last executing test programs: 14.240537054s ago: executing program 3 (id=1212): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) sysctl$hw(&(0x7f0000000200)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08009078ac1400bbffffff00000000000000087800"/42]) socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) setuid(0xee01) pipe(&(0x7f00000001c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) sysctl$hw(&(0x7f00000002c0)={0x6, 0x5}, 0x2, &(0x7f0000000300)="dd7838279594220277b784b5494f0c011469dfff24afeb40c72cfdbcc596831df3455573d10382e9d6ff6410e38322e34b91b52c3ea1dacace932f2719cc483439a73cdc14d0", &(0x7f0000000400)=0x46, &(0x7f0000000540), 0x0) r3 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) poll(&(0x7f0000000000), 0x35, 0x0) close(r3) (async) close(r3) syz_extract_tcp_res(0x0, 0x8, 0x400) (async) syz_extract_tcp_res(0x0, 0x8, 0x400) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) dup2(r0, r0) (async) dup2(r0, r0) 11.972954122s ago: executing program 3 (id=1212): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) sysctl$hw(&(0x7f0000000200)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08009078ac1400bbffffff00000000000000087800"/42]) socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) setuid(0xee01) pipe(&(0x7f00000001c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) sysctl$hw(&(0x7f00000002c0)={0x6, 0x5}, 0x2, &(0x7f0000000300)="dd7838279594220277b784b5494f0c011469dfff24afeb40c72cfdbcc596831df3455573d10382e9d6ff6410e38322e34b91b52c3ea1dacace932f2719cc483439a73cdc14d0", &(0x7f0000000400)=0x46, &(0x7f0000000540), 0x0) r3 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) poll(&(0x7f0000000000), 0x35, 0x0) close(r3) (async) close(r3) syz_extract_tcp_res(0x0, 0x8, 0x400) (async) syz_extract_tcp_res(0x0, 0x8, 0x400) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) dup2(r0, r0) (async) dup2(r0, r0) 9.568391168s ago: executing program 3 (id=1212): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) sysctl$hw(&(0x7f0000000200)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08009078ac1400bbffffff00000000000000087800"/42]) socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) setuid(0xee01) pipe(&(0x7f00000001c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) sysctl$hw(&(0x7f00000002c0)={0x6, 0x5}, 0x2, &(0x7f0000000300)="dd7838279594220277b784b5494f0c011469dfff24afeb40c72cfdbcc596831df3455573d10382e9d6ff6410e38322e34b91b52c3ea1dacace932f2719cc483439a73cdc14d0", &(0x7f0000000400)=0x46, &(0x7f0000000540), 0x0) r3 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) poll(&(0x7f0000000000), 0x35, 0x0) close(r3) (async) close(r3) syz_extract_tcp_res(0x0, 0x8, 0x400) (async) syz_extract_tcp_res(0x0, 0x8, 0x400) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) dup2(r0, r0) (async) dup2(r0, r0) 7.847627733s ago: executing program 5 (id=1584): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000000)="232116499ef7a8a926a60946013c69d3951ec32ffcb69979327b5367c17973d823ec2e29a372b254247b8ff82e29a32929269f11e06e3f52fa7bddf1096536b48e1d205b227c78cf0d8ece3ade1ea3f12858a9630a", 0x55}], 0x1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x40) 7.704418278s ago: executing program 5 (id=1590): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x3, 0x4) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) setuid(0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xfffffffffffffea9) r4 = getegid() setgid(r4) setregid(r3, r4) setuid(r2) 7.470454114s ago: executing program 7 (id=1593): sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="d244c2199ecaef91f051bd0a7313b5f61e788d2c5a41469b4bca93eabd25523f473e063843046db9da882e2db3efc60416e9c42882ef805d20f203e31c33e7eafa0f114dcdef960d98ecdb6b17c16aac45abd3ee1e981abc26a0244cf85b9fe06dfdebf9b2fdf222879d26ce99b63b2ae7dee7c597feab144265c59b0f767d0c391c025e0f2c0046ff2f2d3f0eb424fc8cc5819d13ee6e867c3cb93bb05af082b65f645913ca7f912e6dd9e8c3ee49f7590949f7977d59950ff2192a048d2f22e1", 0xc1) r0 = kqueue() kevent(r0, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffff8, 0xc1, 0x2, 0x0, 0x1}, {{r0}, 0x0, 0x10, 0x4, 0x10, 0xfffffffffffffb62}, {{r0}, 0xfffffffffffffffa, 0x2, 0x7800000a, 0x3, 0x896}, {{r0}, 0xfffffffffffffffc, 0x4, 0x20000000, 0x7fff}, {{r0}, 0xfffffffffffffff8, 0x10, 0x4, 0x310, 0x8}, {{r0}, 0xfffffffffffffffa, 0x8, 0x8, 0x5, 0xf}], 0x96, &(0x7f0000000380), 0xfffb4161, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000180)={0x10000000, 0x2, 0xfffffffe, 0x2f, "28001800e40000004000030200", 0x9, 0x2}) 7.462781414s ago: executing program 5 (id=1595): r0 = open(&(0x7f00000003c0)='./file0\x00', 0x20, 0x10c) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) setitimer(0x0, 0x0, &(0x7f0000000080)) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x2}}) r1 = socket(0x18, 0x1, 0x0) sysctl$net_inet_tcp(0x0, 0x26, &(0x7f00000000c0)="00edffffff00000000", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r1) r2 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r2, &(0x7f0000000100)="2b83f53798deee3880e07f1ad1d4cfc9d60b85c2486f08ece51bab5c092cc899f3", 0x21) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1002, &(0x7f0000000140)=0x7, 0x4) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r4 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) r5 = socket(0x800000018, 0x1, 0x0) bind$unix(r5, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x7, 0xe6b, {0x3, 0x2}}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x29}, 0x5, 0x0, 0x0, 0x0, 0x45) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sendto(r0, &(0x7f00000001c0)="0015ece1aa14afb7e5ae6caa9cefee43987709e10cd430d14a7b92c7931ce9c3621c8f70771d593ffe5424b8db07", 0x2e, 0xc, 0x0, 0x0) write(r3, &(0x7f0000001ac0)="db0455bafad7aad9df70389d0869b5fb59f64d3040b679ab9516c09ab89109487ae6d42d433709512c7d43db95c056a28654229167d3361cd74eb4995108b79b2378d0e5cf25b4539b601378f3b6d0625880f798406748f7d3c7c5104d5539fb9ad1299d487b3205f1aeda4def7de6f0fc653abe52dd31fb46a123199ffab36b021d278340903fa5a4862f81ae5dae7f", 0x90) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0x5, 0x3b, 0x8, 0x1000}, {0x30, 0x5, 0x5a, 0x61b09}, {0x406, 0x4, 0x5b, 0xfffffff1}]}) recvmsg(r4, &(0x7f0000001800)={&(0x7f0000000140)=@in6, 0xc, &(0x7f0000000680)=[{&(0x7f00000019c0)=""/206, 0xce}, {&(0x7f0000000240)=""/114, 0x72}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f0000001840)=""/207, 0xcf}, {&(0x7f00000005c0)=""/179, 0xb3}, {&(0x7f00000002c0)}], 0x8, &(0x7f0000000700)=""/187, 0xbb}, 0x2) writev(r4, &(0x7f0000000200), 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0xfffa, 0x0, 0x9, 0x7}, {0xfff, 0x70, 0x7f, 0x7fff}]}) shutdown(0xffffffffffffffff, 0x2) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000180)={0x1, 0x6, 0x0, 0x4, "5fd8fb2fe2d7e549791f9aeca037f637fe663710", 0xfc000000, 0x14}) 7.45351203s ago: executing program 7 (id=1596): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x7}, {0x2, 0xff03}, {0x1, 0xd57}, {0x0, 0x2800}, {0x3}, {0x3, 0x1}, {0x0, 0xaa59}, {0x3, 0x5}, {0x1, 0x1}, {0x3, 0x100}, {0x1, 0x1}, {0x3, 0x80000000}, {0x2, 0x3}, {}, {0x1, 0x5}, {0x1, 0xffffffff}, {0x3, 0x1}, {0x3}, {0x3, 0xfffffffe}, {0x3, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0xf205}, {0x2, 0xffffff}, {0x1, 0x1}, {0x0, 0x1ff}, {0x3, 0x2}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x3}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x78, 0x66, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x1, @multicast1}, @icmp=@parameter_prob={0xc, 0x1, 0x0, 0x0, 0xc, 0x0, {0x17, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x1, 0xf0, @multicast1, @rand_addr=0x6, {[@generic={0x0, 0x7, "67e7907b2e"}, @lsrr={0x83, 0xb, 0x4, [@local={0xac, 0x14, 0x0}, @loopback]}, @rr={0x7, 0xf, 0x9, [@empty, @empty, @rand_addr=0x2]}, @lsrr={0x83, 0x17, 0x10, [@broadcast, @multicast2, @broadcast, @local={0xac, 0x14, 0x0}, @loopback]}, @timestamp={0x44, 0x10, 0x0, 0x0, 0x9, [{[], 0x6}, {[@multicast2], 0x301}]}]}}}}}}}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f0000000340)='./file0/file0/..\x00', &(0x7f0000000380)='./file0/file0/..