250fd8ab0009be9911437f00000000000000b800000000000000ffff000005000000683764d2ac10a2417f284f2cfdf42caeae1a369967c59c0165daae241311724455ef2fea392c2d48f14524c36e5180f9bd1ee2c2a5a4bf3c4345508b4153d5c04b714530789a0e60ca8f446cd2909854e003b1d6e24ccd97edba3295c7bd547e900d0b9dbc357be931d0ee0d7a269315bb0c55d9c31e6ca27dbfc8859af0d1853dd0f0c06237394080c065c0adbbea4aeb657991b099255eb9eee78dc52356ad4700000000000000c800000000000000ffff00000700000077da0a5c652498c5e91aa8f1d716dd669073b6a8bbbdf75c2d55a2cffaee3734f6c11e5c34d10c13f977fa430fd969e16fd6f2e83a7dac949ef7c4213f126a0dedd1de5f82849becd39509a5fcecf16db333bf0927b195cd0d18b2193fd9bd5ef2244efa5c9bd7f537d12c738a22dd6d506ad8562691f2e07cad00e6cde9e5f3ea4c6d0756edb55b633fa46d46344ad0018baa274b0f4c1156b62d40a75ee5a0875b64ddd08a22a14e6999f6cc507724cb000000000000001d3b3f92cd43b7fb0f5f3ce47ea48a6ae547908589ae976b181541b3"], 0x1a8}, 0x400) poll(&(0x7f0000000400)=[{r0, 0xa0}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x10c}, {0xffffffffffffffff, 0x20}], 0x4, 0xa) semop(0x0, &(0x7f0000000240)=[{0x3, 0x0, 0x1400}], 0x1) (async) semop(0x0, &(0x7f0000000240)=[{0x3, 0x0, 0x1400}], 0x1) r1 = kqueue() kevent(r1, &(0x7f00000002c0)=[{{r1}, 0xfffffffffffffffa, 0x9b96f43579a405b5, 0x2, 0x7, 0xfffffffffffffffb}, {{r1}, 0xfffffffffffffffc, 0x2, 0x4, 0x6, 0x7}, {{r0}, 0xfffffffffffffffc, 0x23, 0x40000000, 0x0, 0x4}], 0x8, &(0x7f0000000740)=[{{}, 0xfffffffffffffff9, 0x85, 0x1, 0x400040000000, 0x8}, {{r1}, 0xfffffffffffffffe, 0x43, 0x1, 0x8, 0x8}, {{r0}, 0xfffffffffffffff9, 0x5, 0x80, 0xa2, 0x1}, {{}, 0xfffffffffffffffa, 0x88, 0x80000000, 0x2, 0x1}, {{r0}, 0xfffffffffffffffe, 0x21, 0x8, 0x81, 0x4}, {{}, 0xfffffffffffffffd, 0x4, 0x2, 0x10000, 0x8}, {{}, 0xfffffffffffffffc, 0x80, 0x4, 0x400, 0x7}], 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r2 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x2008, 0xc, 0x3, 0x80, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x4}, {0x8, 0x5, 0xfffffffb, 0x7}, {0x6, 0x89, 0x100, 0xaf5}, {0x5, 0x4008, 0xb, 0x8}, {0x80000007, 0xffffffe8, 0xfffffff7}, {0x20000002, 0x7, 0xffffffff, 0x9c}, {0x80000cdc, 0xffffffff, 0x5, 0x71}, {0x9, 0x803, 0x14, 0x8}, {0x200, 0x81, 0x1, 0x9}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0x5, 0xd, 0x10aec}, {0x805, 0x40, 0x2, 0x5}, {0xfff, 0x2, 0x80005, 0x3ff}, {0x39a71717, 0xfffffffa, 0x3, 0x100006}, {0x4, 0x9, 0x7}, {0x0, 0x3, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff7, 0x44809e9d, 0x7, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x8000010}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0xfffffffb, 0x1a, 0x1, 0x0, 0xd87, 0x6, 0x0, 0x0, 0x81, 0x9}) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x6, 0xfffffffb, 0x1a, 0x1, 0x0, 0xd87, 0x6, 0x0, 0x0, 0x81, 0x9}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) open(&(0x7f0000000280)='./file1\x00', 0x8000, 0x120) (async) r3 = open(&(0x7f0000000280)='./file1\x00', 0x8000, 0x120) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xc, 0xcb, 0x800007a, 0x0, 0x8000001, 0xd87, 0xffffffff, 0x1, 0x0, 0xaf, 0x8000005d5}) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xc, 0xcb, 0x800007a, 0x0, 0x8000001, 0xd87, 0xffffffff, 0x1, 0x0, 0xaf, 0x8000005d5}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x0) (async) mprotect(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x0) socket(0x20, 0x3, 0x9) (async) r4 = socket(0x20, 0x3, 0x9) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900303700000000ffffffffffff000000ffffffffff"]) connect$unix(r4, &(0x7f0000000000), 0x10) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x510, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x280, 0x60) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r5, 0x0) 4.436442905s ago: executing program 6 (id=3067): syz_emit_ethernet(0xf3, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000e50066000000069078e0000001ac1400aa4e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="900280009078fffc03030303083303c4bd4ebd08020000001c09c9e1e02a2b84daa6e39f00f95530b581366e8100b761ca8fbd491f3735e11c9135768025c011d15133b7089d709c94ded9dcde89558c306c4391498bc0c8946d1b1548a51755fa701c0c28a6a1b3c6c54ed95d01e34b4ca429fc42b312fe46999e5dddc1227da6e1ee188c4111ab86e367cf0900010000da2cec2f2f218d242ad5c8ba229f3f367e166388c17b3c7cbbbe05004522674fdc82ed74cfaf3a592a25ee70ea4ae862baa4ca0a"]) syz_emit_ethernet(0xf3, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000e50066000000069078e0000001ac1400aa4e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="900280009078fffc03030303083303c4bd4ebd08020000001c09c9e1e02a2b84daa6e39f00f95530b581366e8100b761ca8fbd491f3735e11c9135768025c011d15133b7089d709c94ded9dcde89558c306c4391498bc0c8946d1b1548a51755fa701c0c28a6a1b3c6c54ed95d01e34b4ca429fc42b312fe46999e5dddc1227da6e1ee188c4111ab86e367cf0900010000da2cec2f2f218d242ad5c8ba229f3f367e166388c17b3c7cbbbe05004522674fdc82ed74cfaf3a592a25ee70ea4ae862baa4ca0a"]) (async) 4.386084442s ago: executing program 6 (id=3070): open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x1, 0x2, 0x2, 0x8001, 0xfffffffffffffffe, 0xa, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa7, 0x82, 0xce5], [0x6, 0x80000001, 0x0, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000002, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0xd, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x40007d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0xfffff3d8, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x56, 0x0, 0x7fff, 0x0) r1 = getuid() chown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x5, 0x0, 0xffffffffffffffd, 0x1, 0xe, 0x0, 0x0, 0x81, 0x7f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1], [0x63, 0x5, 0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x80000000], [0x6, 0x0, 0x0, 0x2000000], [0x4, 0x0, 0x0, 0x165, 0x0, 0xa], [{0x0, 0x10, 0x0, 0x8000000000000}, {0x0, 0x0, 0xfffffffc}, {0x1000, 0xa, 0x0, 0xfffffffffffffffc}, {0x0, 0x1000, 0xfffd}, {0x0, 0x0, 0xc8, 0x7ffffffffffffffe}, {0x9, 0x5, 0x0, 0x1}, {0x0, 0x0, 0xaa}, {0x0, 0xfffffff5}], {0xfffc, 0xfffffffd, 0x20000003}, {0x0, 0x5}}}) r2 = kqueue() kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) close(r2) setuid(r1) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) lchown(&(0x7f0000000340)='./file0\x00', r1, r3) setitimer(0x2, &(0x7f0000000080)={{0x1000000000000, 0x80000000000004}, {0x4, 0x6}}, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000100)="a42ef5f7f35317b6b66e87886fbcfe9d86e36f0a5cc0513c5a94c7dec0c3b100168a2d751baef09e9b5d6b8b51c83825b25d42ddea2b675e678748b922e6c5ddcf85ece79a8a7736e88aea", 0x4b}], 0x2) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r5, 0x80206982, &(0x7f00000001c0)) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="841cbf3e882a06b800c86f78de042c4800000000007f3bb55e0c7745", 0x1c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919531ea87c5676231dd7aacdfaffffffffffffff46c0fbde0346df012e786031d4b86fc1f36e5250f6d2b982fd38", &(0x7f0000000000)=0x45, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r6, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) sysctl$kern(&(0x7f0000000080)={0x1, 0x44}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 4.383564979s ago: executing program 4 (id=3071): r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0) fchmod(r0, 0xf3) mknod(&(0x7f00000002c0)='./file0\x00', 0x1ffa, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x10003, 0x101, 0x4, 0x80002001, 0x3, 0x10, [{0x2, 0xfe3, 0x6, 0x2}, {0x1, 0x6, 0x800002, 0x7}, {0x100006, 0x0, 0x8, 0x4}, {0x2, 0xfffffffe, 0x200, 0xfffffffe}, {0x0, 0x3, 0x80000001, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x9, 0x5, 0x4, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x4}, {0x0, 0x7, 0x33, 0x80}, {0xfffffc00, 0x0, 0xbe, 0xfffffff5}, {0x2, 0xfff9, 0x48a, 0xe5}, {0xcb, 0x2, 0x8, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x8, 0xfffffffc, 0xfffffff5, 0xfffffff8}, {0x6, 0x9, 0x26, 0x3}, {0x81, 0xd654, 0x3, 0x6}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb2) r3 = socket(0x18, 0x3, 0xf9) setitimer(0x0, &(0x7f0000000140)={{0x80000000000079, 0x100800000200009}, {0xbffffffffdffefff, 0xfffffffffffffd45}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0], 0x1, 0x2, 0x1, 0x1, 0x9a, 0x5, 0xa, 0x77c8c9b}) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xe000000000000, [{&(0x7f0000597000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0x100007}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f00006a7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x100000003}, {&(0x7f0000768000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x40000000000000}, {&(0x7f00007de000/0x4000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {&(0x7f0000107000/0x4000)=nil, 0x0, 0xfffffffffffffffc}, {&(0x7f00001cf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x400000000000000}, {&(0x7f00002e4000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000826000/0x2000)=nil}, {&(0x7f000058b000/0x4000)=nil, &(0x7f00006e6000/0x3000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f00004a7000/0x1000)=nil, 0x4}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000239000/0x1000)=nil, 0x4000000000}], '.