last executing test programs: 4.149176352s ago: executing program 3 (id=888): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x184, 0x4}, 0xfeffffffffffffff, 0x80004, 0x28c}) (async) r1 = socket(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500003000000000002c907800000020e0001002"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r2 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0xc0206921, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000500)="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", 0xb01}], 0x1) write(r4, &(0x7f0000000080)="c30516845e", 0xff55) (async) close(r5) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 4.148494504s ago: executing program 4 (id=889): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x7, 0x6, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0x8, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x40000002, 0x1, 0x8, 0x95}, {0x82ce1, 0x800, 0x9c29, 0x4400006d}, {0x3, 0x803, 0x14, 0x6}, {0xffffffff, 0x82, 0x4, 0x400009}, {0x5, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x7, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0xffe}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x3, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.006696286s ago: executing program 4 (id=890): r0 = socket$inet(0x2, 0x2, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) select(0x65, &(0x7f0000000040)={0x4000b, 0x5, 0x4008, 0x7fffffffffffffff, 0x2, 0x1000000000090, 0x204c}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080), 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x0, 0x0) 4.006120126s ago: executing program 4 (id=891): madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5) r0 = syz_open_pts() readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/159, 0x9f}], 0x1) r1 = getpid() open(&(0x7f0000000080)='./file0\x00', 0x2d1998643c0a72a0, 0x1) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40001738, r1) nanosleep(&(0x7f00000025c0), &(0x7f0000001180)) r2 = open(&(0x7f0000000640)='./file0\x00', 0x70e, 0x10c) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/38, 0x26}], 0x1) r4 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r5 = socket(0x18, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) write(r4, &(0x7f0000000000)="b9", 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r4, 0x0) pwrite(r2, &(0x7f0000001080)='q', 0x1, 0x9) execve(0x0, 0x0, 0x0) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) r10 = socket(0x2, 0x3, 0x0) close(r10) connect$unix(r10, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r9, 0x20000000) unlink(&(0x7f00000000c0)='./file0\x00') r11 = socket(0x11, 0x3, 0x0) select(0x40, &(0x7f0000000300)={0x7, 0x7, 0x2, 0xc0, 0xa, 0x10000, 0x9, 0x101}, 0x0, &(0x7f0000000380)={0x5d4b, 0x2, 0xffff, 0x5, 0x2, 0x2f5, 0xb682, 0xded}, 0x0) sendto$unix(r11, &(0x7f0000000000)="b1000504000004000000000007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000ed710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba090000001de371a3f8343732051ed6b71989e0000405f8fffffe13000000", 0xb1, 0x2, 0x0, 0x0) 3.46785196s ago: executing program 7 (id=912): mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6385) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r0, 0xc4504442, &(0x7f0000000300)={0x200032, 0x4, 0xffffffff, 0x0, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x7eb, 0xfffffffe}) select(0x5b, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xe, 0x4, 0x2800000000000000, 0x181c, 0x8, 0x423f}, 0x0, 0x0, 0x0) r1 = kqueue() r2 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0xc0f8, 0x1, 0x6, 0x8, "26ff6f26f26cc8a22b34b3adf97471a9b433eb88", 0x2, 0x2}) write(r2, &(0x7f00000004c0)="98322715a208d2f9abd6ffb76f39b675cb458c8361ca8e5b8deae880484f827f2bd686ba74ae0a9ca761f4d4e5e3e6354f294b834c290e27181b0fcf578a9e37db1340e6aef8b67cc1530bb5891b05b827cadd5a84439aa26b1482c04608463d61733f3205a7d21d899343b690268ebd2d9564e03b1c", 