\x00') unlink(&(0x7f0000000080)='./file0\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0xd}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) 7.319106166s ago: executing program 5 (id=1598): sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) sysctl$net_inet_carp(&(0x7f0000000300)={0x4, 0x2, 0x70, 0x4}, 0x4, &(0x7f0000000440)="a01a56f0a918e901fac08dbece2a0a7d58ea129fef109dd3b251dd540c79dcef2d23d55a1df4a69907b0328b9e30ad57f59704917d1b083d77e614a5207bd40ba8e90a757b5c6dc48c36eec3c3f1c262106a90a31fabf6b89620b52a3b848db4424dcd4add6bdca7cf190971792c81168958e5c3c721700889c04d0d7c16e0623c15508424c7a8632aa0ad97b8048b5613ab97f71b79412b3098b4a82f7c5da0f71c17239e74e505f2aee507f68d9463d7fe70affe2e1b23ac1e79e59aa1d479170d4af4dac29b", &(0x7f0000000340)=0xc7, &(0x7f0000000540)="5a1083734208260827c5268b33d5237bb3d001b04b5128d339b40e2edc58299313613a6f43dd36002e8e9ec985b14b5678a7d4f9d6f9946d4a4b6ab0e24aa70e4a554dfb466629c11125dcf3703c010fa90697d243453a176dd060996d35a58d4dedb55feed62332c29d29cdff1549c6fd7e1dfa361770752fad98bda1bd0dd1ae4a80913c6a6aecc91f6219d50b0e543267e51daebb7bb8a957e241e1b77cbfcbec9d337215d83475", 0xa9) sysctl$net_inet_carp(&(0x7f0000000140)={0x4, 0x2, 0x70, 0x4}, 0x4, &(0x7f0000000180)="998095ea99a55f16685fc203bfaae7bc6747811e43a3222beb596b4e18b3c296ebffe59f15c162afe56095e6a771d7d6dec46ee2bb3776f0ad3137e332c552b203fda06bfa6fddcd2dba44a2e708ab9b7f53964c3841f4aa438482769baf5669cb5ff670b4e628d1dcb82bd73847a153032335da82806df01e394def3cb83e7c1f6a7f0bd5358b1fd3fb7548645876256aa70348c852c639dd48b9bbbc77aab12a", &(0x7f0000000240)=0xa1, &(0x7f0000000280)="bc1f6214694da664a16fdbb25909be74b74ed9717008eb4fd9910011baf0cbf17692910c7c4d0c126b9b279a4522d824e3c79291dfbc509467634731c0112aec185f1b77e9d1fa7acf1a76688e96e66c683e949abe43897cc30f843b677705c7", 0x60) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r0, 0xffff, 0x1, 0x0, 0x0) link(0x0, &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000180)={0x2, 0x10000007, 0xffffffff, 0x403, "000000000a00000f000000aff0338a6b4fc6d700", 0x8, 0x3}) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f0000000400)={0x10000000, 0x2, 0xfffffff6, 0x2f, "28001800000268ab62de8006000000004000", 0x6, 0x2}) 7.316989851s ago: executing program 5 (id=1599): syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605b6ad90030370000040000000000000000000000000000ff02000000000000000000000000000102009078000000006006c32e04060600fe8000000000000000000000000000aa00000000000000000000000000000001"]) (async) r0 = syz_open_pts() write(r0, &(0x7f0000000040)="ace544792e7f892ace42da7053", 0xd) (async) r1 = kqueue() kevent(r1, &(0x7f0000000180)=[{{r1}, 0xfffffffffffffffa, 0x96, 0x1, 0x2, 0x3}, {{r1}, 0xffffffffffffffff, 0x1, 0x40000000, 0xfffffffffffffff1, 0x7fd}], 0x2, 0x0, 0x2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000000)={&(0x7f0000000140)='./file0\x00', r2, 0x2}) (async, rerun: 32) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) (rerun: 32) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000300)={0x3, &(0x7f00000000c0)=[{0x5, 0x4, 0x6}, {0x2c, 0x7f, 0x5b}, {0x16, 0x4, 0x5b, 0xfffffff1}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB]) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="64e1629b6174d08850c78fe609e9600d2e0b"]) (async, rerun: 64) close(r2) execve(0x0, 0x0, 0x0) (async) r4 = shmget$private(0x0, 0x1000, 0x260, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x2000) (async, rerun: 32) shmat(r4, &(0x7f0000389000/0xc000)=nil, 0x0) (async, rerun: 32) mkdir(&(0x7f0000000100)='./file0\x00', 0x49) (async) syz_extract_tcp_res(&(0x7f0000000000), 0x81, 0x7fffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) (async) rename(&(0x7f0000000100)='./file0\x00', 0x0) 7.206571571s ago: executing program 2 (id=1603): sysctl$vm(&(0x7f0000000180)={0x2, 0xc}, 0x2, &(0x7f0000000280)="89d09775fe", &(0x7f0000000380)=0x5, &(0x7f00000013c0)="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", 0x102) mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0xda) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x20000, 0x0) fcntl$setown(r0, 0x6, 0x0) 6.99049592s ago: executing program 3 (id=1212): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) sysctl$hw(&(0x7f0000000200)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08009078ac1400bbffffff00000000000000087800"/42]) socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) setuid(0xee01) pipe(&(0x7f00000001c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) sysctl$hw(&(0x7f00000002c0)={0x6, 0x5}, 0x2, &(0x7f0000000300)="dd7838279594220277b784b5494f0c011469dfff24afeb40c72cfdbcc596831df3455573d10382e9d6ff6410e38322e34b91b52c3ea1dacace932f2719cc483439a73cdc14d0", &(0x7f0000000400)=0x46, &(0x7f0000000540), 0x0) r3 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) poll(&(0x7f0000000000), 0x35, 0x0) close(r3) (async) close(r3) syz_extract_tcp_res(0x0, 0x8, 0x400) (async) syz_extract_tcp_res(0x0, 0x8, 0x400) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) dup2(r0, r0) (async) dup2(r0, r0) 5.295021322s ago: executing program 2 (id=1607): r0 = syz_open_pts() fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x1, 0x0, 0x200000000000001c, 0x1000003fd}) r1 = open$dir(&(0x7f0000000040)='./file1\x00', 0x3e0, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x101fffff9}) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1000300000000}) flock(r0, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(r0, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x100000001}) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) 5.288824723s ago: executing program 7 (id=1610): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) execve(0x0, &(0x7f00000001c0)=[0x0, 0x0, &(0x7f00000000c0)=')\xf4\x00'], 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r1, 0x80206982, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = fcntl$dupfd(r0, 0x2, r0) close(r2) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x6}, 0x4, &(0x7f0000000080), 0x0, 0x0, 0x0) r4 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x3}, 0x8) setsockopt$sock_int(r4, 0xffff, 0x200, &(0x7f0000000080)=0x83, 0x4) setsockopt$sock_int(r2, 0xffff, 0x1023, 0x0, 0x0) 5.141436315s ago: executing program 7 (id=1611): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x400001, 0x7, 0x3, 0x3, 0x80002001, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x3}, {0x7, 0x4, 0xc, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x8, 0xb, 0x7}, {0x400007, 0xfffffffd, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0xffffffff, 0x5, 0x6d}, {0x2000a, 0x9, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x3ff, 0x8001, 0xffffffff, 0x87}, {0x4, 0x5, 0xd, 0x10aeb}, {0x803, 0x40, 0x4, 0x7}, {0xe0, 0x4, 0x405, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x9, 0x7}, {0x0, 0x5, 0x4, 0x30000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x4001, 0x0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) r2 = dup2(r1, r0) ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f0000000140)={0x5, 0x0, 0x100000001, {[0x6, 0xffffffffffffff01, 0x7, 0x1000000000000c1, 0x3, 0x2e9, 0x0, 0x6, 0x8, 0x8, 0x8, 0xf, 0x22bd, 0x6, 0x4, 0x7, 0x6c3, 0x8000000000000000], [0x9, 0x4, 0x7ff, 0x101, 0x9, 0x34, 0x2, 0x100000000, 0xfff, 0x6], [0x6, 0xa, 0xbc1, 0x9a, 0x2, 0x1af2, 0x1], [0x0, 0xffffffffffffff80, 0x8001, 0x3, 0x280000000000, 0xffffffffffffff63], [{0x5, 0x4, 0x3ff, 0x49032a79}, {0x9, 0x5, 0x4, 0xfff}, {0x6, 0xe000, 0x800}, {0x401, 0x9, 0x40, 0x2}, {0x0, 0xfc8, 0x2, 0xf0}, {0x0, 0x400004, 0x401, 0x4}, {0x1, 0xb, 0xfffffffa, 0x3}, {0x0, 0x1ff, 0x8, 0x7}], {0xfff7, 0xa0, 0x75, 0x100000000}, {0x1, 0x6, 0x0, 0x5}}}) r3 = socket(0x18, 0x1, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x14}, 0x4, 0x0, 0x0, &(0x7f0000000540)="538e70243d99d3f7e90fe3591c5af924e3467f6d5e9d5777a7e587a626756fd3ba2d71a918afb41d8fa6ada5f78571a162b6dc69986110f55e5b70bb98f51d52811884b24977b5fde519a1d9277f4cd316eaf076898d783d23db472e524634c80ed5089239e4068a0a76df775ab9a8a33b686e6c830e0d9aed49f47fdbcf281cbe012115eb6427751a0c9a837eb277455a23a43c36bf2e77", 0x98) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="a7a6d61de4a16809d26255c61b4f0919d7aacd6865959cb3e86fff46c0fb2b63a099a1ce37c6891e74eaaf1aa6", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r4, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) setsockopt(r3, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) chdir(&(0x7f0000000000)='./bus\x00') sysctl$hw(&(0x7f0000000080)={0x6, 0x11}, 0x2, 0x0, 0x0, &(0x7f0000000340), 0x0) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000040)={&(0x7f0000000280)='./bus\x00', 0xb, 0x0, 0xffffffffffffffbf}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, &(0x7f0000000080)={0x1, 0x0, 0xba, 0xf277, 0x3}, 0xc) 5.133311696s ago: executing program 7 (id=1612): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000080)={0x10, 0x3, [{&(0x7f00007ab000/0x3000)=nil, &(0x7f0000ec8000/0x3000)=nil, 0x438}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000c4f000/0x4000)=nil, 0x100000001}, {&(0x7f0000a1c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000a6b000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x100000000}, {&(0x7f0000800000/0x800000)=nil, &(0x7f0000ccd000/0x1000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000831000/0x3000)=nil, 0x3}, {&(0x7f000046c000/0x2000)=nil, &(0x7f0000efd000/0x1000)=nil, 0x800}, {&(0x7f0000a98000/0x4000)=nil, &(0x7f0000a3d000/0xd000)=nil}, {&(0x7f0000d3d000/0x4000)=nil, &(0x7f0000aff000/0x1000)=nil, 0xe}, {&(0x7f0000f6a000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil, 0x4}, {&(0x7f0000795000/0x1000)=nil, &(0x7f0000ff2000/0x1000)=nil}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x3c}, {&(0x7f0000a3b000/0x1000)=nil, &(0x7f00009e6000/0x1000)=nil, 0x9}, {&(0x7f00008a0000/0x1000)=nil, &(0x7f00003b5000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f00000c6000/0x4000)=nil, &(0x7f0000c5e000/0x4000)=nil}], './file0\x00', 0x81}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VMM_IOC_CREATE(r0, 0xc2585601, &(0x7f0000000480)={0x10, 0x6, [{&(0x7f0000d96000/0x4000)=nil, &(0x7f0000d93000/0x2000)=nil, 0x5}, {&(0x7f0000e4b000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x9}, {&(0x7f0000bc0000/0x2000)=nil, &(0x7f0000f13000/0xe000)=nil, 0x6}, {&(0x7f0000ca6000/0x1000)=nil, &(0x7f0000862000/0x3000)=nil, 0x8}, {&(0x7f00009d8000/0x4000)=nil, &(0x7f0000a78000/0x3000)=nil, 0x80000001}, {&(0x7f0000eea000/0x2000)=nil, &(0x7f0000c15000/0x1000)=nil, 0x2}, {&(0x7f0000f2e000/0x2000)=nil, &(0x7f0000f6d000/0x4000)=nil}, {&(0x7f0000e7d000/0x4000)=nil, &(0x7f0000e5a000/0x2000)=nil, 0x9}, {&(0x7f00009a1000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, 