\x00', 0xfffffffe}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000003c0)="674b187b94eeaeef53833af0f10500000017f981aa6a78ef1d35597f9eb7e649fdea5571ae000000368847d20000000000", 0x31}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x18, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000040)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20, 0x2}, 0x6) r5 = kqueue() munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e0000000", 0x4) kevent(r5, &(0x7f0000000180)=[{{r5}, 0xfffffffffffffffa, 0x96, 0x1, 0x2, 0x3}, {{r5}, 0xffffffffffffffff, 0x1, 0x80, 0xfffffffffffffff1, 0x7fd}], 0x2, 0x0, 0x2, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) 4.252719565s ago: executing program 4 (id=3076): setrlimit(0x1, &(0x7f0000000000)={0xffffeffffffffffd, 0xfffffffffffdffff}) (async) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) syz_emit_ethernet(0x6e, &(0x7f0000000300)={@broadcast, @random="d09b049f6b63", [], {@ipv6={0x86dd, {0x0, 0x6, "36dab7", 0x38, 0x3a, 0xb9, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0xfc, '\x00', {0x0, 0x6, "5f7f00", 0x0, 0x2c, 0x0, @loopback, @remote={0xfe, 0x80, '\x00', 0x0}, [@fragment={0x3c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x67}]}}}}}}}) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async, rerun: 64) chmod(&(0x7f00000000c0)='./file1\x00', 0x8) (rerun: 64) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f0000000080)="4082968d", 0x4) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x48, 0x0, 0x37) (async) sendmsg$unix(r1, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) 4.251885642s ago: executing program 5 (id=3077): open(&(0x7f0000000040)='./file1\x00', 0x200, 0x106) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = kqueue() kevent(r2, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffffb, 0x45, 0x1, 0x201, 0x6}], 0x1006, 0x0, 0x37, 0x0) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000640)="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", 0x134}], 0x2) execve(0x0, 0x0, 0x0) acct(0x0) acct(&(0x7f0000000280)='./file1\x00') open(&(0x7f0000000040)='./file1\x00', 0x200, 0x106) (async) socket(0x18, 0x1, 0x0) (async) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) (async) kqueue() (async) kevent(r2, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffffb, 0x45, 0x1, 0x201, 0x6}], 0x1006, 0x0, 0x37, 0x0) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) writev(r3, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000640)="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", 0x134}], 0x2) (async) execve(0x0, 0x0, 0x0) (async) acct(0x0) (async) acct(&(0x7f0000000280)='./file1\x00') (async) 3.200401591s ago: executing program 4 (id=3078): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000100)=0xc) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r1 = syz_open_pts() ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r2 = socket(0x18, 0xc003, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61ef307d00000612000000000000000000005c13000000000000000000000000000000000001"]) (async) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd61ef307d00000612000000000000000000005c13000000000000000000000000000000000001"]) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x13, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x2, 0xffff}, {0x18, 0x0, 0x5, 0x1}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0xca) r3 = socket(0x800000018, 0x1, 0x0) ioctl$FIONREAD(r3, 0xc050756a, &(0x7f0000000100)) close(r1) setrlimit(0x7, &(0x7f0000000300)={0x5, 0x9}) (async) setrlimit(0x7, &(0x7f0000000300)={0x5, 0x9}) syz_open_pts() openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000140)={0x2, 0x5, 0xaea, 0x100430000000a}) (async) fcntl$lock(r2, 0x9, &(0x7f0000000140)={0x2, 0x5, 0xaea, 0x100430000000a}) getrlimit(0x3, &(0x7f00000000c0)) (async) getrlimit(0x3, &(0x7f00000000c0)) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) kqueue() (async) r4 = kqueue() readv(r4, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r5 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r5, 0x80206979, &(0x7f0000000000)) r6 = socket(0x1, 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f000069c000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x1}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0x400000000000000}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000069b000/0x3000)=nil, 0x9f}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x40003}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xac3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f0000531000/0x2000)=nil, &(0x7f000069c000/0x4000)=nil, 0x2}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00006bf000/0x4000)=nil, &(0x7f0000010000/0x3000)=nil, 0x8}], './file0\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000c0001400f9000000004b7ca3010000ffffac1400aa0000000000000000001a000000a548dd86ce5707", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r6]) (async) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000c0001400f9000000004b7ca3010000ffffac1400aa0000000000000000001a000000a548dd86ce5707", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r6]) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) 2.921579796s ago: executing program 7 (id=3084): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x122) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x2, &(0x7f0000000640)=[{0xa4, 0x5, 0x73, 0xa}, {0x6, 0x1, 0x9, 0x5}]}) syz_emit_ethernet(0x4a, &(0x7f0000001380)={@local, @remote, [], {@ipv6={0x86dd, {0x6, 0x6, "05b400", 0x14, 0x6, 0x30, @rand_addr="0000000015000000eeffffffffffffff", @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x3, 0x0, 0x7}}}}}}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x10) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) pwrite(r1, &(0x7f0000000140)='O', 0xf4cf2, 0xb30e) 2.916901943s ago: executing program 6 (id=3088): mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000200)='./file0\x00', 0x80, 0x0) munmap(&(0x7f0000006000/0x4000)=nil, 0x4000) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg(r1, &(0x7f0000000680)={&(0x7f00000001c0)=@in6={0x18, 0x2, 0xffffff82, 0xf9f}, 0xc, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x18}, 0x40e) sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) mprotect(&(0x7f0000218000/0x2000)=nil, 0x2000, 0x5) sysctl$kern(&(0x7f0000000100)={0x1, 0x2}, 0x2, 0x0, 0x0, &(0x7f0000000080)="33108a5b", 0x4) sysctl$kern(&(0x7f0000000280)={0x1, 0x15}, 0x2, &(0x7f00000002c0)="5a3ce6a422291c7911f836b30597b4d0fa5fb61a1b6b65347267f000bd31978511e830e2f47bd0ffcb6abcd29de5e5d2617b245fa88c68085adfd0e179fe848bcec58f839e94976252c133c6ba1d8e51e302ccd973b9cb20940bdd1ec62ebdbd2410725fbeb6278e19824875fcabffaa3c8b8d58f4422423eb31f058b4be602944223a59d24b479362b9505bd3140eb901ecaa7f060d65d8d0f533ffba9f87d5ce4b0db833972bc1dc580dfef583b9e2c499a4931219b20a2fe7bd1ad5d767111134067759ca28", &(0x7f00000003c0)=0xc7, &(0x7f0000000400)="bd8bf3547dee3a1fa75752844c3092024a2152ed7fe0c8bc19fd7c3727ca7eded7b67882e45e418362d0e7aec8067db6a046a6baccd6", 0x36) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) getsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, &(0x7f0000001c00), &(0x7f0000000040)=0x44, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r2, 0x80206980, &(0x7f00000001c0)) setuid(0xffffffffffffffff) rename(&(0x7f0000000000)='./file0/file0/..\x00', 0x0) r3 = open(&(0x7f0000000480)='./file0\x00', 0x9cab835cfdc52675, 0x0) ioctl$VNDIOCSET(r0, 0x80184405, &(0x7f0000000240)={0x0, 0x4, 0x0}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r5 = getegid() lchown(&(0x7f0000000140)='./file0/file0/..\x00', r4, r5) socket(0x1, 0x4, 0xfd) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b}, 0x3, 0x0, 0x0, 0x0, 0x26) 2.854741006s ago: executing program 7 (id=3091): sysctl$net_inet_etherip(&(0x7f0000000000), 0x4, &(0x7f0000000540), 0x0, 0x0, 0x0) 2.767955756s ago: executing program 5 (id=3093): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$WSKBDIO_SETMAP(r0, 0x80047476, &(0x7f0000000180)={0xffffffffffffff7a, 0x0}) 2.767524778s ago: executing program 4 (id=3094): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = syz_open_pts() rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f0000000600)='r\x00') close(r0) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x8) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef359025250129bdb3b8c172b8359eb32d47209b2a02c3b553a9b75b43b0b03", 0x2d}], 0x1) 1.521246882s ago: executing program 6 (id=3097): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="8b11", 0x2}], 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000100)=0xc) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) syz_open_pts() (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed950c0000000000000000fffeffffffffffdf", 0x4, 0x4}) writev(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)="4830b85201cdcf5a481d2c1977912d3086bbc6e4981023fd7b1b6556207d7b5bdbde889f345494385a30d82e32201bdd7a14062e2c874a06503a2cf5cf9e7cff3b4df91fd9ef9b016804fd4cb1fa3255f2fadd2e27ea6c1d85c847317723f99abe82e7d659b2dc9ce91d1b483fc98808629a1410a634dc01a235a4120917", 0x7e}], 0x1) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f00000001c0)="4830b85201cdcf5a481d2c1977912d3086bbc6e4981023fd7b1b6556207d7b5bdbde889f345494385a30d82e32201bdd7a14062e2c874a06503a2cf5cf9e7cff3b4df91fd9ef9b016804fd4cb1fa3255f2fadd2e27ea6c1d85c847317723f99abe82e7d659b2dc9ce91d1b483fc98808629a1410a634dc01a235a4120917", 0x7e}], 0x1) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x200, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1000302010008, 0xffffffffffffffff}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) socket$inet(0x2, 0x3, 0xfc) (async) r3 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) sysctl$kern(&(0x7f0000000000)={0x1, 0x4b}, 0x2, &(0x7f0000000040)="cda41fca5078ebf58e919e6ef5bc0ecae9f8bdb9f1aaffa50798", &(0x7f0000000080)=0x1a, 0x0, 0x0) 1.52062159s ago: executing program 2 (id=3098): sysctl$vm(&(0x7f00000000c0)={0x2, 0xc}, 