last executing test programs: 2.731442378s ago: executing program 1 (id=1559): openat$vmm(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9b, 0xffffffffffffffff, 0xfffffffffffffff8, 0x27fffffffffffffc, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x4, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0xa, 0x7}, {0x2, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0x7}, {0x6, 0x2, 0xe, 0x7}, {0x6, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3c0969d5, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x8b}, {0x4, 0x7, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x2fffd}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x2, 0x3, 0xffff0000, 0x1, 0x5, 0x2d, 0x8000000c, 0x1, 0x0, 0x644, 0x4000000000f19}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x4, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0x7}, {0x7, 0x80000002, 0xe, 0x7}, {0x2, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x3ff, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x8b}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) select(0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) 1.592321158s ago: executing program 6 (id=1588): mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) chmod(&(0x7f0000000040)='.\x00', 0x35e) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SPKRTONE(r2, 0x80085301, &(0x7f0000000080)={0x0, 0x1}) kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0xfffffffffffffffc, 0x0, 0x0, 0x6}], 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xfffd}}}}}}) sysctl$hw(&(0x7f0000000080)={0x6, 0x3}, 0x2, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e570400"/151, &(0x7f0000000040)=0x97, 0x0, 0x0) mkdirat(r0, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101) mquery(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x10, r1, 0x7) select(0x40, &(0x7f0000000100)={0x3, 0x2}, &(0x7f00000024c0)={0x4, 0x0, 0x0, 0x4, 0x0, 0x2, 0x1}, 0x0, 0x0) 1.591931783s ago: executing program 4 (id=1589): setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1005, &(0x7f00000000c0)={0x0, 0x5ff}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r0, 0xf3) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) setuid(0xffffffffffffffff) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x1, 0x1, 0x0) close(r2) socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000100)={0x10, 0x401, [{&(0x7f000041b000/0x2000)=nil, &(0x7f0000574000/0x2000)=nil, 0x4}, {&(0x7f0000083000/0x1000)=nil, &(0x7f00002d3000/0x1000)=nil, 0x6}, {&(0x7f00002b8000/0x4000)=nil, &(0x7f0000216000/0x2000)=nil, 0xe96}, {&(0x7f0000421000/0x2000)=nil, &(0x7f00006a9000/0x1000)=nil, 0x9}, {&(0x7f000068e000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f000003b000/0x2000)=nil, 0x9}, {&(0x7f00007da000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f00006b1000/0x4000)=nil, 0x8}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00005a9000/0x4000)=nil, 0x3}, {&(0x7f00006a6000/0x1000)=nil, &(0x7f0000623000/0x2000)=nil, 0x7fffffffffffffff}, {&(0x7f0000439000/0x4000)=nil, &(0x7f0000614000/0x3000)=nil, 0xf}, {&(0x7f00003b2000/0x7000)=nil, &(0x7f00001bc000/0x3000)=nil, 0x4b2}, {&(0x7f00000ae000/0x4000)=nil, &(0x7f0000124000/0x1000)=nil, 0x6}, {&(0x7f000034d000/0x4000)=nil, &(0x7f000034e000/0x6000)=nil, 0x4126}, {&(0x7f0000010000/0x1000)=nil, &(0x7f00002c4000/0x2000)=nil, 0x8}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000051000/0x2000)=nil, 0xe2ac}], './file0\x00'}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) getuid() 1.588618087s ago: executing program 1 (id=1591): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x1a, &(0x7f0000000000)='\"\x00\x00\x00', 0x4) write(r0, 0x0, 0x0) socketpair(0x18, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0xa, r1) r3 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) getsockname$inet(r2, &(0x7f0000000080), &(0x7f00000000c0)=0xc) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000180)={0x5, &(0x7f0000000000)=[{0x2d, 0x3, 0x2, 0x7c07}, {0x2, 0x0, 0x2, 0x7}, {0x0, 0x40, 0x81, 0x101}, {0x0, 0x68, 0xaa, 0x6}, {0x6, 0x4, 0xfe, 0x7}]}) write(r4, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) write(r3, &(0x7f0000001480)="04bdfa5d1d28c8b0ba00241dc811c639ce3c73c63e3534825ba1661573d8d508753f95b7688ad4ae8cf6bbca325cebc37fc4e1dd543dbe2da6dd200098297b6716a2f5aee4d0fe893bd469e03d1b2fb02351402493b9d04a0a4b4b5eff79599f9f1b9af5facfbe3ee0da8972f310674019c6597a", 0x74) pledge(0x0, 0x0) 1.408051066s ago: executing program 6 (id=1595): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'}) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="4c9be3fee58b024f47c6ad075f57dcf97ff289a5e3a3ab9a2a10fa4085cf0544ab84a6a4a7a13eddd8da1c565e5e901b961886a014851a43d68eab4849a84443e7776e8221b061f4d250c19826effa21ffa5aad56ee5226e846b9d6c146fcaaffee735598ce63e12660f307dfeda640f711532726c0c51c5e1d259", 0x7b}, {0x0}], 0x2) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff}) r2 = kqueue() kevent(r2, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r2, 0x0, 0x0, 0x0, 0x2, 0x0) 1.399765791s ago: executing program 4 (id=1599): open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900303a0000000000000000000000000000000000fe8000000000000063000000000000aa0200907800000000608100000000338000000000e0000002fe8000000000000000000000000000aa0000000000000000"]) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6) fcntl$lock(r0, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xeffffffffffdfffb, 0x10012efffffff, 0xffffffffffffffff}) r1 = open(&(0x7f0000000340)='./file1\x00', 0x200, 0x33) mmap(&(0x7f0000001000/0x7000)=nil, 0x7000, 0x4, 0x8011, r1, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) write(r0, &(0x7f0000000200)="d8cf1f7a71f7040dc4e8395f6e9fd6788a6c54bfcae1f5684bce046723c3d4f464b13d3be34e3b310b80ea53b88a4ab595b4c83a0e61729b13fc79ba62ff742ab3b82de60ad38bb2c460559ecf6a4eaedd409132db588b7714b367df62fd98c1155dd0797e035832f662d8e6ae157ff7933d05027c58ad18f6eb3249e1384e1b1a7c2ea2c5b707fc2a6b65abc21fe4f5bdfe75c3c0c625a326dbc806bdf1214a2cbf6621b21da45c3d0f98f739b4baaf972befa939b731d2190c44fe95baa28a7dcf1ccc630724940b7bc1b955a8dec6284d02a60bf27530c79202892818c2dccde5903252ec47ca71cc780b32", 0xed) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0206923, &(0x7f00000001c0)) r3 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r3, 0x8020690e, &(0x7f00000001c0)) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1, 0x10, r4, 0x4000000) setitimer(0x0, &(0x7f0000000140)={{0xfffffffffffffffe}, {0xffffffff}}, 0x0) 1.248529408s ago: executing program 4 (id=1600): sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x2, &(0x7f0000000080)="9cb929b97d72a84a03e26d1f90e21148e35c3345d5fcf9ad9805151223fcc210c4f4614bb9c83e66c83df95c80d5adfd87cb64a4fcc63ba9f4eaa90c2b82e89bef3a264913e77c38da0917b8f92d3ee64d8f69d15cb4b2ecd50607c6c22b88c220def09745765644b470ea3edb7386d2e2dbc5cef042aaf8498b73a6912344c1d5be3d48640261ac", &(0x7f0000000140)=0x88, &(0x7f0000000180)="2933f6464c9c9ba028a05b1b711f2ee493a4316c9b8057ad6362fabe058aaf76843a2d14a5bec65c89401db47587dae9abd6e49f964cdbe79381a88944489d113e38b3ca63a594f70637806ae44d6f92de9755e482ed857a0ae19ff6c5740d2bd2457d7bb460a5bc52dab3b580d2445af4cbbac5c78a02a5a2d4c83ef24eb3f806067d8610d21c4f6503922313fb7a", 0x8f) 1.245103174s ago: executing program 1 (id=1601): setuid(0xee01) (async) seteuid(0xffffffffffffffff) (async) r0 = socket$inet(0x2, 0x3, 0x102) r1 = getuid() setreuid(0x0, r1) r2 = getgid() chown(&(0x7f00000001c0)='./file0\x00', r1, r2) (async) sysctl$fs(&(0x7f0000000040), 0x2, &(0x7f0000000080)="c1833dbc997a286165f6c1e34e3413bf99eaab402150b0cc73444fb2df51b3aa3abb77f347a21a5455c42de003b70917aa9e9ee71056c8f50a60edfec1d330d3167a76ba57a12923a8ca92caa9e137b0a5f29264c1218e375aa610bf83b9b343a9c3363eabc4aa8baae7e75f268d72282f9b695254251858c1e42f91669dd535ea771cc87fa8613d7cf50eb05915d56ca006224e609d81e2", &(0x7f0000000140)=0x98, &(0x7f0000000180)="e778ee5cdd94d1b66081249376d6a537264123305427d5cc3e477b33d5087145cf29f89befbd418ef5a31717", 0x2c) getgroups(0x1, &(0x7f0000000000)=[0xffffffffffffffff]) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async, rerun: 32) r4 = socket(0x18, 0x3, 0x1) (rerun: 32) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt(r4, 0x29, 0x2c, 0x0, 0x0) fchown(r0, r1, r3) 1.175407803s ago: executing program 4 (id=1605): mknod(&(0x7f00000000c0)='./file0\x00', 0x1000, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x0, 0x1, 0xfffffffffffffffd, 0x20001fffffffd}) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) r2 = syz_open_pts() ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000080)=0x200) fcntl$setown(r1, 0x6, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001300)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea0700383a01fe8000000000000000000000000000aaff0200000000000000000000000000010102907800000000605adf0000002c00ff020000000000000000000000000e01fe8000000000000000000000000000bb11000005"]) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) write(r4, &(0x7f0000000240)="f01ad3d2", 0x4) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x5c6, 0x7, 0x55, 0x3}, {0x81, 0x8b, 0xb, 0x80009}, {0x816, 0x1, 0x80, 0x7e}]}) r5 = socket(0x11, 0x3, 0x8) close(r5) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) 1.17407835s ago: executing program 1 (id=1606): r0 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x2, 0x3b5, 0x8, 0xffffffffffffffff}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x201, 0x120) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x100000008}) (async) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x100000008}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0x293, 0x3ff, 0x3, 0x400, "2c7f88d112afd4f3bfed0f274ca9576eb663855b", 0x794, 0xffff}) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000080)={0x293, 0x3ff, 0x3, 0x400, "2c7f88d112afd4f3bfed0f274ca9576eb663855b", 0x794, 0xffff}) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) socket(0x18, 0x2, 0x0) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r3, &(0x7f00000003c0)={0x0, 0x9}, 0xfffffffffffffde0, 0xc) (async) sendmmsg(r3, &(0x7f00000003c0)={0x0, 0x9}, 0xfffffffffffffde0, 0xc) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r4 = syz_open_pts() close(r4) r5 = socket(0x18, 0x3, 0x0) getsockopt(r5, 0x29, 0x24, 0x0, 0x0) (async) getsockopt(r5, 0x29, 0x24, 0x0, 0x0) syz_open_pts() (async) r6 = syz_open_pts() writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) open(&(0x7f0000000040)='./file0\x00', 0x10, 0x10) (async) r7 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7}) (async) ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7}) ioctl$TIOCSTAT(r7, 0x20007465, 0x0) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000000)={0x80800008, 0x6, 0x0, 0xffffd6c3, "6291bf9400010040000003008029d0b7de11ecd1", 0x2000005, 0x5}) socket(0x18, 0x2, 0x0) (async) r8 = socket(0x18, 0x2, 0x0) setsockopt(r8, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r8, 0x1000000029, 0xd, &(0x7f0000000100), 0x0) r9 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xbffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0xa, 0x80000001000c48, 0x2000080000000, 0x8000002e, 0x0, 0xb28f, 0x7fffffff, 0x1, 0x3, 0xfffffffffffffffe, 0x4, 0x101, 0x4, 0xbffffffffffffff7, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x5, 0x7ffffffd, 0x0, 0x0, 0x0, 0x48], [0x4, 0x5, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe, 0x200000000000000], [{0x0, 0x90c, 0xffffffff, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x57, 0xfffffffd, 0xfffffff8, 0xffc}, {0xcdf, 0x0, 0x8, 0xfffffffffffffffe}, {0x107b, 0x400, 0x4, 0x5}, {0x7ffe, 0x2000, 0x40003, 0x2}, {0xfefe, 0x0, 0x4}, {0x0, 0x9, 0x1fd, 0x459}], {0x0, 0x5, 0x1, 0x847}, {0x203, 0x40010, 0x200006, 0x5}}}) kevent(r9, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) 1.067262298s ago: executing program 4 (id=1608): openat$vmm(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9b, 0xffffffffffffffff, 0xfffffffffffffff8, 0x27fffffffffffffc, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x4, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0xa, 0x7}, {0x2, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0x7}, {0x6, 0x2, 0xe, 0x7}, {0x6, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3c0969d5, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x8b}, {0x4, 0x7, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x2fffd}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x2, 0x3, 0xffff0000, 0x1, 0x5, 0x2d, 0x8000000c, 0x1, 0x0, 0x644, 0x4000000000f19}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0x101, 0x4, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0x7}, {0x7, 0x80000002, 0xe, 0x7}, {0x2, 0x1, 0xffffffff, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0x2000a, 0x803, 0x14, 0x8}, {0x3ff, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x8b}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) select(0x0, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) 960.589339ms ago: executing program 0 (id=1612): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000040000000007", 0xd, 0x808, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x0, 0xffff63db, 0x5, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x400, 0xfffff115, 0x3}, {0x8, 0xffffffff, 0x6, 0x8a}, {0x1, 0x4bae, 0x3, 0x8}, {0x88, 0x80000e2, 0xf, 0x100}, {0x6, 0x7, 0xf14, 0xe8a5}, {0x3, 0xffff, 0x8}, {0x4000004, 0xf8bd, 0x1, 0x3}, {0xb, 0xd, 0x28001, 0xffffe2e9}, {0x2000007, 0x1000, 0xb, 0x77ff}, {0x0, 0xfffffffc, 0x6, 0x8bfd}, {0x0, 0x9, 0x2, 0x6}, {0x1010000, 0x0, 0x800000, 0xa6a}, {0x401, 0x82, 0x9, 0x4}, {0x800, 0x106e2, 0x6, 0x6f5fc48e}, {0x4, 0x101, 0x3, 0x9}, {0x4, 0xfffffffd, 0x2, 0x4}]}) mprotect(&(0x7f0000340000/0x3000)=nil, 0x3000, 0x4) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x1, 0xb, 0xfffffff4, 0x260, "001e3c36dbddfc0000004800cf00", 0x545, 0x5}) read(r0, &(0x7f0000000200)=""/255, 0xff) r1 = socket(0x11, 0x3, 0x0) r2 = accept$inet6(r1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000300)=0x9) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 959.896852ms ago: executing program 1 (id=1613): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TIOCMBIS(r0, 0x8004746c, &(0x7f0000000080)=0xfa) sysctl$kern(&(0x7f0000000000)={0x1, 0x2c}, 0x2, 0x0, 0x0, &(0x7f00000000c0)="65e253c4c46ab9c62df0cf885fdac731bdddb898de19f791bebdd749c9724006fc", 0x21) pledge(0x0, 0x0) 958.049278ms ago: executing program 0 (id=1614): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0xd337e3faea0cfcc, 0x5) openat(r1, &(0x7f0000000080)='./file0\x00', 0x8000, 0x58) 843.237064ms ago: executing program 2 (id=1615): ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x40, 0xe5, 0x543, "22f006000000009ba340c3000000000000007600", 0x3, 0xf}) link(0x0, &(0x7f0000000080)='.\x00') sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x100, 0xfffffffc, "00000000000000000000ec67343e1a43011100", 0x11, 0x1100a}) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x40, 0xe5, 0x543, "22f006000000009ba340c3000000000000007600", 0x3, 0xf}) (async) link(0x0, &(0x7f0000000080)='.\x00') (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000440)="2e06b5a54fdc15d0e5ba5cd619e395d842161263a5bcf8d360b109113dd229c0dd47d6ff4f038bc8f40206bf8a1ef55ba04d8d4e4174e29e744d8606170795a2edaf3456112807f6d55fd9c3815257c10e07e8f0be3a7366f8123a42cb43f4302bf6b149e9b9bab6116b11b8ae693250f7fa8080cd8a2fc7c7e4ebf5c106c80fd386c7786c0421183de7b10dbde8040d96f51522423ca8e0f70989e1530cd2eaf7faaad41584384bf407ed7bed944e099fd18b59c86af22bb45fe92b05087191e530bc83a9e0975fc2a0f5988e9ae663b4fe25f69d661eb4ad0842a7be35dbe21e8911da844c7dce8d80f66713e13d96b30d5b4a13fb15282cf2a61a24880049b94a6e46bce752ff3230cd36789c42b37db904fd77060a84ca071839da23ef66bb45a18c9face3b3982d2edef1234405ec89e3ac812208780a2866cf52a8bbbe80b77e07f53d751ea0da7185414c403df8282d22a45b8a5ee7dc9b534106d98bb65aea3af32dea9a7a9881e7fdfbb46801408f1b94018abf7d5816d4e0344ab9dd8a6d43a2503180582f6d553e1a81fe4e8d68fafcd095560e83feda2fcd68d73fc71d7ff20511859f1b895d1a3f42970f1fb4dd61487901de9d5efcb92d63466e92bbe485aaf63988e255cbb607ac7ff9ee30732dd2482be6280b8946e32cf0ec48fc7c89e53c4aecb4af7af69e0dc04dd17405ce02898adf547f851e885964f836ec6b04d77f14d85025e415a01553d6b7e5dd946be3ea735515a624f74e2c09b863881e4412135ecbdd1f1ec73762d2b1bcb0f04f0bd1369f9c374d73fb9cc7465bbdb5e77078870423340ea32c9f49980888427f49eb9d4daf99a87d6d6e44aecd7dfeba2c6f1844b2b537d6de1ba1c8bd90f7ec014b4c84a9bfba26bb92b0d740de1e20c97ec18417a1f3d68fea076ad9aeb884efa6cedf35845dd4bc6eae82e37a2304c76ab6e7467f2d868e76df28b7dbba656b0998da5d54a00e706e8dc0699e961bfe8b6cef550c66eb7e5a40ef12896fb571be1d73d817d17e177f06c0679c784feb85129836c8724bf0c3e6026a3eb831c5335475950287c988059987f9198a074e7d92cdcf6c196d91f9368490b5d5f7033374c27b2aed8732fb84933a8fbe2bcaa68b68eea3400b5b022a2fae01ef3df9bf1ba0739b54faaa56ebe38c40fc6d1d99522c07af188a", 