0x2}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000471000/0x2000)=nil, 0x8}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c34000/0x2000)=nil, 0x1}, {&(0x7f00007ff000/0x800000)=nil, &(0x7f0000f25000/0x2000)=nil, 0x9}, {&(0x7f000096a000/0x4000)=nil, &(0x7f0000b81000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ebb000/0x1000)=nil, &(0x7f0000fcc000/0x1000)=nil, 0x4}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1}], './file0\x00', 0x7}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r1, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x80, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r2, 0xf3) setuid(0xffffffffffffffff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0) r3 = syz_open_pts() ioctl$TIOCSTAT(r3, 0x20007465, 0x0) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000040)=0x8) execve(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x8) execve(0x0, 0x0, 0x0) r4 = socket(0x800000018, 0x3, 0x0) setsockopt(r4, 0x1000000000029, 0x35, &(0x7f0000000000)="c04a1190", 0x4) r5 = socket(0x18, 0x3, 0x1) setsockopt$sock_cred(r5, 0xffff, 0x1022, 0x0, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSFILDROP(r6, 0x80044279, &(0x7f0000000180)=0x2) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[]) 5.131708006s ago: executing program 0 (id=1614): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2006, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000001, 0x7, 0x3, 0x71000}, {0x101, 0x8, 0xa}, {0x5, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x6, 0x4, 0xb7}, {0x401, 0x8, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x806, 0x9, 0x16, 0xb}, {0xffffffff, 0x8, 0x7, 0x3}, {0x4, 0x7, 0x93, 0x202}, {0xb, 0xffff, 0x7ff, 0xffff}, {0x9, 0x2c, 0x9, 0x4000005}, {0xb8c, 0x404, 0x80000003, 0x405}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0x1f92, 0x6, 0x3ff}, {0xfffffffd, 0x800bc3d, 0x4, 0x30005}]}) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r1 = open(0x0, 0x80, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x80, 0x80002357) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd12) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x180) mmap(&(0x7f00001a3000/0x1000)=nil, 0x1000, 0x2, 0x2012, r1, 0x5ea) 4.877264539s ago: executing program 4 (id=1620): open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) acct(&(0x7f0000000280)='./bus\x00') syz_emit_ethernet(0x22, &(0x7f0000000040)={@random="8d7eaa32cc8a", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3a, 0x0, @multicast1, @multicast1}}}}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5f}, 0x2, &(0x7f00000002c0)="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", &(0x7f0000000000)=0xea, 0x0, 0x2b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000100)={0x1, 0x2}, 0x2, 0x0, 0x0, &(0x7f0000000080)="33108a5b", 0x4) mprotect(&(0x7f00005bf000/0x1000)=nil, 0x1000, 0x0) acct(&(0x7f0000000040)='./bus\x00') r0 = socket(0x18, 0x3, 0xff) getsockopt(r0, 0x29, 0x1a, 0x0, 0x0) sysctl$hw(&(0x7f0000000040)={0x7, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) 4.876854899s ago: executing program 0 (id=1621): openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x420, 0x0) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2000005, 0x1, 0x9, 0xd4, 0x7, 0x81, 0x0, 0x10, [{0xfe5, 0x7, 0x0, 0x80000000}, {0x7, 0x4, 0x0, 0x30a}, {0x10000004, 0xf86, 0x4000000, 0x80040005}, {0x200008, 0x60000000, 0x807, 0x1000000}, {0x6, 0x8000b, 0x811, 0xcb}, {0x9, 0x1, 0x8, 0x800009c}, {0x8, 0xffffffff, 0x1003, 0x3fa2}, {0x5, 0x10000803, 0x14, 0x8}, {0x1d7, 0x81, 0x1, 0x9}, {0xa, 0x8001, 0x8}, {0x5, 0xfff7}, {0x803, 0x80040, 0x4, 0x34}, {0xe1, 0x424, 0x7, 0x3}, {0xffff0354, 0xfffffffa, 0x10001, 0x100006}, {0x0, 0x6, 0x1, 0x1ffffffd}, {0x0, 0x1, 0x1, 0xc3}]}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x2, 0xffff}, {0x18, 0x0, 0x5, 0x1}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0xca) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x3) 4.870334173s ago: executing program 0 (id=1622): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) (async) r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) ioctl$FIOASYNC(r1, 0x400474c4, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, 0x0) dup(r2) (async) r3 = dup(r2) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) kqueue() (async) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r6 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r6, 0xc018696c, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r6, 0xc018696c, &(0x7f00000001c0)) r7 = kqueue() kevent(r7, &(0x7f0000000040)=[{{r7}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, &(0x7f0000000100), 0x5, 0x0) kevent(r7, &(0x7f00000002c0)=[{{r7}, 0xfffffffffffffffa, 0x96, 0x1, 0x2, 0x3}, {{}, 0xffffffffffffffff, 0x1, 0x80, 0xfffffffffffffff1, 0x7fd}, {{}, 0xfffffffffffffffd, 0x80, 0x40000000, 0x7, 0xdf7d}], 0x2, 0x0, 0x2, &(0x7f00000000c0)={0x1, 0x3ff}) kevent(r7, &(0x7f0000000000), 0x3ff, 0x0, 0x80007fd, 0x0) mknodat(r3, &(0x7f0000000080)='./bus\x00', 0x2000, 0x81) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r8 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r8, 0x80206979, &(0x7f0000000100)) (async) ioctl$FIONREAD(r8, 0x80206979, &(0x7f0000000100)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40) (async) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40) ioctl$BIOCSDLT(r3, 0x8004427a, &(0x7f00000001c0)) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f0000000000)={0x3, 0x4, 0x9, 0x1405, "080400000000000000010000000100", 0x4917, 0x7}) (async) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f0000000000)={0x3, 0x4, 0x9, 0x1405, "080400000000000000010000000100", 0x4917, 0x7}) 4.867603846s ago: executing program 3 (id=1212): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) sysctl$hw(&(0x7f0000000200)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08009078ac1400bbffffff00000000000000087800"/42]) socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) setuid(0xee01) pipe(&(0x7f00000001c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) sysctl$hw(&(0x7f00000002c0)={0x6, 0x5}, 0x2, &(0x7f0000000300)="dd7838279594220277b784b5494f0c011469dfff24afeb40c72cfdbcc596831df3455573d10382e9d6ff6410e38322e34b91b52c3ea1dacace932f2719cc483439a73cdc14d0", &(0x7f0000000400)=0x46, &(0x7f0000000540), 0x0) r3 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) poll(&(0x7f0000000000), 0x35, 0x0) close(r3) (async) close(r3) syz_extract_tcp_res(0x0, 0x8, 0x400) (async) syz_extract_tcp_res(0x0, 0x8, 0x400) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) dup2(r0, r0) (async) dup2(r0, r0) 4.765586139s ago: executing program 4 (id=1625): r0 = socket(0x800000018, 0x2, 0x0) r1 = socket(0x18, 0x8000, 0x0) r2 = accept(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x8) dup2(r2, r2) setsockopt$sock_int(r1, 0xffff, 0x200, &(0x7f00000000c0)=0x2, 0x4) socket(0x6, 0x3, 0x7) r3 = openat$wsmuxmouse(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, &(0x7f0000000040)={0x3, 0x1c}) listen(r3, 0xfffffffe) 2.822867631s ago: executing program 4 (id=1628): writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x1}, {0x16, 0x7e, 0x0, 0x800ee68}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="721d729f4c114fb801b203000000000000005329225ed442fffe8b79d1e4ff07f4a7000000000000008a3487000002362c72c56d369a1bba2b8a82a74772afb67534ebd8949cd6092b386373542253a51560f0f576d7d8ffac90f541", 0x5c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="fbffffffe4af47c050f528e6d683428a29084edd11a71ac7679bbee86f01800000bb0000000000000000a265c17159c340de0ded119acfae03952144013dd2410ac1bf9422d4b9b801cde41e53fef8a1f6382cdbd13db1ef45659d76c47549f2ea0f54f4", &(0x7f0000000000)=0x64, 0x0, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) bind$unix(0xffffffffffffff9c, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa) syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[]) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x5, 0x80000001, 0xb, 0x0, "0000000000000000000090896f7f00", 0x1}) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) 2.82236276s ago: executing program 0 (id=1629): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8060693d, &(0x7f0000000100)) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)="22ab507e0d5a6fa31d70f0861930ffe75d92e9221eb387e100a38e644af21d037efd03dfda4727b6da1a8b0a86ecf51cff", 0x31) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504448, &(0x7f0000000740)={0x101, 0x4, 0x80002, 0x200, "63742200000000000000009280c9795a6b47c1d1", 0x8000}) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r4, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r4, 0x0, 0x6d, 0x0, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) syz_emit_ethernet(0x22, &(0x7f0000000040)={@random="8d7eaa32cc8a", @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3a, 0x0, @multicast1, @multicast1}}}}}) 2.821238512s ago: executing program 1 (id=1630): sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="d244c2199ecaef91f051bd0a7313b5f61e788d2c5a41469b4bca93eabd25523f473e063843046db9da882e2db3efc60416e9c42882ef805d20f203e31c33e7eafa0f114dcdef960d98ecdb6b17c16aac45abd3ee1e981abc26a0244cf85b9fe06dfdebf9b2fdf222879d26ce99b63b2ae7dee7c597feab144265c59b0f767d0c391c025e0f2c0046ff2f2d3f0eb424fc8cc5819d13ee6e867c3cb93bb05af082b65f645913ca7f912e6dd9e8c3ee49f7590949f7977d59950ff2192a048d2f22e1", 