0x2, &(0x7f0000000100)="83965e0f4071cd3ed2d50310b62f6cfcde8ea29ab3898cdcd498df1f973aa20640085da88f428082951aa13c824f6008b5193cf87339c8fac97b0f3d690a84bd443d", &(0x7f0000000180)=0x42, &(0x7f0000000340)="0144d8b7d32342b34eb28733db26239dcd3deaff146fe38a07253e7dcd7af29b0fb68c2a73eff717c52b595db7931e4b6e7eaf5e1305dd2f677dda04d6da08f0fa2d456889c23feccddb90510931bc3466ef3ae721f68a83c3b5243351b1aba6b0bfc1690666aa3a754cf5f028ac3c683e1e1e7e18de8332e260ab75a11ee46a0cef4b60e99765b9353b32aa0430b1253768e22724dc6fd950e31857c60d4e980ae319fc72325664e736f2df4ad3bf57028ca9ae3e48d471fac398b97e700d51fca89e67ae529ecf069f050cae9030e60a58fcb4d0d1a759c1cbe829ce90d413de62b3b35c60cbec24741b51ee528b786c89abcc82bee1375430ebe1594d237e18e6a002393b77f2a7a4557efb3eb44a66f7753fe955856944fdb18289c2a1e012fa507f1351a4fd3240c054ee41e6110f2a480948bf48d6c5d9f7492fbb43f7540bc39bf6c8085d5fd7501a179fc15a9aadbb572746d622b9e3230b3ebe7651309ed1a626204c82ffbef66acbe80a2c164a2206a94a13148516ad0d0004edd5368c351b1e7b949363f97df2cd7ce76bafc3ece83ed1a6264048a812a1d4098a2d7b62349b594acdc67087b66ab829f207486fe5ca11e34c3fb11988963208b3484b6eed3ec4503ed7068348f528a40dea2cef132bf6b8951d3f0339c3f198e0696ab9e85ebb1639eb78a9249ee217b94914c7b37ccf4e1a60a8355cb515c748d773291dabc5d2918cc39a1c5b5613349386d4d2e940db94342b3bb38e3cb0818939cc78509f85f266228c531c3c4c2dbde6922f9eaa8c460472491efc7e846694a445ea45cb0ea8de7af23341a3f50bf21d86d3d95fd38c1ba41444147c77c29f72648f7a6afa24d44116ff32615c448f1a9ee5150aaa53a73d3bc4e4bd831ae3a27495f6a061d940de7464a11e4f5b53e6eb4920fcabfc103dfd53ccd66ce199f42c75aa7dbd7402d09ab2445d0970796763842b25dd0d83eba3d967165fd9b2c8b1754c754c589934a14134d29b47d266ca86ccc1f7329f827b2466d993b1fd368cd9ab90afedd050ea086a7417d0484c91dec5cd94671d03cf6f31ec7a229c631039e6d23436515288802f756dcad4802167658037cd55257c188d69a710dd31ed8325880fe1333a37e943be23bada85ed9d49f7f946be4e4c5be4f1502a907099ef8f6997b0bb1fc4387187f7f1ef3f70c8a9260363d8c95b4c8065210df29220bf0f51517a3070231083c8c7deba14b24ee500d43f2285c3a0c2d3426e3edf9ab137ba07dc9468922905cbcf93452cacbd553e7626b33727a320e416a4661781e112285a0ad3615815f28e31078f554c53bc809f775726dcd870bbaf390f4a0d8aa477a8dccb79566fc172437524d4cf5bbf608ad16f4642a14521a8d1d40881e90260555a2c1c7549a14d454274e91ecbaa51b7ef3678628bdd74ff444bab802d38109b5bd7a5b93a285adf816a0b48db4bc91f74e76ada1eb33828b516426d602cb5be0ed4d86d71403177923ccc451979de1d2c203773fadbdc9e8c24946e4b596031e4be6773ea3dfcaa9a3f572415bedd84f759f17b794d38d0ce64195d1c8d7cb88f2673e6b7a29499b594c66509ffeae585a66c24b14c334a5017868d02ee6af23b61aed9dfdc0e01ff55d10f385cc3010c4fdd878ea8893163388a16f18863e654a0a56a694715ef08c2edeb5b41e5b575afe8a56c916a50d179f3e4c6beb7a574b86e250f3acdff3e54ad2f23944fcb501a073e3a2d458c2618986ac5fb213acab0e3aae3c0957dfcb7bf51a2e5ad5c66982a7041200d2edf37a05fc84968c5b9c0d12ba7e9e6e478abaf2fab52151e1e477b7e21508734914a1c8195519722b8a989ab0ff14f80fb1be1c9392123e85d904ffdd34bd3e274c8c9a6f0aa29cced7d0a40dd6ff2ace7d8b6723319eec84fe88ed7a5d6b81e46fd4f900ae8f314d64ae171abefba03a44f8680c29cc4490db4a28b732049a576e681498b910fcc19c0dd55676f70ed25d60424d7fae8b0b089ae0abdd02c399170efc09fa2f373bc2b1415f8159f7a21a3a853c0188bc6bf1efcf1eace6923e19ae2acfaac9260e6e6d2f9293559480ae62c42c9c792f6c7f97b0ee8e27d3b3d1eee5f66dd9c2c60b8ac314306fcd8d152c456bf037247ed01d887cac7d639e41439a163ca40b830c7f03f62d05214bd3583f41b49e9e01ddf9da99c62991ff3c3b939d423fbf2ea989dea3f9393fd5866197841f6db6992feeb2af1319a2055039ccacb9a767e157a06999e209116575ee694504261190266df961d516e37f89359e4ab44b44a9ff4a2c8ff00b6398952462bdcd40768fb40250025e3177019e7bce6ad785bd31de62214cca497dbe2432c9bc369af3cec5133d831440efc12b944507d382bcc6e18fd9847b97bc778e894057f7d27ebccaea78e6331e66edf3b00c5e03cd11bec3304b3947f681eb7a800ebace5921806520a84455c7fa96091742e3034b9cd5876d35bebf6e47d910f2e27bb29dfa87c3d403ad9cd3860105c69b6de22eac7e8936b41cfdfb7defbd10095e24980b567186c5dd1cd20248eb11a4ab3d2ee5d988c05ace46962d873a1f3ddce23ee4b0cf1d6d818851fb915f1d0de736230a51a76a9cfea87ae97d814543eb079f7dd163fea48b9ab4f714ef8bdaeddb9081bdad39287800336e7e3a7c20437c062d3911a72c31887344783a6d3db7c73f7bf1184ec34f27464138bfab0f608d060b8646de3f560a0870ca4abe91d45ec359cb9f791114824f0f5d5c92c78696b007ab5fdefa26fffd8c2c4c8799fed7391fe35ae20527d1e348abd65bcc361a585dfcf8fbe78d4dd24de0539f18b7dbcb1acd9e4a872f3b54aa47f65b54c2818e46a570680912c183075ed80cfcdcaaf9d9cd49053385079485903b9af29ce6ae9aae5e485561038039979de7efb4275a9669b391195922a162b0abaf3e31145c8b657149bee8f61a5a0f6620059ba6a4f4e04b8221ade145df00cda478fe2e6a91ea7f2fe7396c1c192ab12b6b809f03127a4077f4d180cc00da6d1edd8f8c79925fa777d2ee919232aaa9ce0962732b34d6b2e05b256ac848dae9d1e14d258dd89befdafde658c95b91628c57c917f4f75336a068216f1b6de6a8a403a5fa7063803998eaf63b65be8882eadd7bc1eb59f6f57c5efa2253961140bf35573f5db8c3e5aae4536948e4e727a4b693bbd79a3c5f1a38b1c6bb9062231d4b4f42cf89efe0dbdd9b602b25c5ec4b5338454e55382549fc84ba7dfa85d82854f4af29b6a4a7b1eb76a36e72795037f9065a085d5ddea9819d67856ba4179c92be0d58eb0b9a6bd57f212d476bd7fe92417cb12212c2a6f87e473de37af2489bc839a13cc8c44f3fce716746e4d759026b2ccae92b21334cd534ea0bd64aca898018aa698401165501a39304fbfc01ca0abe72431b2002461984bf197cb9d79aeba167dbf3e42071d3776669a7e7e7b927702fdf70067cc9a6514236ecd6a6775f5885c66b51db2c02e666204d728391ef367c2e00b95200eb29a9d3e8f4b33e4981ff247bae11bde77d76dbd07e8e670c96bb5ed112b8fa0b99aa71a492371533a9c76dd11a9e7042ba4785db20c4f1aa129c9b295901e05fda7f888268b3c1f9e85cf9a5072f60fc82369a470d72173c2dbf0d0186acd9bd69ec1a48c51c6e136eb7f55649c626cf7fa575cf3330546e7918267956118b10d3cb754db73cb123cfc356a27adbb9b9f14e9ccb77ff2546c2136e75ce07d44752f707728fc9e5f909b7793773769440556e8199be2a7ea0eabf141d252a7f77b30643b09b3a42de5749d7b454eeeb4c33debe8f9ccf734190a658278615ce53295677274c50e5d782021a5eafedb635b27a6cf818423706526b0006e346bcaccee7409d6c40131e58c8dbd5889c30a27d6c448db70e25b174b6c5d75c094718afc641c5a26fdb9c8a6f473eac00af52d4f53be420ea002d28911a947172bfdf5e283e3e8f346aec1a761cc4b243f82bc588f81b6d363f93e54243ef21662993502857eaf642c95689e672e2bc7b0043065ed341fd8ba029eaf8f454608277fd8b1017a8ec8e7f973df2f8074523bcfb4c099151891a650662250b8bec77606437fbd464e3dce3c46078b80637a98e77b5c57057ba78c04ff1571547e0f513fbd5c112993640d87c09c5baae88fa9990950a722baf3d7bcf9f895caa6b5d5d327a2749b0d83897bce2cd6f2c76b5d44fba604b4e705ecc12a26b3d3b81ecb2fb1fbe40b7c291c24fb0bbff011d3858503fd3d33c9f364ac1809bd40bd7ceb5c56196d90e5541f9d71950baba07cdecbe8f096e29ad6b874bcc69ef4dbb75a700951bd2128a983958a2ff0c7c6fad8596458e65a0b2111391683886d616c32f21d59971fcceab8fc19309bdf200df4d970a3c08c6796d4f5001d8b795abb676a9ed87f3657902cf49e148ca0ee2e0c5223500eb486dde289233c91c51093583876ac48bfa155b045d536bda12bb5d63f2aad242d1d6fb1911736d8a4eb31166e863d01e4564188c2ef7e6bd6f1e07c483a15b9045d98abf5194203f00c0041b7d6c1a48295860514b82f62bd78615174e8116e2c1affd7f59c051432d244b0d3736c1e2cb085647c5da2ba2a0b2163d18699147fed23142acfec4d9142b9cb00b6683847e66e204921b685038eac30af9a4101665cdd8938a7d717830dfc6210614f620ba8a9343195dd6b88f3b71ab597b0213ea54b1ae9bc3b2f5efb31c4a548d862bd1e0d52f7c5a440e0f725765ac8e1a17290af45cf48868e11a0b47f7ed5d4bf1ab2644f9d9cf591763964b095b9f196c144f792fe7eb0bdd4b81a2c0234a733f6a7cc8ba4308408dde950151491052dff93044fee99fa74afb78e4e0b41af2bd3924a0519307f65046b9b3546d3737121bc114327717fc4b1de185f55f93c8f47cd44921fd549c2774347cff57770d6bd133cd76c3609e82184ee6894f3a558bd6ae93b1dfd278578ad6a2c2b30cb7299d33d896492cef7383a5c61202e97c3a8e4fbabd4c72b973521ec52d5505d8bf33abd2a1a42b6802bb9638058510fdc0fe9e55858657ec9deef6b405eb765044910946b5f5848b124a7bee7ccb07bbb9d68c27015f47b2b413280b7c8a3850b2cb082b96b0083e4fe5de281cc74357287c7af4cb76453312e8e7e80676f6cb65af16bd90b633aea6d2d93d5b9e67613bf6ac78d1d2e6f7784ce9173905b1b013f18b805a227b8f269491c42336d2825fae94c00681e35da95bcac67beaf013c936a67400537bbf8bfbfd305d31e52a9c8b1e806e23bfe1fb2e0eb6a83a508f01524afcdb55b670ed30a9b8046a1c02f7713c482aca2f3aa13d65b2d934118d3762d1b7b5353d5cb71a9c3d9b26832afc8db5c0079e3fda4e819b7a59b35e79c204090f1c417ca1ca43662a42996f5e0217a3fd1e349a474f88d0ad76869c03bf70ec1dbf45d7ab19b239f3eb4cad591b5cf7411c8011272bc450a906d65c5faa9c17ded4002420c6efafd816e31dbccf19ad1ccdb21868772ab8e911b0e769ccf6450e8f48e7cd73e2bf08fe2b7d1775e03259c6ee9cfc3dd2448496c6908b5b80b84b149585dcd72b69336bb68bed81f4c6aafcb466899e98fbf770b140f9ab5a92f1c48eeac467a4a3c2b3d926e1ceff8ba04dcfbc83232246f68bec5b513edc044e78492f9d2d7cc0cee9f2ad9ff97e1af54fe3a6444f82320af114bcfbfc37c62b21ca717a262a124676f426deb66c03235abd2b9da360cdf0aac26d9536cd9", 0x1000) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x1c, 0x3, 0x5b, 0xd}]}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x1c, 0x3, 0x5b, 0xd}]}) 1.509248638s ago: executing program 0 (id=3100): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000040)) sysctl$hw(&(0x7f0000000340)={0x6, 0xe}, 0x2, &(0x7f0000000380)="5d895e8d9f799d", &(0x7f0000000440)=0x7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = open(&(0x7f0000000240)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r2, 0x0) ftruncate(r2, 0x8531) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xffffffffffffff2a, 0x0, 0xffffffffffffffb7) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x250}, 0xfffffff6}, 0x10, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffff6036e28200183b020182c1fa000110a90c00d69db7c66000fe8000000000000000000000000000aa8800907809000000fe8000000000000000000000000000bbc5a295197425941d68470e748f0d4466c7565a2027f00000d581a1f944d4bc53e7a442beda5e7af6730e08ab3d4275e5e6e79dfdf6ed3c6631c176cc8b6c3813f5e5b00dbfdb78e5310c016dc05fbe18f3f5fa74dded7e4a2f685d9c2b2084d96e3072d43c4db4491fbb71680624ecec62bfad77485d27c08b8ea895fe5f75cc0745dd6f9fc4c77b3ec1c3efe2c7730ae00711744e7f06fd6eea2aeb177aecc9ff60088f30f7d3"]) setitimer(0x2, &(0x7f0000000080)={{0x8000000000000001, 0xa0000000000003}, {0x4, 0x400000000006}}, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x44}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x28, 0xc, 0x2, 0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0x3c, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) ioctl$TIOCSETA(r3, 0xc4504447, &(0x7f0000000000)={0x2d, 0x8, 0x57, 0xbffffffe, "cdab00040004000000000000000000002a2800", 0x2, 0x4}) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x0}, 0x8) bind$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x0}, 0x8) 1.502074739s ago: executing program 2 (id=3101): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VMM_IOC_RUN(r0, 0xc0205602, &(0x7f00000002c0)={0xfffff2a2, 0x6, 0x4e, 0x0, &(0x7f0000000040)={{0xc, 0x9, 0xb5, 0x4, 0x7, 0x9, 0x1000}, {[0x3ff, 0x7, 0x2, 0x9, 0x6, 0x7, 0x2, 0x0, 0x3ff, 0x7f, 0x101, 0x1, 0x2061, 0x2, 0x3, 0x9, 0x4, 0x40], [0x20fc, 0x2, 0x8, 0x9, 0x8, 0x7, 0xff9, 0xf, 0x9], [0x8000000000000001, 0x1, 0x1, 0x3, 0x2, 0x7, 0xc5d2], [0x3, 0x352, 0x1, 0xef57, 0x28a6, 0xc57], [{0x7, 0x8, 0x1, 0xc2}, {0x6, 0x7, 0x0, 0x73}, {0x0, 0x29, 0x7, 0xe418}, {0x0, 0x7fff, 0xfffffffc, 0x1ff}, {0xbe, 0x6, 0x7, 0x2}, {0x6e, 0x3, 0x1, 0x6}, {0x81, 0x35f, 0x5, 0x4}, {0x1, 0x4, 0x3, 0x5}], {0x0, 0x1, 0x8, 0x2}, {0x4, 0x7f, 0x1e, 0x1}}}, 0x7, 0x8}) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000300), 0x6ab34a34f6c5bef5, 0x0) ioctl$TIOCCDTR(r1, 0x20007478) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000340), &(0x7f0000000380)=0xc) r3 = accept(r2, &(0x7f00000003c0)=@in6, &(0x7f0000000400)=0xc) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffff9c, 0xc01064c2, &(0x7f0000000480)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r5, 0xc01064c1, &(0x7f00000004c0)={r6, 0x1, r3}) ioctl$WSDISPLAYIO_GETEMULTYPE(r4, 0xc014575e, &(0x7f0000000500)={0x3, './file0\x00'}) r9 = openat$pci(0xffffffffffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$PCIOCWRITE(r9, 0xc0107003, &(0x7f0000000580)={{0x3, 0xe8, 0x7}, 0x5, 0xff, 0x10}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000005c0)={0x2, 0x0, 0xff, 0x5, 0x0}) ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000000640)={&(0x7f0000000600)='./file0\x00', r8, 0x2}) ioctl$FIOASYNC(r9, 0x8004667d, &(0x7f0000000680)=0x8001) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffa000/0x3000)=nil) munlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) ioctl$TIOCSETVERAUTH(r7, 0x8004741c, &(0x7f00000006c0)=0xff) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000700)={0x1, 0x7, 0x7f, 0x800, 0x4, 0x6, r10, 0x8001, 0x3}) socketpair(0x18, 0x0, 0xc, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOGETOWN(r12, 0x4004667b, &(0x7f0000000780)) setsockopt$sock_timeval(r7, 0xffff, 0x1804, &(0x7f00000007c0)={0xd, 0x10}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffff9c, 0xc01064c2, &(0x7f0000000800)={r6, 0x1, r1}) msgget$private(0x0, 0x140) connect$inet(r12, &(0x7f0000000840)={0x2, 0x2}, 0xc) r14 = openat(r5, &(0x7f0000000880)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r12, 0xffff, 0x1022, &(0x7f00000008c0), &(0x7f0000000900)=0xc) ioctl$TIOCSCTTY(r13, 0x20007461) poll(&(0x7f0000000940)=[{r11, 0x4}, {r9, 0x1}, {r14, 0x4}, {r14, 0x4}, {r9, 0x1}, {r1, 0x40}, {r8, 0x4}, {r9, 0x4}, {r13, 0x10}, {r0, 0x20}], 0xa, 0x9) clock_getres(0x2, &(0x7f00000009c0)) 1.501479122s ago: executing program 5 (id=3102): select(0x40, &(0x7f0000000180)={0xffffffffdffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000044}, 0x0, 0x0, 0x0) r0 = syz_open_pts() (async) setuid(0xee01) (async) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x8) (async) r1 = kqueue() setrlimit(0x3, &(0x7f0000000000)={0x100000, 0x100000}) (async) kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x8, 0x7, 0xc, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x4}, {0x7, 0x3, 0x4, 0x7}, {0x5, 0x9, 0x8100, 0xaf5}, {0x9e, 0x8, 0xc, 0x2}, {0x1, 0xfffffffb, 0xfffffff7, 0x9}, {0x6, 0xa, 0xffffffff, 0x9c}, {0x80000cdc, 0xffffffff, 0x5, 0x71}, {0x2000a, 0x803, 0x14, 0x8}, {0xfffffffd, 0x81, 0x1, 0x9}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0x5, 0xd, 0x10aeb}, {0x805, 0x40, 0x2, 0x5}, {0xe0, 0x4, 0x80003, 0x3ff}, {0x29a7171a, 0xfffffffa, 0x3, 0x100006}, {0x4, 0x800009, 0x7}, {0x0, 0x3, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) (async) r3 = open(&(0x7f0000000280)='./file1\x00', 0x8000, 0x120) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x1, 0x0, 0x800007a, 0x0, 0x1, 0xd87, 0x8000000c, 0x1, 0x1, 0xaf, 0x8000005d5}) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) dup2(r3, r2) 1.223370897s ago: executing program 7 (id=3103): setrlimit(0x8, &(0x7f0000000400)={0x7, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000500)=0x7) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$VNDIOCGET(0xffffffffffffff9c, 0xc4104603, &(0x7f0000000480)={'./bus\x00', 0x7, 0x1, 0x7fa}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10c) unveil(&(0x7f0000000280)='./bus\x00', &(0x7f0000000440)='x\x00') getpeername$unix(r2, &(0x7f0000000b00)=@file={0x0, ""/4102}, &(0x7f0000000240)=0x1008) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000002c0)="ed", 0x1) recvmmsg(r4, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x1040, 0x0) read(r4, 0x0, 0x0) shutdown(r4, 0x2) close(r3) writev(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)="209788bdb2e3da027262e4927333c24bb1c1ed68aebc35c7b6bcf7f95ae2ed654aa1b83fc56cb05730270cf487626431ba845532a461d8674e643d07e75cfae2e55c00244741bf6afc458cedecc4b59d5d10f7b3c40d", 0x56}], 0x1) 1.222690286s ago: executing program 7 (id=3104): setitimer(0x0, &(0x7f0000000140)={{0x1400000000000006, 0x100800200000006}, {0x7fffffffbffdefff, 0x3ff}}, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0xc, 0x0, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf794b) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x3, 0x2, 0x0, 0x4100000000000000, 0xffffffffffffffff}) r1 = socket(0x18, 0x4, 0x9) close(r1) (async, rerun: 32) r2 = socket(0x800000018, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x22, 0x4) (async) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000300)={0x3, &(0x7f0000000040)=[{0x34, 0x3, 0x92, 0x40006}, {0x80, 0x1, 0x83, 0x10000003}, {0x1026, 0xa0, 0x3, 0xfffff001}]}) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[]) r4 = socket(0x800000018, 0x1, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async, rerun: 32) setsockopt(0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000080)="c5", 0x1) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x20, 0x3, 0x0) setsockopt(r5, 0x1000000029, 0x1a, &(0x7f0000000080)='\"\x00\x00\x00', 0x4) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) shmctl$IPC_STAT(0xffffffffffffffff, 0x2, 0x0) r6 = socket(0x18, 0x3, 0x0) (async) r7 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 64) ioctl$FIONREAD(r6, 0x8080691a, &(0x7f0000000100)) (rerun: 64) 1.222027017s ago: executing program 5 (id=3105): sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x70, 0x3}, 0x4, &(0x7f0000000040)="f74c084bc46466abf7f46b530f939cee1582177b597a0f998ce0c45e7cd1673aecd1bed585015f2d6cde6f6a32a2fee3894c17809d3ca26d", &(0x7f0000000080)=0x38, &(0x7f00000000c0)="f583313e8cdd245b1c0afcf7a090", 0xe) sysctl$net_inet_divert(&(0x7f0000000100)={0x4, 0x2, 0x102, 0x1}, 0x4, &(0x7f0000000140)="e3df29e4a7ed55083229c78a38ef1c5c6af30671c61f69e91c6a50692e79048796c0273bd79e0b7c360f81b3691d228f8506e42ab81b90d5ce0156a7db599131d5c2ec0b5b35f9d29675456b043362de41a30dbf6ab7f1c48133cf143c54e166ce973147370dd8318b699cdea7823f33fe4acc67056f15fd862c657a1c4e1906fda58510fff9a7b92282c27e0b9212dcc17ec36a0347527b555949613b9582b7f5b0eec3a22875f1b204b1201db281117a0db117", &(0x7f0000000200)=0xb4, &(0x7f0000000240)="ef7f87cea950ad2e5021554417974bcec39a91bdf78d9755e49bb35b73f11bfdca9197b0e0775fddd3dc1765eddf6d0cc1008bfe3be74c122e7b32d87df4648fd01b02626daae3277606973e536141baf81ecc54cc6287fc5ea2473938f073fe9d2e6e4d825170fbc4e52ae585b9962fda52e073fb2aed840d5bc4ee43e549634a8da5f1653db18dbcee836deba7e75ea214301bc52d302c7d01fe37edd51ec26bc8f90d537b5632aff360b6e3c5e4b31e1bfed52a8110f49edf81a962562d9d8d0484e0058a5a7cdd150d822646abe2de8d26b237af8a477fea4d187c9f26083841b64dc52e8b2e76289c754db951d63b22", 0xf2) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000003c0)={0x4, &(0x7f0000000380)=[{0x8, 0x3, 0x80, 0x59fd}, {0xec, 0x4d, 0x7, 0x80000001}, {0x7, 0x81, 0x9, 0x7}, {0x80, 0x7, 0x8, 0x54e}]}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[{}, {}, {}, {}, {}], &(0x7f00000005c0)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x8, 0x0, 0x0, 0x14, 0x8, 0x0, 0x9, 0x8, 0x4}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000740)={&(0x7f0000000700)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x1, 0xfffffeff, 0x200, 0x6, {0x8, 0xfff, 0x2, 0x9, 0x8, 0x3, 0x8, 0x0, 0x400, 0x0, 0x0, 0xa9d5, 0x2000, 0x3, "2c4e0f88ae955bed3fd34c54d2e35beb03c48d0b2e7b2a88e8ddebf2f1ff3cf5"}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000008c0)={&(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0], &(0x7f0000000880)=[0x0], 0x6, 0x2, 0x2, 0x1, 0x800, 0x7ff, 0x9, 0x6}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000900)={&(0x7f00000006c0)=[r2], 0x1, r3, r4, 0x9, 0x8, 0x7, 0x2, {0x0, 0x6, 0x0, 0x3, 0x4, 0x401, 0x6, 0xcb, 0x2, 0x100, 0x2, 0x80, 0x200, 0x5, "c3b67f16d7574740b653e01e9698417b7f5a7fd5836c6a9ca6509beae06c7d8a"}}) mquery(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x0, r0, 0x4) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f0000000980)={r7, 0x2, 0xf2, 0xfffffff8, 0x6, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000009c0)={r5, 0xfffffff8, 0x0, 0x1000, 0x8, 0xd8a, r8}) r9 = open(&(0x7f0000000a00)='./file0\x00', 0x100, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r9, 0x7e) r10 = dup2(r9, r1) read(r1, &(0x7f0000000a40)=""/14, 0xe) execve(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000b00)=[&(0x7f0000000ac0)='%\xde\'\x00'], &(0x7f0000000cc0)=[&(0x7f0000000b40)='@', &(0x7f0000000b80)='+\\\x00', &(0x7f0000000bc0)='*%[\x00', &(0x7f0000000c00)='[\x00', &(0x7f0000000c40)=':}{#\x00', &(0x7f0000000c80)=')!{\xa7\x00']) ioctl$BIOCGSTATS(r10, 0x4008426f, &(0x7f0000000d00)) semget$private(0x0, 0x1, 0x1) fcntl$setflags(r10, 0x2, 0x0) ioctl$BIOCGETIF(r10, 0x4020426b, &(0x7f0000000d40)={""/16, @ifru_vnetid}) ioctl$BIOCGBLEN(r9, 0x40044266, &(0x7f0000000d80)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r9, 0xc01064c2, &(0x7f0000000dc0)={0x0, 0x0, r1}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r0, 0xc01064c1, &(0x7f0000000e00)={r11, 0x1, r1}) ioctl$DRM_IOCTL_MODE_RMFB(r10, 0xc00464af, &(0x7f0000000e40)=r6) openat$bpf(0xffffffffffffff9c, &(0x7f0000000e80), 0x80, 0x0) r13 = openat$dri(0xffffffffffffff9c, &(0x7f0000000ec0)='/dev/dri/renderD128\x00', 0x40, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r10, 0xc01064c2, &(0x7f0000000f00)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r13, 0xc01064c5, &(0x7f0000000f80)={&(0x7f0000000f40)=[r11, r12, r11, r11, r14, r11], 0x6}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000fc0)={0x2, 0x0, 0x7fffffffffffffff, 0x7}) 1.221388312s ago: executing program 1 (id=3106): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{}, {0x2}]}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x9, 0xffffff80, 0x7, 0xd7, '\x00', 0x3, 0x3}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x46, 0x0, 0xffffffffffffffb8) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x122) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil, 