last executing test programs: 7.289375605s ago: executing program 5 (id=452): syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x8000, 0x0, 0xfffc, {[@generic={0x5, 0x2}, @window={0x3, 0x3, 0x2}, @generic={0x3, 0x2}, @generic={0x8, 0x2}]}}}}}}}) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pwrite(r0, 0x0, 0x0, 0x4) unlink(&(0x7f0000000040)='./file0\x00') sysctl$net_inet_tcp(&(0x7f00000001c0)={0x4, 0x2, 0x6, 0x13}, 0x4, &(0x7f0000000200), 0x0, 0x0, 0x0) socket(0x18, 0x2, 0x1) 7.288013346s ago: executing program 5 (id=453): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x4, 0x0, 0x0, 0x1, 0x7, 0x49, 0x2, 0x100], [0x8, 0x5, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x80000000, 0x0, 0x5, 0x0, 0xb81], [0x8, 0x0, 0x8f, 0x0, 0x800000, 0x0, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x0, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0x0, 0x2, 0x1000}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x6, 0x4}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x200, 0x8}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x84, 0x2}}}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0xe68, 0x0, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0xfffffff6, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x7a, 0x1, 0x8, 0x95}, {0x81, 0x800, 0x9d29, 0x400006d}, {0x3, 0x803, 0x14, 0x2}, {0xffffffff, 0x82, 0x4, 0xaf}, {0x5, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x7, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0x1001}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x6, 0x2, 0x7fff}]}) ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000240)={0x2d853ed1, './file0\x00', './file0aaaaaaaaa'}) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000002c0)={&(0x7f0000000040)='./file0aaaaaaaaa\x00', r0, 0x3}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) r2 = kqueue() recvmsg(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0}, 0x800) setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) r3 = syz_open_pts() close(r3) syz_open_pts() writev(r3, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) kevent(r2, &(0x7f0000000140), 0xe4a, 0x0, 0xa9f9, 0x0) 6.919820318s ago: executing program 5 (id=468): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000500), 0x1, 0x0) pwrite(r0, &(0x7f0000000540)="7f23d88a160c166ce6d887b01bf03ccc49250628380d6213c59c860bd3e6fc66349d1320870c137f328338cda59aac1934a6827376d27bc391e2b13c", 0x3c, 0xdb6) (async) unveil(0x0, &(0x7f00000005c0)='r\x00') open(&(0x7f0000000000)='./file0\x00', 0x8, 0xe0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000004c0)=""/258, 0x102}], 0x3, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) 6.804234074s ago: executing program 5 (id=469): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) sendmsg$unix(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="ece476ab9ad2a827e6a37a1d8ba024b648fd444d7cff48c83889056ec022ac7cf530d4799d28f6d1253027731b0af5d5fe58293cf584acc70012a0f6a2c2b24cde0719c3d4da13cb8d"], 0x10, 0xb}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f00000002c0)={'./file0\x00', 0x8, 0x10001, 0x8, 0x1, 0x6, 0x7, 0x1, 0x0, 0x0, 0x7, 0x4}) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x1, 0x9e, 0x2000007, 0x5, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0x101, 0x8, 0x9, 0x2}, {0x20007, 0x8000b86, 0xffffff79, 0x9}, {0x73f0, 0x6, 0x4, 0x2}, {0x42, 0x8, 0x80002800, 0x800007}, {0x2, 0x6, 0x3, 0x95}, {0xcdf, 0xdf61, 0x200004f8, 0x10}, {0x6, 0x9, 0x16, 0xb}, {0xffffffff, 0x84, 0x3, 0x3}, {0x4, 0x7, 0x93, 0x1ff}, {0x1e0, 0xffff, 0x40, 0x7}, {0x9, 0x29, 0x9, 0x2d0b}, {0x1000000, 0x401, 0x80000003, 0x408}, {0x29a71717, 0xfffffffa, 0x0, 0x579}, {0xc, 0xf8f, 0x4000006}, {0xfffffffd, 0x800bd3d, 0x6, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x400, 0x10000, 0x0, 0x0, 0x200000001, 0x80000000000000c, 0x3, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) sendmmsg(r1, &(0x7f0000001440)={0x0, 0x1}, 0x10, 0x0) recvmsg(r2, &(0x7f0000000380)={&(0x7f0000000000)=@un=@abs, 0x8, &(0x7f0000001480)=[{&(0x7f0000000100)=""/178, 0xb2}], 0x1, &(0x7f0000000340)=""/5, 0x5}, 0x1000) ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x3}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) 5.86873542s ago: executing program 5 (id=500): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000280)={0x3, &(0x7f0000000040)=[{0x84, 0x3, 0x0, 0x8000043}, {0x81, 0x70, 0xff}, {0x6, 0x6, 0xa, 0x1}]}) syz_emit_ethernet(0x5e, &(0x7f0000002c80)=ANY=[]) r1 = syz_open_pts() r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2810, r2, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000000)=0x6) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000080)={0x99e, 0x0, 0x37bc8560, 0xc, "721d4a722b2821a45a21f65201d908f882dc09ee", 0xfffffff8, 0x8}) ioctl$TIOCSTAT(r1, 0x20007465, 0x0) 5.463176699s ago: executing program 2 (id=514): symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x3, 0xfffe}, {0x4, 0x2ff}], 0x2) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7ff, 0x2d, 0x2, 0x8}, {0x48, 0x6, 0x89, 0xb}, {0x6, 0x2, 0x9, 0xcfa}]}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) symlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(r0) r1 = socket$inet(0x2, 0x3, 0x0) setuid(0xee01) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) r2 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0206921, &(0x7f00000001c0)) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0x8020690e, &(0x7f00000001c0)) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000029, 0x2e, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r5 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCPROMISC(r5, 0x20004269) mmap(&(0x7f000048c000/0x12000)=nil, 0x12000, 0x0, 0x2010, r2, 0x4) 5.372647307s ago: executing program 2 (id=515): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0xffffffffffffffff, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0x7}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil, 0xb}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x80004bb6}, {&(0x7f000035e000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00001f5000/0x4000)=nil, 0x6}, {0x0, &(0x7f00002f1000/0x4000)=nil, 0x7cb4a84}, {&(0x7f00001cf000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000360000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x8}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000826000/0x2000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f0000197000/0x4000)=nil, 0x9bc0}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f000073e000/0x4000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00006d1000/0x3000)=nil}], '.\x00'}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x11, 0x85, 0x45}, {0x40, 0xf0, 0xff, 0x1000}, {0x6, 0x80, 0xe, 0xfffff7fe}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="6233c7542fa4dd96aca4fc5300e419050000006da349856b4952c0d0b51ef34fff0f00000000000081ad2445", &(0x7f0000000000)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[]) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) 5.371981994s ago: executing program 2 (id=516): sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987ab7fe5e6e8496077b538517000000000036ba1bd87f42e3303eac77280712f838130efce149d400d06a3f23616e77004c8836ed0000e0ccebd669ecdb15cec53342366139d11a90b5ba0800800090e42d34d900a0dad2b74f01000000260526ff0fd76b5c567049ef436dbea0d7382052950fa5ef6ec513256ddd8680a944d5c2bdbff4f06a032ab475cca257352828276e53346a762995e89423058a5c6318950bdcd08b96ca5d4d3e6706eac9b4e8aa9befc32246bd4506b68324a00d2f5019383919525cb6f7e8570b2a374f0700341ed45bb7ad3b13138fa142c84ab3045c4724150d16e304c7bff16bceb7d956e62447b3e88aa810f8ed7cca108d733338fbff341f5945daa4bd0e756facf9429c25483a9275d0da3b5618eadc96007971436218bdbdc9ac0a623855e941dc18725fe8e8b0100000006201788ce2b8802cb60eec6add5e9434c1e97dcf7025b73e8402a5f38cad2dc1a0d0d7873e27142bbafe3426f33409000000a9136d57c799353d46dd8143ea85d9b12c749618ad310493dfee9b11ded908398b4ed6fb2e353e3bb073e3342773216b07e49ca4df0fd2dbe97fd2b6ffffffffffe6f4588ffb7d82693a090e94691e8d000000368f29d76344671843a1f228261f630fdb791f833a1da5af88cf56ad8479077a2441da17670852140704f6000000f1ff00009230154a000000000000", &(0x7f0000000000)=0x200, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="395ad69c4bbedd71440f2257d2e8c73057868ea4de27045dc7fe86562efe70d221580948cda6d12a6464c39594b36ae0ba49d0f38fa9d78a3c2d7ee5c10a71eb90ab4de4c468d9bf2d5d393b5b1d08e6cc877029785b31226e76e6815c2f7fa3dc9d298e83464eceb11d62c5888aba48e5c260dd7f27083faf0fe027ff0309ae57cdd3d3c4b081652f0bc7a31adf24aefea876af328c0a81563ffb8fe61336afbfd6126af4f3b69954cd551b67c95fbca4f918afea0898f2a5e1c83735c181004d94e6be054f714265bef7d4fca5f2d542c71b6c878d49cd", 0xd8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x3, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x0}, 0x8) setsockopt(r0, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) 5.369624996s ago: executing program 2 (id=518): r0 = socket(0x2, 0x3, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x100000001}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0xffffffff, 0x101, 0x80, 0x71000}, {0x4000, 0x88, 0x20008, 0x7}, {0x8, 0x6, 0x3, 0x9}, {0x3, 0x900, 