0xc1) r0 = kqueue() kevent(r0, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffff8, 0xc1, 0x2, 0x0, 0x1}, {{r0}, 0x0, 0x10, 0x4, 0x10, 0xfffffffffffffb62}, {{r0}, 0xfffffffffffffffa, 0x2, 0x7800000a, 0x3, 0x896}, {{r0}, 0xfffffffffffffffc, 0x4, 0x20000000, 0x7fff}, {{r0}, 0xfffffffffffffff8, 0x10, 0x4, 0x310, 0x8}, {{r0}, 0xfffffffffffffffa, 0x8, 0x8, 0x5, 0xf}], 0x96, &(0x7f0000000380), 0xfffb4161, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000180)={0x10000000, 0x2, 0xfffffffe, 0x2f, "28001800e40000004000030200", 0x9, 0x2}) 2.820928032s ago: executing program 2 (id=1631): kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x12, 0x1, 0x3}], 0x1000000, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) socket(0x18, 0x2, 0x0) setegid(0xffffffffffffffff) sysctl$net_inet_ipip(&(0x7f0000000400), 0x4, 0x0, 0x0, 0x0, 0x0) setregid(0x0, 0xffffffffffffffff) socket(0x18, 0x2, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f}, 0x40a) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x400, 0x6, 0x0, 0x0, 0x200000001, 0x1, 0x6, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x8f) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000140)={0x0}) semget$private(0x0, 0x0, 0x20) 2.820356887s ago: executing program 6 (id=1632): socket$unix(0x1, 0x2, 0x0) sysctl$vm_swapencrypt(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) sysctl$vm_swapencrypt(&(0x7f0000000200)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000480)="7acfd482338a6798c7f3f397819c105e9e3a49b5ae66ab5b22436eeb3d13b40867e63bbe8d7186e7fe05031c2e99eb1ede72bada0158a2452b0c4359d38450e5262a9a8b442a4cb7271504c73f533b8d26d15b7b971b9e12f822852c75e05a8d46139dc546142192af7fc2826c0282941759011ed9f8fc827ee267c5ee3e0456a26e8d98cf751e1ea97701303caaa65ddd87f05396548fdfc21652b6cb5b9954feecc6930fec09b972632e7369d4051f95aff6", &(0x7f0000000240)=0xb3, &(0x7f0000000540)="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", 0xff) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0}) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) setitimer(0x0, &(0x7f00000003c0)={{0x7, 0x8}, {0x0, 0xc1e}}, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x80}, {0x0, 0x4}}, 0x0) setitimer(0x2, &(0x7f0000000000)={{}, {0x0, 0xe9db}}, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) 2.698491819s ago: executing program 6 (id=1633): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r0 = socket(0x800000018, 0x1, 0x0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x18, 0x6, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4) (async) chroot(&(0x7f00000002c0)='./file0/file0\x00') getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') (async) bind$unix(r0, 0x0, 0x0) (async) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80146952, &(0x7f00000001c0)) 2.695214562s ago: executing program 6 (id=1634): r0 = getuid() setreuid(0xee00, r0) r1 = shmget(0x0, 0x3000, 0x760, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000400)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x11, 0x800}, 0x2, 0x3, 0x0, 0x0, 0x9aa9, 0x7ff}) (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0xd, r0, 0x0, 0x0, 0x0, 0x90, 0x8}, 0x1, 0x743, 0x0, 0x0, 0x200, 0x400040, 0x3}) (async) getgroups(0x7, &(0x7f0000000080)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff]) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async) shmctl$SHM_UNLOCK(r1, 0x4) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r2, &(0x7f00000004c0)=[{&(0x7f00000007c0)="7f4549b70cb7a21de87373791810aaa95d576a0ac7fca22709002987b881794ffa08bb11bafcdc202a2940aaae682605080088be73fd6c631e055d0000000000", 0x40}], 0x1) (async, rerun: 32) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (rerun: 32) 2.694121109s ago: executing program 1 (id=1635): syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @random="d09b049f6b63", [], {@ipv6={0x86dd, {0x0, 0x6, "36d2b5", 0x38, 0x3a, 0xf9, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@dest_unreach={0x1, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "5f7f00", 0x0, 0x2c, 0xfe, @loopback, @remote={0xfe, 0x80, '\x00', 0x0}, [@fragment={0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x66}]}}}}}}}) mquery(&(0x7f0000574000/0x4000)=nil, 0x4000, 0xe042d1cca0787017, 0x10, 0xffffffffffffffff, 0x9) r0 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000040)=0x101, 0x4) readv(r0, &(0x7f0000000180), 0x0) 2.69372534s ago: executing program 1 (id=1636): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)='\t\x00', 0x2) socket$unix(0x1, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) 2.693365379s ago: executing program 2 (id=1637): r0 = getgid() setegid(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) socket(0x2, 0x3, 0x2f) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="04010000ffff000001"], 0x104}, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfe) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0xa7090fa, 0xfd6, 0x6, 0x7, 0x17ffe, 0x10, [{0x0, 0xb1, 0x2004, 0xa24}, {0xc5c, 0xb, 0x8, 0x800}, {0x800008, 0x20f03, 0x200, 0x9}, {0x7ffffffe, 0x800, 0xba2, 0x1}, {0x3fe, 0x20007ff, 0x1002802, 0x4d8a}, {0x3, 0x20000101, 0x3, 0xb4}, {0x660, 0xd16f, 0x81e8, 0xa}, {0x4, 0x832, 0x2, 0x6}, {0x1, 0x87e, 0x5, 0x9}, {0x8, 0x90, 0x8, 0x88}, {0x1c4, 0x5, 0x4, 0x1ac8391}, {0x100003, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x7, 0xffffff93, 0x2}, {0x4, 0xffffdffa, 0xfffffffe, 0x6}, {0x6, 0x7, 0xfffffff9, 0x100}, {0xfffffffe, 0x8, 0x3, 0xc}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() select(0xe, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000300)={0xcea, 0x20000, 0x80000002, 0x1, 0x1, 0x80, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x8000003, 0x5, "001a3cfcff000b00000000000000f5ff00", 0x10003, 0xc04}) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) read(r6, &(0x7f0000000200)=""/255, 0xff) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000040)={0x1, 0x0, 0x200007, 0x100000006}) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x2, 0x2, 0xffffffff00000000, 0x2fffffffc}) 2.66018947s ago: executing program 1 (id=1638): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000200)='./bus\x00', 0x1, 0x40) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000700)=ANY=[]) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) mkdirat(r0, &(0x7f0000000340)='./bus\x00', 0x0) close(r2) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) chroot(&(0x7f0000000740)='.\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8) r5 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) fcntl$lock(r5, 0xb, 0x0) readv(0xffffffffffffff9c, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/33, 0x21}, {&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/46, 0x2e}, {&(0x7f0000000440)=""/24, 0x18}, {&(0x7f0000000480)=""/14, 0xe}, {&(0x7f00000004c0)=""/115, 0x73}, {&(0x7f0000000580)}, {&(0x7f0000000600)=""/189, 0xbd}], 0x8) close(r2) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES8=r4], 0x28}, 0x0) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x9, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x5, 0x8}, {0x29, 0x6, 0xb0, 0x2}}}) r6 = kqueue() sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000440), 0x0) kevent(r6, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r6, 0x0, 0x0, 0x0, 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) r7 = semget(0x0, 0x1, 0x281) semctl$GETZCNT(r7, 0x3, 0x7, 0x0) r8 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$WSKBDIO_GETMODE(r8, 0x40045714, &(0x7f0000000000)) 2.399864103s ago: executing program 4 (id=1639): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = syz_open_pts() close(r0) syz_open_pts() syz_open_pts() (async) r1 = syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0x8, 0x56}) syz_open_pts() (async) r2 = syz_open_pts() close(r2) (async) close(r2) syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f00000000c0)={0x40978b, 0x10101, 0x7, 0x506, "3b082001f78b67af9e3bb0c49d73230100040c00", 0x202, 0xf}) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000040)=0x8a) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) close(r1) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x9) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0ddf16d83885c9", 0x7}], 0x1) (async) writev(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="0ddf16d83885c9", 0x7}], 0x1) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x6) (async) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000040)=0x6) writev(r0, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef359025250129bdb3b8c172b8359eb32d47209b2a02c3b553a9b75b43b0b03", 0x2d}], 0x1) 2.388438639s ago: executing program 6 (id=1640): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x15) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x2, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffff0600", 0x4, 0x4}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r2 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) 2.308389482s ago: executing program 6 (id=1641): open(&(0x7f0000000180)='./file0\x00', 0x80, 0xd8) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) close(r0) r1 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0x6, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x7, 0xc48, 0x1000000080000000, 0x8000002a, 0xfffffffffffffffc, 0xb28f, 0x80000002, 0x61, 