0xea33}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x4}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x2}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x200000000000}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f000000e000/0x3000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x16}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00004eb000/0x1000)=nil, 0x10000000000}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil}], './file0\x00', 0x3}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r2, 0x80206932, &(0x7f00000001c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x102) ioctl$FIONREAD(r3, 0xc0286988, &(0x7f0000000100)) r4 = shmget$private(0x0, 0x4000, 0x284, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000000)=""/238) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000100)=""/176) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8f7) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="00004f0000010000000000903abf65b18d7c51f78b06ccffb41300000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) ioctl$TIOCSETA(r5, 0xc4504445, &(0x7f0000000740)={0x5, 0xffff, 0x2, 0xffff, "0400000000800000ebb178d952d6d31962fff0d1", 0xfffffffe, 0x2}) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000029, 0x2d, 0x0, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x48, 0xd1, 0x58, 0x1ee}, {0x2, 0xc, 0x7a, 0x6}, {0x16, 0x5, 0x1}]}) 1.14912681s ago: executing program 3 (id=3107): execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffffffff070b1eac1400aa7f800001000e009078000b0008000003fc0000000400000009"]) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80206919, &(0x7f00000001c0)) r3 = socket(0x800000018, 0x2, 0x0) sendto(0xffffffffffffffff, 0x0, 0x58, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) (async) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x62) 1.147901829s ago: executing program 3 (id=3108): syz_emit_ethernet(0x15b, &(0x7f0000000240)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad901253a003bcc3f0600000058132fa13a8be186e3fe8000000000000000000000000000aa04019078000000036594a33c00000009fe8000000000000000000000aa000000000000000000000000000000016c004330680000001604000000000000c2040a8a89dac204"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000a40), 0x20, 0x0) ioctl$BIOCSBLEN(r2, 0xc0044266, &(0x7f0000000a80)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r5, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet6(0x18, 0x0, 0xfc) r8 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r9 = getpgrp() fcntl$setown(r8, 0x6, r9) r10 = socket(0x2, 0x1, 0x0) setsockopt(r10, 0x6, 0x8, &(0x7f0000000040)="9d1b8eef", 0x4) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000002c0)={0x0, 0x0, 0xffffffffffffffff}) kevent(r0, &(0x7f0000000140)=[{{r1}, 0xfffffffffffffffa, 0x43, 0x40000000, 0x7, 0x1}, {{r2}, 0xfffffffffffffffc, 0xc6, 0xfffff, 0x1, 0x32d}, {{0xffffffffffffff9c}, 0xfffffffffffffffc, 0x82, 0x40000000, 0x6, 0xffffffffffffff16}, {{r3}, 0xfffffffffffffffc, 0x26, 0x2, 0x5}, {{r4}, 0xfffffffffffffff9, 0x0, 0x4, 0x9, 0x2}, {{r5}, 0xfffffffffffffffe, 0x60, 0x40000000, 0xffff, 0x8}, {{r6}, 0xfffffffffffffff8, 0xa, 0x40000000, 0x8, 0x7}, {{r7}, 0xfffffffffffffffd, 0x30a99deddc197e96, 0x1, 0x5, 0x2}], 0x2, &(0x7f0000000300)=[{{r8}, 0xfffffffffffffffb, 0x65, 0x20000006, 0x100000000, 0x24}, {{r10}, 0xfffffffffffffffc, 0x5, 0x2, 0x9, 0x2}, {{r11}, 0xfffffffffffffffb, 0x84, 0x1, 0xfffffffffffff8d9, 0x3}], 0x4, &(0x7f0000000380)={0x5}) 1.147307193s ago: executing program 3 (id=3109): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETA(r0, 0xc0d04468, &(0x7f0000000300)={0x200032, 0x8, 0x0, 0x0, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {}, {}, {}, {}, {}, {0x0, 0x60000}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4000001}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) 1.146901529s ago: executing program 3 (id=3110): mknod(&(0x7f0000000000)='./file0\x00', 0x2085, 0x3) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2085, 0x3) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x2, &(0x7f0000000000), 0x4) poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0) 1.143326909s ago: executing program 3 (id=3111): sysctl$hw(&(0x7f0000000040)={0x7, 0x10}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffe18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, &(0x7f0000000340), 0x0) ktrace(0x0, 0x4, 0x60003f06, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="d90500000041"]) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) select(0x40, &(0x7f0000000180)={0xfffffffffffffff7, 0x44809e9d, 0x336d470b, 0xfffffffffffffffe, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000007}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r2, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1d100", 0x84, 0x5}) dup2(r1, r2) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f00000000c0)={'./bus\x00', 0x329d, 0xb, 0xb, 0x0, 0x0, 0x67f, 0x200, 0x2, 0x0, 0x2, 0x12}) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) ioctl$BIOCSRTIMEOUT(r3, 0xc0307006, &(0x7f0000000080)={0x1, 0x10}) 870.486459ms ago: executing program 0 (id=3112): open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000001540)="9b0209c3", &(0x7f00000002c0)=0x4, 0x0, 0x0) r0 = socket(0x18, 0x3, 0x0) r1 = kqueue() write(r1, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) symlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = socket(0x18, 0x3, 0x0) setitimer(0x2, &(0x7f0000000140)={{0xff, 0x100800000000009}, {0x7fffffffffffbfff, 0xa5}}, 0x0) ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) 869.129908ms ago: executing program 2 (id=3113): open(&(0x7f0000000040)='./file0\x00', 0x20246, 0x181) (async) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) r0 = socket(0x2, 0x4001, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) shutdown(r0, 0x0) (async) connect$unix(r0, &(0x7f0000000000), 0x10) (async) getuid() 867.870779ms ago: executing program 0 (id=3114): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSHDRCMPLT(r0, 0x80044275, &(0x7f0000000040)=0xffffffff) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="e6994688b8c8a7045b3da03d896b6a775acaad5c2044bfd896d6c4e6eb1bd3c913a2d65cc312cf87cecddda05f02f07920e648ee36440d72a98ce93a04cf55905be4ef5323ce1fbe7f", 0x49}], 0x1) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200, 0x84) getsockname$inet(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r2 = fcntl$dupfd(r0, 0xa, r0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffff9c, 0xc01464a6, &(0x7f00000003c0)={0x0, 0x8001, 0x0, 0xd, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000400)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x8, r3, 0x0, 0x10, 0x8, 0x13a9413c, 0xfffffffc, 0x5, 0x80}) r4 = accept$unix(r2, &(0x7f0000000480)=@file={0x0, ""/4104}, &(0x7f00000014c0)=0x100a) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000001500), &(0x7f0000001540)=0xc) unveil(&(0x7f0000001580)='./file0\x00', &(0x7f00000015c0)='r\x00') ioctl$BIOCGDIRFILT(r2, 0x4004427c, &(0x7f0000001600)) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000001640)={""/16, @ifru_flags}) rmdir(&(0x7f0000001680)='./file0\x00') close(r0) syz_emit_ethernet(0xcb, &(0x7f00000016c0)={@local, @empty, [{[{0x88a8, 0x1}], {0x8100, 0x0, 0x1, 0x2}}], {@ipv4={0x800, {{0x14, 0x4, 0x3, 0x7, 0xb5, 0x64, 0x5, 0xa5, 0x0, 0x0, @broadcast, @local={0xac, 0x14, 0x0}, {[@ra={0x94, 0x6, 0x6c61db81}, @ssrr={0x89, 0x17, 0x4, [@local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, @multicast2, @empty]}, @timestamp={0x44, 0x1c, 0x8b, 0x3, 0x0, [{[], 0xa2}, {[@multicast1], 0x6}, {[], 0xaf6a}, {[@empty], 0x3}]}, @end]}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x1, 0xf, 0x0, 0x5, {[@timestamp={0x8, 0xa, 0x1, 0x101}]}}, {"9416b24b93be367f70c3d6879f98be88ac284cf3dd1075bf622bfe459d44c0154c617337758e0cb48e32daff1a2312e3dcf384dc61f24d6926b01676d012655efb701a6ab0"}}}}}}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x810, r4, 0x9) r5 = semget$private(0x0, 0x2, 0x102) semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f00000017c0)=""/217) ioctl$WSDISPLAYIO_ADDSCREEN(r2, 0x80245753, &(0x7f00000018c0)={0x5, './file0\x00', './file0\x00'}) ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000001900)={0x3, 0x6, {[0x8, 0x7, 0x3, 0x7fffffffffffffff, 0x6, 0x100000001, 0x66e6, 0x7fff, 0x9e, 0xfffffffffffff386, 0x8000000000000000, 0xffffffff, 0xd86, 0x621d, 0x0, 0x4, 0x5, 0xd00], [0x6, 0xa47, 0x8000000000000, 0x3, 0xc5f, 0x4, 0x8, 0x119, 0x0, 0x3], [0x8eba, 0xe5be, 0x6, 0x8000000000000001, 0x7ff, 0x0, 0xffffffff], [0x0, 0x80000001, 0x8, 0x3, 0x719c000000, 0x6], [{0xfff7, 0x80, 0x0, 0xffffffffffffffff}, {0xf, 0x6, 0x0, 0x4}, {0x12fe, 0x9, 0x1, 0x7}, {0x100, 0x7fffffff, 0x1, 0x8}, {0x8, 0x0, 0xbaae, 0x5}, {0x5, 0x8, 0x80}, {0x8, 0x8, 0x3, 0x4000000}, {0x2, 0xff, 0x12ae, 0x7fff}], {0x8, 0x4, 0x5, 0xfffffffffffffffe}, {0x4, 0x5, 0x9, 0x6}}}) r6 = openat$dri(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/dri/card0\x00', 0x20080, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000001c80)={0x400, 0x5, &(0x7f0000001b80)=[0x6651, 0xffffffff, 0x9, 0x3, 0xd], &(0x7f0000001bc0)=[0x7, 0x4, 0xc, 0x7, 0x400], &(0x7f0000001c00)=[0x4, 0x0], &(0x7f0000001c40)=[0x4, 0x3, 0x6, 0x8, 0x9, 0xd60, 0xf3], 0x0, 0x473}) recvfrom(r4, 0xfffffffffffffffe, 0x0, 0x43, 0x0, 0x0) sendto$inet(r1, &(0x7f0000001cc0)="b0455e0eeef952253accbc57ca3418", 0xf, 0x401, &(0x7f0000001d00)={0x2, 0x2}, 0xc) ioctl$DRM_IOCTL_MODE_GETFB(r6, 0xc01c64ad, &(0x7f0000001d40)={0x0, 0xfffffff7, 0xe, 0x4, 0xffff, 0x8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, &(0x7f0000001d80)={0x0, 0x1, 0x2, 0x6, 0x1, 0x1, r7}) sysctl$net_inet_ip(&(0x7f0000001dc0)={0x4, 0x2, 0x0, 0x16}, 0x4, &(0x7f0000001e00)="3cc3b9adf5b928f89f17993ef0b83bb6833870b3c953fc710720c507da20098caa1540f14c13ad3dbd826e9d5fd8e8196a2d5ab920b873aaf8e4881c39a5368c4647d1a146f8a0cfe9a8d08f4474ef4a09e0d3863b8899bd355da175a30a224bd2a1614ac4f19e2b2744839807df343560ae5bdd737aa00d14b94b9ea2ce5f67ce1c864b86a055ea7fea17462b8a3c41d86415a7a54ed9e64473a155c1a5cde40d28d808d2e31a6fe03a3d188ef48818606d75cf2e35390017bdd47c00a70a9c5849edf06d687c9ef03f4fb243ce9b21abe9b4a3f33a40d8b7a0b8315757b047d85cdcf55dd0", &(0x7f0000001f00)=0xe6, &(0x7f0000001f40)="7c25ba3a813bef18de58ea6f7d57b066451edaad8aeeda8c69e618388901fe2cd847a06decf58b3330e70f2dd4938fece61022b2050b82243c98e1fe0100c72d085cd51225a156264a74e22c460e71dd33ba1045a07705757dba011cf6bfa8bf60c7817905b02974e162e384acda40adfeeb11a62637f7ee70e899c01b3584bbaa450d4fdef4071e042c", 