0xe}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f6, 0x4, 0x99}, {0x5, 0x4, 0x4f8, 0x100006c}, {0xc, 0x80000801, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0xfe, 0x5, 0x1088}, {0x1e6, 0x10005, 0xc, 0x6}, {0x7fe, 0x9, 0x8, 0xf}, {0xb8e, 0xffffffff, 0x8, 0x4}, {0x29a7171c, 0x3, 0x1, 0x10000005}, {0xfffffe00, 0x7, 0x4, 0xffffffff}, {0x0, 0x7, 0x1002, 0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000080)={0x4be, 0x950}, 0x8) 5.18505373s ago: executing program 3 (id=525): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r2 = socket(0x20, 0x2, 0x3) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[]) kevent(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)=[{{r0}, 0xfffffffffffffffc, 0x14, 0x80, 0xa907, 0x389}, {{r0}, 0xfffffffffffffffe, 0x0, 0x4, 0x5}, {{r2}, 0xfffffffffffffff8, 0x21, 0xfffff, 0xfffffffffffffffe, 0x9}, {{r2}, 0xfffffffffffffff8, 0x2, 0x5, 0x7a, 0x61a}, {{r2}, 0xfffffffffffffffe, 0xe, 0x1, 0x2, 0x3}], 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fe, 0x0, 0x1, 0xfd1, 0x3, 0x5, 0x17ffe, 0x10, [{0x3, 0x3, 0xffffffff, 0xa24}, {0x200c5c, 0xb, 0x5, 0x1ff}, {0x800008, 0x7, 0x1fc, 0x7d2}, {0x7ffffffe, 0x5, 0x3}, {0x3fc, 0xd, 0x1002802, 0x4d8a}, {0x80008, 0xff, 0x3, 0xb}, {0x8000008, 0x0, 0x81eb, 0x2d}, {0x100002, 0x83d, 0x17, 0x3}, {0x2, 0x40087e, 0x5, 0x7}, {0x0, 0xa74d925a, 0xffff, 0x40000088}, {0x1d9, 0x5, 0x4, 0x412c8391}, {0x3, 0xc, 0x20008, 0x40000010}, {0xb8d, 0x4, 0x8, 0x3}, {0x29a7171d, 0x81, 0x200, 0x6}, {0x400004, 0x7, 0x6, 0x100}, {0x200, 0x6, 0x801005, 0xc}]}) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = socket(0x6, 0x8000, 0xfe) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000500)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x0, 0x1}}) mprotect(&(0x7f00001b6000/0x1000)=nil, 0x1000, 0x1) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r5, 0x50b, 0xa, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r5, 0x1000000029, 0xd, &(0x7f0000000300)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff00"}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vfs_nfs(&(0x7f00000000c0), 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000600)=ANY=[@ANYBLOB="ff02", @ANYRESDEC=r2, @ANYRES32=r3, @ANYRES64=r2, @ANYBLOB="6dddcc7cb5c71a8c017442d0b30cd6d1a9fc26b2b908e60ba869737738ff48120987c044a532acfed27ec75569ca0a88519465b74f7cfd50b98b0ed3d099ee5344d90fa422833d5e3e7afc72a20fe9ce501d1eee8efbd9a8c66f686497f34a84766c96c2c442eee1487ecf9ec1feb274b9e4f8e2ddda1d", @ANYRESDEC, @ANYRESDEC=r2, @ANYRES16=r3, @ANYRESHEX, @ANYRESDEC=r3, @ANYBLOB="b8c3e0a195466ede5382b94c72370c1dab8ad20443ea03d0ac6b2b3c25cdd52262804690cd137a8f62a545e3158b3ec790780979e955b8e81852fb03c574cfc997232f7c90500bd116f8e8fd7e449ca9"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r2, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) getsockopt(r2, 0x6, 0x9, 0x0, 0x0) pwritev(r1, &(0x7f00000002c0), 0x0, 0x6) 5.183313727s ago: executing program 2 (id=527): chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x686) (async, rerun: 64) r0 = socket(0x800000018, 0x3, 0x2) (rerun: 64) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000000)=0x6, 0x3) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = syz_open_pts() write(r2, &(0x7f0000000080)="e5af8db159fb790fc79eb20340a2ff8fbda1a8aec222b68307ebd2b6e4d74de0232002bb9c79d91e52eced150e910ba83741a019b72c05f368b56a38591b304fddfcadce6608bf851ca71301b729c07383df665d660e5cf0f2150ee4174c819d143d3442186d8877996e6acbdd", 0x6d) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xb5219f1000b993f1, 0x0) setuid(0xee01) open(&(0x7f0000000340)='./file1\x00', 0x290, 0x33) (async) rename(&(0x7f0000000440)='./file1\x00', &(0x7f0000000240)='./file0\x00') 5.182411403s ago: executing program 3 (id=528): sysctl$net_inet_esp(&(0x7f0000000240)={0x4, 0x1e, 0x2, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x11) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000040)='R', 0x1) r1 = socket(0x18, 0x3, 0x0) select(0x2f, &(0x7f0000000040), &(0x7f0000000080)={0x4000000000000008}, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) recvmsg(r1, &(0x7f0000000c40)={&(0x7f0000000280)=@in6, 0xc, &(0x7f0000000bc0)=[{&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000480)=""/173, 0xad}, {&(0x7f00000002c0)=""/53, 0x35}, {&(0x7f0000000ac0)=""/255, 0xff}], 0x4, &(0x7f0000000c00)=""/5, 0x5}, 0x1800) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x85, 0x48}, {0x40, 0xed, 0xff}, {0x6, 0x80, 0x12, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="721d1a70ad525e051b7923a65d00000000000000008156bed21dd5f0b19702b0ef145dd0", 0x24}], 0x1) setrlimit(0x2, &(0x7f0000000c80)={0x60000000, 0x60000000}) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') r3 = socket(0x18, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x2, r3) close(r4) open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) chroot(&(0x7f00000001c0)='./file0/file0\x00') recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) r7 = syz_open_pts() close(r7) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x6, 0x7, 0xffffdf81, 0xfdfffffe, "1826283e680021d5ff7f2a01fd04000004401e00", 0x7ff, 0xc}) writev(r7, &(0x7f0000000040)=[{&(0x7f00000005c0)="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", 0x4d6}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="6243003b47915d8156c41f3462b255c61b4f0919d7aacd3dc6959cb3", &(0x7f0000000000)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) 4.359904266s ago: executing program 0 (id=556): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) ioctl$KDENABIO(r0, 0x20004b3c) symlinkat(&(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') (async, rerun: 64) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) (async, rerun: 64) getgroups(0x3, &(0x7f0000000100)=[0x0, 0x0, 0xffffffffffffffff]) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) (async, rerun: 32) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc) (rerun: 32) getgroups(0x4, &(0x7f0000000200)=[r1, r2, r6, r8]) (async, rerun: 32) fcntl$setown(r0, 0x6, r4) (async, rerun: 32) r12 = shmget(0x2, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0}, 0xc) shmctl$IPC_SET(r12, 0x1, &(0x7f0000000280)={{0x6, r7, r9, r5, r10, 0x4, 0x3}, 0x34b15935, 0x2, r13, r4, 0xffff, 0x7, 0xb2}) (async, rerun: 32) r15 = accept$inet(r0, &(0x7f0000000300), &(0x7f0000000340)=0xc) (rerun: 32) recvmsg(r15, &(0x7f0000001840)={&(0x7f0000000380)=@in6, 0xc, &(0x7f0000001700)=[{&(0x7f00000003c0)=""/37, 0x25}, {&(0x7f0000000400)=""/52, 0x34}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/240, 0xf0}, {&(0x7f0000001540)=""/32, 0x20}, {&(0x7f0000001580)=""/91, 0x5b}, {&(0x7f0000001600)=""/139, 0x8b}, {&(0x7f00000016c0)}], 0x8, &(0x7f0000001780)=""/190, 0xbe}, 0x0) r16 = semget(0x2, 0x2, 0x0) semctl$IPC_SET(r16, 0x0, 0x1, &(0x7f0000001880)={{0x1, r14, r11, r5, r3, 0x0, 0x3303}, 0x7, 0x3, 0x10000}) (async) setgid(r9) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000001900)={0x68, 0x3, 0x8, 0x1, "0f9acfa81ff9977a900ddc55c06ef84da9cb56c3", 0x4, 0x8}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001940)) (async) r17 = getpgrp() ktrace(&(0x7f0000001980)='./file0\x00', 0x1, 0x2, r13) (async) truncate(&(0x7f00000019c0)='./file0\x00', 0xfffffffffffffffb) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000001a00)=0x6137) (async, rerun: 64) readlink(&(0x7f0000001a40)='./file0\x00', &(0x7f0000001a80)=""/22, 0x16) (rerun: 64) setitimer(0x0, &(0x7f0000001ac0)={{0x80, 0x9}, {0x80000000, 0x56}}, 0x0) wait4(r17, &(0x7f0000001b00), 0x0, &(0x7f0000001b40)) lseek(r0, 0x81, 0x1) (async) semop(r16, &(0x7f0000001c00)=[{0x3, 0x5, 0x800}], 0x1) (async, rerun: 32) r18 = shmget$private(0x0, 0x2000, 0x1d7, &(0x7f0000ffa000/0x2000)=nil) (rerun: 32) shmctl$IPC_STAT(r18, 0x2, &(0x7f0000001c40)=""/98) 4.359443906s ago: executing program 0 (id=557): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0xf, 0x0, 0x10001}, {0x2, 0xf3, 0xff, 0x7}, {0x6, 0x7, 0x5, 0x1}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="721d1a7055c3cb4e9d397c3c2affc6d0a19283d610335e747d989778354ac313b91bb888b8e4876cb76fdfbb447e11b731e1d31601a566520600ba4d5d978a78d8c4d96ff5adf4b15eceb06dc7e7d08dff9d137bb6486f28e8c7a7a57f52297a", 0x60}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000a00)="a7a6081df2a16809d22a43003b1ff0f5f14cd1819c537b5d0000000000", &(0x7f0000000000)=0x1d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000180)=ANY=[]) 4.356882623s ago: executing program 0 (id=558): unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x3ff) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x5, 0x5, 0xfffffffefffffffe, 0x2000400000000000, 0x210, 0xb, 0x7}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x132) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) r1 = open(&(0x7f0000000240)='.