0x76) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) kevent(r1, &(0x7f00000003c0)=[{{r2}, 0xfffffffffffffff9, 0x53, 0x80000004, 0x5, 0x80000001}, {{r2}, 0xfffffffffffffffb, 0x80, 0x2, 0x60, 0x9}, {{r3}, 0xfffffffffffffff8, 0x58, 0xfffff, 0x3ff, 0x8000000000001}], 0x8, &(0x7f0000000200), 0x1d, 0x0) r4 = open(&(0x7f0000000300)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000080)='./file1\x00', 0x80, 0x112) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d1", 0x3}], 0x1, 0x80c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x1, 0x3, 0x5) getsockopt$sock_timeval(r5, 0xffff, 0x1005, &(0x7f00000000c0), &(0x7f0000000100)=0x10) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0xfffffffeffffffff, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r7, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000140)={&(0x7f00000000c0)}) mknod(&(0x7f0000000000)='./bus\x00', 0x6000, 0x285b9a) r8 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r8, 0x82907003, &(0x7f0000000140)=0x1) 3.467011658s ago: executing program 1 (id=914): sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) 3.465853112s ago: executing program 1 (id=915): r0 = socket$inet(0x2, 0x2, 0x7f) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="a18184a3e35fe9a78787ece6a3ef00907e28090548bb1bf9346fb46868ebafd30ab2c4c0ad13eee0870592db7b9203eff6cb78c897405758ecee09aece1e0ac514b3da51d203245be898ae9be4044accbd2a1d0829c939de761b07ad94aae53e1b7480c39341e19f59cbb8594a42f825bbdb34a6beb48f05e93bd7b2b08a308cbbce2bae0e8ccc0a49c06f0bf5a3cee67f256bae6e5aea28088d65aaa7867761e2", 0xa1}], 0x1) (async) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0}, 0xc) (async) r1 = accept$inet(r0, &(0x7f0000000140), &(0x7f0000000180)=0xc) sendto$inet(r1, &(0x7f00000001c0)="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", 0x1000, 0x0, &(0x7f00000011c0)={0x2, 0x0}, 0xc) (async) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0xc014575e, &(0x7f0000001240)={0x6, './file0\x00'}) (async) bind$inet(r0, &(0x7f0000001280)={0x2, 0x2}, 0xc) (async) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000012c0), 0x10000, 0x0) ioctl$WSKBDIO_SETBELL(r3, 0x80105703, &(0x7f0000001300)={0x1, 0x7, 0x80000001, 0x830}) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) sysctl$kern(&(0x7f0000001340)={0x1, 0x23}, 0x2, &(0x7f0000001380)="6eb45848f2c0845271e3671a476d6bf28f4e1effeb06913dd2d08db145a09ee7391a8350f50752b5a53eadf28f797629f714d52a213619e29e3685b92e936163e92a9e7e3caf61dfe3bf489f9eaeea1fbb1264d4a13fd9ed496f81dbd89042b4444913c1caced5712b5e70f0161219cb1e56312c1598013dca4e4107e488406c38dab0b83f3d1a9dd458c43c64428d9935b80e46c4f0ad5fffb365366adaa97cf5b541f33e0d344ebf1cd3b8de262c927f9c63858b564beab3aeb190cebf4ab5e6", &(0x7f0000001480)=0xc1, &(0x7f00000014c0), 0x0) (async) r4 = open(&(0x7f0000001500)='./file0\x00', 0x8000, 0x44) (async) sysctl$kern(&(0x7f0000001540)={0x1, 0x23}, 0x2, &(0x7f0000001580)="2d376ac3a18a2b0e8f6b1972e297cce0dd85e170c45dcc841ee1768324d3b359f667e83204b0e5c7", &(0x7f00000015c0)=0x28, &(0x7f0000001600)="62f91ed0cea5d1c1385facf9a2be9f4737fc2cffc7159bc42cf5a0fa60b9340f20593c181c84c6baa063664f0d", 0x2d) recvfrom(r4, &(0x7f0000001640)=""/255, 0xff, 0x1042, &(0x7f0000001740)=@un=@file={0x0, './file0\x00'}, 0xa) (async) r5 = accept$inet(r0, &(0x7f0000001780), &(0x7f00000017c0)=0xc) connect$inet(r5, &(0x7f0000001800)={0x2, 0x2}, 0xc) (async) acct(&(0x7f0000001840)='./file0/file0\x00') (async) ioctl$FIONBIO(r4, 0x8004667e, &(0x7f0000001880)) sysctl$net_inet6_ip6(&(0x7f00000018c0)={0x4, 0x18, 0x29, 0x1}, 