0x34e}], 0x1) (async) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x100, 0xfffffffc, "00000000000000000000ec67343e1a43011100", 0x11, 0x1100a}) (async) socket(0x11, 0x3, 0x0) (async) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) 836.571065ms ago: executing program 0 (id=1617): sysctl$kern(&(0x7f00000009c0)={0x1, 0x1c}, 0x2, 0x0, 0x0, &(0x7f0000000ac0), 0x0) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0xaa19}, {0x2}, {0x1, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0x3}, {}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x1}, {0x3}, {0x0, 0xffffffff}, {0x0, 0x7ff}, {0x1}, {0x2}, {0x5}, {0x3}, {}, {0x2, 0x1}, {}, {0x0, 0x10000200}, {0x2}, {0x0, 0xfffffffd}, {0x2, 0xa}, {0x2, 0x100000}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f00000000c0)={0xc94, [{0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0x1}, {0x3, 0x9}, {0x2, 0x7}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x1}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0xe1}, {0x2, 0x2}, {0x1, 0xfffffff8}, {0xb2526dcbaec5130c, 0x3}, {0x2, 0xfffffff4}, {0x3, 0x48}, {0x0, 0x1000}, {0x3, 0x5}, {0x3, 0x6}, {0x2, 0x7fff}, {0x2, 0xa}, {0x3, 0xee25}, {0x3, 0x66869a3f}, {0x3, 0x7f}, {0x1, 0x10001}, {0x2, 0x5}, {0x1, 0xc37f}, {0x2, 0x401}, {0x2, 0xfff}]}) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) shmget(0x2, 0x2000, 0x201, &(0x7f0000ff9000/0x2000)=nil) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x4810, 0xffffffffffffffff, 0x6) clock_settime(0x100000000000000, 0x0) shmget(0x3, 0x3000, 0x105, &(0x7f0000ffc000/0x3000)=nil) sendto$unix(r0, &(0x7f0000000080)="5b84a274e444996e16132bd48e8c3b36d6a9e53a9ff8ee4e5b128b150704ca216b4a768fa9ff62ff0098b09c1a8c10ae93da7a5ad325c6dcec7ea8fc5d", 0x3d, 0x2, 0x0, 0x0) 835.488919ms ago: executing program 1 (id=1618): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x40}], 0x1, 0x10) (async) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000008c0)=0x9) mknod(0x0, 0x2000, 0x1e5f) (async, rerun: 64) poll(0x0, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) execve(0x0, 0x0, 0x0) (async, rerun: 32) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000040)=0x9) setrlimit(0x8, &(0x7f0000000980)={0x3e, 0x62}) (async, rerun: 32) r1 = syz_open_pts() (rerun: 32) close(r1) (async) syz_open_pts() (async, rerun: 64) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000200)={0xfffffff9, 0x0, 0x1, 0x8, "d5fe2679d5ee3cf8a0a91de797376a903e863cc5", 0x1003, 0x7ff}) (rerun: 64) ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x2) (async) readv(r1, &(0x7f0000000080)=[{&(0x7f00000013c0)=""/1, 0x1}], 0x1) (async) unveil(0x0, &(0x7f0000004300)='W\x00') 834.919749ms ago: executing program 2 (id=1620): sysctl$net_inet_tcp(0x0, 0x0, &(0x7f0000000000)="9b1809ffffffffff", 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1004a) r1 = socket(0x2, 0x3, 0x0) bind(r1, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x138, 0x0) r2 = socket(0x2, 0x3, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 833.494621ms ago: executing program 5 (id=1621): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0x20) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x200, 0x1a1) ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f0000000100)=0x21c98d28) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000317000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00005c5000/0xe000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00002fc000/0x4000)=nil, 0x2b}, {&(0x7f000048e000/0x2000)=nil, 0x0, 0xe04}, {&(0x7f0000504000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x5}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x200000000000006}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000066000/0x3000)=nil, 0x83ffffffffffff}, {&(0x7f0000ad4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x200000001}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f00005f1000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil}, {0x0, &(0x7f000028b000/0x4000)=nil, 0x7}], './file0\x00'}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000200)) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x2, 0x801) 655.948333ms ago: executing program 0 (id=1622): sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647", 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/232, 0xe8}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) setreuid(0xee00, 0x0) sysctl$vm(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) r0 = shmget$private(0x0, 0x1000, 0x4, &(0x7f00007b0000/0x1000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/197) (async) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/197) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) syz_open_pts() (async) syz_open_pts() socket(0x10, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) r1 = getuid() setreuid(0x0, r1) shmctl$IPC_RMID(r0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r2 = socket(0x18, 0xc003, 0x3a) setsockopt(r2, 0x29, 0x6c, 0x0, 0x0) (async) setsockopt(r2, 0x29, 0x6c, 0x0, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0) r3 = kqueue() write(0xffffffffffffffff, 0x0, 0x0) (async) write(0xffffffffffffffff, 0x0, 0x0) kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffb4161, 0x0) (async) kevent(r3, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffb4161, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r4, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x200, 0x2f, "1800e622eac00d7a001600", 0x3, 0x87}) openat$tty(0xffffffffffffff9c, &(0x7f0000000280), 0x2800a, 0x0) (async) r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000280), 0x2800a, 0x0) ioctl$TIOCCLRVERAUTH(r5, 0x2000741d) (async) ioctl$TIOCCLRVERAUTH(r5, 0x2000741d) sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f0000000100)={0x7, 0x4}, 0x3, 0x0, 0x0, 0x0, 0x0) 655.529259ms ago: executing program 5 (id=1623): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000008c0)="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", 0x319}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="3800847f0ee238462b2bc7ca41000000000000ffff00000100000060169c8551c748dc20463f823b090f764637dd7a8de6f3b56fa0f15e389eed963c280b2ade39ea72a20f5b997ab6c58d2d32c313a89f1871bd144a0b8fa88c4a2e747a95d297e87139741466375888f165c256d1567e300eaef4502f81a8d230e72a71bb850c9a78a816f2e953c3d1870e996e6fbbc41c6291890ca394ee955eb6b65437be543f12c150545edc51c2b5993f610acb35e2ab56cd83b41c31fcfc2483469f4fb8f95eaa0cb3aa", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x8}, 0x7) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc0104451, &(0x7f0000000740)={0x5, 0x408, 0x3fc, 0x2000, "0000000000fb000000000000b34445f0388a19a0", 0x33c3300a, 0x2}) 655.157776ms ago: executing program 7 (id=1624): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r0 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x80}, {0x0, 0x4}}, 0x0) setitimer(0x0, 0x0, &(0x7f0000000440)) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f000028d000/0x1000)=nil, &(0x7f0000068000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000463000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000ffe000/0x1000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00002fc000/0x4000)=nil, 0x2b}, {&(0x7f00002ae000/0x1000)=nil, 0x0, 0xe04}, {&(0x7f0000504000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000066000/0x3000)=nil, 0x3ffffffffffff}, {&(0x7f0000ad4000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x70e}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil}, {0x0, &(0x7f000028b000/0x4000)=nil, 0x7}], './file0\x00'}) ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000140)) 654.780865ms ago: executing program 5 (id=1625): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x9d6) (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x20, 0x1) (async) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x1d, 0x0, 0x0) r2 = socket(0x18, 0x1, 0x0) kevent(r0, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffff8, 0x40, 0x1, 0x9}, {{r2}, 0xffffffffffffffff, 0xcf6b3cb729fc70ff, 0x1, 0x8, 0x6ef0}, {{r0}, 0xfffffffffffffffe, 0x21, 0x1, 0x4, 0x7d8f}, {{r1}, 0xfffffffffffffffd, 