\x00', 0xac0, 0x102) syz_open_pts() r2 = syz_open_pts() syz_open_pts() fchown(r2, 0x0, 0x0) fcntl$lock(r1, 0x9, &(0x7f00000000c0)={0x2, 0x0, 0x10000000000000, 0x1000381a10087}) flock(r1, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x411, 0x50) open(&(0x7f0000001340)='./file0/file0\x00', 0x10, 0xc0) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') r3 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x400, r3, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x8, 0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x1735, 0x8ac2}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000280)={0x1, 0x47}, 0x3, &(0x7f0000000100)="71f91e3471ac00584dedbc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0xfffffd5c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) write(0xffffffffffffffff, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r5 = fcntl$dupfd(r4, 0x3, 0xffffffffffffffff) semctl$SETVAL(0xffffffffffffffff, 0x0, 0x8, 0x0) read(r5, &(0x7f00000003c0)=""/4, 0x4) dup(0xffffffffffffffff) shmget$private(0x0, 0x4000, 0x2, &(0x7f00005ff000/0x4000)=nil) 4.353240463s ago: executing program 0 (id=559): syz_open_pts() r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0xf, 0x0, 0x10001}, {0x2, 0xf3, 0xff, 0x7}, {0x6, 0x7, 0x5, 0x1}]}) r1 = socket(0x18, 0x3, 0x1) getsockopt(r1, 0x29, 0x24, 0x0, 0x0) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0xa) listen(r2, 0x1) r3 = socket(0x18, 0x4001, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x100000000000000}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$inet(r3, &(0x7f0000000a00)="0100", 0x2, 0x7, 0x0, 0x0) r4 = accept(r2, 0x0, 0x0) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/179, 0xb3}], 0x1, 0x0}, 0xed0da65dd8347c18) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) r5 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x130) r6 = semget$private(0x0, 0x1, 0x2c) semctl$IPC_RMID(r6, 0x0, 0x0) r7 = getpid() fcntl$setown(r5, 0x6, r7) close(r5) open(0x0, 0x80000000000206, 0x4ebfac6bbaf7941) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="721d1a7055c3cb4e9d397c3c2affc6d0a19283d610335e747d989778354ac313b91bb888", 0x24}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000a00)="a7a6081df2a16809d22a43003b1ff0f5f14cd1819c537b5d0000000000", &(0x7f0000000000)=0x1d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 4.281167427s ago: executing program 3 (id=560): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) open$dir(&(0x7f0000000000)='./file0\x00', 0x6, 0x90) (async) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x6, 0x90) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000380)={0x1, 0x7fffffff, 0x41, 0xcd4, "9cdc452b68767b0400", 0x2004, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x85, 0x45}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) sysctl$kern(0x0, 0x0, &(0x7f0000000600)="040000100100001a030002013e4269a56e00ec1050", &(0x7f0000000000)=0x15, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000600)="040000100100001a030002013e4269a56e00ec1050", &(0x7f0000000000)=0x15, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='x\x00') (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='x\x00') write(r1, &(0x7f0000000080)="f81af227c11df3f7ff0100000000", 0xe) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0\x00') 4.27582897s ago: executing program 3 (id=561): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) select(0x40, &(0x7f0000000000)={0xffffffff00000000, 0x400, 0x3, 0x0, 0x7, 0x4, 0x6e0e, 0x7137}, &(0x7f0000000040)={0x0, 0x6, 0x1, 0x200, 0x6, 0x8, 0x8}, &(0x7f00000000c0)={0x1a, 0x100000001, 0x7040, 0x100000001, 0x6, 0x0, 0x0, 0x8000000000000001}, &(0x7f0000000240)={0x7ed, 0x8}) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x20000008, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x1c, 0xffff, 0x7, 0x9}, {0xe929, 0x653, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1008006, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000}, {0x1cc, 0x4, 0xdaa1, 0x3}, {0x3, 0xa, 0x8}, {0x4, 0x7, 0x8d, 0x4}, {0x29a71714, 0x7f, 0x60, 0x7}, {0x1100c, 0x3, 0x9654, 0x4}, {0x0, 0x1, 0xfff, 0x10003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x81286947, &(0x7f00000001c0)) 3.962159021s ago: executing program 3 (id=563): mknod(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0xffff, 0x0, 0x0, 0x0, 0x0, 0x19, 0xe}, 0x1000, 0xffffffffffffffff, 0x1}) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x1}, {0x4, 0x2ff}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, &(0x7f0000001c00), &(0x7f0000000040)=0x44, 0x0, 0x0) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file2\x00') symlink(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3.961816729s ago: executing program 3 (id=564): r0 = syz_open_pts() ioctl$TIOCSTOP(r0, 0x2000746f) writev(r0, &(0x7f0000000840)=[{&(0x7f00000006c0)="6f2d96", 0x1f38}, {0x0}], 0x2) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0xdc0, 0x9, 0x8, 0xab, "d698e3ebeb0695d252fb619979f727b8f012aa6a", 0x6, 0x10}) 3.497999804s ago: executing program 0 (id=574): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r0 = socket(0x11, 0x3, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x2}, 0x8) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x0, 0x1, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x288f, 0x5, 0x71002}, {0x6, 0x9, 0x68d, 0xfffffff9}, {0x101, 0x5, 0xffffffff, 0x9}, {0x4, 0x800, 0x8007, 0x5}, {0x2, 0xdfff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0xdb}, {0xce1, 0xffffffff, 0x4f4, 0x9}, {0x6, 0x0, 0x14, 0x8}, {0x2000002, 0x82, 0x5, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1cc, 0x800, 0xaf, 0x3}, {0xc, 0xa, 0x9}, {0x4, 0x7, 0x4, 0x8}, {0xfff, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x5, 0x2}, {0x9, 0x1, 0xfff, 0x30000}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x4}, 0xa, 0x7, 0x0, 0x0, 0x2, 0x80000000000000f, 0x7, 0x40}) (async) getgroups(0x0, 0x0) (async) setegid(0x0) (async) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff00"], 0x28}, 0x0) (async) ioctl$WSMOUSEIO_GCALIBCOORDS(r2, 0x41205725, 0x0) (async) recvmsg(r3, 0x0, 0x42) ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f0000000380)={&(0x7f00000002c0)='./file0\x00', 0x10001, 0x0}) socket(0x1e, 0x3, 0xfe) openat$bpf(0xffffffffffffff9c, &(0x7f0000000600), 0x20, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000080)={0x9, 0x1000, {0x150ee134, 0x6}}) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000040)={0x1, 0x1}) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000300)={0x3, 0x9}) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x806377, 0x80000007, 0x4, 0xfd, "bb08b5590209ff0000d06900", 0xe1c, 0xa0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 3.352333455s ago: executing program 0 (id=576): setuid(0xee01) (async) r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000140)=0x9) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x5, 0xa, 0xb7, 0x966f, "ff14e7130b1e582e0800", 0x43, 0x3effd}) (async) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff}) (async) r3 = kqueue() readv(r3, &(0x7f0000000600)=[{0x0}], 0x1) (async, rerun: 32) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCGETA(r2, 0x402c7413, &(0x7f0000000100)) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4) (async, rerun: 32) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)='m', 0x1}], 0x1) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x41) (async) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') (async) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') mknod(&(0x7f0000000200)='./file0/file0\x00', 0x1ffa, 0x1) (async) syz_open_pts() (async) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f00000001c0)=0x7) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r4 = socket(0x18, 0x1, 0x0) close(r4) (async) r5 = socket(0x18, 0x5, 0x1) setsockopt(r5, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) 1.347047636s ago: executing program 1 (id=624): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="6233c7552fa4dd00000000000000ec0800000000000000000000000000000600923dabe936b84fa8ae88b6134f", &(0x7f0000000000)=0x2d, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x20000008, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x1c, 0xffff, 0x7, 0x9}, {0x1, 0x653, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x7f}, {0x1cc, 0x4, 0xdaa1, 0x3}, {0x3, 0xa, 0x8}, {0x4, 0x7, 0x89, 0x8}, {0x29a71717, 0x7f, 0x60, 0x7}, {0x1100c, 0x3, 0x9654, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) socket(0x24, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000380)=[{0x3, 0x0, 0x7, 0x8}, {0x4, 0x6, 0x89, 0x9}, {0x6, 0x2, 0x8, 0xfffb8001}]}) syz_emit_ethernet(0x14f6, &(0x7f0000001c00)=ANY=[]) 1.175833404s ago: executing program 1 (id=630): syz_emit_ethernet(0x4c6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x5c}) r1 = syz_open_pts() close(r1) syz_open_pts() writev(r1, &(0x7f0000000140)=[{&(0x7f00000009c0)="96956822858b178d4361926efabb963505f6060b606ec270c093390a64ce4f4b6ebc4e6b449e4e61ac808b447a79d833dc572114529ebd4b11fe93f30e561c2afe732ebede38ca8263d963b884134eb01ac46244b046abdfcca41307de100df23136ea68fb83d7a97591d6b3f74307e9bbf01d5268db14bd52f4edbffa553bfd4833b67ee8e3730a9789880273fbebf1ba14590c2bc26001bd553a11401ffae2ba750f5d6b10bed03d92b0dde4f4d24fd5391afff6", 0xb5}], 0x1) ioctl$TIOCSETA(r0, 0xc4504446, &(0x7f0000000740)={0x8, 0x4, 0x2, 0x4, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x28, 0x4042}) 1.025115344s ago: executing program 1 (id=633): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3) (async) r0 = open(&(0x7f0000000480)='./file0\x00', 0x2, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x1}, 0x8) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r1 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x201, 0x18b) (async) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) write(r1, &(0x7f0000000240)="36c6340b57159eb14f92e786405ab5d5d5f2205c18487034906b80f6fb441cdd8518e138d7aa642a75c6f816b5d79f57da43a671a56e3b4b05203f5a1ad0cfd7a4fb8d64ab1234dcfbb040fed0cf19d18876a0200fc5eb11f73868d74ac216020dd6335b8b231f480cbf7243d61b116eff67667f05d28277f45ad19d8aa68292901610214a685ae610693e5b27dd86d31bc42dc6c4a0006b2afc986fd1a308c37b6c543557c7720879c3ba8b7647a218216639b0fcd7b623", 0xb8) (async) r4 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000001840)=[{0x0, 0x5b}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r3, 0x0) (async) r5 = fcntl$dupfd(r2, 0x3, 0xffffffffffffff9c) write(r5, &(0x7f0000000100), 0xfffffe5d) (async) ioctl$VMM_IOC_CREATE(r5, 0xc2585601, &(0x7f00000004c0)={0x10, 0x0, [{&(0x7f0000976000/0x4000)=nil, &(0x7f00004ae000/0xa000)=nil, 0x7f}, {&(0x7f000016d000/0x4000)=nil, &(0x7f0000221000/0x4000)=nil, 0x4}, {&(0x7f00005ee000/0x2000)=nil, &(0x7f0000684000/0x3000)=nil, 0x9}, {&(0x7f0000b76000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x7fff}, {&(0x7f0000205000/0x1000)=nil, &(0x7f000035b000/0x4000)=nil, 0x3}, {&(0x7f00000fb000/0x2000)=nil, &(0x7f00009d8000/0x2000)=nil, 0x7}, {&(0x7f00004b7000/0x1000)=nil, &(0x7f00008c8000/0x4000)=nil, 0xffffffffffff8000}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000f8000/0x4000)=nil, 0x5}, {&(0x7f0000827000/0x2000)=nil, &(0x7f00004a2000/0x1000)=nil, 0x646}, {&(0x7f0000b9a000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil}, {&(0x7f0000903000/0x1000)=nil, &(0x7f00001c7000/0x1000)=nil, 0x7}, {&(0x7f000055b000/0x5000)=nil, &(0x7f0000245000/0x3000)=nil, 0x23}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f000066b000/0x1000)=nil, 0x80000001}, {&(0x7f0000872000/0x3000)=nil, &(0x7f000028f000/0x3000)=nil, 0xc87}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f00008ff000/0x1000)=nil, 0x10001}], './file0/file0\x00', 0x323}) (async) unveil(0x0, &(0x7f0000000100)='r\x00') ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x3) (async) setuid(0xee01) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f00000010c0)=0x9) 968.025564ms ago: executing program 1 (id=637): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0xf, 0x0, 0x10001}, {0x2, 0xf3, 0xff, 0x7}, {0x6, 0x7, 0x5, 0x1}]}) sysctl$kern(0x0, 0x0, &(0x7f00000003c0)="62d0450d0eb2b65d7de85cc9b8b52d43003b92b2146d56c41f3462b255c61bcf0919d7aa", &(0x7f0000000000)=0x24, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) kqueue() ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x3, 0x3, 0x3fb, 0x80000001, 0x5, 0x10, [{0x3, 0x6, 0x7, 0x9}, {0xc5f, 0x7ff, 0x9, 0xc}, {0x3a79, 0x5, 0x3, 0xa}, {0x9, 0xf, 0x107, 0x70a}, {0x401, 0xff19, 0x1002805}, {0x8, 0x4, 0xffffffff, 0xb4}, {0xce1, 0x91, 0x4f5, 0x2}, {0xc8d, 0x801, 0xfffffffe, 0xe}, {0x2, 0x9, 0x7, 0x100000}, {0x2005, 0x1, 0x8, 0x400000}, {0x1bc, 0x80000002, 0xffffffff, 0x7}, {0xd2, 0x0, 0x8, 0x8000006}, {0x6, 0x63, 0xc, 0x2c4}, {0x29a70716, 0xfffffffa, 0x0, 0xd}, {0x2, 0x9, 0x6, 0xfffffffd}, {0x0, 0xbf, 0x2, 0x20000b}]}) socket(0x18, 0xc003, 0x3a) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0x0, 0x18f, 0xffef9ff6, 0x2, "4b06a6bcff0300dba800000000000800", 0x0, 0x2}) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r1 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x0, 0x9, 0x7, 0x8625, "0100012d29fb000700000000098002005e00", 0x6, 0xfffffffe}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000002c80)=ANY=[]) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0xf, 0x80000001, 0x7fff, 0xd8, "00000100000000000000908b7f7f00", 0x3, 0x3}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r3, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) sysctl$hw(&(0x7f0000000140)={0x6, 0x13}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$VMM_IOC_INTR(r2, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) close(r4) syz_open_pts() ioctl$VMM_IOC_WRITEREGS(r2, 0x82485608, &(0x7f0000000080)={0x7, 0x16000000, 0x8, {[0xcdb, 0x3, 0x4, 0x7ff, 0x9, 0x6, 0x5, 0x9, 0x2, 0x2, 0x8, 0x5, 0x9fa, 0xb5, 0x672, 0x2000, 0x8, 0x1ff], [0x7, 0x1ff, 0x3, 0x6, 0x8000000000000000, 0x6, 0x0, 0x48a, 0xb5fc, 0xd], [0x6, 0xdb5, 0x8, 0x100000000, 0xcfe, 0x4ba, 0x10001], [0xc, 0x3ff, 0x130d, 0x3ec3, 0x800, 0xa], [{0xfffb, 0x2, 0x8, 0x2}, {0x0, 0x81dc, 0x666, 0x4}, {0x4, 0x9, 0x7b, 0x2}, {0x99c4, 0x400, 0x6, 0x3ff}, {0x9, 0x2, 0x3, 0x10000}, {0x200, 0x6f, 0x3, 0x401}, {0xffff, 0x9, 0xfffffffb, 0x7}, {0x9b1e, 0x400, 0x6, 0x3}], {0x3, 0x2, 0x401}, {0x8, 0x1, 0xb89, 0x10001}}}) 801.859293ms ago: executing program 1 (id=642): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = socket(0x2, 0x3, 0x0) close(r1) clock_gettime(0x0, &(0x7f0000000180)) r2 = socket(0x18, 0x2, 0x0) r3 = dup2(0xffffffffffffffff, r2) setsockopt(r3, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) sendmsg$unix(r1, &(0x7f0000001580)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000014c0)=[@rights={0x10}], 0x10, 0xc1a}, 0x400) socket(0x18, 0x3, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)={@broadcast, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x68, 0xe, 0x1, 0x2, 0x0, @empty, @local={0xac, 0x14, 0x0}, {[@generic={0x0, 0x2}]}}}}}}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xf}, 0x4, &(0x7f0000000100)="60a6fab67c3472bfef4be7d9fdd6e88104cb1852f803558514bd829f48417b22ea080024e5c9c70977495bfcbef825eca5abc900000006282562f6c77b370246d617c467267eae6bf39581873e4abf7a707e3db14bc1661920", &(0x7f00000002c0)=0x59, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) socket(0x2, 0x3, 0x0) (async) close(r1) (async) clock_gettime(0x0, &(0x7f0000000180)) (async) socket(0x18, 0x2, 0x0) (async) dup2(0xffffffffffffffff, r2) (async) setsockopt(r3, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) (async) sendmsg$unix(r1, &(0x7f0000001580)={&(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000014c0)=[@rights={0x10}], 0x10, 0xc1a}, 0x400) (async) socket(0x18, 0x3, 0x0) (async) syz_emit_ethernet(0x26, &(0x7f0000000040)={@broadcast, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x68, 0xe, 0x1, 0x2, 0x0, @empty, @local={0xac, 0x14, 0x0}, {[@generic={0x0, 0x2}]}}}}}}) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xf}, 0x4, &(0x7f0000000100)="60a6fab67c3472bfef4be7d9fdd6e88104cb1852f803558514bd829f48417b22ea080024e5c9c70977495bfcbef825eca5abc900000006282562f6c77b370246d617c467267eae6bf39581873e4abf7a707e3db14bc1661920", &(0x7f00000002c0)=0x59, 0x0, 0x0) (async) 624.134556ms ago: executing program 7 (id=644): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x196, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x1, 0x80000000000010c, 0x5, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0x0, 0x5, "ff14e7130b1e586ca6294000", 0x45, 0x3effc}) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x99e, 0x0, 0x37bc8560, 0xc, "721d4a722b2821a45a21f65201d908f882dc09ee", 0xfffffff8, 0x8}) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) 622.335857ms ago: executing program 7 (id=645): mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x100) (async) socket$unix(0x1, 0x1, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x106) 622.102168ms ago: executing program 6 (id=646): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r2 = open(&(0x7f00000000c0)='./file1\x00', 0x200, 0x8) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) setreuid(0xffffffffffffffff, r1) ktrace(&(0x7f0000000100)='./file1\x00', 0x1, 0x1820, r0) open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x1f7) 570.857264ms ago: executing program 1 (id=648): pipe2(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) write(r0, &(0x7f00000000c0)="c3", 0xffffffed) (async) execve(0x0, &(0x7f00000002c0), 0x0) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x3a, 0x12, 0x0, 0x0) fchmod(r2, 0x10) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TIOCSETA(r3, 0xc008441e, &(0x7f0000000040)={0x0, 0xa, 0x4009, 0x0, "979ae90b00000000ffff00000020eb1e2b50ffff", 0x4, 0x2}) read(r1, &(0x7f0000000400)=""/119, 0xfd4c) (async, rerun: 32) socket(0x2, 0x3, 0x0) (rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) (async) r4 = socket(0x2, 0x3, 0x11) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r4, &(0x7f0000000000), 0x10) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x402}, {&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x7fff}, {0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x3}, {&(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000002000/0x1000)=nil, 0x100000000}, {0x0, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7b}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x800000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x2000)=nil, 0x8}, {0x0, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}], './file0\x00', 0xc6d}) r5 = socket(0x800000018, 0x1, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x18, 0x3, 0x0, 0x1ff}, 0xc) (async) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) (async) getsockname$unix(r5, 