0x4, &(0x7f0000001900)="263e0606570441ecb4ac663c6afa8b39accda71ab53c49b730e3b28ae836673c2cdf6c63c442a41cb9d54bb1450d20345b0d478b8083605f4b39ff36b69b595e202e6a1c2fb59197e1f33b2c4e56b961bd90c2d5b0d0bfaa8c529c6ca451650715e119b29615c661fa64e49301d50d9953f86ccf2590734fdbd3af0f7744167e8e12e5f4f9b0584975dc04fd3c9254367a65095608921d701cfe16460c3ad6d7cb61d167b9ac113270878262a895d9d17c80124675b146346ef8ac580f92", &(0x7f00000019c0)=0xbe, &(0x7f0000001a00), 0x0) (async) close(r2) r6 = syz_open_pts() (async) ioctl$VMM_IOC_CREATE(r4, 0xc2585601, &(0x7f0000001a40)={0x10, 0x5, [{&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xebc}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xa1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x44}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1000}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xf}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xb4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x331}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffff7f65}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xf804}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}], './file0/file0\x00', 0x8}) sendto(r1, &(0x7f0000001c40)="433703f424c99cf6f6b1456924912959be98fdd78fb20fbf106b79536a4078f1a1736e989993e74b3f5319f59e96b8ae62ec5bdd55526f60176243db78879ed9b321bca47a5ef15fa101c4203f82c474aeeb8a24895e0aee14bc6db0cbe4e90b7ed74d58da2e25681469b469506e5b222198188cbbd938c6e533b45f5275c5bc524626abfede45949322f97ac15d2a2c68f8212a362a16fd8582c7fe13f1d0ca3923d2", 0xa3, 0x6, &(0x7f0000001d00)=@in={0x2, 0x1}, 0xc) (async) r7 = fcntl$dupfd(r1, 0xa, r6) poll(&(0x7f0000001d40)=[{0xffffffffffffffff, 0x40}, {r7, 0x100}], 0x2, 0x7fffffff) (async) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) getsockname$inet(r5, &(0x7f0000001d80), &(0x7f0000001dc0)=0xc) (async) recvfrom$inet(r1, &(0x7f0000001e00)=""/43, 0x2b, 0x40, &(0x7f0000001e40)={0x2, 0x2}, 0xc) (async) sysctl$kern(&(0x7f0000001e80)={0x1, 0x14}, 0x2, &(0x7f0000001ec0)="ce667d34a811ba6bfad53fab444d41f8432e0818d263fc1f6b287122ba811cbb766cfb92b196252cf382bb0cceb42fad8240f88e45f7d492d9b0a87e70a4ac27ad0410c59d15882003356d5eb86d8ece1201181821a76a1dc8759a59ab3f53d139d67012f3b8fa05d951c9b2f6235593befdada1e46992e17c536f05e3d9cde5ada2f431c09dabd15cb7d6df73163bd8f3f4ef1053ed739cc658596e7e731df7e73c9847f8418bdbf1fa34d5cee8d325e57f54630bcfc88caa818a50a8df6095d23cf867a8ee178e132a14d69ad502e01201b8e584de2dc5f1e576", &(0x7f0000001fc0)=0xdb, &(0x7f0000002000)="74cddae25086897f9d91937ae0ebabbca493709400d47c61ceda113c31a01c7cfc72fc7615896854411b2b212e0709d3408f8a02134676d3c227631ea09c0fa36303d56985e20be912233212", 0x4c) 2.353777699s ago: executing program 7 (id=916): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x0, [{&(0x7f000005f000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil, 0x200000000000000}, {&(0x7f00000a3000/0x2000)=nil, &(0x7f000009e000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000054000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f000009d000/0x4000)=nil, &(0x7f000008e000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f000079c000/0x3000)=nil, 0x1}, {&(0x7f00002ef000/0x3000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00003cf000/0x3000)=nil}, {&(0x7f00000a1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f000037d000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f000009a000/0x4000)=nil, &(0x7f0000090000/0x2000)=nil, 0x2}, {&(0x7f000009e000/0x4000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00', 0x6}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r0, 0xc2c04200, &(0x7f00000001c0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000362000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000080)='./bus/file0\x00', 0x8, &(0x7f0000000100)='./bus\x00', 0x6}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = open(&(0x7f0000000000)='./bus/file0\x00', 0x80, 0x41) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$WSKBDIO_GETBACKLIGHT(r2, 