0x3, 0xfffffffffffffffe, 0x1, 0x200000000004, 0x4, 0xfffffffffffffff7, 0x500], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x5, 0x7ffffffd, 0x0, 0x6c, 0x0, 0x2], [0x8, 0x9, 0x3, 0x0, 0x0, 0x3000000000000, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x2, 0x8000000100000002, 0x6], [{0x7ff, 0x908, 0xffffffff, 0x7d04}, {0x6, 0x202, 0x6, 0x3}, {0x58, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1009, 0x0, 0x8, 0xfffffffffffffffe}, {0x0, 0x400, 0x80004, 0x5}, {0x8, 0x2000, 0x5, 0x4}, {0xff00, 0x0, 0x4}, {0x5f9, 0x4009, 0x1fd, 0x459}], {0x5, 0x5, 0x1, 0x849}, {0x203, 0x40010, 0x200006, 0x5}}}) kevent(r1, &(0x7f0000000180), 0xbe96, 0x0, 0xffffffff, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x2, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffff0600", 0x4, 0x4}) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}, {&(0x7f0000000100)="8733c2c418f1fb", 0x7}], 0x2) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) flock(r4, 0x8) r5 = socket$inet(0x2, 0x3, 0xfc) ioctl$FIONREAD(r5, 0x80206979, &(0x7f0000000000)) 2.2676302s ago: executing program 3 (id=1212): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0xd}, {&(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000698000/0x3000)=nil}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000c0c000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f0000d10000/0x1000)=nil, &(0x7f0000693000/0x1000)=nil, 0x80080000000000}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) (async) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="00376614e220", @random="9f7612a2675c", [{[], {0x8100, 0x5, 0x1, 0x1}}], {@arp={0x806, @generic={0xf, 0x9001, 0x6, 0x0, 0x4, @local, "", @empty, "bd64a8157de3f96d209233435737a55c"}}}}) sysctl$hw(&(0x7f0000000200)={0x6, 0x1c}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08009078ac1400bbffffff00000000000000087800"/42]) socket$unix(0x1, 0x5, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) setuid(0xee01) pipe(&(0x7f00000001c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff115, 0x80000002}, {0xfffffff3, 0xe8, 0x2, 0x2}, {0xcd5, 0x4baa, 0x4, 0x9}, {0x7, 0x1c0, 0xf, 0x2000100}, {0x4, 0x2000007, 0x5, 0xfffffffe}, {0x388d, 0x40fffd, 0x88, 0x5}, {0x10000, 0x400003, 0x20003, 0xffffffff}, {0x207, 0xffffffff, 0x4, 0x99ac}, {0x9, 0x1001, 0x4, 0x7fff}, {0x3, 0x1, 0x2, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff7}, {0x10000, 0xfffffffa, 0x1, 0xa68}, {0x401, 0xfffffffe, 0x400809, 0x400}, {0x6, 0x2, 0x2, 0x4}, {0xfffffffc, 0x3, 0x8000000, 0x7}, {0x89be5, 0x1, 0x2, 0x400}]}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) sysctl$hw(&(0x7f00000002c0)={0x6, 0x5}, 0x2, &(0x7f0000000300)="dd7838279594220277b784b5494f0c011469dfff24afeb40c72cfdbcc596831df3455573d10382e9d6ff6410e38322e34b91b52c3ea1dacace932f2719cc483439a73cdc14d0", &(0x7f0000000400)=0x46, &(0x7f0000000540), 0x0) r3 = syz_open_pts() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x44, 0x10, [{0x5, 0x3, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0xffff, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0xf, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) poll(&(0x7f0000000000), 0x35, 0x0) close(r3) (async) close(r3) syz_extract_tcp_res(0x0, 0x8, 0x400) (async) syz_extract_tcp_res(0x0, 0x8, 0x400) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) (async) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6b3ccd310014670700000000000000000000000000000011fe8000000000000000000000000000aa4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180006490780001"]) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602", 0x7a, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) dup2(r0, r0) (async) dup2(r0, r0) 2.267325038s ago: executing program 4 (id=1642): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x17) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/242, 0x16}, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x24, &(0x7f0000000180)="fd0cc085", 0x4) syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xdffdff7e, 0x1603528, "04e4577e010000010400", 0x200101, 0xffe}) writev(r3, &(0x7f0000000280)=[{&(0x7f0000001040)="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", 0x652}], 0x1) setrlimit(0x8, &(0x7f0000000980)) bind(r1, &(0x7f0000000080)=@in6={0x18, 0x0, 0xffff, 0x3}, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000640), 0x0) 2.256228562s ago: executing program 2 (id=1643): setitimer(0x0, &(0x7f0000000140)={{0x1400000000000006, 0x100800200000006}, {0x7fffffffbffdefff, 0x3ff}}, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, &(0x7f0000000080)) (async) socket(0x18, 0x3, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffff9c, 0x81205724, 0x0) (async) ioctl$BIOCSETF(r1, 0x80104267, 0x0) socket$inet(0x2, 0x8003, 0x0) (async, rerun: 64) syz_emit_ethernet(0x1000e, 0x0) (async, rerun: 64) close(r0) (async) r2 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, 0x0) (async) read(r2, &(0x7f0000000100)=""/125, 0x7d) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x3, 0x101, 0x4, 0x80002003, 0x3, 0x10, [{0x2, 0xfe3, 0x6, 0x71800}, {0x9, 0xf7fe, 0x800002, 0xb}, {0x100006, 0x0, 0x8, 0x9}, {0x2, 0x52, 0x17d, 0xfffffffa}, {0x10000, 0x0, 0x80000001, 0x6}, {0x0, 0x47ffb, 0x14000009, 0xb}, {0xfe0, 0xbffffff5, 0xffffffff, 0x6d}, {0x2000a, 0x8, 0x6, 0x4}, {0x0, 0x7, 0x8033, 0x80}, {0xf7fffbfe, 0x0, 0x8001, 0x7}, {0xa54f, 0xfff9, 0x48a, 0xe4}, {0xcb, 0x102, 0x3, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0x9, 0xfffffffc, 0xfffffff5, 0xfffffff8}, {0x6, 0xb0c9, 0x26, 0x5}, {0x1, 0xd654, 0x6, 0x6}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) r3 = socket(0x1, 0x2, 0x0) (rerun: 32) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) r4 = socket(0x18, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)}], 0x1, 0x0, 0x0, 0x406}, 0x0) (async) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) (async, rerun: 64) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fcntl$lock(r5, 0x7, &(0x7f00000019c0)={0x1, 0x0, 0x7, 0x2}) (async, rerun: 32) socket(0x1, 0x2, 0x0) (async, rerun: 32) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='.\x00') mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) 102.479968ms ago: executing program 0 (id=1644): r0 = socket(0x800000018, 0x2, 0x0) r1 = socket(0x18, 0x8000, 0x0) r2 = accept(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000080)=0x8) dup2(r2, r2) setsockopt$sock_int(r1, 0xffff, 0x200, &(0x7f00000000c0)=0x2, 0x4) socket(0x6, 0x3, 0x7) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r3, 0x80085761, 0x0) listen(r3, 0xfffffffe) 101.383378ms ago: executing program 1 (id=1645): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x20, 0x0) ioctl$KDGETLED(r0, 0x40044b41, &(0x7f0000000240)) (async, rerun: 32) setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) (async, rerun: 32) setitimer(0x1, &(0x7f0000000140)={{0x1400000000000006, 0x7}, {0x7fffffffbffdf002, 0x400}}, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r1 = socket(0x18, 0x3, 0x0) close(r1) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) (async) r3 = syz_open_pts() close(r3) syz_open_pts() (async) ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000000)={0xfffff234, 0x78c, 0x9, 0xffffffdd, "23030003be0a00817dd8910bb864d3c3a3c900", 0xffdd, 0x6}) (async, rerun: 64) poll(&(0x7f0000000280)=[{r0, 0x10}, {r0, 0x4}, {r1, 0x80}], 0x3, 0x1f) (rerun: 64) open(&(0x7f00000000c0)='./file0\x00', 0x8, 0x110) (async) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) (async) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() (async) writev(r4, &(0x7f0000000040)=[{&(0x7f00000002c0)="0002000004", 0x2a}], 0x1) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000140)={0x2000008c, 0x8, 0x403, 0xffffffdf, "87000000800000000006000800", 0x1000004, 0x2000000}) (async) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000540)=""/140, 0x8c}], 0x1) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000380)="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", 0x4d2}, {&(0x7f0000000200)="a55edb72db2a8618809684ed6e157f22ec14441e85a3183e3858c16751e98980717695cafcf59b3e5ea5a903", 0x2c}], 0x2) 101.262289ms ago: executing program 2 (id=1646): syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006000000000003a80fe800000851b030800000000000000aa"]) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005030000040005000000070000", 0xf, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) syz_emit_ethernet(0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006000000000003a80fe800000851b030800000000000000aa"]) (async) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005030000040005000000070000", 0xf, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) 95.460838ms ago: executing program 4 (id=1647): r0 = socket(0x18, 0x3, 0x0) setuid(0xee01) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000140)=0x9) ioctl$FIONREAD(r0, 0x8028698c, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "99cea6", 0x14, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, @empty}}}}}}) 95.288172ms ago: executing program 5 (id=1648): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="ed", 0x1) setuid(0x0) r2 = msgget$private(0x0, 0x0) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) msgctl$IPC_RMID(r2, 0x0) (async) msgctl$IPC_RMID(r2, 0x0) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/234, 0xea}], 