0x0, &(0x7f00000010c0)) (async) write(r4, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], [0x0, 0x0, 0xffffffffffffffff], [{}, {}, {0x0, 0x0, 0x0, 0x800000000000}, {}, {0x0, 0x6}]}}) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) (async, rerun: 64) kevent(r6, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) (rerun: 64) close(r0) 564.25806ms ago: executing program 6 (id=650): r0 = socket(0x11, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105727, &(0x7f0000000200)={&(0x7f0000000000)=[{0x101, 0xa1b}], 0x1}) r3 = syz_open_pts() ioctl$FIOASYNC(r3, 0x80047460, &(0x7f00000000c0)=0x5) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x40e, 0xfca6, 0xe3, 0xfffffbff, "d30000000000000000815800d91175e7cbe200", 0x7, 0xfef}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r4, &(0x7f0000001540)=[{&(0x7f0000000240)='l4', 0x2}, {&(0x7f0000001580)="3387d35a", 0x4}], 0x2) unveil(0x0, &(0x7f0000000100)='W\x00') sendto$unix(r0, &(0x7f0000000000)="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", 0xb1, 0x2, 0x0, 0xffffffffffffff3a) socket(0x11, 0x3, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) syz_open_pts() (async) close(r1) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105727, &(0x7f0000000200)={&(0x7f0000000000)=[{0x101, 0xa1b}], 0x1}) (async) syz_open_pts() (async) ioctl$FIOASYNC(r3, 0x80047460, &(0x7f00000000c0)=0x5) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x40e, 0xfca6, 0xe3, 0xfffffbff, "d30000000000000000815800d91175e7cbe200", 0x7, 0xfef}) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) writev(r4, &(0x7f0000001540)=[{&(0x7f0000000240)='l4', 0x2}, {&(0x7f0000001580)="3387d35a", 0x4}], 0x2) (async) unveil(0x0, &(0x7f0000000100)='W\x00') (async) sendto$unix(r0, &(0x7f0000000000)="b1000516b100009f050000002010000000000000cea10500fef96ee6d1efd3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6e3211800040000000000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba0900000008e37f71a3f8345012051eeab71d89e000040381ecb664000000fdf7b6ecd27afd2e081f60cb197fc02927507b1273a34896d0a6309a7330a06525ced5eb8c7bfcb8e3fa67bea17921c1a929cfdb2dbd1c14df461bf9276e2007653619335918c11821feae", 0xb1, 0x2, 0x0, 0xffffffffffffff3a) (async) 563.930511ms ago: executing program 7 (id=651): r0 = shmget$private(0x0, 0x2000, 0x31, &(0x7f0000ffe000/0x2000)=nil) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000180)={{0x5, r1, r3, r5, 0x0, 0x32, 0xfffb}, 0x1a2, 0x3, r7, r9, 0x7a19, 0x7, 0x4e}) r12 = msgget(0x3, 0x8) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc) r16 = getgid() msgctl$IPC_SET(r12, 0x1, &(0x7f0000000240)={{0x9, r10, r3, r14, r16, 0x10, 0xf}, 0xfffffffffffffbf4, 0x5, 0x0, r4, 0x3, 0x3, 0x2, 0x1}) msgctl$IPC_SET(r12, 0x1, &(0x7f00000002c0)={{0x7d, r1, r11, r2, r6, 0x2c, 0x5}, 0x81, 0x4b, r4, r13, 0x10, 0x7, 0x2, 0xffc}) seteuid(0xffffffffffffffff) r17 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) fcntl$setstatus(r17, 0x4, 0x80) r18 = accept(r17, 0x0, &(0x7f0000000380)) shutdown(r18, 0x0) ioctl$WSDISPLAYIO_SVIDEO(r17, 0x80045745, 0xfffffffffffffffe) ioctl$FIONREAD(r18, 0x4004667f, &(0x7f00000003c0)) r19 = semget(0x2, 0x4, 0x5e) semop(r19, &(0x7f0000000400)=[{0x4, 0x8}, {0x1, 0x7fff, 0x1000}, {0x4, 0xd1fa, 0x2000}, {0x1, 0xfffa, 0x1000}, {0x1, 0x81, 0x800}], 0x5) r20 = getuid() semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000440)={{0x8, r8, r3, r20, r15, 0xf, 0x224a}, 0x0, 0x7}) msgsnd(r12, &(0x7f00000004c0)={0x3, "d2e9a2e0fa04eef4569b85772494e9a06c7a28cac182ba40d89a1f66ddeeb4f4759636d0a6f21c00b3ce42e208433c4f8471f0d04d522daa4d39738fc33ef8d19e0191213b4df07b880f62d4cf9e803441b957386227555158ecb9e5a01160365b9424aad1b445b87727e99f19b2bf51d4a85b8f4ee3683e2a359eeab5b7990cfcb3d18fe755063596fe96ee5ede51aa0bf2870f7b846647529bf5498d971e4cef8c80fa68e80044e060b6e99bd9cbf7b7be3b9870d80a49ce8f8e04b0c72bfe08f7fc842ba72f41fd489ae4a22117"}, 0xd7, 0x0) r21 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_cred(r21, 0xffff, 0x1022, &(0x7f00000005c0)={r7, r20, r15}, 0xc) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r22 = getpid() setpgid(r22, r13) ktrace(&(0x7f0000000600)='./file0\x00', 0x2, 0x10, r22) 433.993717ms ago: executing program 7 (id=652): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffc, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x400000000001818, 0x8, 0x9}, 0x0, 0x0, 0x0) kqueue() (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) socket$inet(0x2, 0x3, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) socket$inet(0x2, 0x1, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) r3 = socket(0x2, 0x2, 0x0) getsockopt(r3, 0x0, 0x4, 0x0, 0x0) shutdown(r2, 0x1) open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) (async) r4 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x40, 0xc) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) ioctl$WSMUXIO_INJECTEVENT(r4, 0x80185760, &(0x7f0000000040)={0xfffff89e, 0x863, {0x8, 0x8001}}) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) clock_getres(0x0, &(0x7f00000000c0)) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xfffdffff, 0x0, 0xfff6, 0x0, 0x9, 0xfffffff8, 0x4b, 0x1, 0x2, 0x100020005, 0x400000004}) (async) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xfffdffff, 0x0, 0xfff6, 0x0, 0x9, 0xfffffff8, 0x4b, 0x1, 0x2, 0x100020005, 0x400000004}) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) (async) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) read(r2, &(0x7f0000000280)=""/70, 0x46) 433.643294ms ago: executing program 6 (id=653): ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x3}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) sendmsg$unix(r0, &(0x7f0000003ac0)={0x0, 0x54, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=' \x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00('], 0x48, 0xf8f45ad47d2d40ee}, 0x404) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) close(r0) (async) r1 = socket(0x2, 0x2, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) r3 = dup2(r2, r2) ioctl$BIOCGETIF(r3, 0x4020426b, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) (async) unveil(0x0, &(0x7f00000000c0)='r\x00') (async) sendto(r0, &(0x7f00000004c0)="057f61116a709fe70f3f4d8c7f64173cf0bd940d08cf6e0cae3df1264f96f45a3d2f04362f01606705576029bf0d80a990c262cc1745effa87e4c290e396deeaf16e1389067a905af307922465bac696d9635346db91704a54e265e2ad191b00634673982b1955d6f5965d478ae741c43df6531567f99c82f5678255", 0x7c, 0x0, &(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x2}, 0x8) 430.492407ms ago: executing program 6 (id=654): truncate(&(0x7f0000000040)='./file0\x00', 0x208005) 328.629978ms ago: executing program 6 (id=656): setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) mprotect(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x4) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="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", &(0x7f0000000000)=0x200, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x3, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) setsockopt(r0, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) writev(r0, &(0x7f0000000080)=[{0x0}], 0x1) r1 = syz_open_pts() r2 = socket(0x18, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) ioctl$TIOCGWINSZ(r1, 0x40087468, &(0x7f0000000780)) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000004c0)="3a9edc32b2645e5636c32fb11d1b2b1835ae101839e999d3e7da002142402c4fed8eb2bdf868917200441d9fe02c67f0bcbf31952dcaebd7a08c86924bb93f3aa4a6e27f9b52f6bedbbdb0a6e437b3609fe604e69da2e1ea4ee5dedca564187abf48f663d5cdc55f97b34afdc9852c077ea584505e43fcf998b7742a247ee52bb16e1b731dd61c", 0x87}, {0x0}], 0x2) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETA(r6, 0xc450443c, &(0x7f00000000c0)={0x72f, 0x1, 0x9, 0x3, "c9f7d2462f0000023beeca8f00875a6e80f775d2", 0x2}) close(r1) syz_open_pts() r7 = syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f00000000c0)={0xa, 0x4, 0x8a38, 0x4000007, "07160a009cef01098b748200"}) poll(&(0x7f00000005c0)=[{r7, 0x153}], 0x1, 0x5) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x3, 0x4, 0x8a38, 0x4000003, "07160a009cef01098b748200"}) writev(r1, &(0x7f0000000a40)=[{&(0x7f0000000180)="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", 0x58e}], 0x1) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r8 = socket(0x18, 0x2, 0x0) setsockopt(r8, 0x1000000029, 0x2e, 0x0, 0x0) getsockopt(r8, 0x29, 0x3d, 0x0, 0x0) 328.066425ms ago: executing program 7 (id=657): syz_open_pts() r0 = syz_open_pts() syz_open_pts() (async) fchown(r0, 0x0, 0x0) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80007, 0x0, 0x0, 0x0, 0x0, 0x199, 0x7}, 0x85c, 0x6, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x1735, 0x8000004}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x10080, 0x0) (async) ioctl$VNDIOCSET(r1, 0x40204402, &(0x7f00000001c0)={0x0, 0xffffffffffffff1e, 0x0}) (async, rerun: 32) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x7) (async, rerun: 32) syz_emit_ethernet(0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900383a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078000000006006c33e00003a80fe8000000000000000000000000000aaff9152a0d9484cd21ff867fce12de0c202"]) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0xa4, 