0x400c5711, &(0x7f0000000040)) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r3 = syz_open_pts() close(r3) syz_open_pts() read(r3, &(0x7f0000000240)=""/170, 0xaa) ioctl$FIOASYNC(r3, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCCBRK(r3, 0x2000747a) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) 2.353229555s ago: executing program 4 (id=918): r0 = socket(0x18, 0x1, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xfffffff9, 0xffff63db, 0x9, 0x8, 0x8, 0x8007c, 0x47, 0x10, [{0x8, 0x10000, 0xfffff115, 0x80000002}, {0x0, 0xffffffff, 0x200100, 0xfff}, {0x2, 0x4ba8, 0x0, 0x9}, {0x5, 0x8020fe, 0xf, 0x2000102}, {0x4, 0x2000007, 0x5, 0x5}, {0x7, 0xfffd, 0x8, 0x3}, {0x3, 0xa00, 0x3, 0xfffffffe}, {0x207, 0xffffffff, 0x228000, 0xffffe2e9}, {0x9, 0x953, 0x5, 0x7fff}, {0x3, 0x1, 0x66, 0x8bfd}, {0x86, 0x0, 0x8a3a0004, 0x2000a}, {0x10000, 0x0, 0x4, 0xa6a}, {0x401, 0x0, 0x400009, 0x4}, {0x3, 0x2, 0x3, 0x6f5fc48f}, {0x3, 0xff, 0x3, 0x9}, {0x9bdf, 0x1, 0xfffffffd, 0xb}]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107", 0xd, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x8) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) 2.290152483s ago: executing program 4 (id=920): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x19, 0xe}, 0x1000, 0x4, 0x1}) semop(0x0, &(0x7f0000000240)=[{0x2, 0x2, 0x800}, {0x2, 0x8, 0x1000}], 0x2) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x6, 0x1, 0xff, 0x80200004, 0x5, 0x10000, 0x10, [{0x4, 0x0, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x800, 0x8007}, {0x401, 0x200726, 0x102801, 0x7}, {0x446, 0x6, 0x800, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x9, 0x803, 0x14, 0x8}, {0x1, 0x6, 0x5, 0x2}, {0xff, 0x7fff, 0x7, 0x88}, {0x447023bc, 0x257, 0x6, 0x3}, {0x800, 0x20000b, 0x8, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x2ba71715, 0x0, 0x1, 0x6}, {0xc, 0x8, 0x49, 0x4}, {0x0, 0x10001, 0x1002, 0x30804}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0x7}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="a77a97e67bcaa2d936c6c8739bc4af04150f5c07b47822fbd3f081ca67b0b0c27f484792c3e94b6d30bb9d321adf8ff732b6b7e9522c97cf80201600000000000000", 0x42}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) getuid() r4 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, &(0x7f0000001c00), &(0x7f0000000040)=0x44, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000300)={&(0x7f00000002c0)={&(0x7f0000000080)=@in6, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000000200)=""/56, 0x35}, {&(0x7f00000001c0)=""/44, 0x2c}], 0x3, &(0x7f00000003c0)=""/104, 0x60}, 0x9}, 0x10, 0x442, &(0x7f0000000340)={0x3, 0x414a25af}) 2.288136409s ago: executing program 4 (id=922): r0 = shmget$private(0x0, 0x3000, 0x41, &(0x7f0000ffd000/0x3000)=nil) writev(0xffffffffffffffff, &(0x7f0000001cc0), 0x0) r1 = msgget$private(0x0, 0xb) msgsnd(r1, &(0x7f0000002500)=ANY=[@ANYBLOB="03"], 0x0, 0x0) msgrcv(r1, &(0x7f0000000300)={0x0, ""/16}, 0x18, 0x3, 0x1000) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket(0x1, 0x2, 0x9) getsockopt(r3, 0x800000, 0xb, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[]) recvmsg(r2, &(0x7f0000001900)={&(0x7f0000000100)=@in6, 0xc, &(0x7f0000001800)=[{&(0x7f0000000180)=""/252, 0xfc}, {&(0x7f0000000340)=""/140, 0x8c}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000400)=""/131, 0x83}, {&(0x7f0000000280)=""/66, 0x42}, {&(0x7f0000001540)=""/71, 0x47}, {&(0x7f00000015c0)=""/115, 0x73}, {&(0x7f0000001640)=""/137, 0x89}, {&(0x7f0000001700)=""/254, 0xfe}, {&(0x7f00000004c0)=""/49, 0x31}], 0xa, &(0x7f00000018c0)=""/9, 0x9}, 0x842) syz_emit_ethernet(0x138, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x4001, 0x0) r5 = socket(0x18, 0x1, 0x0) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000029, 0x36, 0x0, 0x0) getsockopt(r5, 0x29, 0x37, 