0x3, 0x0}}, 0x10, 0x1040, 0x0) (async) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000600)=""/234, 0xea}], 0x3, 0x0}}, 0x10, 0x1040, 0x0) execve(0x0, 0x0, &(0x7f0000000b40)=[&(0x7f0000000b00)='\xaa\xaa\xaa\xaa\xaa']) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x95b, 0x80}, {0x3, 0x80000000}}, 0x0) 2.166173ms ago: executing program 6 (id=1649): socket(0x2, 0x3, 0x0) (async) r0 = socket(0x2, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x2) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f00000003c0)={0x0, 0x9, &(0x7f0000000380)='./file0\x00', 0x8}) close(r0) socket(0x18, 0x2, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaa75d145e54af88d94521001c00650fff00f09078ac140082ac75b05e6a4a092300081981"]) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaa75d145e54af88d94521001c00650fff00f09078ac140082ac75b05e6a4a092300081981"]) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) setsockopt(r0, 0x1000000029, 0x32, &(0x7f0000000140)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) select(0x40, &(0x7f0000000180)={0x80000000, 0x44809e9f, 0xfffffffffbffffff, 0xfffffffefffffffd, 0x2000040000000002, 0x210, 0x9454, 0x5}, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendto(r4, &(0x7f0000000b80)="79753f0c2b93f09ef01c7627e246f65ca9124fe2e4b77ae8ec4f48fcdc3cb96d7ae42e2fd2977c75b04b7d0581cae3828f2b7ba9c3e79e7ede88babb33a7f44cdc696309d20f0fcdac79a13f1129ae7fdaee567fdc73a8f86e4d9d1794721c482b9e8a46d5eba129541803cd6b543d7398f9fa8bc0137e7d9156d382f8c60f6cc5a93b463ff261e448175e3f3b806337e26f1561619a907ed796188d0edf71875e1f8c613ba7fd766c61fda5fe9b6d7b94390374556c82db7b27754ad25d0684171ae8c3bd0902f018a1657455e28b2518268d5ea4b7ab6f2e496891de9c3a28fcd794b303819d022b7e6c01e4bc8aada8e40851e7da4c27db4cc65d9ca13f6762a405277f3c8048becc8fbd2d811a848e28510714e40937970420e384d9ea2ec53d5c8b5153d0069298f4d7634065b580328d29f9908fbae48fef6ba7bcb262472ab7b325238b6d43a878763074794a2c45c9d2091c1bfad58ba03440393e63fed44a51c11913064ea1701d5ffbdc837663558ca4a8e76e67933a3ef9932200f3559082e23161cd2c7ff1f9791cd9faf89e522c29ed48542ec91e0fd45c1755a34c30f3498554c099fc3a4185fc82c2b8157b68842f304eaa964fac3649b1cea72ae9666df8687cea81ce52a5d4a430c4fab5987f23e8129e02e9dcbf1924ea0d582f28bd7a5a1f565ec7472af892d829a772360711f16b4be3e9f2172279537ca3d21796ed6e64dc178d773b984ad745f87db8975637d374946bd3a5843616fe5af568c6e770afce7433f020404e6a4bdd2568198ad0bf8d3cc096d951e8425881c2d4c330699303127c6d594732d9ce43cfefcab4db292238d81f5cad1bf3c06b52f465faba0b174cb3837b3796e8764eb62f093b02ff56979e4c5a19685767a4932723201e97b9e599bc09dc16b12c6efe546981af3f55e73a24a06d68b5645ba7243b39baf5cecf09303883dbf243f9cc0d66f17ec20e3613ceb3a244ae61425c505325588466ad63bb0173bc49c7a2b6aa79ec76fad3be03c718b4416adaff41f48be107312afc41255d2350065923b990c34df931b66eecd5269c7ff1f7b509aedd04875dcd4888e88d849d0e8d7f17278318c9e98c52615fd4411d61f22ebc3ac299465074d909c0b631a94e3d8cb99a2071579ef93706128c5b694b41df9129e9b78cfc3df93da45264fe912660d2a9ae105745e0c970190f98ae947dd36a4f2c4afc9af5b2f605a17631aa1c127367d86f315110372f375c66655c25d2da0883d94194984a6f028dbfcee989f5ce8cb8b3da0226a9504079bb3e5ddbe4222477f4eef2e8cd5e6a981ab894fb2e2db140573390806f03496976e7dac78e4a8d267af8cd647f5373c99026ba12b6cf00f93b94c018a1ec5c4e2474b09f582499dcdbbaa379c4b77de3f1af39092d2b6be1d43635fa480b16827478f3538a160215170e922ef0b071d2a85e3806721e8ddd0e5331f41df5bf313f53453976e68520ec95b46a5aa507347872e15ca7c73c5daaabe5525eb6c8d9da1cb7a66cb476157b91adfcc17e300a1f3392f3b315993ada23d7e026eb55c7ccb87b34f87869971c74345c6d40acb25970f48dfa8b02a6641d712f60869c89d78d3004127b394f491f00c643275077abd0b03a4b3bf3925498ced059e049537602266a4cc991bc2147de15a317a987ab950ca0abd4edd8531d112bc0edba17b40e79004d2293abfb624adc33f27e80005e5d297ebd54c8287a4e6403ccad8c31e78d5fa5def22117d34ea5b15df53964d6a11e9eac8d1a8c1a0f8ab3e958ea4ba71395b05167a49cc90504047843995d67bbed1f977df493da1dc941be63131756bf7b62c371b33693b9df58d8f633ee891ae8f021607297e668726e21bebb75e34ce19e9b521d64dbd5e1938313eb2ae076da5ffd78c40ead471ce997a5cd8a102a48fc62f39dc238f01f690e78da65db45fb4c20fc8160060087becc14edcfbb622349354e9bedb4924b38213ccd3325cbbcbdac9baba6e71938cc55b4abe1f71290cb7425ab1e50d5c70efe32ad520729873df577a1146727a786bc2642364012df0bfb0037d4ed13c421c68e31495f2a8b74b4fb03dd4d72820c6b4fe5e65c84300386412d0abd1299d305596d5b1b71832d3196a6fc1af9f7f5f2d7b177c2b28541c22482097f02dde81d8273a3e0a341c26192bed72c4a74084de2b980382e4938adbef7ec613f9c1db588f439d169764a63bcac47f6ab5bcbb5261ba79e28730c89fd3b2c3a5f2c2aeb04af6aaeec790d097d26549ad61eedaa0588631e3300f061138fd2a1db37cc5a694d2bc2179c66893f01f0f42c0d152840b82dab14bce1d141e81714715b2cc5018d5fb11809ea8692f847d206f00100fb16eaeacb377134c1173d54e4dab7fd60d3df73eac6a664af00cef630fcb364c5ff66cd3c22ffa68c941649c394e7326e80b22bcd0c6b0da16555461c734abd5066be79633c07ae034422de13b6a95ce3fbb59697cf6cf71895c6d88e6b791c59d0708285bd4cbeeeb8edda309d0f9e79824684635d5a2e9a779f1aaac3caa33536811ce0f164560d8e2121097e6787cee318de61ac078c75e6723bc54269cb41badcc7310e553d85d37f959b5cb9c0ee8bf148bdc61f9aa489563bc5121583d64f577e439dcb75ad1aef599eda97304363ef1f0c53986e55a76af06a1df6306e80a4eb3e795fd83c7694aad385e50c5b2e41489304dd4243d8ce7f87e07cea817670ac93b6a53da4f7d31db49a7415ec26f760c52b35e9f8cfc48471cd715ccbeae30abbe62899027139bf16990a2c3e2bdaabc98842fb28ed9a17d08261fc203e3b154f1742baa98e19e7925495868b838b893521e9a35aaa2c3c16e00c5e08c4f2c827624492a237e69ba09c69accaabd89909c2b3c460021f1582b65935e1b0c258646e595b666f65b3decc8a59d47e95aca854a66059ebdb94a315e9b66cb4409c0f643249b980a484d49948c2399cd54e4b5e40ebe381ed798d914e9072654da3cefe88431cad085918ae3097f77a30fbc006fe5e3484473acea62879eac49c1d69440056654208a98d87d27f25a8520d6288dd1c85846c3f059e3a0c2702cc6abba08edb7d6f132eacb2cb819aec245d25a0bf2364f891aa3ba1447a9d50452b60b68d4879cb71a0bc3e28dba9f6adfaa72170689bf36666cc2bc24be46cd6ee68ab5a84e43f020c72fd4862897fef531f399dd4b2f06120d89355919d756e57c1a656abba97ff1117cdde6c31e737dd8ecdc7f492702d169854012fab307914bb09683f59774ce3aa6ae9c7b593dc9065d07cfbc0bbb58126298adabf93f7f9e8af03aaa57cc9ef4b4d71cdb1224bd76c7b5b4bdf7f5832ef4eb6a193a91e5b0b971d2ea3d15c1e179c30c812b8eab001282d22bbbcc8b31ce35265ce799610ec255d0cec55a650b8352ef75d03a3fdc971d0763dd77dcdecf652143a0170831cb7c562ef051a089cbf5f2897184b8a30db3a3264d3abd940c136a2d1f26a68faf0156d3e54523084d3d188de8c6f517ef924e3efe3bbdbbeb26e975b4ee2eb7406f9adde2f9d39ebb2371d7926b46af346ed9d5db2be89ecefe8cad8fa2b820ac47741cb860d15ba4da941b794d63483f68f4e7b7e1b70df8929a95715f2f3c4b767c966cc2f44b0a3803f5a85dc439dfe04912df48e1d660b660905f1a82ba7a78a2589d9a347d6bcaf165e4a1c2d1bd2525d54d1b9dfd057ac7991a4ea7239b10efd82c51bf9cf59fb804d6b42281ebf5c7d31c3e6ded470d21179d5114e1f5a839392206fa77fa73c26e464253e659285b6f7c8ea4a65a1ec9aab9d9fb361fcbb89f6e15c526634b98bb1104fbbe15ca3a9e4dd7ea79aeb4fd18ee5bb1988b91e56e06d2cc48871592d1c01ee2b6ff94f49f1858e20d7ad4cbc4d7aaad9957e4f8a25f78d48629032943fad5c457352237f324b6fa3d726be5e204690700a82216a0d71e06a3cb77083b6fd575123c9e8db3a5d3049b6ffc84691fcbf37ea103e0819ec1fd8ae0864d3a0040f9915341f02bccc32fc6f72ee65ab307444eef782e8d02f00011bae6ef089f545c765457c3c16ebf97bdb2b4d4d8bcca2ded3717d0cf453e3d0adaec3dd61c981794001a5a06eb0dcb34dd088a6b1c77ffe3187ffb6f57da69049be3888a55566771e9b55434e47a296d00a81fbb9dc5d0eee693c2a33c0b83598d66e9ebcf7740c2fbd479a094f134ca01cd64c34cf6b5b53fe8a477a40fb9644cab4628a7895bc42b5dcda12a82049a7dad728a6b312da50cc053b9f98d5465605a4a9bff177734a65f58c62a3c47a3eb5a56c96b03178fc39b412844c540c62364e56776bd0c04b44b4863eb94a212c725a4176216652423836262f8c8db51c8888a6d3014d3e300ff32decd4c7dd8b1d9fbf2283f0849f0fe2fe325a051daea78f678b609b688adb95e09b8eb9ecf1037847eab4774f8cdc8748c22401b4c9846d04e1620025d463bff88b10c4c359d7581af253bc4530a7ca0b6d9ef48c56ce0fe22c8d0a1dfc36182caa849a0c9cafc73d7a4d800e1fa8c1df1df18f78528020df46d60979e040c691fceca0888c44500043a76aaebd3dbbca5f2548e3a59c9d24b777f8891baf7cbb0a601fd00617dc2d379bc7b517c5486efa8250a0f0e300bb8ccbf2776dd583fd048ae33ae8439f50475fa4d97006efeb6ebef52baff740567ce56b12d49fe298f003f4eef8b207dd3b3385597a6a9b95f36b7dd392869f7742644cd64b918228abbdac64626945d5217ddbe3bd7f9918257a1d2a6ebdb1df6d7ec864d6c28e144aa2fedc436d06b0ae1bd1a5eaac46a3517cf9f5a461872f4542069b1975b7c1a5f36db7b391cbff01a199eb35136cd9e4abe872cbbdabf81f02ecd17a50aa87d89f9a64fe4533bb13a1d1f9147f1fe85bab86b5bb0a9f5033bf15e6539be5d8ca176d6ba49fcdacace8b4dcea5d4dbae5dfbc4e375022b2c9c421aaaf62de2a7b3cd996b32d424eeb377629101a657239b0f0688f3e9f81839d13e6516c0997b69c1820aa72dfba97eadae0e0aa00b7bebcbf7c1057e25c47bb6bd397b7a0f93b820a964885437526e841be11", 0xe20, 0x4, &(0x7f0000000180)=@in6={0x18, 0x2, 0x5, 0x6}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x7) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r4, 0xc4504444, &(0x7f0000000740)={0x2f, 0xf, 0x1, 0x20000003, "0400091000000000000048000000000000002f00", 0xb, 0xfffffffe}) (async) ioctl$TIOCSETA(r4, 0xc4504444, &(0x7f0000000740)={0x2f, 0xf, 0x1, 0x20000003, "0400091000000000000048000000000000002f00", 0xb, 0xfffffffe}) syz_emit_ethernet(0x4e, &(0x7f0000000680)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '_j@', 0x18, 0x2c, 0xa9, @rand_addr="0200", @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x6, 0x0, 0x0, 0x5}], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x7, 0x1, 0x9, 0x3, 0x1}}}}}}) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) r5 = kqueue() kevent(r5, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f00003f1000/0x2000)=nil, 