0x5, 0x87, 0x4b}, {0x7, 0x55, 0x6, 0xc7}, {0xa, 0x7, 0x2, 0x6}]}) (rerun: 32) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[]) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x8, [{0x0, 0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x3}, {0x3}, {}, {0x0, 0x5f}, {}, {0x2, 0x80000002}, {}, {0x0, 0x3}, {0x0, 0x1fd}, {0x3}, {0x2, 0xffc}, {0x0, 0x2}, {}, {0x2, 0x2}, {0x3}, {0x2}, {0x0, 0x7ff}, {0x5, 0xffffffff}, {}, {0x3}, {0x0, 0x400}, {}, {0x2, 0x3}, {0x2, 0xfffffffd}, {0x0, 0x9}, {0x2}, {}, {0x1, 0xa}, {0x1}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63db, 0x5, 0x2, 0x8000008, 0xa, 0x100009, 0x10, [{0x1, 0x3, 0x1000, 0x80000001}, {0xffffffff, 0xffffffff, 0x6, 0x2000fff}, {0x1000, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x15d, 0x100}, {0x0, 0x7, 0xf15, 0x1000084}, {0x788c, 0xa, 0x8, 0x3}, {0x4, 0x800, 0x3, 0xfffffffe}, {0xff, 0x0, 0x28000, 0xffffe2eb}, {0x4, 0x1083, 0x6, 0x20008001}, {0x3, 0x4, 0x0, 0x8bfd}, {0x3ff, 0x0, 0x8, 0x6}, {0x10010000, 0x0, 0x800000, 0x1}, {0x2000002, 0x4, 0x6, 0x3ff}, {0x80000003, 0x6e2, 0x2, 0x3}, {0x3, 0xc, 0x3, 0x7}, {0x9be2, 0x3, 0x1000002, 0x8e}]}) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) (async) connect$unix(r3, &(0x7f0000000000), 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_udp(&(0x7f00000000c0)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f0000000100), 0x0, 0x0, 0x0) (async) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x200, 0x0) ioctl$TIOCSFLAGS(r4, 0x8004745c, &(0x7f0000000040)=0x100) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) 326.946615ms ago: executing program 7 (id=658): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x20000008, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x1c, 0xffff, 0x7, 0x9}, {0x1, 0x653, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000008, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x7f}, {0x1cc, 0x4, 0xff, 0x3}, {0x3, 0xa, 0x8}, {0x4, 0xe8db023, 0x89, 0x8}, {0x29a71717, 0x7f, 0x60, 0x7}, {0x1100c, 0x3, 0x9654, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000200)={&(0x7f0000000040)=[{0x23, 0x1ff}, {0x4, 0x78e2f068}], 0x2}) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000440)="3bf2ee74e747c82dad6eb2a36f925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c5e15d0d2921d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26010000005f8ce92bcefd3eceefabee7e3ebe0def2975135acdf694b5d1275a9807ef9e0dd96d5d22fcd1289c80d3135ee0d4ccf9cf3d6f8ce70202fcd0738c22516d797a6d4d4577073c00a40824915d35dfeb96c0edbd0fc1381ac8d1c3a91ad2d50588da310100000000000000a7c210e97256c8538d64f6ef4ee0513d784dcd7abd974898cd9876d750b23a36c756c3edf75a3d576af5f2a5edc217ca61ebb52a7692889975c180baac6798938ec34cd37b28436db93be49e1907dba3eec9a40afdf9058648e598fd163ba9361ccc99fb6ccd7068422c486a7eb35daa8a6cfbbc01269fe7088b3fd869af60bc0c60136c7717064a9d46c82544ca34442be10218d1fd37ba0603b4f2aec29fa14dba20301a961810d2094eb17e9f4d263cb6cddf913c915a11060c88fd5f3030febd07d4e57c9ae190725f3c590000002f5fabdf894005e7b3280d96ec12d3af346a940924986ba166f3d97bc1db4eff00"/488, &(0x7f0000000000)=0x41, &(0x7f0000000180)="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", 0x98) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x0) recvmsg(r2, &(0x7f0000000140)={&(0x7f0000000000)=@in6, 0xc, 0x0, 0x0, &(0x7f00000005c0)=""/87, 0x57}, 0x0) syz_emit_ethernet(0x4c6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) socket(0x11, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) socket(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) ioctl$TIOCSETA(r4, 0xc4504446, &(0x7f0000000740)={0x8, 0x4, 0x2, 0x4, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x28, 0x4042}) ioctl$WSKBDIO_GETBELL(r0, 0x40105704, &(0x7f00000000c0)) sysctl$vm(&(0x7f0000000240)={0x2, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) ioctl$BIOCSFILDROP(r5, 0x4004426a, &(0x7f0000000000)=0x10003) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002640)={0x33d, 0x304c9091}) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) write(r6, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) 324.32442ms ago: executing program 6 (id=660): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="721d1a70ad525e051b7923a65d00000000000000008156bed21dd5f0b19702b0ef145dd08c83074600000012068fc2d4f8648e80d2be73f070f296986558c5f971737128", 0x44}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="6233c7552fa4dd00000000000000ec0800000000000000000000000000000600923dabe936b84fa8ae88b6134fd985e7c75e8018ca21edb60e9cabc53bde8d7e38f32bb7aca1c9b6610b38e80225e5cfdec0b14b5541225280b78e5f1eeed105529da3ae7bbad520ec0dfde59a04adfb472a228f3927d89cbffdf1ae", &(0x7f0000000000)=0x7c, 0x0, 0x0) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) lseek(r1, 0xfffffffffffffffb, 0x2) (async) write(r0, &(0x7f0000000480)="b2ade62d69ff76da3493e63ad0240829180d7798219459c1295cdae6a0666fc7885b1aa2d79385fa246b04d330d6566d224d124df7878aef93e58ce933156a95bc8210d12fe7500d3080f61aecaeb42b45f16bbc7e352531792e516afcf0690951995c9d0006880e8819e17520afa3f7a18163589bee12b0534d362909b3324c7db02bbd9defdc122b2c71f0feb63da02b844b571981a15711ec57075c9acd6ef42c42fe65baa4753e09927e5a53302beb7b46a55c67d9a0299b3a4cbe2704ec056e655be0ed2e61644cbbb9eda5e4efccbf", 0xd2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x2, 0x3, 0x0) sysctl$net_inet6_icmp6(&(0x7f0000000180)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000300)="3ae5eed6", &(0x7f0000000140)=0x4, 0x0, 0x0) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x43, 0xffffffffffffffff], [], [0x9], [0x0, 0x0, 0xffffffffffffffff], [{}, {}, {0x0, 0x0, 0x0, 0x800000000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x200000000000000}]}}) (async) mknod(&(0x7f0000000140)='./bus\x00', 0x2000, 0x6d4) (async) r2 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r2, 0x10}], 0x1, 0x2) (async) close(r2) (async) r3 = kqueue() (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x3}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) kevent(r3, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) (async) kevent(r3, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) 76.866162ms ago: executing program 4 (id=661): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000b1b000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) faccessat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x3e, 0x0) ioctl$TIOCSETAF(0xffffffffffffff9c, 0x802c7416, &(0x7f0000000000)={0x6, 0x2000007, 0xe5, 0x549, "22f00600000000e714db00000000000000007600", 0x8, 0x2}) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r0 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) write(r0, &(0x7f00000004c0)="9832", 0x2) close(r0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0/file0\x00') write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) chmod(&(0x7f00000000c0)='./file1\x00', 0x8) chroot(&(0x7f0000000740)='.\x00') mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad900183a01fe7900000000000000000000000000bbfe8000000000000000000000000000aa82"]) 74.564097ms ago: executing program 4 (id=662): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCDRAIN(r0, 0x2000745e) munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0xfffc, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x2, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x3, 0x6d5, 0x4}}}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602df7a2c4ee4975f55011a49b70cb710d18fcf8fd1f9794ffa08bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c500191", 0x33}], 0x31ee0fd285c57fd4) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x6, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20}, 0x4) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) 74.397715ms ago: executing program 4 (id=663): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000362000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) getrlimit(0x7, &(0x7f00000000c0)) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1ff, 0x5, 0x1, 0x5, 0x3}, {0x7, 0xfff9, 0xfff9, 0x81, 0x6c}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 74.000142ms ago: executing program 4 (id=664): sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x2}, 0x2, 0x0, 0x0, &(0x7f0000000080)="33108a5b", 0x4) (async, rerun: 32) setsockopt(0xffffffffffffffff, 0x1000000029, 0x4, 0x0, 0x0) (async, rerun: 32) r0 = socket(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) connect$unix(r0, &(0x7f0000000000), 0x10) (async) sendto$unix(r0, &(0x7f0000000280)="4ceb2588", 0xffffff5e, 0x401, 0x0, 0x0) (async, rerun: 32) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x4, 0x0, 0x1, 0x0, "0100", 0x1}) (rerun: 32) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt(r0, 0x8, 0x1, &(0x7f0000000540)="0e4ad86ab3708ebd2707d049dc84ff284825404e20275b503b683da851c9a85c13ddd6669d8969406e7581858fc5c674ac1ceaa1bfed99a8034399129868", 0x3e) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x10) (rerun: 32) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) munmap(&(0x7f00000b6000/0x3000)=nil, 0x3000) (async) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt(r2, 0x0, 0x4, 0x0, 0x0) (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) (async) sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f0000000040)="e7cb97162be16d6a29318d892199d6c11bcc21b68373cdac4819f9d8a172ff9f0afc7b58c37b240a6c1798ff01c1bc1c36089605df872f6aff3ea83ec933fd4cbb52c0c54fa13dca650597b975ff68d9ce815c186250c4f4ad8361361570a8c3fec0cf0dfb758d21a2aafc70ebf0d7cec41e8af1a88250cfe98319230d8d105992f73fb0735c2a9f5af1e5302e75792ad1766884cfc0b46a74fa3e639dc4a64e954ef52be5c7673e", &(0x7f0000000100)=0xa8, &(0x7f0000000140)="d81ccaca9c194508194b8ce53e055f63655036624af55a899a9c7b113670d8c26782e947d0d4c6f8ed06d03e9af405dc1f31201281ecbcbe21e1d6bf374783fccad4d024bb6064050f221d738139ec71176f386fd975797c981c7914bf59ba279c25f49cbf949228d7eb02118a1c9b9449eaff2c5ca209d104be94bcf2", 0x7d) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=[&(0x7f0000000200)='(]/(&(\xb3][\x00', &(0x7f0000000240)='-%^,\x00', &(0x7f0000000280)='+\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='$.