0x0, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) r7 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$TIOCSETA(r7, 0xcd50441a, &(0x7f0000000040)={0x6, 0x8001, 0x7, 0xd5, "00000000000000000000001500", 0x3, 0x1}) r8 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r8, 0xca605601, &(0x7f0000000040)={0xffffffff, 0x0, 0x80}) socketpair$unix(0x1, 0x5, 0x0, 0x0) r9 = syz_open_pts() ioctl$TIOCSTAT(r9, 0x20007465, 0x0) ioctl$TIOCDRAIN(r9, 0x2000745e) execve(0x0, 0x0, 0x0) r10 = fcntl$getown(0xffffffffffffffff, 0x5) r11 = getegid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000040)={{0x4, 0x0, r11, 0x0, 0x0, 0x40, 0xd7f3}, 0x6, 0xfff8, 0x0, r10, 0x4, 0x6, 0x200}) 2.287053455s ago: executing program 1 (id=923): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63db, 0x5, 0x2, 0x8, 0x6, 0x9, 0x10, [{0x3, 0x3, 0xfffff115, 0x80000001}, {0xffffffff, 0xffffffff, 0x6, 0x2000fff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0xf, 0x100}, {0x0, 0x10007, 0xf15, 0x1000084}, {0x788c, 0xa, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffe}, {0x103, 0xffffffff, 0x28000, 0xffffe2eb}, {0x4, 0x1000, 0x6, 0x20008001}, {0x3, 0x5, 0xb, 0x8bfd}, {0x80000000, 0x0, 0x8, 0x6}, {0x10010000, 0x0, 0x800001, 0x1}, {0x401, 0x4, 0x9, 0x3ff}, {0x3, 0x6e2, 0x2, 0xfffffffd}, {0x3, 0x0, 0x3, 0x9}, {0x9be2, 0x1, 0x1000002, 0x8e}]}) r0 = socket(0x20, 0x2, 0x0) setsockopt(r0, 0x0, 0x21, &(0x7f0000000140)='!\x00\x00\x00', 0x4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x563, 0x9ce8, 0x400000000, 0x4, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/65, 0x41}, 0x40) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0xfffffffd, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x7f}, {0x4, 0x1, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x4, 0x800, 0x14, 0x1000008}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xfff, 0x4}, {0x1cc, 0x10001, 0x800000c, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r5 = semget$private(0x0, 0x1, 0x0) semctl$GETZCNT(r5, 0xdda890c99cf7dad1, 0x7, &(0x7f0000000180)=""/171) r6 = kqueue() kevent(r6, &(0x7f00000013c0)=[{{r4}, 0xfffffffffffffffc, 0x95, 0x10, 0xcc, 0x2}, {{r4}, 0xfffffffffffffffc, 0x49, 0x8, 0x2, 0x81}], 0x8, 0x0, 0x15, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x2, 0x0, 0x0, 0x0, 0x41}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x2, 0x1, 0x54) close(r7) socket(0x18, 0x2, 0x0) sendmsg$unix(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) write(r3, 0x0, 0x0) 2.195720685s ago: executing program 1 (id=925): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffdff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100}, 0xfffffffffffffff8, 0x8000800000045, 0x0, 0x0, 0x2, 0x2008005, 0xfbfffffffffffbfb, 0x3}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 2.194784387s ago: executing program 1 (id=926): munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x46) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f0000000040)={'./file0\x00', 0x8, 0x9, 0x4}) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x80, 0x1, 0x1, 0x7}]}) sendto$inet(r0, &(0x7f0000000500)="517db5f084b77c7ec40d7084db5cc695a1a26c3c06ff59996aad638a28677acdcbf4db23c6aa5f49d7e5455f4ce8d7cd692d50e4967ca320a22f57f037fc936ec0d11ab91f7fab8e82e116a14e230c2dddf7b84025b419ae6e18fb143556b6a2eda0914488c89936071a2288dddbae7b0b5d8ff624c6fc39", 0x78, 0x400, &(0x7f0000000580)={0x2, 0x0}, 0xc) (async) getsockname$unix(r0, &(0x7f00000005c0)=@file={0x0, ""/12}, &(0x7f0000000600)=0xe) (async) minherit(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000680), 0x10000, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f00000006c0)={0x7, 0xffffff81, 0xfffffff9, 0x6, 0x101, 0x7fff, 0x7, 0x10, [{0x0, 0x7, 0xe601, 0x9}, {0x0, 0x8, 0x7fffffff, 0x3}, {0x2, 0x2, 0x5, 0x1998}, {0x8, 0x3, 0x8, 0x10}, {0x6, 0x0, 0x80, 0x5}, {0xe, 0x5, 