0x8a) getrlimit(0x5, &(0x7f0000002000)) ioctl$BIOCGETIF(r2, 0x4020426b, &(0x7f0000002040)={""/16, @ifru_flags}) 634.545553ms ago: executing program 2 (id=3115): openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) setrlimit(0x0, &(0x7f0000000980)={0x42}) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f00000011c0)="01000000", 0x4) r0 = syz_open_pts() setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000140)={0x6391, 0x71, 0x1, 0x8, 0xffffffff, 0x863, 0x0, 0x10, [{0x3, 0xfffff001, 0x8, 0x8000}, {0x8, 0x5, 0x7, 0xfffffffa}, {0x1ff, 0xfffffff7, 0x13, 0x4}, {0xdbf3, 0xa596, 0x9, 0x6}, {0x5, 0x7ff, 0x865b, 0x7ffffffd}, {0x64, 0xa84, 0x80, 0x2}, {0x3, 0xffff, 0x8, 0x1}, {0x3, 0x101, 0x0, 0x81}, {0x413, 0xffff5cdd, 0x7}, {0x0, 0xffff, 0x9, 0x7}, {0x0, 0x9, 0xfffffffc, 0x66c}, {0x8000, 0x6, 0x1, 0xa4}, {0x203, 0x9, 0x7, 0x401}, {0x9, 0x3, 0x5}, {0x7, 0x407, 0x5, 0x4}, {0x7, 0x80000000, 0x5, 0x8}]}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0x920e, 0x6, 0xffffdf82, 0xffffff90, "08955c1cfac164e20a070e00000009ffe600", 0x4000000, 0x5}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='r\x00') close(r0) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x2d757366, 0x27, 0x7, 0xffffffed, "0a6400b72860147b00", 0x7, 0x100000e}) writev(r0, &(0x7f0000000380)=[{&(0x7f00000009c0)="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", 0x4d4}], 0x1) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x7, 0x200, 0x9, 0x829, "9078e1f9a21cc108a3caf7121ce221dc21aaf91b", 0xfffffe00, 0xa}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCSETA(r3, 0xc0284416, &(0x7f0000000100)={0xa00, 0x0, 0x745, 0x0, "97000000efffffff00", 0x900, 0x7}) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x14}, 0x4, &(0x7f0000000140)="b6f22d953613763cb1123cba0b161a13cdede1666403e678605c54f3508909ca8b4f6ea0f5b16ad0166d07616eb980bacf06b86195fe03645ab052b6b82f5f2ecb80735dc0f779844d5e073740d1a696ac98f0db802417bf65749c8580bb7eb285a7965341fac3f2ac853b", &(0x7f00000001c0)=0x6b, &(0x7f0000000200)="858276b8284de9f12bc2df5c976ff3edd2c74e0845e57d019744742f32ab5ae0d005608137cba5c1f1c178ce9df4fb1ff54882", 0x33) syz_open_pts() syz_open_pts() kqueue() open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x85) syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x5, 0x5, 0x100000000, 0x0, 0x80008000, 0x8000002e, 0x1, 0x100000002, 0x2f01, 0x2, 0x100000000003, 0xfffffffffffffffe, 0x2, 0x4, 0x4, 0xfffffffffffffff5, 0x100], [0x5, 0x5, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0x2, 0x0, 0x0, 0x800000047], [0xa, 0x802, 0x100000000000004, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0xffff, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffd, 0xffc}, {0x4, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x3fe, 0xd, 0x40}, {0x7ffb, 0x2001, 0x40003, 0x1}, {0x6, 0x5, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0xfffe, 0x5, 0x0, 0x10000849}, {0x203, 0x10, 0x1, 0x2}}}) 633.427163ms ago: executing program 7 (id=3116): r0 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x9af, 0x4) (async, rerun: 64) recvmmsg(r0, &(0x7f0000003c00)={0x0, 0xb}, 0x10, 0x821, 0x0) (rerun: 64) ktrace(0x0, 0x0, 0x1d0e, 0x0) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket(0x18, 0x1, 0x0) (async) close(r0) (async) r2 = socket(0x24, 0x2, 0x0) (async, rerun: 64) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async, rerun: 64) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001640)="00000400", 0x4) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000280)={0x0, 0xfffffffd, 0xfeffffff, 0x3, "1cf41400000a00f6ed010076d0f0ef69d5b1b1ad", 0x4ffffffe, 0x9}) setsockopt(r1, 0x6, 0x41, &(0x7f0000000280), 0x1c) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async) fcntl$lock(r2, 0x8, &(0x7f0000000640)={0x3, 0x0, 0x10, 0x100000000002}) (async, rerun: 64) poll(0x0, 0x47, 0x6) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r4 = socket(0x2, 0x2, 0x0) ioctl$VT_OPENQRY(r3, 0x40047601, &(0x7f00000000c0)) ioctl$FIONREAD(r4, 0x80146940, &(0x7f00000001c0)) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r5, 0x0) (async) clock_gettime(0x3, &(0x7f0000000080)) 536.913149ms ago: executing program 4 (id=3117): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) mknodat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x10, 0x202) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000000c0)="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", 0x0) 534.246281ms ago: executing program 6 (id=3118): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0xc0000000, 0x1, 0x5, 0x80000001, "05ea989a0f42a1b6140e4b4db586d6701c549b66", 0x4, 0x3}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x10) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) pwrite(r1, &(0x7f0000000140)='O', 0xf4cf2, 0xb30e) accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r2 = kqueue() r3 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r3, &(0x7f0000000080)=[{&(0x7f0000001200)='#!', 0x2}], 0x1) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r3}) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) kevent(r2, &(0x7f0000000240)=[{{r1}, 0xfffffffffffffffa, 0x4, 0x1, 0x100000000, 0x20}, {{r1}, 0xfffffffffffffffa, 0xe, 0x40, 0x7, 0x1}, {{r3}, 0xfffffffffffffff9, 0xbc, 0x4, 0xba3c, 0x6}, {{r4}, 0xffffffffffffffff, 0x20, 0x4, 0x12, 0x7}, {{r5}, 0x3, 0x2, 0x1, 0xe, 0xa}, {{r4}, 0xfffffffffffffff9, 0x2, 0x1, 0x9, 0x2}, {{r3}, 0xfffffffffffffff8, 0x81, 0x4, 0x4, 0x8000000000008}, {{r6}, 0xfffffffffffffffe, 0x24, 0x80000000, 0x1ff, 0xcc}], 0x1000000, 0x0, 0x8000000, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) 532.40761ms ago: executing program 0 (id=3119): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x3, 0x0, 0x0) syz_open_pts() r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r2 = socket(0x11, 0x3, 0x3) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknod(0x0, 0x2000, 0x21e5f) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x200, 0x0) setuid(0xee01) fchown(r4, 0x0, 0x0) r5 = fcntl$dupfd(r2, 0x0, r2) sendmmsg(r5, &(0x7f0000003940)={0x0, 0x5}, 0x10, 0x8) ioctl$WSKBDIO_GETMAP(r3, 0x8020690c, &(0x7f0000000000)={0x0, 0x0}) sendto$unix(r2, &(0x7f0000000280)="b1000501600000001700000007000000045c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x0, 0x0, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000080)={0x2}) sysctl$hw(&(0x7f0000000100)={0x6, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x29) fchmod(r6, 0x4c) 380.93631ms ago: executing program 1 (id=3120): fcntl$getflags(0xffffffffffffffff, 0x3) ioctl$BIOCSDIRFILT(0xffffffffffffffff, 0x8004427d, &(0x7f0000000300)=0x8) (async) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f0000000340)={0x7, 0x0, 0x4, 0xf8ba, 0x6}, 0xc) (async, rerun: 32) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) (rerun: 32) sysctl$kern(&(0x7f0000000400)={0x1, 0x58}, 0x2, &(0x7f0000000440), 0x0, &(0x7f00000004c0), 0x0) (async, rerun: 64) accept$inet6(0xffffffffffffffff, &(0x7f00000005c0), 0x0) (async, rerun: 64) socket(0x6, 0x8000, 0x3) (async) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt(r1, 0x1, 0xc, 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) (async, rerun: 64) ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f0000000940)=0x1) (async, rerun: 64) sysctl$vm(&(0x7f0000000040)={0x2, 0x8}, 0x2, 0x0, 0x0, &(0x7f0000000080)="156cc6987e3fcc39517687e48189b782d8c03e52f436979c1580b2753e04017afda074a6ef515b3e44ab6077c8f394e06ece5d2db4bc4519b76a370db2f1520fcbd35ac4cee558e938a130c08b61", 0x4e) 380.340789ms ago: executing program 7 (id=3121): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f00000007c0)=[{r0, 0x1}], 0x1, 0x0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_CREATE(r1, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005e5000/0x3000)=nil, 0x9}, {&(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x402}, {&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x7fff}, {0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f00000f9000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1}, {&(0x7f000068b000/0x2000)=nil, 0x0, 0x8001}, {&(0x7f0000fed000/0x11000)=nil, &(0x7f0000002000/0x1000)=nil, 0x100000000}, {0x0, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7b}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2}, {&(0x7f0000165000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00000fe000/0x3000)=nil, 0x8}, {0x0, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2}, {&(0x7f00009a6000/0x1000)=nil, &(0x7f00004ff000/0x2000)=nil, 0x7}], './file0\x00'}) clock_gettime(0x73ff2be0c210c004, 0x0) ioctl$VMM_IOC_INTR(r1, 0xc0285602, &(0x7f0000000040)={0x4, 0x0, 0x8}) r2 = getuid() lchown(&(0x7f0000000200)='./file0\x00', r2, 0x0) ioctl$VMM_IOC_INTR(r0, 0x800c5606, &(0x7f0000000240)={0x2, 0x4, 0x3}) 379.317983ms ago: executing program 1 (id=3122): writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0xf, 0x3, 0x48}, {0x840, 0x64, 0x2}, {0x6, 0x80, 0x12, 0x9}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="840cbf3e87c006a62a075a37308e7bd3403e638b93d25600fceec30e", 0x1c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="c2a6d6000000005ae39d73988d800f00ecfe746fc6d602ff1a1e9f612b158f09acc9ae4e6a9981d79a05f77bf1aeb47b7f6607280658f515fcf658dfb61ba6463474180042d61a8d1dff322de9d4cc71a55e4193ca051f25e1db2dec9044ebed698579974b6d17e0d2881535305a4c4601952e19355bdd246edf4b93c6f41185c9", &(0x7f0000000000)=0x81, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (rerun: 32) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x12f) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) (async, rerun: 32) sysctl$hw(&(0x7f0000000080)={0x6, 0x19}, 0x2, &(0x7f00000017c0)="573c00e4", &(0x7f0000000500)=0x4, 0x0, 0x0) (async, rerun: 32) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 378.690185ms ago: executing program 1 (id=3123): setgroups(0x1, &(0x7f0000000000)=[0x0]) setuid(0xee01) r0 = syz_open_pts() fchmod(r0, 