0x1, 0xf0000000, 0x2, 0x7}], 0x6, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffffb, 0x0, 0x8, 0x7, 0x9}], 0x9fdb, &(0x7f0000000140)={0x9, 0x1}) setsockopt(r2, 0x6, 0x2, &(0x7f0000000100)="02000000", 0x4) 607.55974ms ago: executing program 2 (id=1626): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="ac2740c6d63124acd7d21972817267b5ab7037a43a29d21f9ddfa7cc2a9c202dbc7765095d5315a53a318705639f0b1400049f29f71c31238df64bf6b32f43ac81f08132062d7621991e9cf881ad439e3be48e738487c5ed9d7b9a66b3f8042aa9c8e9d9d8c793192280a72a4bf7dbce4627f7a2c6202be2a701aa406abe3dc5bccc5ea46816de894a7bf9a77f6ff46ea6b3ef089e6cb6285da4c9450f2910c1018db944226ba44f67c1739caf839c53fbe112f28569ce977de80e4780c6b9b1e118", 0xc2, 0x5, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000000140)="53183374", 0xffffffba) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000180)={0x5, &(0x7f0000000000)=[{0x2d, 0x3, 0x3, 0x7c07}, {0x2, 0x0, 0x2, 0x7}, {0x0, 0x40, 0x81, 0x101}, {0x0, 0x68, 0xaa, 0x6}, {0x6, 0x4, 0xfe, 0x8}]}) write(r0, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0x5, "070609000013160000050800", 0x0, 0x180000}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) sysctl$kern(&(0x7f0000000140)={0x1, 0x2e}, 0x2, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x8000, 0xc0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x0, 0x7, 0x2, 0x9}, {0xc, 0x40, 0x32, 0x4}, {0x6, 0x1, 0x69, 0x4}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000080)={0x0, 0x4}, 0x10) 607.26529ms ago: executing program 6 (id=1627): open$dir(0x0, 0x2, 0x2) syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x8000, 0x100) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffff, 0xc0, 0xfff4, 0x1, 0x7ff, 0xffffffff, 0x1, 0x1, 0x1, 0x4000000000000006, 0x101}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xff, 0x14bf, 0xffff, 0x1, 0x39, 0xe4e, 0x4000001, 0x0, 0x2, 0x5, 0x800000000006}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f0000000380)) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) 606.938918ms ago: executing program 7 (id=1628): open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) madvise(&(0x7f000074b000/0x3000)=nil, 0x3000, 0x5) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x281c1, 0x51) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d1", 0x3}], 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) 606.58584ms ago: executing program 0 (id=1629): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000280)={0x8, 0xfffffffd, 0xfffffffe, 0x5, "2215e71300000d0000efff00", 0x40, 0x101}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="f1ee782c2929a56ab791b300254683d051d56bc2832b7842d519fed2a5f0eb76ed56de4b95c6c5db2c60755ce2674ee0b4a81037ca2e135bc50dc3149d0840bed1e55ee2a01575a4762c92d455bf084c41517cbbb4f360a2b7396d3baf3b93aae5a4871a56c6b39d997c811c777bf6d9973b", 0x72}], 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaae", 0x5}], 0x1) syz_open_pts() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x3, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) sysctl$hw(&(0x7f0000000040)={0x7, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r2, 0xc0504417, &(0x7f0000000740)={0x0, 0x8000000, 0x0, 0xfffffffc, '\x00', 0x11, 0x1100a}) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x0, 0x20) renameat(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000001c0)='./file0\x00') 468.981607ms ago: executing program 5 (id=1630): sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000300)={0xbe69, 0x3dd, 0x19, 0x236b5350, "9ddc417e357d0404446b576af7ff2e9e68cd3304", 0x6, 0x14}) writev(r1, &(0x7f00000000c0)=[{&(0x7f00000009c0)="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", 0x267}], 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, 0x0, 0x0) r2 = socket(0x800000018, 0x3, 0x0) shutdown(r2, 0x0) syz_emit_ethernet(0x39, &(0x7f0000000080)={@broadcast, @broadcast, [], {@generic={0x812b, "3fc829d6c53c408a690adfc1c40eccdebb511a85915cde851fa048287e88ff236130385a9455dcb6b3a023"}}}) 468.629352ms ago: executing program 7 (id=1631): open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) r0 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)="ee11d2ac4a36", 0xffffffb8}], 0x1) r2 = kqueue() r3 = kqueue() kevent(r3, &(0x7f00000002c0)=[{{r2}, 0xfffffffffffffffa, 0xa9}], 0x7, 0x0, 0x0, 0x0) r4 = kqueue() kevent(r2, &(0x7f0000000000), 0x724, 0x0, 0xd1c, 0x0) (async) r5 = dup(r4) kevent(r5, &(0x7f0000000240)=[{{r3}, 0xfffffffffffffffa, 0x59}], 0xf0e, 0x0, 0x7fffffff, 0x0) (async) close(r3) (async) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) 468.336216ms ago: executing program 5 (id=1632): socket(0x2, 0x4000, 0x82) r0 = socket(0x11, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000280)={0x7ff, 0x17, 0x2000007, 0x20105, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x10a6e, 0x99ad, 0x1071000}, {0x7, 0x8, 0x8007, 0xfffffff9}, {0x8, 0x400005, 0x4, 0x9}, {0x4b, 0x800, 0x6, 0xfffffffc}, {0x401, 0x200726, 0x2800, 0xc}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xffff8000, 0x4f8, 0x6d}, {0x206, 0x803, 0x14, 0x2a}, {0x2, 0xe, 0x285, 0xd}, {0xc, 0x95, 0xd1f, 0xc}, {0x1cf, 0x5, 0x5}, {0x7ff, 0x9, 0x744c01d5, 0x9}, {0xb89, 0x0, 0xc, 0x400005}, {0x29a71717, 0xfffffffa, 0xfffffffe, 0x80000000}, {0xc, 0x5, 0x2, 0x7}, {0x0, 0xb1a, 0xe7, 0x30001}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d420000000000000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$WSDISPLAYIO_GVIDEO(r1, 0x40045744, &(0x7f00000003c0)) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x6, 0x6}) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) read(r3, &(0x7f0000000140)=""/67, 0x43) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x1a3, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0x2, 0xb}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) mmap(&(0x7f00000aa000/0x3000)=nil, 0x3000, 0x6, 0x10, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000040)='.\x00') open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x79) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1, 0x0}, 0x42) 460.326764ms ago: executing program 3 (id=1633): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x5) ioctl$DIOCMAP(0xffffffffffffffff, 0xc0106477, 0x0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000780)={0x1, [{0x1, 0x7ff}, {0x0, 0x3}, {0x1, 0x7ffb}, {0x1, 0xd}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x9}, {0x0, 0x6000000}, {0x3, 0x2}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x1, 0x8000}, {0x2, 0x2000007}, {0x1, 0xfffffffd}, {0x1}, {0x3}, {0x2, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x0, 0x3}, {0x0, 0xb0}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x3, 0x10004}, {0x3, 0xfffffa7f}, {0x1, 0x40}]}) bind$unix(0xffffffffffffffff, 0x0, 0x0) openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xc0104451, &(0x7f0000000740)={0x5, 0x408, 0x3fc, 0x2000, "0000000000fb000000000000b34445f0388a19a0", 0x33c3300a, 0x2}) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) r3 = msgget$private(0x0, 0x730) msgrcv(r3, 0x0, 0x0, 0x1, 0x0) msgsnd(r3, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) socket(0x18, 0x2, 0x0) setuid(0xffffffffffffffff) r4 = open(&(0x7f0000000300)='./file0\x00', 0x80, 0x101) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x4}, {0x1d}, {0x8106}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000001c0)="cac73ce119f42809f7c30824a593551ffe", 0x11}], 0x1}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r5, 0xc038694e, &(0x7f00000001c0)) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000240)}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) read(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, 0x0) sendmmsg(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3}, 0x10, 0x0) 452.675555ms ago: executing program 2 (id=1634): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r0, 0x802069a1, &(0x7f00000001c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x80) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x20) 419.23435ms ago: executing program 7 (id=1635): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x3, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xa0, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe97b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad238a7317e73650b8b125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98606e472b70b560f7021f567adf4d", 