0x20000000, 0x7ff}, {0x1ff, 0xfffffeff, 0x1, 0xa60}, {0x10001, 0x80000000, 0x8000, 0x9}, {0xb, 0xfffffffe, 0xfffffffd, 0xfffffff7}, {0x0, 0x81, 0x3, 0xf3dc}, {0x9, 0x8, 0x6, 0xfff}, {0x0, 0x7f, 0xffffffff, 0xa541}, {0x7ff, 0x3f02a11e, 0xe094, 0x6}, {0x6de, 0x6, 0xb9, 0x7}, {0xffff, 0xd, 0x3}, {0x2, 0x6, 0x3, 0xe4be}]}) setitimer(0x1, &(0x7f0000000800)={{0x7fff, 0x6}, {0x1, 0x8000000000000000}}, &(0x7f0000000840)) (async) mknod(&(0x7f0000000880)='./file0\x00', 0xc000, 0x0) (async) r4 = dup2(r0, r3) (async) bind$unix(r1, &(0x7f00000008c0)=@abs={0x1, 0x0, 0x2}, 0x8) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, r2, 0x2) (async) r5 = open$dir(&(0x7f0000000900)='./file0\x00', 0x80, 0x41) faccessat(r5, &(0x7f0000000940)='./file0\x00', 0x8, 0x3) ioctl$WSMOUSEIO_GTYPE(r3, 0x40045720, &(0x7f0000000980)) (async) r6 = open(&(0x7f0000000a00)='.\x00', 0x20000, 0x21) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f0000000a40)={&(0x7f00000009c0)='./file0\x00', r6}) (async) r7 = accept$inet6(r4, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) connect(r7, &(0x7f0000000b00)=@in6={0x18, 0x2, 0x800}, 0xc) (async) getsockname$inet6(r6, &(0x7f0000000b40), &(0x7f0000000b80)=0xc) (async) r8 = semget(0x3, 0x3, 0x40) semctl$SETALL(r8, 0x0, 0x9, &(0x7f0000000bc0)=[0xfc01, 0x6, 0x99e, 0x3, 0xee69, 0x7ff, 0x8]) (async) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) (async) rename(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='./file0\x00') (async) setsockopt$inet_opts(r6, 0x0, 0x1, &(0x7f0000000c80)="634d30f2be706a83404c5503dc399840e005cd6980096a65b22cebc2161b5fb5331f9e388f1ffddc841e1c61eb734eb5593c277618303f5caf3cdb9a13c62270bae199fe7db2e31847203700539bea4edbae407b2281c2577e08ffaf7e6c4f95aac89d17658968fad1d8e116ce7db46f0864b15e2db6c041b64db4b710477e2d91a575c40800acdab9f8d3d32770bf73df00c92a06a318d710ed54c96070ad15828798729ed92c319776eed7ffade4324d902427b9dc5ebcd0e4b80025772cbfb9184bf1b0f58b5ad0", 0xc9) (async) setitimer(0x2, &(0x7f0000000d80)={{0xf4, 0x7}, {0x0, 0x1}}, &(0x7f0000000dc0)) 993.34203ms ago: executing program 1 (id=928): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) dup(r1) socket(0x18, 0x3, 0x0) (async) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x80206949, &(0x7f0000000100)) (async) ioctl$FIONREAD(r2, 0x80206949, &(0x7f0000000100)) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f00000000c0)={0x150, 0xfe6b, 0xd, 0x160350d, "cc14ee0d2100caa26a364fa8a325850d1ec100", 0x200001, 0x6}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 965.439155ms ago: executing program 7 (id=932): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x201, 0x18b) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffff9c) write(r1, &(0x7f0000000100), 0xfffffe5d) unveil(0x0, &(0x7f0000000080)='c\x00') kevent(r1, 0x0, 0xffeffff1, 0x0, 0x2, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000200)="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", &(0x7f00000001c0)=0xfffffeda, 0x0, 0x0) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0) mknod(0x0, 0x2000, 0x205b9a) open$dir(&(0x7f0000000380)='./file0\x00', 0x74636a9a314b5795, 0x100) 750.390783ms ago: executing program 7 (id=938): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffefbfffffffffa, 0x1, 0x2, 0x1, 0x0, 0x0, 0xdf5a, 0x0, 0xfffffffffffffffe, 0x2f01, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0xa000000, 0xa8, 0x2, 0xce7], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffb, 0x8000ffffffff, 0x100, 0x7b99, 0x1fe, 0xb, 0x2], [0x100000001, 0x2, 0x40000000, 0x4, 0xffffffffffffffff, 0x80000000000000, 0xfffffffffffffffe], [0x472, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x6], [{0x0, 0x5, 0x0, 0x7d06}, {0xfffc, 0x7, 0x5, 0x2}, {0x10, 0x1, 0x5bea, 0x812}, {0x3, 0x5, 0x7, 0x80000001}, {0x10, 0x2, 0x0, 0x805}, {0x400b, 0x2003, 0x40000, 