$,\x97@\\@\x00', &(0x7f0000000340)='\x00'], &(0x7f0000000500)=[&(0x7f00000003c0)='\'$\t#&@-\\\x00', &(0x7f0000000400)='+)/\x00', &(0x7f0000000440)=',*\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00']) 849.463µs ago: executing program 4 (id=665): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x85, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="6243003b47915d8156c41f3462b255c61b4f0919d7aacd3dc6959cb3e86f4987", &(0x7f0000000000)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x0) r3 = dup2(r2, r1) mmap(&(0x7f000056f000/0x3000)=nil, 0x3000, 0x0, 0x813, 0xffffffffffffffff, 0x8) (async) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000002c0)={0x0}, &(0x7f0000000400)=0xc) r5 = getuid() setuid(r5) (async) r6 = getgid() (async) r7 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfe) ioctl$VNDIOCSET(r7, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r7, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) sendmsg$unix(r2, &(0x7f0000001500)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000280)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000200)="1706305971a873fbda4f398f9c86785114efde6b84afd2724945eb936a9747819c74a6e468a1d10d0da455959a09d324bba969162d35b70ffc45a395731188707498f37f4e12484559b34b7c6c934bf3c5b7383d628ad70ab2cca73bd144434faf0c011fc155f2dd4906a2e8b02d3d20bd8de9b97d869a794923", 0x7a}, {&(0x7f0000000340)="6f0ca35d62f54379ad0a54d4a840323889e43518cf8f67e068a0700079b5a44eb03ed6beeccf8da0627f7f11bf7506e05850bfad25954588949c04161a691b753c1f33f5e52561196c6055443b11dd101267f199340b03b2c8c0cb0977f2d9d8837b74a79bd5be995f115944cfe0f9c1080e075cad9f01e209611a3eeb6d3479ba675c00cb93875c4650af1951d8de8568d028d2e42e63e6", 0x98}], 0x3, &(0x7f0000001480)=ANY=[@ANYBLOB="2000000000000000ffff000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000002000000000000000ffff000100000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000003000000000000000ffff000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x9}, 0x8) ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000001580)={&(0x7f0000001540)='./file0\x00', r2}) (async, rerun: 64) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) write(r0, &(0x7f0000000080)="f81af227c11df3f7ff0100000000", 0xe) 537.534µs ago: executing program 4 (id=666): r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x40000000000000, 0x1000300000000}) fcntl$lock(r0, 0x9, &(0x7f0000000000)={0x2, 0x0, 0x7ff, 0x100000001}) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0x7ff, 0x7, 0xf, 0x8, "337e171780f6269fa406ad298af4fcc262e3c46f", 0x9, 0xfffffeff}) r2 = syz_open_pts() write(r2, &(0x7f00000000c0)="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", 0x1000) 161.673µs ago: executing program 2 (id=667): mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x3, &(0x7f0000000000)={0x0, 0xa4b0}) setrlimit(0x3, &(0x7f0000000000)={0x100000, 0x100000}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x1, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file2\x00', 0x2000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) mknod(0x0, 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') setsockopt(r0, 0x7, 0x7, &(0x7f0000000200)="ad97d91ba8417ca2", 0x8) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f0000000000)={0x3, 0x4, 0xa, 0x1405, "080400000000000000010000000100", 0x4917, 0x7}) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setrlimit(0x3, &(0x7f0000000000)={0x0, 0xa4b0}) (async) setrlimit(0x3, &(0x7f0000000000)={0x100000, 0x100000}) (async) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x1, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) (async) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) (async) mknod$loop(&(0x7f0000000000)='./file2\x00', 0x2000, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) mknod(0x0, 0x2000, 0xd02) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') (async) setsockopt(r0, 0x7, 0x7, &(0x7f0000000200)="ad97d91ba8417ca2", 0x8) (async) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f0000000000)={0x3, 0x4, 0xa, 0x1405, "080400000000000000010000000100", 0x4917, 0x7}) (async) 0s ago: executing program 5 (id=668): setitimer(0x1, &(0x7f0000000140)={{0x8, 0xd}, {0x80, 0x9}}, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10, 0x3a) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x6, 0x101}, {0xfffffffffffffff8, 0x800000000000000}}, 0x0) (async) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x6, 0x101}, {0xfffffffffffffff8, 0x800000000000000}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error ˜2pckbd_enable: command error WARNING: thread `nfsio' (520654) exits with status -1 WARNING: thread `nfsio' (208416) exits with status -1 WARNING: thread `nfsio' (328656) exits with status -1 WARNING: thread `nfsio' (126695) exits with status -1 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error vm_create: uvm_map failed: 12 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 ˜witness: lock order reversal: 1st 0xffffffff839fecd8 &sched_lock (&sched_lock) 2nd 0xffff8000299dee30 &cq->cq_mtx (&cq->cq_mtx) lock order [1] &sched_lock (&sched_lock) -> [2] &cq->cq_mtx (&cq->cq_mtx) #0 mtx_enter+0x95 #1 clockintr_cancel+0x2f #2 mi_switch+0x187 #3 sleep_finish+0x2d8 #4 sys_futex+0xb90 #5 syscall+0xbd4 #6 Xsyscall+0x128 lock order [2] &cq->cq_mtx (&cq->cq_mtx) -> [1] &sched_lock (&sched_lock) #0 mtx_enter+0x95 #1 sleep_setup+0xed #2 msleep_nsec+0x10b #3 dt_ioctl_record_stop+0xbc #4 dtclose+0x109 #5 spec_close+0x466 #6 VOP_CLOSE+0x132 #7 vn_closefile+0x12b #8 fdrop+0x121 #9 closef+0x192 #10 fdfree+0x116 #11 exit1+0x576 #12 sys_exit+0x1a #13 syscall+0xb17 #14 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffff8000299dee30,9,0) at witness_checkorder+0x10d1 mtx_enter(ffff8000299dee20) at mtx_enter+0x95 clockintr_cancel(ffff8000299de2f8) at clockintr_cancel+0x2f mi_switch() at mi_switch+0x187 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 sys_futex(ffff8000fffe2558,ffff800039fe0ba0,ffff800039fe0af0) at sys_futex+0xb90 syscall(ffff800039fe0ba0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb1af0b1cb70, count: -9 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff800039fe0770 rbx 0 rdx 0 rcx 0xffff8000fffe2558 rax 0xffff8000299ddff0 r8 0xffff800039fe0650 r9 0x8080808080808080 r10 0xe3bd2d7cdaaa9a11 r11 0xcaec251284ef9a2d r12 0xfffffd8003f48300 r13 0xfffffd8004738d58 r14 0x3 r15 0xffffffff83418d8b substchar+0x86a5 rip 0xffffffff83191cb5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800039fe0760 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=241452 pid=39597 tcnt=2 stat=sleep flags process=4000000 proc=4000080 runpri=55, usrpri=55, slppri=32, nice=20 wchan=0xffff800039fe0a10, wmesg=fsleep, ps_single=0x0 scnt=0 ecnt=0 forw=0x0, list=0xffff8000fffe3a18,0xffffffff839f5a40 process=0xffff80003c424028 user=0xffff800039fdb000, vmspace=0xfffffd806c4447c0 estcpu=10, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 39597 501885 31986 0 7 0x4000000 syz-executor *39597 241452 31986 0 3 0x4000080 fsleep syz-executor 12932 47741 0 0 3 0x14280 nfsidl nfsio 94903 27036 0 0 3 0x14280 nfsidl nfsio 98594 469821 0 0 3 0x14280 nfsidl nfsio 99642 475725 0 0 3 0x14280 nfsidl nfsio 77762 462286 0 0 3 0x14280 nfsidl nfsio 58597 394336 0 0 3 0x14280 nfsidl nfsio 81044 155130 0 0 3 0x14280 nfsidl nfsio 2709 397612 0 0 3 0x14280 nfsidl nfsio 94915 498138 0 0 3 0x14280 nfsidl nfsio 81922 53672 0 0 3 0x14280 nfsidl nfsio 28283 393350 0 0 3 0x14280 nfsidl nfsio 68343 76135 0 0 3 0x14280 nfsidl nfsio 1366 217730 0 0 3 0x14280 nfsidl nfsio 76571 281479 0 0 3 0x14280 nfsidl nfsio 90149 304769 0 0 3 0x14280 nfsidl nfsio 41347 334543 0 0 3 0x14280 nfsidl nfsio 61765 214336 0 0 3 0x14280 nfsidl nfsio 85135 167121 0 0 3 0x14280 nfsidl nfsio 62250 345041 0 0 3 0x14280 nfsidl nfsio 49221 339481 0 0 3 0x14280 nfsidl nfsio 78689 475384 21077 0 3 0x80 nanoslp syz-executor 78689 223782 21077 0 3 0x4000080 kqread syz-executor 78689 409199 21077 0 3 0x4000080 fsleep syz-executor 66772 318114 57669 0 3 0x80 nanoslp syz-executor 66772 99692 57669 0 3 0x4000080 sbwait syz-executor 66772 329463 57669 0 3 0x4000080 fsleep syz-executor 66772 109503 57669 0 3 