0xc92) setgroups(0x0, 0x0) setuid(0xee01) r1 = syz_open_pts() r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0) r3 = getppid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000001380)={0x0, 0x0}, &(0x7f00000013c0)=0xc) getgroups(0x2, &(0x7f0000001400)=[0xffffffffffffffff, 0xffffffffffffffff]) sendmsg$unix(r2, &(0x7f0000001480)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000001340)=[{&(0x7f00000001c0)="95d7debfb9acaae945effa50d37e382a1c2ca458560f54e613ce18426ae2549253a1c32e50d484fbaff380bfbc2485475bce0e3876c8b1ecdc32573799a5ef25b798f37bac332a44be2d510015dddea5ea2622b7044d7a0c5aa5a8e95ecd4b173c1ec17e58dae0bb1e896e4f6817e3bd22f78c3a631d5c3e717fda62bf88b704f4351c709f166e490c13d050e4245894637f", 0x92}, {&(0x7f0000000280)="2e7ed6b155772f5114aa49c90cf59ff68a9683b359d26a205717181fce3a15dfaa1c993287545a5f653e17e12d7c416cf06101a1636f03886f2a4a989d27b40fa371799c466606a9927328ba892debb42b307f59fb18c91584fe2abffd5b248967e85cefd078a1c6ee397e0d9ae57f5d42c9d6a7e51ff3e89eddd4228517961f75e22c340cb0a77337bb7bea84b3c95a7d5798e0d105348b724a6ddbd7dcd7f55935648e813b1c9c29a3c6be1c5514011b05a1ea9c192b023624", 0xba}, {&(0x7f0000000340)="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", 0x1000}], 0x3, &(0x7f0000001440)=[@cred={0x20, 0xffff, 0x0, r3, r4, r5}], 0x20, 0x8}, 0x1) fchmod(r1, 0xc92) r6 = geteuid() r7 = geteuid() setreuid(r6, r7) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f0000000040)='./file0\x00', r8, r9) 377.672058ms ago: executing program 0 (id=3124): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) socket(0x24, 0x8000, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x141) sysctl$kern(&(0x7f0000000180)={0x1, 0x53}, 0x2, 0x0, 0x0, 0x0, 0x0) fcntl$lock(r1, 0x7, 0x0) sendmmsg(r0, &(0x7f0000000480)={0x0}, 0x10, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async) socket(0x24, 0x8000, 0x6) (async) open(&(0x7f0000000000)='./file0\x00', 0x100, 0x141) (async) sysctl$kern(&(0x7f0000000180)={0x1, 0x53}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) fcntl$lock(r1, 0x7, 0x0) (async) sendmmsg(r0, &(0x7f0000000480)={0x0}, 0x10, 0x0) (async) 377.458172ms ago: executing program 1 (id=3125): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb2) (async) r1 = socket(0x18, 0x3, 0xf9) setitimer(0x0, &(0x7f0000000140)={{0x80000000000079, 0x100800000200009}, {0xbffffffffdffcfff}}, 0x0) (async) ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100)) (async) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) 157.372499ms ago: executing program 1 (id=3126): sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x4}, 0x3, 0x0, &(0x7f0000001940), 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1) r0 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x1000) sysctl$vfs_nfs(&(0x7f0000000180)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000080)="58d6ffa367ff11b115fe80d01f214d8b471ff8258f11ebc74f2fe5d4f8702a95111dcad2d16d6b9e644668b1897a6b4e532349fe5cc6dee7eec3270671bb4412e3025ffd837b528fc867229fd1ed99752b9ff24a84f165cc4c14400d697753d19ea3ef17ef626b6d3efa05d9f66d18eeb9b9e0d5034b08696dd8c3ae063f", &(0x7f0000000100)=0x7e, &(0x7f0000000400)="d5106e3f6b65496546bbe6606d24d22295da3ab5a03ca1e57d87ae495c72878fcabc71696fc6addfbf829a1897c86c0ee17bef660469e347f266aec0fbed471c01d5578c4bc32db461d5be47d56ae96af54ac58a2f3fb9f6072b2077cb8b3ea47decf9c6a0900d4d3367c29ea5bf2dbb3825369c6e3125391679d6537771fe145562e4ceda", 0x85) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f5", 0x11) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0xfc) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r2) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') open(&(0x7f0000000140)='./file1\x00', 0x400, 0x4) fchdir(r1) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000200)={0x10, 0x1ff, [{&(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0xfffffffffffffff8}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x1aa84907}, {&(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x8000000000000002}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0xd2a}, {&(0x7f0000ff4000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x3}, {&(0x7f0000fee000/0xe000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x9}, {&(0x7f0000ff1000/0xe000)=nil, &(0x7f0000fef000/0x3000)=nil, 0x48}, {&(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x62c}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x1cb4}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x8000000000000001}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, 0xf6}, {&(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, 0x81}, {&(0x7f0000ff2000/0x4000)=nil, &(0x7f0000fef000/0x1000)=nil, 0xfffffffffffffffb}, {&(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3}], './file1\x00', 0x2}) ioctl$FIONREAD(0xffffffffffffffff, 0x80206910, &(0x7f00000001c0)) 157.022833ms ago: executing program 4 (id=3127): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x0, 0x71000}, {0x8, 0x88, 0x8009, 0x7}, {0x101, 0x8, 0x1, 0x9}, {0x9, 0x900, 0xe}, {0x401, 0xa, 0x10002800, 0x7}, {0x10, 0x27f3, 0x3, 0x4}, {0xce3, 0x4, 0x4f5, 0x2}, {0x6, 0x801, 0xc, 0x8b}, {0x2, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd18, 0x11088}, {0x1e8, 0x10001, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x4}, {0xc, 0x1, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x40000000, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000b, 0x0, 0x0) (async) setuid(r1) r4 = socket$unix(0x1, 0x5, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) chmod(&(0x7f0000000240)='./file0\x00', 0x161) (async) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x404}, 0xe) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 128.296701ms ago: executing program 2 (id=3128): syz_emit_ethernet(0x4b, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3d, 0x66, 0x0, 0x0, 0x11, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @icmp=@dest_unreach={0x3, 0xd, 0x0, 0x0, 0xeb, 0x1000, {0x8, 0x4, 0x3, 0x3f, 0x2, 0x66, 0x3, 0x4, 0x67, 0xb, @multicast2, @broadcast, {[@lsrr={0x83, 0xb, 0x7, [@broadcast, @local={0xac, 0x14, 0x0}]}, @end]}}, "d7"}}}}}) 7.03181ms ago: executing program 2 (id=3129): syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8035000108"]) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0xfffffffe, 0x440003, "000000000000000000000000dc9ba2dd00", 0x24000, 0x2000006}) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x2, 0x5a, 0x6, 0x5, "a93e7b6d49909beed0ebf6527fd0d92c4c5b0cf2", 0x1f, 0x4}) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f00000000c0)=0x7ff) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000000)={0x32, 0xffffffff, 0x0, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) ioctl$TIOCSCTTY(r1, 0x20007461) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8035000108"]) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (async) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0xfffffffe, 0x440003, "000000000000000000000000dc9ba2dd00", 0x24000, 0x2000006}) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x2, 0x5a, 0x6, 0x5, "a93e7b6d49909beed0ebf6527fd0d92c4c5b0cf2", 0x1f, 0x4}) (async) ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f00000000c0)=0x7ff) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) (async) ioctl$TIOCSETA(r1, 0xc4504442, &(0x7f0000000000)={0x32, 0xffffffff, 0x0, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) (async) ioctl$TIOCSCTTY(r1, 0x20007461) (async) 5.860435ms ago: executing program 3 (id=3130): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) sysctl$net_inet_tcp(&(0x7f0000000400)={0x4, 0x2, 0x6, 0xc}, 0x4, 0x0, 0x0, &(0x7f0000000500), 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="841cbf3e882a06b800c86f78de042c4800000000007f3bb55e0c774541ae526822b380cc52", 0x25}], 0x1) getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x4001, 0x0) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="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", &(0x7f0000000000)=0x200, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x3, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt(r2, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) write(r2, &(0x7f0000000040)="f92a9bd30000007a000027a03440ee884d9e7a3e", 0x14) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000080)=0x9af, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x100) mquery(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x0, r3, 0x6) connect$unix(r1, &(0x7f0000000000), 0x10) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) sysctl$kern(&(0x7f0000000180)={0x1, 0x53}, 0x2, 0x0, 0x0, 0x0, 0x0) 837.362µs ago: executing program 0 (id=3131): open(&(0x7f0000000000)='./file0\x00', 0x615, 0x172) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000440)="841cbf3e882a06b800c86f78de042c4800000000007f3bb55e0c7745", 0x1c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919531ea87c5676231dd7aacdfaffffffffffffff46c0fbde0346df012e786031d4b86fc1f36e5250f6d2b982fd", &(0x7f0000000000)=0x44, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000000000)={0x6, 0x100000000008}) 0s ago: executing program 5 (id=3132): mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0xd144, 0x80, 0xfffffffe, 0x7fc, "2cf973c19e5fd700000000000000000000001200", 0x4, 0x4000008}) (async) r1 = socket(0x800000018, 0x3, 0xff) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x1, 0x4) (async) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) getsockname$unix(r1, 0x0, &(0x7f0000000100)) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x14, &(0x7f0000000000), 0x4) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) (async) r4 = syz_open_pts() kevent(r0, &(0x7f0000000080)=[{{r2}, 0xfffffffffffffffe, 0x1, 0x1, 0x148, 0xa}, {{0xffffffffffffff9c}, 0xfffffffffffffffa, 0x80, 0x1, 0x0, 0x8}, {{r3}, 0xffffffffffffffff, 0x41, 0x80, 0x2, 0x4}, {{}, 0xfffffffffffffffd, 0x20, 0x10, 0x800, 0x7fffffffffffffff}], 0x1, &(0x7f0000000100)=[{{r4}, 0xfffffffffffffff9, 0x3d, 0xfffff, 0x3, 0x100}], 0x4, &(0x7f0000000140)={0x58, 0x5}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$WSKBDIO_SETENCODING(r5, 0x80045710, &(0x7f0000000000)=0x4) mprotect(&(0x7f00004b6000/0x4000)=nil, 0x4000, 0x2) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10, r5, 0x0) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-6.