0x5d) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000040)={0x80000000, 0x80000000}) 418.885467ms ago: executing program 3 (id=1636): setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1021, &(0x7f0000000000)=0x5, 0x3) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r0, 0xc0104419, &(0x7f0000000000)={0x2, 0x2, 0xf, 0x2000, "01d04b0a00ff02000000000b00", 0x7, 0x7}) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) ioctl$VMM_IOC_RUN(r1, 0xc0205602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) msgsnd(r2, 0x0, 0x401, 0x0) msgrcv(r2, &(0x7f0000000000)={0x0, ""/19}, 0x1b, 0x1, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgsnd(r2, &(0x7f0000000100)={0x1}, 0x8, 0x800) execve(0x0, 0x0, 0x0) msgget$private(0x0, 0x0) msgctl$IPC_RMID(r2, 0x0) sysctl$kern(&(0x7f0000001b40)={0x1, 0x48}, 0x2, &(0x7f0000001b80)="29298e", &(0x7f0000001c00)=0x3, 0x0, 0x0) 415.179771ms ago: executing program 6 (id=1637): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xf}, 0x4, &(0x7f0000000100)="7ba9a99b", &(0x7f0000000b00)=0x4, &(0x7f0000000b40)='\b\x00\x00\x00', 0x4) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x7c, 0xa, 0x6, 0x84}, {0x46, 0xb, 0x5, 0x7}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 248.021568ms ago: executing program 6 (id=1638): r0 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x100000008}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, 0xffffffffffffffff, 0x100000001) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000403}) recvmmsg(r0, &(0x7f00000015c0)={&(0x7f0000001580)={&(0x7f00000000c0)=@un=@file={0x0, ""/59}, 0x3d, &(0x7f0000000500)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000440)=""/156, 0x9c}], 0x5, &(0x7f0000000580)=""/4096, 0x1000}, 0x2}, 0x10, 0x1002, &(0x7f0000001600)={0xff1, 0xf}) open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) (async) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x1, 0x0, 0x8, 0x100000008}) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x13, 0xffffffffffffffff, 0x100000001) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000403}) (async) recvmmsg(r0, &(0x7f00000015c0)={&(0x7f0000001580)={&(0x7f00000000c0)=@un=@file={0x0, ""/59}, 0x3d, &(0x7f0000000500)=[{&(0x7f0000000100)=""/86, 0x56}, {&(0x7f0000000180)=""/97, 0x61}, {&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000340)=""/204, 0xcc}, {&(0x7f0000000440)=""/156, 0x9c}], 0x5, &(0x7f0000000580)=""/4096, 0x1000}, 0x2}, 0x10, 0x1002, &(0x7f0000001600)={0xff1, 0xf}) (async) 247.209934ms ago: executing program 7 (id=1639): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000001c0), 0x782, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x22}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000000)={0x240, 0x401}) execve(0x0, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$TIOCSETA(r1, 0xc4504440, &(0x7f00000001c0)={0x2000001, 0x800, 0xe, 0x9, '\x00\x00?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x2000009, 0x4}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x1, 0x3ff, 0x7, 0x2, "f5270262b1ff9475dd46381a503b1b128d9ba757", 0x80000001, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000200)="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", 0xb1, 0xe, 0x0, 0x78) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setuid(0xee01) r4 = semget(0x0, 0x1, 0x281) semctl$GETZCNT(r4, 0x2, 0x7, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x3a366294) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e570400"/151, &(0x7f0000000180)=0x97, &(0x7f0000000340)="82d796bd644dcc9b361f9444ec2b59602142e312b361d895", 0x18) r5 = msgget$private(0x0, 0x5bd) msgsnd(r5, 0x0, 0x1008, 0x0) msgrcv(r5, &(0x7f0000000080)={0x0, ""/104}, 0x70, 0x0, 0x0) 244.355752ms ago: executing program 2 (id=1640): r0 = syz_open_pts() (async) socket(0x13, 0x3, 0x2) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x10, &(0x7f0000000240)=0x5, 0x2) (async) ioctl$TIOCSETA(r1, 0xc450444a, &(0x7f0000000000)={0xffff0000, 0xfffffffb, 0xfefffffc, 0xfffefffc, "0800000000060000000100002a1e0400", 0x5}) r3 = open$dir(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) (async) r4 = open(&(0x7f0000000480)='./file0\x00', 0x2, 0x4ebfac6bbaf7949) ioctl$VNDIOCCLR(r4, 0xc0a86b06, &(0x7f0000000200)={0x0, 0x10000, 0x0}) (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000240)={0x0, 0x0, 0x13, 0x0, "523cb3c8b9129c9e242fd505aac10ff300", 0x0, 0xfffffffc}) poll(&(0x7f0000000180), 0x0, 0x2) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x0, 0x0, 0xfffffffc, 0xcdcf, "1a2198b59b58505f40edabfaffffece900", 0x0, 0xc}) (async) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x3a, 0x0, @multicast1, @loopback}}}}}}) (async, rerun: 64) ioctl$TIOCSTSTAMP(r4, 0x8008745a, &(0x7f00000000c0)={0x7, 0x5}) (rerun: 64) 243.063508ms ago: executing program 3 (id=1641): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 64) r0 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) listen(r0, 0x4) (async, rerun: 64) r1 = socket$unix(0x1, 0x5, 0x0) (async, rerun: 64) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async) mkdir(&(0x7f0000000180)='./file1\x00', 0x84) (async, rerun: 64) unveil(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='c\x00') (async, rerun: 64) connect$unix(r1, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) accept$unix(r0, &(0x7f0000000000)=@file={0x0, ""/27}, &(0x7f0000000080)=0x7e) (async, rerun: 64) r3 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) recvfrom$unix(r3, &(0x7f00000002c0)=""/4096, 0x1000, 0x43, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa) unveil(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000080)='r\x00') (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) getsockname$inet(r2, &(0x7f0000001380), &(0x7f00000013c0)=0xc) sendto$unix(r4, &(0x7f00000012c0)="2a932569a2784441636a19bfe80e51767307779a239be950eb6a71ea515a8a7d997266db114124fe56858b20755391d3a9bab4c5f274937012a785e5807a659c5cd3f33ecbf367d0c5b3c69fe3ab061543ee48c1f08648b554223a67fa1dba56ef3860ff1938e8eef2722b6ae95b8688df5be44efbf9df1d633b1a45a88f4b87740fa562836f5fd72ea622c84f4abaa8ff4be2787e1e2423b19a", 0x9a, 0xc, &(0x7f0000000240)=@abs={0x1, 0x0, 0x2}, 0x8) (async) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') 99.022908ms ago: executing program 2 (id=1642): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f0000000740)={0x1ff, 0xffff, 0x101, 0x105, "040009100000000000004800", 0x9, 0xfffffffe}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="468a0c80f2a2e8893964b04e2220b859c7", 0x11}, {&(0x7f00000000c0)="fa7e484145a3bccfe5ca1e137e5c50646b67534390f349d7895e05c14d587ec5da379fe58871e3de54ccfad9fa4b97f8c76215", 0x33}, {&(0x7f0000000100)="baf78907d3862ee1a53b9b55f9afcce06350d27752fdbd9fd51df5294d7a10047bdb34bfe39f3954ced2febce3d41443c17172b3c2ddc93b7998b789c3a9ab532fa075420639ee", 0x47}, {&(0x7f0000000180)="6d961af10d8aa9c5e3c17f037ff060a9b6005395e7bcab2d6659cad6b5f953aa269330bb8dc0e807dc1a4569fcf67be9b95072a252075043e99cb782e075ce", 0x3f}, {&(0x7f00000001c0)="60829f790ecfbf15f560fff112ee11e3a7700bb2f55db7bdb5cab60b54e78adc07c3e867d72630d8a0ed7edbf0cd3285e2aafa12ad4d51f0b8eea64e60727fac12c128a91f0662e924cf08f3653e290a0480841cd973eb2500f05b2d7aa8f6b4811d04c83c1aabb1ae7536c7226927eb63d846a8ba4b874d648d632549046092b66775d8cbd541611a72a803b7ac9356f569ab19c7875a738d9869d55e2ff9226e6c76e0089ab8", 0xa7}], 0x5) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchown(r1, 0x0, 0x0) close(r1) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0xc) setegid(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 97.634268ms ago: executing program 6 (id=1643): mmap(&(0x7f00002f2000/0xf000)=nil, 0xf000, 0x4, 0x4011, 0xffffffffffffff9c, 0x1) getppid() pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fcntl$getown(r0, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) shutdown(0xffffffffffffffff, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x3, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) kevent(r2, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0xaa, 0xf27ff7791bbc9c0f, 0xfd, 0x13fff}], 0x1, 0x0, 0xfffffff8, 0x0) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000400)='./bus\x00', 0x8000, 0x0}) mmap(&(0x7f00002f2000/0xf000)=nil, 0xf000, 0x4, 0x4011, 0xffffffffffffff9c, 