0x2000) sendmmsg(r6, &(0x7f0000000080)={0x0}, 0x6a, 0x0) (async) sendmmsg(r6, &(0x7f0000000080)={0x0}, 0x6a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffdfffffff, 0x5) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffdfffffff, 0x5) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x4) sendmsg(r2, &(0x7f0000000280)={&(0x7f0000000200)=@in={0x2, 0x2}, 0xc, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000ffff000007000000"], 0x10}, 0x8) 1.059938ms ago: executing program 7 (id=1650): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) clock_getres(0x4, 0x0) chmod(0x0, 0x2ea) r2 = accept$inet(0xffffffffffffff9c, 0x0, 0x0) socket(0x18, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r3 = socket(0x2, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000040)=0xf, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {0x0}], 0x2, 0x0}, 0xffffffff}, 0x10, 0xc3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) close(r3) getsockopt(r2, 0x8, 0x2, &(0x7f0000000240)=""/4096, 0x0) select(0x40, &(0x7f0000000200)={0x8000000000000001, 0x1615, 0x9, 0x5, 0xfff, 0x7fffffff, 0x6, 0x80}, 0x0, 0x0, 0x0) chdir(0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x4, 0xff, 0x3, 0x5}, {0x24, 0x1, 0x2, 0x1}, {0x28, 0x6, 0x53, 0xa16}, {0x9b1e, 0x2, 0xf6, 0x40007ff}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) syz_emit_ethernet(0x6e, &(0x7f0000001240)=ANY=[@ANYBLOB="aaaaaaaaaaaad09b049f6b6386dd6036d2b500383af9fe8000000000000000000000000000bbfe0600000000000000000000000000aa0102907800000000605f7f0080012cfe0000000000000700000000006b05e6051e00000001fc800000000000670f000000000000bb33000001650000003be810"]) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x1, {[0x4, 0x0, 0x40000000000006, 0x7, 0x3, 0x8000, 0xfff, 0x40000000100, 0x2, 0x6, 0x800000000d, 0x4, 0x8, 0x180, 0x5, 0x3, 0x76, 0x3], [0x5438b950, 0x8, 0x1004, 0x7, 0x9, 0x0, 0x80000000, 0x161b, 0xffffffffffffffff, 0x3], [0x4, 0x200000, 0x8, 0x8000000004, 0x45, 0x40000000000020f, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x2], [{0x5ad, 0x7, 0xfffffff9, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x8, 0xffffffff, 0xfffffffe, 0x1}, {0x4, 0x3, 0x2, 0x8}, {0x1c, 0x4, 0x0, 0x7}, {0x6, 0xffffff81, 0x1ff, 0x4}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfffb, 0x7, 0x8, 0x7fffffffffffffff}}}) syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x3a, 0x29, @rand_addr="000000000000000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0xff, 0x11, 0xc, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}}}}) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) kqueue() 337.277µs ago: executing program 0 (id=1651): r0 = socket(0x2, 0x1, 0x0) select(0x40, &(0x7f0000000080)={0x8, 0x405, 0x0, 0x7, 0xfffffffffffffffe, 0x1, 0x8000000010000000, 0x8}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0x800) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) link(&(0x7f0000000340)='./bus\x00', 0x0) close(r2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) shutdown(r0, 0x2) 0s ago: executing program 1 (id=1652): sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)="d244c2199ecaef91f051bd0a7313b5f61e788d2c5a41469b4bca93eabd25523f473e063843046db9da882e2db3efc60416e9c42882ef805d20f203e31c33e7eafa0f114dcdef960d98ecdb6b17c16aac45abd3ee1e981abc26a0244cf85b9fe06dfdebf9b2fdf222879d26ce99b63b2ae7dee7c597feab144265c59b0f767d0c391c025e0f2c0046ff2f2d3f0eb424fc8cc5819d13ee6e867c3cb93bb05af082b65f645913ca7f912e6dd9e8c3ee49f7590949f7977d59950ff2192a048d2f22e1", 0xc1) r0 = kqueue() kevent(r0, &(0x7f0000000080)=[{{r0}, 0xfffffffffffffff8, 0xc1, 0x2, 0x0, 0x1}, {{r0}, 0x0, 0x10, 0x4, 0x10, 0xfffffffffffffb62}, {{r0}, 0xfffffffffffffffa, 0x2, 0x7800000a, 0x3, 0x896}, {{r0}, 0xfffffffffffffffc, 0x4, 0x20000000, 0x7fff}, {{r0}, 0xfffffffffffffff8, 0x10, 0x4, 0x310, 0x8}, {{r0}, 0xfffffffffffffffa, 0x8, 0x8, 0x5, 0xf}], 0x96, &(0x7f0000000380), 0xfffb4161, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000180)={0x10000000, 0x2, 0xfffffffe, 0x2f, "28001800e40000004000030200", 0x9, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error wskbd0: can't attach mux (error=5) pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 WARNING: thread `nfsio' (440087) exits with status -1 WARNING: thread `nfsio' (320336) exits with status -1 WARNING: thread `nfsio' (105840) exits with status -1 WARNING: thread `nfsio' (57833) exits with status -1 WARNING: thread `nfsio' (317775) exits with status -1 WARNING: thread `nfsio' (31277) exits with status -1 WARNING: thread `nfsio' (486923) exits with status -1 WARNING: thread `nfsio' (313973) exits with status -1 WARNING: thread `nfsio' (251519) exits with status -1 WARNING: thread `nfsio' (310145) exits with status -1 WARNING: thread `nfsio' (83054) exits with status -1 WARNING: thread `nfsio' (66547) exits with status -1 WARNING: thread `nfsio' (323377) exits with status -1 WARNING: thread `nfsio' (280036) exits with status -1 WARNING: thread `nfsio' (10720) exits with status -1 WARNING: thread `nfsio' (331895) exits with status -1 WARNING: thread `nfsio' (217159) exits with status -1 WARNING: thread `nfsio' (405410) exits with status -1 WARNING: thread `nfsio' (353181) exits with status -1 WARNING: thread `nfsio' (501532) exits with status -1 uvn_flush: obj=0xfffffd8066ee30b0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error denied attempt to set clock back 1770685682 seconds #qt$_Ӎ즃 MwT dh$oyMR'ٰ4S㞉l-w ]%3AbAȩbaN@hǶ6 u?lE<a 2Ӭ}^!pg?7L+V}b]Q*y;]eѼ w/(#@e>["1ƯF8WCCSVr$|Q'4ƒ;[E=6$4 wлG_&dl11/DQ f6st/DQ9ݟ/~1ރr/-sK4 rA} }Zd^ $c)H6ew{V;[S6ˉ۽$^N4Cd'- d?~םaRϑL3*"Pzh|@D=(М.'vsMTriI9ZD.0r+\5ոex L@w&Kպ NvL uk*[J~|7:KeگԴfm?"k/`8,́F]lMSX!폤`R3vm_create: uvm_map failed: 12 denied attempt to set clock back 33554434 seconds denied attempt to set clock back 4263431301 seconds denied attempt to set clock back 33554452 seconds uvm_fault(0xfffffd806c99ad70, 0x0, 0, 1) -> e kernel: page fault trap, code=0 Stopped at dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND 117341 65643 0 0 0 0 syz-executor dt_ioctl_record_stop(ffff80000165c000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,1,2000,ffff8000fffe8020) at dtclose+0x109 spec_close(ffff80003c43da60) at spec_close+0x466 VOP_CLOSE(fffffd806d75a7c8,1,fffffd80097fd410,ffff8000fffe8020) at VOP_CLOSE+0x132 vn_closefile(fffffd80773388d8,ffff8000fffe8020) at vn_closefile+0x12b fdrop(fffffd80773388d8,ffff8000fffe8020) at fdrop+0x121 closef(fffffd80773388d8,ffff8000fffe8020) at closef+0x192 fdfree(ffff8000fffe8020) at fdfree+0x116 exit1(ffff8000fffe8020,b,0,1) at exit1+0x576 sys_exit(ffff8000fffe8020,ffff80003c43ddd0,ffff80003c43dd20) at sys_exit+0x1a syscall(ffff80003c43ddd0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f601f378a20, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806c99ad70, 0x0, 0, 1) -> e ddb{1}> trace dt_ioctl_record_stop(ffff80000165c000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,1,2000,ffff8000fffe8020) at dtclose+0x109 spec_close(ffff80003c43da60) at spec_close+0x466 VOP_CLOSE(fffffd806d75a7c8,1,fffffd80097fd410,ffff8000fffe8020) at VOP_CLOSE+0x132 vn_closefile(fffffd80773388d8,ffff8000fffe8020) at vn_closefile+0x12b fdrop(fffffd80773388d8,ffff8000fffe8020) at fdrop+0x121 closef(fffffd80773388d8,ffff8000fffe8020) at closef+0x192 fdfree(ffff8000fffe8020) at fdfree+0x116 exit1(ffff8000fffe8020,b,0,1) at exit1+0x576 sys_exit(ffff8000fffe8020,ffff80003c43ddd0,ffff80003c43dd20) at sys_exit+0x1a syscall(ffff80003c43ddd0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f601f378a20, count: -12 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c43d990 rbx 0x1 rdx 0 rcx 0xffff8000fffe8020 rax 0xffffffff837d6fd0 dt_prov_syscall r8 0xffffffffffffffff r9 0x1 r10 0x9fc669425962fbef r11 0x5065424dbb485493 r12 0 r13 0 r14 0 r15 0xffff8000016ef900 rip 0xffffffff815dc978 dt_ioctl_record_stop+0x108 cs 0x8 rflags 0x10207 __ALIGN_SIZE+0xf207 rsp 0xffff80003c43d960 ss 0x10 dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 ddb{1}> show proc PROC (syz-executor) tid=343733 pid=10675 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff8000fffe8020 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff8000fffe9778,0xffff8000fffe8d28 process=0xffff80002a3349d0 user=0xffff80003c438000, vmspace=0xfffffd806c99ad70 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 7942 88994 17335 0 2 0x100002 sh 1034 471899 75779 0 2 0 syz-executor 74182 489126 96653 0 2 0 syz-executor 74182 305568 96653 0 3 0x4000080 fsleep syz-executor 65643 117341 91372 0 7 0 syz-executor 65643 195040 91372 0 3 0x4000080 kqread syz-executor 12854 370119 10043 60929 2 0x10 syz-executor 12854 266322 10043 60929 3 0x4000090 fsleep syz-executor 26946 142462 10136 -1 2 0x10 syz-executor 26946 410523 10136 -1 3 0x4000090 sbwait syz-executor 26946 99259 10136 -1 2 0x4000010 syz-executor 17335 17412 85917 0 3 0x82 wait syz-executor 32746 79113 85917 0 3 0x82 nanoslp syz-executor 44366 345204 0 0 3 0x14280 nfsidl nfsio 5013 156458 0 0 3 0x14280 nfsidl nfsio 85344 492760 0 0 3 0x14280 nfsidl nfsio 2740 178059 0 0 3 0x14280 nfsidl nfsio 38272 380296 85917 0 3 0x10000082 nanoslp syz-executor 10136 247265 85917 0 3 0x82 nanoslp syz-executor 91372 233053 85917 0 3 0x82 nanoslp syz-executor 75779 290462 85917 0 3 0x82 nanoslp syz-executor 10043 181677 85917 0 3 0x82 nanoslp