0x2}, {0x8001, 0x20000, 0x4, 0x8}, {0x0, 0x965, 0x0, 0x4}], {0x2000, 0x1000001, 0x10000}, {0x0, 0x0, 0x3, 0x2}}}) (async) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) (async) close(r0) 630.16985ms ago: executing program 7 (id=942): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) setrlimit(0x8, 0x0) (async) setrlimit(0x8, 0x0) r0 = syz_open_pts() close(r0) syz_open_pts() (async) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/227, 0xe3}, {&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000000000)=""/12, 0xc}], 0x3) (async) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000380)=""/227, 0xe3}, {&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000000000)=""/12, 0xc}], 0x3) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000003b40)=[{&(0x7f0000000080)="64f805b85e2aec7593eef786a446ba787ddd53269716ef9747fa0d83288f256b96b5929f36e820a4d9d5860dca14031a8fe0cbe91fa237770c2f54fb3be6734c31083ad8bcb8680d2f3eac06e06805d8395a229a60b952aaddb670352e64e244c6592c3d2b39c8c04060bf4fa13aca696f579efaa126d633b10ab8", 0x7b}], 0x1) (async) writev(r2, &(0x7f0000003b40)=[{&(0x7f0000000080)="64f805b85e2aec7593eef786a446ba787ddd53269716ef9747fa0d83288f256b96b5929f36e820a4d9d5860dca14031a8fe0cbe91fa237770c2f54fb3be6734c31083ad8bcb8680d2f3eac06e06805d8395a229a60b952aaddb670352e64e244c6592c3d2b39c8c04060bf4fa13aca696f579efaa126d633b10ab8", 0x7b}], 0x1) execve(0x0, 0x0, 0x0) writev(r0, &(0x7f0000001880)=[{&(0x7f00000004c0)="33f57cbd9b7a3dce024abd0a4458ebe67b96abcc9815f01b7384118224bac83dd8e2f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb032f1cd7719778b73a00610bbc2cda7a2357f162165a18ec7a8361d61e5f202c9c6839ada531b7f39a0c09140e3052f9116a0a4d3d422542a855d3257c406d5788afe863c7854a8c4906fe9008dcaf7540ee", 0x94}, {&(0x7f00000001c0)="4ac86e07b6f5cf353ce773366d0d1462532e49bb326d1951a16fadedf93ecbca2089c60264be4f5368f05fb89ffcee8bcc1f30c0cd028f53323eed00", 0x3c}, {&(0x7f00000002c0)="8072f965e5368d8a2ce261ea12ce28665881a3c9", 0x14}], 0x3) socket(0x18, 0x3, 0x0) (async) socket(0x18, 0x3, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4}) r3 = socket(0x18, 0x2, 0x0) close(r3) (async) close(r3) r4 = socket(0x800000018, 0x1, 0x0) bind$unix(r4, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r5 = socket(0x18, 0x1, 0x0) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) getpid() (async) getpid() r6 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r6, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x2, 0xfffffff9}, {0x104, 0x900, 0x0, 0x80000001}, {0x4, 0x7fe, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x651, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x40000005}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1c9, 0x10001, 0xc, 0x3}, {0x8, 0x7fffffff, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x3}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) (async) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r6, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x50, 0x2}, 0xc, 0x2a2, 0x0, 0x0, 0x6, 0x800000000000013, 0xc46, 0x40}) r7 = socket(0x18, 0x2, 0x0) setsockopt(r7, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) 602.709758ms ago: executing program 2 (id=943): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {0x0, 0x0, 0x507e}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x200000000000}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x16}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil}], './file0\x00'}) r0 = socket(0x11, 0x3, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x2}, 0x8) r1 = socket(0x1, 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r2 = socket(0x18, 0xc003, 0x3a) openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x67, &(0x7f0000000100)={{0x18, 0x2, 0xffff}, {0x18, 0x0, 0x5, 0x1}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0xca) ioctl$FIONREAD(r1, 