0x1) (async) getppid() (async) pipe(&(0x7f00000001c0)) (async) fcntl$getown(r0, 0x5) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async) kqueue() (async) kevent(r2, &(0x7f0000000000)=[{{}, 0xfffffffffffffff6, 0x3, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) (async) kevent(r2, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0xaa, 0xf27ff7791bbc9c0f, 0xfd, 0x13fff}], 0x1, 0x0, 0xfffffff8, 0x0) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) (async) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000400)='./bus\x00', 0x8000, 0x0}) (async) 97.20073ms ago: executing program 3 (id=1644): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x42) setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) getrusage(0xffffffffffffffff, &(0x7f0000000100)) (async) getrusage(0xffffffffffffffff, &(0x7f0000000100)) ftruncate(r0, 0x40000000007) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x400}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa5fbb8af09d4886dd66e2294500243308fe8000000000000000000000000000aa0000000000eb"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x8, &(0x7f00000003c0)={0x42, 0x61}) (async) setrlimit(0x8, &(0x7f00000003c0)={0x42, 0x61}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) (async) r3 = open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) ioctl$TIOCSFLAGS(r3, 0x8004745c, &(0x7f0000000300)=0xf5f) recvmmsg(r1, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x2000, 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80, 0x50) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x7ec}) syz_open_pts() (async) r5 = syz_open_pts() close(r5) syz_open_pts() (async) r6 = syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000000)={0x7fffffff, 0x6def, 0xffffdf82, 0xfdfffffc, "1826283e680021d5ff7f0d01fd04000004400800", 0x800}) writev(r5, &(0x7f0000000040)=[{&(0x7f00000001c0)="117384167f2033a20d95aa5820fed3e6b3cdfac938093822264ab0bccbfd4ef8860e4f1b90bd23fb982cab1101c766e2626267939000f1f29f4525d64141a3152bb6807a921e70db92f69302b5cf2ad9f0d10a76c3d88ef0d5e86028c5ff5755", 0x60}, {&(0x7f00000002c0)="f888308d051ee60544a7a3ec35e710cd7108c8ef23509fb131f092d4c5f967df9935035a04c8fdbbee64a949face53c0fd4e9cb9b227ba90b3e8dd90c889b7f30acd662c15ce788866e6ebea6bd6404f32a0b349ade0f18de249a6b8a85c3a8ad91a0af244cae3c1d9b951acd82ae64ac1ab6a452aa86ebaa03b63254c5dd70732baf83fd07970", 0x87}, {&(0x7f00000005c0)="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", 0x1a8}, {&(0x7f00000009c0)="205480bf5c4c134cb3fec38d14a7b3b79b4647987cf37da175d33e102819acc7bf748484821208bd6c175e2b0c09915aa42f9efb25e16d39a4e7d05dae03587b773ee923775f0bd11ee57e666679a23c7012b248be9d944c190e1ce14f18af1e43263d8650e0d819365c33ad8ca2e98faa3f2e8087e70c833420ea5f4e907e04ccf998b78f259b5d3067a730c2a09b19a28bf47a052830dff52ce5317eb3c90237b2ff0ee2657608214d62a07f10117738aca34ccda096bc818058ee340bcfa86485cbe34ca1199d04d066e4", 0xcc}, {&(0x7f00000008c0)="8ad55f95c8be480ce46b48144573fec3683182580f6204bab868dd59bef401f1a649b3e2c11dc15b87426b7deb72379710a47b1725fb0cbd3eff8e43898675488aeb51ceb8e35a626744bce788acd35ec89d0ead7adf56e53505d43002c75fd19e00b5289aadc98938fe35cf069fff255c5affc8d515b377b068bf5e4e84ebb8a43d3e4178e0e293c9a7150b6c8560a7", 0x90}, {&(0x7f00000013c0)="e663344ce8cd893732d1367c7a28828f2e7730488f7de97d2208a8988f58d65e15e9e3f7ced99e117f718537317bbb0168", 0x31}], 0x6) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x20, 0x0) (async) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x20, 0x0) 78.696713ms ago: executing program 0 (id=1645): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000440)='./file0\x00', 0xa6) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) r1 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) fchmod(r1, 0x1bf) setuid(0xffffffffffffffff) rename(&(0x7f0000000140)='.\x00', &(0x7f0000000000)='./file2/file0\x00') ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = semget(0x0, 0x1, 0x281) semctl$GETALL(r2, 0x0, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, 0xc) r5 = getuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0xc) fchownat(r1, &(0x7f00000003c0)='./file0\x00', r5, r6, 0x3) r7 = getgid() semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000340)={{0x8, r3, 0x0, r4, r7, 0x42, 0x5}, 0x5, 0x5, 0x6}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000180)={0x5, &(0x7f0000000040)=[{0x2d, 0x3, 0x0, 0x15}, {0x8, 0x40, 0x2, 0x7}, {0x2, 0x40, 0x81, 0x40}, {0x87, 0x6b, 0xaa, 0x6}, {0x6, 0x4, 0xfe, 0x5}]}) write(r0, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) select(0x40, &(0x7f0000000280)={0xa454, 0x1000044809e9d, 0xffffffffffffffff, 0x4000000000000001, 0x1ffffffffffffffc, 0x1819, 0x8, 0x6}, 0x0, 0x0, 0x0) r8 = kqueue() kevent(r8, &(0x7f0000000500)=[{{r8}, 0xfffffffffffffffc, 0x60, 0x7eeaaf1534ed1399, 0x5, 0x8}, {{r1}, 0xfffffffffffffff9, 0x50, 0x20, 0x1, 0x8}, {{r0}, 0xfffffffffffffffc, 0x104, 0x80, 0xf, 0x6}, {{}, 0xfffffffffffffffb, 0x80, 0x1, 0x80000001, 0x6}, {{r1}, 0x2, 0x80, 0x10, 0xfff, 0x6000000}, {{r8}, 0xfffffffffffffff8, 0x0, 0x20000000, 0x3c96, 0x9}, {{}, 0xffffffffffffffff, 0x10, 0x1, 0xfffffffffffffffd, 0x8000000000000000}], 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') 77.392787ms ago: executing program 7 (id=1646): open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d1", 0x3}], 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0x8}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x4bb6}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000556000/0x4000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001cf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000212000/0x1000)=nil, &(0x7f0000826000/0x1000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000501000/0x1000)=nil, 0x4}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000027000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xd}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000012e000/0x2000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7, 0x20000, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x1}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) close(r3) socket(0x18, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x20000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x23f) setreuid(0xee00, 0x0) r4 = getuid() setreuid(0x0, r4) r5 = shmget$private(0x0, 0x2000, 0x208, &(0x7f0000402000/0x2000)=nil) shmctl$IPC_SET(r5, 0x1, 0x0) shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x3000) shmdt(0x0) connect$unix(r2, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r6 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r6, 0x0) mprotect(&(0x7f000013b000/0x4000)=nil, 0x4000, 0x1) socket(0x1, 0x2, 0x0) 77.084428ms ago: executing program 3 (id=1647): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000008c0)="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", 0x333}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="3800847f0ee238462b2bc7ca41000000000000ffff00000100000060169c8551c748dc20463f823b090f764637dd7a8de6f3b56fa0f15e389eed963c280b2ade39ea72a20f5b997ab6c58d2d32c313a89f1871bd144a0b8fa88c4a2e747a95d297e87139741466375888f165c256d1567e300eaef4502f81a8d230e72a71bb850c9a78a816f2e953c3d1870e996e6fbbc41c6291890ca394ee955eb6b65437be543f12c150545edc51c2b5993f610acb35e2ab56cd83b41c31fcfc2483469f4fb8f95eaa0cb3aa", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x8}, 0x7) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc0104451, &(0x7f0000000740)={0x5, 0x408, 0x3fc, 0x2000, "0000000000fb000000000000b34445f0388a19a0", 0x33c3300a, 0x2}) 76.444998ms ago: executing program 5 (id=1648): syz_emit_ethernet(0x22, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaa0000003a9078e0000001e000000100"/34]) r0 = getuid() setreuid(0xee00, r0) setuid(r0) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) lchown(&(0x7f0000000080)='./file0\x00', 0x0, r4) r5 = socket$inet(0x2, 0x3, 0x2) getsockopt(0xffffffffffffffff, 0x6, 0x10, 0x0, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2950, 0x13d4) r6 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r6, 0x0) ioctl$FIONBIO(r5, 0x8004667e, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845", 0xb) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x8}]}) socket(0x18, 