syz-executor 96653 177073 85917 0 3 0x82 nanoslp syz-executor 85917 244083 33751 0 2 0x2 syz-executor 33751 237058 27800 0 3 0x10008a sigsusp ksh 27800 67216 62419 0 3 0x98 kqread sshd-session 62419 392716 11218 0 3 0x92 kqread sshd-session 42688 78206 1 0 3 0x100083 ttyopn getty 11218 271443 1 0 3 0x88 kqread sshd 14053 455995 11702 74 3 0x1100092 bpf pflogd 11702 86164 1 0 3 0x80 sbwait pflogd 89334 8279 51031 73 3 0x1100090 kqread syslogd 51031 156714 1 0 3 0x100082 sbwait syslogd 42091 66512 1 0 3 0x100080 kqread resolvd 75787 13615 17299 77 3 0x100092 kqread dhcpleased 85057 474161 17299 77 3 0x100092 kqread dhcpleased 17299 510009 1 0 3 0x80 kqread dhcpleased 69849 375551 0 0 3 0x14200 bored smr 58132 176213 0 0 2 0x14200 zerothread 45747 413027 0 0 3 0x14200 aiodoned aiodoned 15595 419323 0 0 3 0x14200 syncer update 51765 382057 0 0 3 0x14200 cleaner cleaner 50444 270782 0 0 3 0x14200 reaper reaper 82546 185227 0 0 3 0x14200 pgdaemon pagedaemon 59950 390551 0 0 3 0x14200 bored viomb 42658 454967 0 0 3 0x40014200 acpi0 acpi0 70203 111844 0 0 3 0x40014200 idle1 67488 515454 0 0 3 0x14200 bored softnet1 91904 303616 0 0 3 0x14200 bored softnet0 15338 261263 0 0 3 0x14200 bored systqmp 74521 161674 0 0 3 0x14200 bored systq 97221 172538 0 0 3 0x14200 tmoslp softclockmp 98168 47050 0 0 3 0x40014200 tmoslp softclock 73744 484074 0 0 3 0x40014200 idle0 1 231009 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 26946 (syz-executor) thread 0xffff8000fffe94e0 (410523) exclusive rwlock sbufrcv r = 0 (0xffff800010fdb358) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 soreceive+0x27d #4 recvit+0x40b #5 sys_recvmmsg+0x410 #6 syscall+0xbd4 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11102 12202K 12446K 166960K 14092 0 pcb 19 16K 31K 166960K 535 0 rtable 246 14K 15K 166960K 1321 0 pf 42 19K 83K 166960K 273 0 ifaddr 40 7K 9K 166960K 237 0 ifgroup 56 2K 3K 166960K 359 0 sysctl 4 1K 9K 166960K 12 0 counters 70 37K 38K 166960K 346 0 ioctlops 0 0K 4K 166960K 1973 0 iov 1 4K 24K 166960K 166 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1582 99K 100K 166960K 3185 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 20 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 116 0 dirhash 12 2K 2K 166960K 48 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 240K 166960K 2185 0 sigio 0 0K 0K 166960K 36 0 proc 73 115K 180K 166960K 1345 0 subproc 72 4K 4K 166960K 288 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 439 0 in_multi 80 5K 7K 166960K 446 0 ether_multi 1 0K 0K 166960K 30 0 mrt 2 0K 0K 166960K 16 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 253 1129K 1129K 166960K 253 0 exec 0 0K 1K 166960K 1128 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 241 169K 188K 166960K 20528 0 UVM aobj 75 21K 21K 166960K 83 0 pinsyscall 42 84K 102K 166960K 3924 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 173 0 NDP 12 0K 2K 166960K 172 0 temp 79 8684K 8775K 166960K 66885 0 kqueue 15 24K 34K 166960K 370 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 276 0 273 3 2 1 3 0 8 0 rtentry 176 421 0 331 6 0 6 6 0 8 0 unpcb 144 1678 0 1657 11 10 1 5 0 8 0 syncache 336 7 0 7 3 3 0 1 0 8 0 tcpqe 32 3 0 3 2 2 0 1 0 8 0 tcpcb 736 620 0 611 12 11 1 7 0 8 0 arp 136 75 0 58 1 0 1 1 0 8 0 inpcb 328 2120 0 2106 32 29 3 13 0 8 1 nd6 152 98 0 77 2 0 2 2 0 8 0 pkpcb 40 12 0 12 4 4 0 1 0 8 0 kcovpl 48 32 0 24 1 0 1 1 0 8 0 mppekey 1024 3 0 3 2 2 0 1 0 8 0 ppxss 1192 89 0 89 4 4 0 1 0 8 0 pppxif 1504 8 0 8 4 4 0 1 0 8 0 pffrag 232 53 0 41 1 0 1 1 0 482 0 pffrnode 88 49 0 40 1 0 1 1 0 8 0 pffrent 40 94 0 82 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 11 0 6 1 0 1 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pftag 88 2 0 1 1 0 1 1 0 8 0 pfstitem 24 4 0 1 1 0 1 1 0 8 0 pfstkey 128 13 0 10 1 0 1 1 0 8 0 pfstate 448 7 0 5 1 0 1 1 0 8 0 pfrule 1360 59 0 35 3 0 3 3 0 8 0 rttmr 136 4 0 4 3 2 1 1 0 8 1 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 1828 0 1476 38 8 30 30 0 8 2 art_table 40 1832 0 1476 5 0 5 5 0 8 0 art_node 32 420 0 345 1 0 1 1 0 8 0 sysvmsgpl 40 22 0 14 1 0 1 1 0 8 0 semupl 112 3 0 3 2 2 0 1 0 8 0 semapl 112 108 0 98 1 0 1 1 0 8 0 shmpl 112 69 0 5 2 0 2 2 0 8 0 dirhash 1024 41 0 24 3 0 3 3 0 8 0 dino2pl 256 4855 0 3308 97 0 97 97 0 8 0 ffsino 296 4855 0 3308 120 0 120 120 0 8 0 nchpl 144 7389 0 5622 66 0 66 66 0 8 0 rtmask 32 17 0 17 3 3 0 1 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 28552 0 28552 5 3 2 2 0 8 2 percpumem 16 188 0 138 1 0 1 1 0 8 0 vcpupl 3968 10 0 2 1 0 1 1 0 8 0 vmpool 848 11 0 3 1 0 1 1 0 8 0 pfiaddrpl 120 2 0 0 1 0 1 1 0 8 0 kstatmem 264 218 0 192 7 4 3 3 0 8 1 scsiplug 72 11 0 11 6 6 0 1 0 8 0 scxspl 216 55963 0 55963 20 19 1 8 1 8 1 plimitpl 152 709 0 692 1 0 1 1 0 8 0 sigapl 424 2454 0 2402 10 4 6 8 0 8 0 knotepl 120 536 0 0 16 0 16 16 0 8 0 kqueuepl 224 727 0 716 7 6 1 5 0 8 0 pipepl 344 584 0 557 21 18 3 9 0 8 0 fdescpl 528 2413 0 2382 3 0 3 3 0 8 0 filepl 160 15649 0 15428 33 20 13 20 0 8 1 lockfpl 104 616 0 613 1 0 1 1 0 8 0 lockfspl 48 255 0 252 1 0 1 1 0 8 0 sessionpl 144 49 0 40 1 0 1 1 0 8 0 pgrppl 48 135 0 118 1 0 1 1 0 8 0 ucredpl 104 2396 0 2381 1 0 1 1 0 8 0 zombiepl 144 2605 0 2603 1 0 1 1 0 8 0 processpl 1232 2454 0 2402 7 2 5 6 0 8 0 procpl 664 5310 0 5253 9 3 6 8 0 8 0 sosppl 176 11 0 11 6 5 1 1 0 8 1 sockpl 752 4201 0 4163 55 50 5 25 0 8 1 mcl64k 65536 17 0 0 3 0 3 3 0 8 0 mcl16k 16384 14 0 0 2 0 2 2 0 8 0 mcl12k 12288 6 0 0 1 0 1 1 0 8 0 mcl9k 9216 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 14 0 0 2 0 2 2 0 8 0 mcl4k 4096 118 0 0 15 0 15 15 0 8 0 mcl2k2 2112 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 49 0 0 6 0 6 6 0 8 0 mtagpl 96 38 0 0 1 0 1 1 0 8 0 mbufpl 256 1220 0 0 76 0 76 76 0 8 0 bufpl 280 24285 0 18149 439 0 439 439 0 8 0 anonpl 32 11965 0 0 97 0 97 97 0 246 0 amapchunkpl 152 68827 0 68370 48 27 21 33 0 158 1 amappl16 200 7927 0 7899 74 59 15 25 0 8 6 amappl15 192 1 0 1 1 1 0 1 0 8 0 amappl14 184 6 0 6 1 1 0 1 0 8 0 amappl13 176 716 0 714 1 0 1 1 0 8 0 amappl12 168 2922 0 2881 3 0 3 3 0 8 0 amappl11 160 2 0 2 1 1 0 1 0 8 0 amappl10 152 69 0 55 1 0 1 1 0 8 0 amappl9 144 250 0 250 1 1 0 1 0 8 0 amappl8 136 29 0 26 1 0 1 1 0 8 0 amappl7 128 178 0 176 1 0 1 1 0 8 0 amappl6 120 569 0 554 1 0 1 1 0 8 0 amappl5 112 97 0 86 1 0 1 1 0 8 0 amappl4 104 556 0 525 1 0 1 1 0 8 0 amappl3 96 12021 0 11932 5 2 3 4 0 8 0 amappl2 88 2462 0 2387 2 0 2 2 0 8 0 amappl1 80 19604 0 19019 14 0 14 14 0 8 0 amappl 88 19113 0 18953 5 0 5 5 0 92 0 uvmvnodes 80 166 0 0 4 0 4 4 0 8 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 2 0 2 2 1 1 1 0 8 1 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 259 0 259 6 6 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 82 0 8 2 0 2 2 0 8 0 uaddrrnd 24 2413 0 2382 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 2413 0 2382 1 0 1 1 0 8 0 vmmpekpl 168 20631 0 20578 3 0 3 3 0 8 0 vmmpepl 168 157506 0 155629 129 31 98 108 0 357 6 vmsppl 488 2412 0 2382 6 1 5 5 0 8 0 rwobjpl 80 42926 0 41761 33 1 32 33 0 8 0 pdppl 4096 4856 0 4778 146 66 80 84 0 8 2 pvpl 32 21784 0 0 176 0 176 176 0 265 0 pmappl 256 2423 0 2385 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 431 0 101 10 0 10 10 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837bbff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff83957cc0) at __mp_lock+0x1a3 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83957cc0) at __mp_lock+0x192 syscall(ffff80003c45d910) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d4c94249500, count: 4 ddb{0}> trace x86_ipi_db(ffffffff837bbff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff83957cc0) at __mp_lock+0x1a3 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83957cc0) at __mp_lock+0x192 syscall(ffff80003c45d910) at syscall+0xaf4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7d4c94249500, count: -11 ddb{0}> machine ddbcpu 1 Stopped at dt_ioctl_record_stop+0x108: movq 0(%r14),%r14 dt_ioctl_record_stop(ffff80000165c000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,1,2000,ffff8000fffe8020) at dtclose+0x109 spec_close(ffff80003c43da60) at spec_close+0x466 VOP_CLOSE(fffffd806d75a7c8,1,fffffd80097fd410,ffff8000fffe8020) at VOP_CLOSE+0x132 vn_closefile(fffffd80773388d8,ffff8000fffe8020) at vn_closefile+0x12b fdrop(fffffd80773388d8,ffff8000fffe8020) at fdrop+0x121 closef(fffffd80773388d8,ffff8000fffe8020) at closef+0x192 fdfree(ffff8000fffe8020) at fdfree+0x116 exit1(ffff8000fffe8020,b,0,1) at exit1+0x576 sys_exit(ffff8000fffe8020,ffff80003c43ddd0,ffff80003c43dd20) at sys_exit+0x1a syscall(ffff80003c43ddd0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f601f378a20, count: 3 ddb{1}> trace dt_ioctl_record_stop(ffff80000165c000) at dt_ioctl_record_stop+0x108 dtclose(11e5f,1,2000,ffff8000fffe8020) at dtclose+0x109 spec_close(ffff80003c43da60) at spec_close+0x466 VOP_CLOSE(fffffd806d75a7c8,1,fffffd80097fd410,ffff8000fffe8020) at VOP_CLOSE+0x132 vn_closefile(fffffd80773388d8,ffff8000fffe8020) at vn_closefile+0x12b fdrop(fffffd80773388d8,ffff8000fffe8020) at fdrop+0x121 closef(fffffd80773388d8,ffff8000fffe8020) at closef+0x192 fdfree(ffff8000fffe8020) at fdfree+0x116 exit1(ffff8000fffe8020,b,0,1) at exit1+0x576 sys_exit(ffff8000fffe8020,ffff80003c43ddd0,ffff80003c43dd20) at sys_exit+0x1a syscall(ffff80003c43ddd0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f601f378a20, count: -12