0x4000080 fsleep syz-executor 72076 302995 46076 0 3 0x80 nanoslp syz-executor 72076 144824 46076 0 3 0x4000080 fsleep syz-executor 72076 383873 46076 0 3 0x4000080 fsleep syz-executor 72076 14210 46076 0 3 0x4000080 kqread syz-executor 96591 444881 1 0 3 0x82 nanoslp getty 47134 129392 83162 0 3 0x82 nanoslp syz-executor 28641 272899 0 0 3 0x14200 acct acct 57669 404092 83162 0 3 0x82 nanoslp syz-executor 21077 144257 83162 0 3 0x82 nanoslp syz-executor 31986 20731 83162 0 3 0x82 nanoslp syz-executor 56886 227094 83162 0 3 0x82 wait syz-executor 42374 281768 83162 0 3 0x2 biowait syz-executor 46076 278157 83162 0 3 0x82 nanoslp syz-executor 19515 353957 83162 0 3 0x82 wait syz-executor 83162 269856 60914 0 3 0x82 kqread syz-executor 60914 87070 56767 0 3 0x10008a sigsusp ksh 56767 47645 11543 0 3 0x98 kqread sshd-session 11543 53177 31059 0 3 0x92 kqread sshd-session 31059 393188 1 0 3 0x88 kqread sshd 52420 363495 127 74 3 0x1100092 bpf pflogd 127 180893 1 0 3 0x80 sbwait pflogd 89067 216151 59012 73 3 0x1100090 kqread syslogd 59012 154203 1 0 3 0x100082 sbwait syslogd 97247 509619 1 0 3 0x100080 kqread resolvd 62639 359723 81773 77 3 0x100092 kqread dhcpleased 21565 38590 81773 77 3 0x100092 kqread dhcpleased 81773 59290 1 0 3 0x80 kqread dhcpleased 93066 322029 0 0 3 0x14200 bored smr 80387 13167 0 0 3 0x14200 pgzero zerothread 86618 292811 0 0 3 0x14200 aiodoned aiodoned 64387 130150 0 0 3 0x14200 syncer update 75732 138883 0 0 3 0x14200 cleaner cleaner 26244 458050 0 0 3 0x14200 reaper reaper 5729 300535 0 0 3 0x14200 pgdaemon pagedaemon 25541 268368 0 0 3 0x14200 bored viomb 69281 394398 0 0 3 0x40014200 acpi0 acpi0 986 156390 0 0 3 0x40014200 idle1 36525 248505 0 0 3 0x14200 bored softnet1 81929 360313 0 0 3 0x14200 bored softnet0 71255 361911 0 0 3 0x14200 bored systqmp 74119 209666 0 0 3 0x14200 bored systq 13594 496929 0 0 3 0x14200 tmoslp softclockmp 72181 369082 0 0 3 0x40014200 tmoslp softclock 38426 50110 0 0 3 0x40014200 idle0 1 335673 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex &sched_lock r = 0 (0xffffffff839fecd8) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 sleep_finish+0x1d6 #3 sys_futex+0xb90 #4 syscall+0xbd4 #5 Xsyscall+0x128 Process 39597 (syz-executor) thread 0xffff8000fffe3a18 (501885) exclusive kernel_lock &kernel_lock r = 1 (0xffffffff83a09780) #0 witness_lock+0x5f1 #1 intr_handler+0xe9 #2 Xintr_ioapic_edge23_untramp+0x18f #3 Xspllower+0x1d #4 pmap_write_protect+0x526 #5 uvm_map_protect+0xb95 #6 sys_mprotect+0x351 #7 syscall+0xbd4 #8 Xsyscall+0x128 exclusive rwlock uobjlk r = 0 (0xfffffd806d0cb248) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_map_protect+0xb36 #3 sys_mprotect+0x351 #4 syscall+0xbd4 #5 Xsyscall+0x128 exclusive rwlock vmmaplk r = 0 (0xfffffd806c4448c0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvm_map_protect+0xe0 #4 sys_mprotect+0x351 #5 syscall+0xbd4 #6 Xsyscall+0x128 Process 42374 (syz-executor) thread 0xffff8000ffffdc90 (281768) exclusive rrwlock inode r = 0 (0xfffffd806e788498) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806cd4b7c0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11074 12117K 12463K 166960K 13208 0 pcb 18 17K 19K 166960K 235 0 rtable 242 9K 10K 166960K 482 0 pf 34 17K 19K 166960K 100 0 ifaddr 43 7K 8K 166960K 84 0 ifgroup 55 2K 2K 166960K 119 0 sysctl 3 1K 9K 166960K 7 0 counters 70 37K 38K 166960K 146 0 ioctlops 0 0K 4K 166960K 1597 0 iov 0 0K 20K 166960K 64 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1405 88K 89K 166960K 2004 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 14 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 30 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 814 0 sigio 0 0K 0K 166960K 58 0 proc 72 115K 164K 166960K 658 0 subproc 72 4K 4K 166960K 82 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 81 0 in_multi 98 7K 7K 166960K 148 0 ether_multi 1 0K 0K 166960K 9 0 mrt 1 0K 0K 166960K 13 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 520 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 253 168K 190K 166960K 9720 0 UVM aobj 30 6K 8K 166960K 37 0 pinsyscall 42 84K 106K 166960K 1993 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 60 0 NDP 13 0K 2K 166960K 58 0 temp 53 8674K 8749K 166960K 32833 0 kqueue 14 22K 28K 166960K 149 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 91 0 87 1 0 1 1 0 8 0 rtentry 176 143 0 41 6 0 6 6 0 8 0 unpcb 144 549 0 530 4 2 2 2 0 8 1 syncache 336 8 0 8 3 2 1 1 0 8 1 tcpqe 32 3 0 3 2 2 0 1 0 8 0 tcpcb 736 358 0 350 13 9 4 10 0 8 2 arp 136 21 0 4 1 0 1 1 0 8 0 inpcb 328 989 0 941 18 11 7 13 0 8 2 nd6 152 31 0 6 2 0 2 2 0 8 1 pkpcb 40 6 0 6 3 2 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 34 0 34 3 2 1 1 0 8 1 pffrag 232 6 0 1 1 0 1 1 0 482 0 pffrnode 88 6 0 1 1 0 1 1 0 8 0 pffrent 40 9 0 4 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 rttmr 136 3 0 3 2 1 1 1 0 8 1 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 669 0 224 34 1 33 33 0 8 3 art_table 40 673 0 224 6 0 6 6 0 8 0 art_node 32 142 0 50 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 1 1 0 1 1 0 8 0 semapl 112 26 0 16 1 0 1 1 0 8 0 shmpl 112 32 0 6 1 0 1 1 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 2912 0 1398 96 0 96 96 0 8 0 ffsino 296 2912 0 1398 118 1 117 118 0 8 0 nchpl 144 4043 0 2339 64 0 64 64 0 8 0 rtmask 32 8 0 8 2 1 1 1 0 8 1 vnodes 216 3324 0 0 185 0 185 185 0 8 0 namei 1024 14343 0 14342 4 3 1 2 0 8 0 percpumem 16 88 0 38 1 0 1 1 0 8 0 vcpupl 3968 1 0 0 1 0 1 1 0 8 0 vmpool 848 2 0 1 1 0 1 1 0 8 0 kstatmem 264 78 0 52 4 1 3 3 0 8 1 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 2 0 2 2 1 1 1 0 8 1 scxspl 216 30910 0 30909 11 4 7 8 1 8 6 plimitpl 152 253 0 235 1 0 1 1 0 8 0 sigapl 424 1152 0 1084 9 1 8 8 0 8 0 knotepl 120 318 0 0 10 0 10 10 0 8 0 kqueuepl 224 264 0 251 4 3 1 3 0 8 0 pipepl 344 186 0 158 3 0 3 3 0 8 0 fdescpl 528 1110 0 1079 3 0 3 3 0 8 0 filepl 160 6816 0 6553 28 13 15 20 0 8 3 lockfpl 104 277 0 274 1 0 1 1 0 8 0 lockfspl 48 101 0 98 1 0 1 1 0 8 0 sessionpl 144 28 0 20 1 0 1 1 0 8 0 pgrppl 48 45 0 29 1 0 1 1 0 8 0 ucredpl 104 1050 0 1036 1 0 1 1 0 8 0 zombiepl 144 1287 0 1284 1 0 1 1 0 8 0 processpl 1232 1152 0 1084 6 0 6 6 0 8 0 procpl 664 2358 0 2281 7 0 7 7 0 8 0 sosppl 176 8 0 7 2 1 1 1 0 8 0 sockpl 752 1653 0 1582 24 14 10 18 0 8 2 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 124 0 0 16 0 16 16 0 8 0 mcl2k 2048 33 0 0 5 0 5 5 0 8 0 mtagpl 96 31 0 0 1 0 1 1 0 8 0 mbufpl 256 834 0 0 53 0 53 53 0 8 0 bufpl 280 13053 0 6917 439 0 439 439 0 8 0 anonpl 32 12067 0 0 98 0 98 98 0 246 0 amapchunkpl 152 32026 0 31516 48 15 33 33 0 158 7 amappl16 200 4676 0 4641 46 28 18 28 0 8 7 amappl15 192 22 0 22 1 1 0 1 0 8 0 amappl14 184 33 0 32 1 0 1 1 0 8 0 amappl13 176 441 0 440 1 0 1 1 0 8 0 amappl12 168 1493 0 1451 3 0 3 3 0 8 0 amappl11 160 9 0 9 2 2 0 1 0 8 0 amappl10 152 48 0 34 1 0 1 1 0 8 0 amappl9 144 253 0 253 1 1 0 1 0 8 0 amappl8 136 36 0 33 1 0 1 1 0 8 0 amappl7 128 80 0 79 1 0 1 1 0 8 0 amappl6 120 310 0 296 1 0 1 1 0 8 0 amappl5 112 85 0 74 1 0 1 1 0 8 0 amappl4 104 447 0 416 1 0 1 1 0 8 0 amappl3 96 5326 0 5228 4 1 3 3 0 8 0 amappl2 88 1283 0 1202 3 0 3 3 0 8 0 amappl1 80 13406 0 12811 17 2 15 16 0 8 0 amappl 88 8834 0 8661 5 0 5 5 0 92 0 uvmvnodes 80 133 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 36 0 7 1 0 1 1 0 8 0 uaddrrnd 24 1110 0 1079 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1110 0 1079 1 0 1 1 0 8 0 vmmpekpl 168 11143 0 11097 3 0 3 3 0 8 0 vmmpepl 168 79364 0 77411 117 8 109 110 0 357 11 vmsppl 488 1109 0 1079 6 1 5 5 0 8 0 rwobjpl 80 25083 0 23968 35 2 33 33 0 8 1 pdppl 4096 2231 0 2161 106 32 74 85 0 8 4 pvpl 32 19459 0 0 158 1 157 157 0 265 0 pmappl 256 1111 0 1080 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 347 0 50 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83839ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 mtx_enter(ffffffff839fecc8) at mtx_enter+0x377 wakeup_n(fffffd800b07b118,ffffffff) at wakeup_n+0x54 sd_buf_done(fffffd805f836200) at sd_buf_done+0x2de scsi_done(fffffd805f836200) at scsi_done+0x40 vioscsi_vq_done(ffff8000000a4268) at vioscsi_vq_done+0xe1 intr_handler(ffff8000333c2370,ffff8000002a3480) at intr_handler+0x125 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f Xspllower() at Xspllower+0x1d pmap_write_protect(fffffd806a5ceb00,b1ae8bd1000,b1ae8fd0000,1) at pmap_write_protect+0x526 uvm_map_protect(fffffd806c4447c0,b1ae8bd1000,b1ae8fd0000,1,0,0,18c1e7dbb192f307) at uvm_map_protect+0xb95 sys_mprotect(ffff8000fffe3a18,ffff8000333c2740,ffff8000333c2690) at sys_mprotect+0x351 syscall(ffff8000333c2740) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x767053c32dc0, count: -16 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffff8000299dee30,9,0) at witness_checkorder+0x10d1 mtx_enter(ffff8000299dee20) at mtx_enter+0x95 clockintr_cancel(ffff8000299de2f8) at clockintr_cancel+0x2f mi_switch() at mi_switch+0x187 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 sys_futex(ffff8000fffe2558,ffff800039fe0ba0,ffff800039fe0af0) at sys_futex+0xb90 syscall(ffff800039fe0ba0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb1af0b1cb70, count: -9