0x2, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) fchown(r1, r0, r4) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="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", 0xfe) lchown(&(0x7f00000003c0)='./file0\x00', r3, r4) r7 = openat$tty(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$TIOCSFLAGS(r7, 0x8004745c, &(0x7f0000000380)) getppid() sysctl$kern(&(0x7f0000000000)={0x1, 0x5}, 0x2, &(0x7f0000000180)="f3c6c064bb7ad9066a88dc8034660dcf4ff6e71d9975c4b72109375d7e2102a1ae59d8c15e290af2909ef1d88b1e0c3e891227c443c457e2d8caef8682549acd84b09048bb99e20f33b0c15cd8bce1661c66599f6b4fc43b07bb3aabdcc8605881483c5916109c9d0da101d9c8ce8ba2380c6ea2fbb7", &(0x7f0000000200)=0x76, &(0x7f0000000240)="6b04825a293eebe3633f269a88c80efa6e0bcb800c701cd7a242bece138afefc4972ec362b0dc0e90c7cbfd0f684467401eb8735139b6878065415b681bc9c0c53960eb31e79a4e776bc437e1ed4ed61", 0x50) 1.04768ms ago: executing program 3 (id=1649): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) r2 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x7, 0xd, &(0x7f0000000100)="177080908a72916619cbcf95a43cdce03466ad44f81622f55eb4e11c2d0eb0e6820b61dab2c9d67b61b60fc48cd211b4b15b778afe9ff172a4b2ca1f6e1b7789674b6df15775e3427ec382e2b426d311e369262027f4e30e1e4babe4a27af789ffc7840f4213f8a4e4367dd628a18215a75783513c0545305ba5cd4b1d3cdd638b01c780968464f4bdd79bcac9fbb66ef03c093067c59d3d06438b53f4b834661208aee217c26ae4b6eee17ce874bbc22f", 0xb1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000080)={0x8000000000000000, 0x0, 0x6, 0x402, 0x8000000000000001, 0x3, 0x3, 0xb}, &(0x7f00000001c0)={0x3, 0x7fffffffffffffff, 0x400, 0x7, 0xffffffff, 0x7fffffffffffffff, 0x1, 0x9}, &(0x7f0000000200)={0x3, 0xd, 0x4, 0x3, 0x8b, 0x1, 0x1, 0x43d9}, &(0x7f0000000240)={0x7b, 0x1}) getsockopt(r1, 0xfffffff9, 0x9, &(0x7f00000002c0)=""/4096, &(0x7f0000000000)=0x1000) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f00000000c0)="559bed48", 0x4) ioctl$FIOASYNC(r1, 0x8004745d, &(0x7f0000000280)=0x1) mknod(&(0x7f00000012c0)='./file0\x00', 0x6000, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) (async) socket(0x18, 0x3, 0x0) (async) setsockopt(r0, 0x7, 0xd, &(0x7f0000000100)="177080908a72916619cbcf95a43cdce03466ad44f81622f55eb4e11c2d0eb0e6820b61dab2c9d67b61b60fc48cd211b4b15b778afe9ff172a4b2ca1f6e1b7789674b6df15775e3427ec382e2b426d311e369262027f4e30e1e4babe4a27af789ffc7840f4213f8a4e4367dd628a18215a75783513c0545305ba5cd4b1d3cdd638b01c780968464f4bdd79bcac9fbb66ef03c093067c59d3d06438b53f4b834661208aee217c26ae4b6eee17ce874bbc22f", 0xb1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) select(0x40, &(0x7f0000000080)={0x8000000000000000, 0x0, 0x6, 0x402, 0x8000000000000001, 0x3, 0x3, 0xb}, &(0x7f00000001c0)={0x3, 0x7fffffffffffffff, 0x400, 0x7, 0xffffffff, 0x7fffffffffffffff, 0x1, 0x9}, &(0x7f0000000200)={0x3, 0xd, 0x4, 0x3, 0x8b, 0x1, 0x1, 0x43d9}, &(0x7f0000000240)={0x7b, 0x1}) (async) getsockopt(r1, 0xfffffff9, 0x9, &(0x7f00000002c0)=""/4096, &(0x7f0000000000)=0x1000) (async) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f00000000c0)="559bed48", 0x4) (async) ioctl$FIOASYNC(r1, 0x8004745d, &(0x7f0000000280)=0x1) (async) mknod(&(0x7f00000012c0)='./file0\x00', 0x6000, 0x10) (async) 0s ago: executing program 4 (id=1650): setitimer(0x1, &(0x7f0000000000)={{0xfffffffffffffffe, 0xa}, {0x7f, 0xb8a}}, &(0x7f0000000040)) setuid(0xffffffffffffffff) (async) setuid(0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x3, 0xc, 0xca, 0x81ac, 0x10001, 0x10, [{0x1, 0x3, 0x4, 0x1}, {0x5, 0x9, 0x8, 0x7}, {0x100, 0x8, 0x0, 0x9}, {0x1, 0x800, 0x8027}, {0x2, 0x200727, 0x2800, 0x7}, {0x1, 0x651, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x9, 0x803, 0x14, 0x4000008}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1d, 0x4}, {0x1ca, 0x5, 0xc, 0x2}, {0x8, 0x4009, 0x8, 0x8}, {0x1, 0x7, 0x8, 0x2}, {0x101, 0xeffffffa, 0x1, 0x6}, {0xc, 0x5, 0x5}, {0x0, 0x6, 0xfff, 0x30004}]}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) (async) setuid(0xee01) r3 = syz_open_pts() fchmod(r3, 0x0) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r2}}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000240)={0x9d, 0x2}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error vnd0: sloppy read from proc 43725 (syz-executor): blkno 0 bcount 45 vnd0: sloppy read from proc 49022 (syz-executor): blkno 0 bcount 4096 pckbd_enable: command error in6_pcbnotify: Huh? Thought we never got called with mapped! pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error wskbd0: can't attach mux (error=5) denied attempt to set clock forward to 13622313412984832 uvn_flush: obj=0xfffffd805ea799e8, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error fuse: Cannot find fusebuf pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: uvn_flush: obj=0xfffffd805ea80cf8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost!       OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error  @uvm_fault(0xfffffd80605e33f8, 0x0, 0, 1) -> e fatal page fault in supervisor mode trap type 6 code 0 rip ffffffff81577d98 cs 8 rflags 10207 cr2 0 cpl 0 rsp ffff800034009920 gsbase 0xffff8000299edff0 kgsbase 0x0 panic: trap type 6, code=0, pc=ffffffff81577d98 Starting stack trace... panic(ffffffff833a20e5) at panic+0x1d0 kerntrap(ffff800034009870) at kerntrap+0x30b alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800001481000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,81,2000,ffff8000ffff2d08) at dtclose+0x109 spec_close(ffff800034009a20) at spec_close+0x466 VOP_CLOSE(fffffd8061bf1c08,81,fffffd80097fb548,ffff8000ffff2d08) at VOP_CLOSE+0x132 vn_closefile(fffffd805d52a1f0,ffff8000ffff2d08) at vn_closefile+0x12b fdrop(fffffd805d52a1f0,ffff8000ffff2d08) at fdrop+0x121 closef(fffffd805d52a1f0,ffff8000ffff2d08) at closef+0x192 fdfree(ffff8000ffff2d08) at fdfree+0x116 exit1(ffff8000ffff2d08,0,0,1) at exit1+0x576 sys_exit(ffff8000ffff2d08,ffff800034009d90,ffff800034009ce0) at sys_exit+0x1a syscall(ffff800034009d90) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e9262b60be0, count: 242 End of stack trace. WARNING: SPL NOT LOWERED ON SYSCALL 83 1398932480 EXIT 0 4 Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *207030 11260 0 0x10 0 1 syz-executor 270102 84696 0 0x2 0 0 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x7c506afdb440, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd80605e33f8, 0x0, 0, 1) -> e ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7c506afdb440, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff800039821340 rbx 0 rdx 0 rcx 0xffff800039814568 rax 0x3b r8 0xffff800039821270 r9 0x1 r10 0x58c1f712a39e9ce0 r11 0x1cd54b14b513f502 r12 0 r13 0 r14 0xffff800039814568 r15 0 rip 0xffffffff813a73ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff8000398212c0 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=207030 pid=11260 tcnt=2 stat=onproc flags process=10 proc=0 runpri=86, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800039814800,0xffff800039814aa8 process=0xffff80003c424e90 user=0xffff80003981c000, vmspace=0xfffffd80605e3210 estcpu=36, cpticks=4, pctcpu=0.0, user=2, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 485 113990 49505 0 2 0 syz-executor 485 303692 49505 0 3 0x4000080 fsleep syz-executor 74146 163595 33625 0 3 0 kmmaplk syz-executor *11260 207030 76009 0 7 0x10 syz-executor 11260 225374 76009 0 3 0x4000090 fsleep syz-executor 31384 184530 7647 0 2 0 syz-executor 31384 173970 7647 0 2 0x4000000 syz-executor 31384 120376 7647 0 3 0x4000080 fsleep syz-executor 57261 336314 67549 0 2 0 syz-executor 57261 130140 67549 0 3 0x4000080 fsleep syz-executor 57261 312658 67549 0 3 0x4000080 fsleep syz-executor 57261 49066 67549 0 3 0x4000080 fsleep syz-executor 99217 190759 0 0 3 0x14200 acct acct 68048 130403 1 0 3 0x100083 ttyin getty 76009 318469 4567 0 3 0x82 nanoslp syz-executor 66271 342701 0 0 3 0x14200 bored sosplice 7647 282956 4567 0 3 0x82 nanoslp syz-executor 37336 133511 4567 0 3 0x82 nanoslp syz-executor 33625 330700 4567 0 3 0x82 nanoslp syz-executor 49505 67105 4567 0 3 0x82 nanoslp syz-executor 67549 282444 4567 0 3 0x82 nanoslp syz-executor 79597 218730 4567 0 3 0x82 nanoslp syz-executor 84696 270102 4567 0 7 0x2 syz-executor 4567 427327 4819 0 3 0x82 kqread syz-executor 4819 518932 70872 0 3 0x10008a sigsusp ksh 70872 406823 97686 0 3 0x98 kqread sshd-session 97686 215546 75433 0 3 0x92 kqread sshd-session 75433 335460 1 0 3 0x88 kqread