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. login: pckbd_enable: command error load: 1.00 cmd: getty 43731 [ttyin] 0.01u 0.01s 0% 327k pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd806b6ae3d0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 j|E1\:Xn B`P @ c4 /pYn poXo o(Xo oXo HoXo oh8m pq5elA B`ؼ]De@[(n /@el B`8I0mBH\@]p n4!/el B`il`2!`el B`il@`2!el B`8il`2!wl B``il@`2!wl B`Hil`2!wl B` il@`2!8wl B`xl9_2!wl B`hxl8_2!wl B`xl8_2!H8m q5(8m ȶqc8m Pqc8m кqd8m XqdH8m B`(&2m@@[[lRf/8m B`x$2m@8[0XlPf@/nl (q50` B`0j@`[@Fqn`f@/vm_resetcpu: failed vm_resetcpu: failed OpenBSD/amd64 (E=j4Au+V2_q?,.>>t^QU_c͕>PA)s6:rޠ{JƳ 4YpLJi31ʺzi9۾_|ZH(\)$;;dK>t^QU_c͕>PA)s6:rޠ{JƳ 4YpLJi31ʺzi9۾_|ZH(\)$;;dK ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace end trace frame: 0x0, count: -1 ddb{1}> show registers rdi 0x6c14 __ALIGN_SIZE+0x5c14 rsi 0xffff80003c403c18 rbp 0 rbx 0x756e6547 rdx 0x49656e69 rcx 0x6c65746e rax 0x100000001 r8 0 r9 0x10000 __ALIGN_SIZE+0xf000 r10 0 r11 0 r12 0 r13 0 r14 0 r15 0 rip 0xffffffff8142f92b done_flush+0x38 cs 0x8 rflags 0x10046 __ALIGN_SIZE+0xf046 rsp 0xffff80002a30bcb8 ss 0x10 done_flush+0x38: movl %eax,%dr6 ddb{1}> show proc PROC (syz-executor) tid=195291 pid=7270 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=84, usrpri=84, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003afd9ca8,0xffff800031fa4570 process=0xffff80003c485838 user=0xffff80002a307000, vmspace=0xfffffd800b0631e8 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 44527 142063 19892 0 2 0 syz-executor 64857 260284 41727 0 2 0 syz-executor 64857 303658 41727 0 3 0x4000080 fsleep syz-executor 23979 456586 68844 60929 2 0x10 syz-executor 23979 31994 68844 60929 3 0x4000090 fsleep syz-executor 23979 439998 68844 60929 3 0x4000090 fsleep syz-executor 7270 283104 72097 0 2 0 syz-executor * 7270 195291 72097 0 7 0x4000000 syz-executor 7270 308462 72097 0 3 0x4000080 fsleep syz-executor 3835 34720 44929 0 2 0 syz-executor 3835 262954 44929 0 7 0x4000000 syz-executor 3835 265046 44929 0 3 0x4000080 fsleep syz-executor 3835 392702 44929 0 3 0x4000080 fsleep syz-executor 22904 397030 0 0 3 0x14200 acct acct 72097 15420 88684 0 2 0xc82 syz-executor 19892 188083 88684 0 3 0x82 nanoslp syz-executor 32351 16305 88684 0 2 0x2 syz-executor 57043 119392 1 0 3 0x100083 ttyopn getty 41727 326165 88684 0 2 0xc82 syz-executor 68844 418894 88684 0 3 0x82 nanoslp syz-executor 31884 96613 88684 0 2 0x2 syz-executor 90154 296498 88684 0 2 0x10000c82 syz-executor 76678 515272 29260 0 3 0x100082 sbwait ndp 29260 102178 1 0 3 0x10008a sigsusp sh 44929 48446 88684 0 3 0x82 nanoslp syz-executor 88684 69195 97011 0 2 0x82 syz-executor 97011 506995 52973 0 3 0x10008a sigsusp ksh 52973 426704 59284 0 3 0x98 kqread sshd-session 59284 506050 6465 0 3 0x92 kqread sshd-session 6465 278704 1 0 3 0x88 kqread sshd 40576 332949 20563 74 3 0x1100092 bpf pflogd 20563 7299 1 0 3 0x80 sbwait pflogd 48051 494816 45612 73 3 0x1100090 kqread syslogd 45612 477513 1 0 3 0x100082 sbwait syslogd 74308 375400 1 0 3 0x100080 kqread resolvd 10848 211530 51188 77 3 0x100092 kqread dhcpleased 1265 284945 51188 77 3 0x100092 kqread dhcpleased 51188 492591 1 0 3 0x80 kqread dhcpleased 82636 325333 0 0 3 0x14200 bored smr 91550 304949 0 0 2 0x14200 zerothread 43749 184052 0 0 3 0x14200 aiodoned aiodoned 29944 349017 0 0 3 0x14200 syncer update 13973 476024 0 0 3 0x14200 cleaner cleaner 53138 495936 0 0 3 0x14200 reaper reaper 18933 4001 0 0 3 0x14200 pgdaemon pagedaemon 39176 205427 0 0 3 0x14200 bored viomb 37654 463606 0 0 3 0x40014200 acpi0 acpi0 55958 347268 0 0 3 0x40014200 idle1 98362 448562 0 0 3 0x14200 bored softnet1 27003 273224 0 0 3 0x14200 bored softnet0 19457 162834 0 0 3 0x14200 bored systqmp 93281 301246 0 0 3 0x14200 bored systq 56141 304335 0 0 3 0x14200 tmoslp softclockmp 13444 10452 0 0 3 0x40014200 tmoslp softclock 99002 295801 0 0 3 0x40014200 idle0 1 126349 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 7270 (syz-executor) thread 0xffff80003afd82b8 (195291) Process 32351 (syz-executor) thread 0xffff80003afd87e8 (16305) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11098 12176K 12431K 166960K 15004 0 pcb 17 16K 32K 166960K 1061 0 rtable 195 12K 14K 166960K 1077 0 pf 32 17K 81K 166960K 348 0 ifaddr 33 7K 9K 166960K 248 0 ifgroup 48 2K 3K 166960K 434 0 sysctl 4 1K 9K 166960K 34 0 counters 68 36K 38K 166960K 576 0 ioctlops 0 0K 8K 166960K 2508 0 iov 0 0K 16K 166960K 227 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1399 88K 89K 166960K 4436 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 16 16K 16K 166960K 174 0 dirhash 12 2K 2K 166960K 69 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 248K 166960K 3480 0 sigio 0 0K 0K 166960K 121 0 proc 72 115K 180K 166960K 1251 0 subproc 81 5K 5K 166960K 189 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 703 0 in_multi 62 4K 7K 166960K 369 0 ether_multi 1 0K 0K 166960K 41 0 mrt 1 0K 0K 166960K 82 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 247 1102K 1102K 166960K 247 0 exec 0 0K 1K 166960K 1171 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 4 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 243 178K 213K 166960K 33665 0 UVM aobj 94 39K 39K 166960K 97 0 pinsyscall 43 86K 108K 166960K 5154 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 333 0 NDP 11 0K 2K 166960K 186 0 temp 76 9084K 9340K 166960K 190620 0 kqueue 14 22K 34K 166960K 672 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 363 0 359 3 2 1 2 0 8 0 rtentry 176 339 0 269 7 2 5 6 0 8 0 unpcb 144 2599 0 2582 19 17 2 6 0 8 1 syncache 336 24 0 24 9 8 1 1 0 8 1 tcpqe 32 5 0 5 3 2 1 1 0 8 1 tcpcb 736 1087 0 1082 20 16 4 7 0 8 3 arp 136 54 0 40 1 0 1 1 0 8 0 inpcb 328 4188 0 4180 33 29 4 10 0 8 2 nd6 152 73 0 55 1 0 1 1 0 8 0 pkpcb 40 14 0 14 8 8 0 1 0 8 0 kcovpl 48 21 0 12 1 0 1 1 0 8 0 mppekey 1024 2 0 2 2 2 0 1 0 8 0 ppxss 1192 203 0 203 4 3 1 1 0 8 1 pppxif 1576 17 0 17 7 6 1 1 0 8 1 pffrag 232 60 0 54 1 0 1 1 0 482 0 pffrnode 88 57 0 51 1 0 1 1 0 8 0 pffrent 40 113 0 106 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 4 0 4 3 3 0 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pfstitem 24 208 0 158 1 0 1 1 0 8 0 pfstkey 128 208 0 158 3 0 3 3 0 8 0 pfstate 448 208 0 158 10 1 9 10 0 8 0 pfrule 1360 22 0 16 2 1 1 2 0 8 0 rttmr 136 5 0 5 4 4 0 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 1510 0 1208 36 10 26 29 0 8 2 art_table 40 1511 0 1208 5 0 5 5 0 8 0 art_node 32 337 0 279 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 2 2 1 1 1 0 8 0 semupl 112 4 0 4 3 3 0 1 0 8 0 semapl 112 162 0 148 1 0 1 1 0 8 0 shmpl 112 77 0 3 3 0 3 3 0 8 0 dirhash 1024 55 0 38 3 0 3 3 0 8 0 dino2pl 256 8373 0 6884 94 0 94 94 0 8 0 ffsino 296 8373 0 6884 115 0 115 115 0 8 0 nchpl 144 13042 0 11299 65 0 65 65 0 8 0 rtmask 32 24 0 24 3 3 0 1 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 48802 0 48801 5 4 1 2 0 8 0 percpumem 16 303 0 254 1 0 1 1 0 8 0 vcpupl 3968 17 0 0 3 0 3 3 0 8 0 vmpool 848 17 0 0 2 0 2 2 0 8 0 kstatmem 264 280 0 254 6 3 3 3 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 17 0 17 8 8 0 1 0 8 0 scxspl 216 87976 0 87976 22 21 1 8 1 8 1 plimitpl 152 1060 0 1042 1 0 1 1 0 8 0 sigapl 424 3826 0 3777 10 2 8 9 0 8 0 knotepl 120 690 0 0 19 0 19 19 0 8 0 kqueuepl 224 1311 0 1300 18 17 1 5 0 8 0 pipepl 344 496 0 466 13 8 5 6 0 8 1 fdescpl 528 3780 0 3749 3 0 3 3 0 8 0 filepl 160 27541 0 27307 52 37 15 22 0 8 0 lockfpl 104 1402 0 1399 2 1 1 2 0 8 0 lockfspl 48 600 0 597 1 0 1 1 0 8 0 sessionpl 144 58 0 49 1 0 1 1 0 8 0 pgrppl 48 177 0 159 1 0 1 1 0 8 0 ucredpl 104 5140 0 5126 1 0 1 1 0 8 0 zombiepl 144 4609 0 4608 2 1 1 1 0 8 0 processpl 1232 3826 0 3777 6 0 6 6 0 8 0 procpl 664 9571 0 9514 8 1 7 8 0 8 0 sosppl 176 17 0 17 7 7 0 1 0 8 0 sockpl 752 7441 0 7412 66 58 8 20 0 8 4 mcl64k 65536 9 0 0 2 0 2 2 0 8 0 mcl16k 16384 4 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 123 0 0 15 0 15 15 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 61 0 0 6 0 6 6 0 8 0 mtagpl 96 9 0 0 1 0 1 1 0 8 0 mbufpl 256 4494 0 0 276 0 276 276 0 8 0 bufpl 280 35563 0 29433 440 1 439 439 0 8 0 anonpl 32 16490 0 0 133 0 133 133 0 246 0 amapchunkpl 152 114996 0 114417 79 38 41 41 0 158 9 amappl16 200 13228 0 13092 119 104 15 36 0 8 0 amappl15 192 7 0 6 1 0 1 1 0 8 0 amappl14 184 590 0 587 1 0 1 1 0 8 0 amappl13 176 205 0 192 1 0 1 1 0 8 0 amappl12 168 4100 0 4071 2 0 2 2 0 8 0 amappl11 160 80 0 79 2 1 1 1 0 8 0 amappl10 152 71 0 57 1 0 1 1 0 8 0 amappl9 144 265 0 265 1 1 0 1 0 8 0 amappl8 136 156 0 153 1 0 1 1 0 8 0 amappl7 128 216 0 201 1 0 1 1 0 8 0 amappl6 120 292 0 289 1 0 1 1 0 8 0 amappl5 112 183 0 171 1 0 1 1 0 8 0 amappl4 104 437 0 414 1 0 1 1 0 8 0 amappl3 96 24086 0 23981 4 0 4 4 0 8 0 amappl2 88 937 0 871 3 1 2 3 0 8 0 amappl1 80 33578 0 32950 27 10 17 21 0 8 0 amappl 88 31916 0 31753 5 0 5 5 0 92 0 uvmvnodes 80 216 0 0 5 0 5 5 0 8 0 dma4096 4096 3 0 3 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 9 0 9 3 3 0 1 0 8 0 dma128 128 260 0 260 5 5 0 1 0 8 0 dma64 64 9 0 9 4 4 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 22 0 21 1 0 1 1 0 8 0 aobjpl 72 96 0 3 2 0 2 2 0 8 0 uaddrrnd 24 3780 0 3749 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 3780 0 3749 1 0 1 1 0 8 0 vmmpekpl 168 31829 0 31755 5 1 4 4 0 8 0 vmmpepl 168 258879 0 256844 169 60 109 126 0 357 0 vmsppl 488 3779 0 3749 5 0 5 5 0 8 0 rwobjpl 80 71524 0 70115 49 11 38 40 0 8 0 pdppl 4096 7601 0 7515 183 90 93 93 0 8 7 pvpl 32 24242 0 0 195 0 195 195 0 265 0 pmappl 256 3796 0 3749 4 0 4 4 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 676 0 137 16 0 16 16 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff8391cff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 copyout() at copyout+0x5a syscall(ffff80003c4d1ee0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xcf62204eab0, count: -6 ddb{0}> machine ddbcpu 1 Stopped at done_flush+0x38: movl %eax,%dr6 ddb{1}> trace end trace frame: 0x0, count: -1