sshd 61453 338288 74865 74 3 0x1100092 bpf pflogd 74865 179059 1 0 3 0x80 sbwait pflogd 50856 216416 73291 73 3 0x1100090 kqread syslogd 73291 157349 1 0 3 0x100082 sbwait syslogd 3285 140436 1 0 3 0x100080 kqread resolvd 9173 407955 0 0 3 0x14200 bored smr 87483 91871 0 0 2 0x14200 zerothread 52837 354464 0 0 3 0x14200 aiodoned aiodoned 38250 116029 0 0 3 0x14200 syncer update 63511 355439 0 0 3 0x14200 cleaner cleaner 4472 27154 0 0 3 0x14200 kmmaplk reaper 79824 358683 0 0 3 0x14200 pgdaemon pagedaemon 9943 472867 0 0 3 0x14200 bored viomb 76188 193515 0 0 3 0x40014200 acpi0 acpi0 18972 118197 0 0 3 0x40014200 idle1 33510 307088 0 0 3 0x14200 bored softnet7 9024 524143 0 0 3 0x14200 bored softnet6 96173 147090 0 0 3 0x14200 bored softnet5 32834 467492 0 0 3 0x14200 bored softnet4 75649 110195 0 0 3 0x14200 bored softnet3 23197 169272 0 0 3 0x14200 bored softnet2 13898 197350 0 0 3 0x14200 bored softnet1 7180 391441 0 0 3 0x14200 netlock softnet0 50679 266829 0 0 2 0x14200 systqmp 42317 35262 0 0 3 0x14200 bored systq 63386 516468 0 0 3 0x14200 tmoslp softclockmp 92494 102376 0 0 3 0x40014200 tmoslp softclock 44291 323961 0 0 3 0x40014200 idle0 1 16745 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10221 11077K 11229K 166960K 12480 0 pcb 18 16K 17K 166960K 448 0 rtable 161 10K 12K 166960K 526 0 pf 39 18K 67486K 166960K 461 0 ifaddr 33 5K 8K 166960K 145 0 ifgroup 55 2K 3K 166960K 279 0 sysctl 4 1K 9K 166960K 23 0 counters 68 36K 38K 166960K 318 0 ioctlops 0 0K 5K 166960K 1861 0 iov 0 0K 28K 166960K 188 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1400 88K 89K 166960K 2676 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 5K 13K 166960K 25 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 67 0 dirhash 12 2K 2K 166960K 48 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 110K 166960K 1810 0 sigio 0 0K 0K 166960K 93 0 proc 66 83K 164K 166960K 746 0 subproc 72 4K 4K 166960K 82 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 202 0 in_multi 63 4K 7K 166960K 173 0 ether_multi 1 0K 0K 166960K 17 0 mrt 2 0K 0K 166960K 10 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 103 466K 466K 166960K 103 0 exec 0 0K 1K 166960K 753 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 215 143K 187K 166960K 18385 0 UVM aobj 39 4K 6K 166960K 47 0 pinsyscall 36 72K 102K 166960K 2952 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 112 0 NDP 12 0K 2K 166960K 105 0 temp 84 8656K 8772K 166960K 71380 0 kqueue 8 13K 32K 166960K 392 0 SYN cache 2 8K 16K 166960K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 170 0 169 1 0 1 1 0 8 0 rtentry 176 150 0 92 5 0 5 5 0 8 0 unpcb 144 1409 0 1399 12 6 6 6 0 8 5 syncache 336 11 0 11 3 2 1 1 0 8 1 tcpqe 32 3 0 3 2 2 0 1 0 8 0 tcpcb 736 728 0 719 25 21 4 13 0 8 3 arp 136 16 0 8 1 0 1 1 0 8 0 ipq 40 1 0 1 1 1 0 1 0 8 0 ipqe 40 3 0 3 1 1 0 1 0 8 0 inpcb 328 2064 0 2052 31 24 7 20 0 8 5 nd6 144 21 0 9 1 0 1 1 0 8 0 pkpcb 40 14 0 14 3 3 0 1 0 8 0 kcovpl 48 9 0 1 1 0 1 1 0 8 0 mppekey 1024 2 0 2 2 2 0 1 0 8 0 ppxss 1192 97 0 97 2 1 1 1 0 8 1 pppxif 1504 13 0 13 4 3 1 2 0 8 1 pfstscr 40 9 0 8 2 1 1 1 0 8 0 pffrag 232 15 0 9 1 0 1 1 0 482 0 pffrnode 88 8 0 4 1 0 1 1 0 8 0 pffrent 40 38 0 31 1 0 1 1 0 8 0 pfosfp 40 1430 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1430 0 714 21 0 21 21 0 8 0 pfrktable 1344 18 0 18 1 1 0 1 0 8 0 pfanchor 1288 9 0 3 1 0 1 1 0 8 0 pftag 88 6 0 4 1 0 1 1 0 8 0 pfstitem 24 172 0 62 1 0 1 1 0 8 0 pfstkey 128 181 0 71 4 0 4 4 0 8 0 pfstate 384 176 0 67 13 2 11 11 0 8 0 pfrule 1344 35 0 30 2 1 1 2 0 8 0 rttmr 136 2 0 2 2 2 0 1 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 625 0 321 28 8 20 28 0 8 0 art_table 40 628 0 321 5 0 5 5 0 8 0 art_node 32 143 0 94 1 0 1 1 0 8 0 sysvmsgpl 40 17 0 12 1 0 1 1 0 8 0 semapl 112 65 0 55 1 0 1 1 0 8 0 shmpl 112 44 0 8 2 0 2 2 0 8 0 dirhash 1024 42 0 25 3 0 3 3 0 8 0 dino2pl 256 4864 0 3349 97 1 96 96 0 8 0 ffsino 296 4864 0 3349 118 0 118 118 0 8 0 nchpl 144 7357 0 6824 64 31 33 64 0 8 8 rtmask 32 24 0 24 3 2 1 1 0 8 1 uvmvnodes 80 5541 0 0 114 0 114 114 0 8 0 vnodes 216 5541 0 0 308 0 308 308 0 8 0 namei 1024 24065 0 24065 2 1 1 2 0 8 1 percpumem 16 174 0 125 1 0 1 1 0 8 0 pfiaddrpl 120 5 0 5 1 1 0 1 0 8 0 kstatmem 264 176 0 148 4 1 3 3 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 6 0 6 4 3 1 1 0 8 1 scxspl 216 40665 0 40665 12 11 1 7 1 8 1 plimitpl 152 355 0 338 1 0 1 1 0 8 0 sigapl 424 2114 0 2062 7 0 7 7 0 8 0 knotepl 120 557 0 0 17 0 17 17 0 8 0 kqueuepl 224 685 0 676 8 3 5 5 0 8 4 pipepl 344 282 0 254 3 0 3 3 0 8 0 fdescpl 528 2085 0 2057 3 0 3 3 0 8 0 filepl 160 12540 0 12331 24 10 14 20 0 8 3 lockfpl 104 599 0 598 1 0 1 1 0 8 0 lockfspl 48 250 0 249 1 0 1 1 0 8 0 sessionpl 144 34 0 26 1 0 1 1 0 8 0 pgrppl 48 56 0 40 1 0 1 1 0 8 0 ucredpl 104 2031 0 2019 1 0 1 1 0 8 0 zombiepl 144 2404 0 2402 1 0 1 1 0 8 0 processpl 1232 2114 0 2062 5 0 5 5 0 8 0 procpl 664 4989 0 4929 9 2 7 7 0 8 1 sosppl 168 16 0 16 3 2 1 1 0 8 1 sockpl 752 3731 0 3707 41 25 16 26 0 8 13 mcl64k 65536 26 0 0 4 0 4 4 0 8 0 mcl16k 16384 7 0 0 1 0 1 1 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 9 0 0 2 0 2 2 0 8 0 mcl4k 4096 123 0 0 16 0 16 16 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 32 0 0 4 0 4 4 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 1173 0 0 72 0 72 72 0 8 0 bufpl 280 15782 0 9639 440 0 440 440 0 8 0 anonpl 32 11541 0 0 93 0 93 93 0 246 0 amapchunkpl 152 62469 0 62011 48 20 28 32 0 158 6 amappl16 200 6090 0 6043 49 35 14 28 0 8 8 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 140 0 131 1 0 1 1 0 8 0 amappl13 176 5 0 5 1 1 0 1 0 8 0 amappl12 168 2760 0 2732 4 1 3 3 0 8 0 amappl11 160 50 0 42 1 0 1 1 0 8 0 amappl10 152 5 0 4 1 0 1 1 0 8 0 amappl9 144 262 0 261 2 1 1 1 0 8 0 amappl8 136 23 0 21 1 0 1 1 0 8 0 amappl7 128 120 0 110 1 0 1 1 0 8 0 amappl6 120 194 0 190 1 0 1 1 0 8 0 amappl5 112 128 0 121 1 0 1 1 0 8 0 amappl4 104 358 0 340 1 0 1 1 0 8 0 amappl3 96 10905 0 10819 4 1 3 3 0 8 0 amappl2 88 2384 0 2321 2 0 2 2 0 8 0 amappl1 80 16908 0 16398 16 2 14 15 0 8 0 amappl 88 17351 0 17192 5 0 5 5 0 92 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 8 0 8 2 2 0 1 0 8 0 dma128 128 256 0 256 3 2 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 46 0 8 1 0 1 1 0 8 0 uaddrrnd 24 2085 0 2057 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2085 0 2057 1 0 1 1 0 8 0 vmmpekpl 168 18565 0 18528 2 0 2 2 0 8 0 vmmpepl 168 135594 0 133881 112 24 88 112 0 357 3 vmsppl 488 2084 0 2057 6 2 4 5 0 8 0 rwobjpl 80 41409 0 35026 132 1 131 131 0 8 0 pdppl 4096 4178 0 4114 112 44 68 86 0 8 4 pvpl 32 19666 0 0 160 1 159 159 0 265 0 pmappl 256 2084 0 2057 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 382 0 83 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8379dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff83892960) at __mp_lock+0x1a3 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff83892960) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x38 __mp_lock(ffffffff83892960) at __mp_lock+0x1a3 end trace frame: 0xffff80002a325790, count: 0 ddb{0}> trace x86_ipi_db(ffffffff8379dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff83892960) at __mp_lock+0x1a3 softintr_dispatch(2) at softintr_dispatch+0x125 dosoftint(2) at dosoftint+0x54 Xsofttty() at Xsofttty+0x27 __mp_lock(ffffffff83892960) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x38 __mp_lock(ffffffff83892960) at __mp_lock+0x1a3 __mp_acquire_count(ffffffff83892960,1) at __mp_acquire_count+0x58 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 rw_do_enter_write(ffffffff83983380,0) at rw_do_enter_write+0x1dc vm_map_lock_ln(ffffffff83983298,0,0) at vm_map_lock_ln+0x12e uvm_map(ffffffff83983298,ffff80002a325a20,6000,0,ffffffffffffffff,0,2c16123701448f9e) at uvm_map+0x404 km_alloc(6000,ffffffff836fe5f0,ffffffff836c5588,ffffffff836c5600) at km_alloc+0x20d uvm_uarea_alloc() at uvm_uarea_alloc+0x52 fork1(ffff80002a2c2548,1,ffffffff8295fd60,0,ffff80002a325bb0,0) at fork1+0x315 syscall(ffff80002a325c60) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72f9c80811d0, count: -24 ddb{0}> machine ddbcpu 1 Stopped at savectx+0xae: movl $0,%gs:0x688 savectx() at savectx+0xae end of kernel end trace frame: 0x7c506afdb440, count: 14 ddb{1}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7c506afdb440, count: -1