0xc028698d, &(0x7f0000000100)) sysctl$hw(&(0x7f0000000000)={0x6, 0x15}, 0x11, &(0x7f0000000040)="14604c9f001dd19f83c68c1a2012c3d5cb437c32cd88e374a7ca1ef8327da098bab0679468c9328b072f3b0ee2c731a679a3027f9f7c0a", 0x0, 0x0, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000200)) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {0x0, 0x0, 0x507e}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x200000000000}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x16}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil}], './file0\x00'}) (async) socket(0x11, 0x3, 0x0) (async) bind$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x2}, 0x8) (async) socket(0x1, 0x1, 0x0) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) socket(0x18, 0xc003, 0x3a) (async) openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x67, &(0x7f0000000100)={{0x18, 0x2, 0xffff}, {0x18, 0x0, 0x5, 0x1}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0xca) (async) ioctl$FIONREAD(r1, 0xc028698d, &(0x7f0000000100)) (async) sysctl$hw(&(0x7f0000000000)={0x6, 0x15}, 0x11, &(0x7f0000000040)="14604c9f001dd19f83c68c1a2012c3d5cb437c32cd88e374a7ca1ef8327da098bab0679468c9328b072f3b0ee2c731a679a3027f9f7c0a", 0x0, 0x0, 0x0) (async) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000200)) (async) 601.170089ms ago: executing program 5 (id=944): r0 = shmget$private(0x0, 0x2000, 0x715, &(0x7f0000ffc000/0x2000)=nil) shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x0) shmctl$SHM_LOCK(r0, 0x3) r1 = getgid() shmctl$SHM_LOCK(r0, 0x3) r2 = socket(0x6, 0x1, 0xfb) shmctl$IPC_RMID(r0, 0x0) r3 = shmget(0x2, 0x12000, 0x40, &(0x7f0000fee000/0x12000)=nil) shmctl$SHM_LOCK(r3, 0x3) shmget(0x3, 0x1000, 0x140, &(0x7f0000ff9000/0x1000)=nil) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r4, &(0x7f0000000040)="040e7755c6f0df6f6d42c919c094cd35e86c858559bfb333eb055c19116eba40f5828867af61f3b78e15bd54eb427d5cf1e5294b833358f10dbc5069128ba5f056719948292cc7c458341a15165d66a7e5170bee136d389d53bbe732a97aed89eb1ee8", 0x63, 0x400, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x3}, 0x8) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x20, 0x1e8) r6 = open$dir(&(0x7f0000000180)='./file0\x00', 0x200, 0x78) linkat(r5, &(0x7f0000000140)='./file0\x00', r6, &(0x7f00000001c0)='./file0\x00', 0x4) open$dir(&(0x7f0000000200)='./file0\x00', 0x20000, 0x0) r7 = semget(0x2, 0x4, 0x118) r8 = semget$private(0x0, 0x1, 0x1c) semctl$GETPID(r8, 0x0, 0x4, &(0x7f0000000240)=""/184) shmat(r3, &(0x7f0000ff5000/0x2000)=nil, 0x0) connect$unix(0xffffffffffffff9c, &(0x7f0000000300)=@file={0x0, './file0/file0\x00'}, 0x10) semctl$IPC_STAT(r8, 0x0, 0x2, &(0x7f0000000340)=""/176) sendmsg(r4, &(0x7f0000000640)={&(0x7f0000000400)=@in6={0x18, 0x0, 0x1, 0x4}, 0xc, &(0x7f0000000480)=[{&(0x7f0000000440)}], 0x1, &(0x7f00000004c0)=[{0xb0, 0xffff, 0x4, "b173d0b85d09f36d1a2c8d4e6c5cfbf4ba7404a77c29045f67014cddba526846c1118eb3f782d48e844675959d7cc9e7de55ee5b213cc9d83ab0fd436a9204c60386114f93a0418521a7abcbed16e49bafe32b3672ba4aa73c12b0066675fb5c85964195a17fea3faddb8c4a5d6457d587b1db8919dfdb1035f68826d649331b1a905b168ed7e492009135fba9e79675a9e35b7bb386fbce186abe5424"}, {0xa0, 0xffff, 0x7ff, "d413233d4f8f5a348ca5bb9bb7688f34870ea3be28b324495386083142bf1b600af9d1653ad2c70d792324541f3f82e3714397eedc270a31fe09cc027c1c84fc90b115b82326e783ffd836eeae30d6e1af5f4c3a6e828469ef1f0e5d9a3cb125389b047540ae6c07c3ff76a9b47a8db544595513c490160ad1d16b4e6241104e7a6e847b0e0d50796a8c7b3ce3a1bd"}], 0x150}, 0x7) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) r10 = getuid() r11 = fcntl$getown(r6, 0x5) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000700)={0x0}, 0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000740)={{0x4, r9, r1, r10, r1, 0x1}, 0x101, 0x1, r11, r12, 0x5, 0x6, 0x7}) semctl$SETALL(r7, 0x0, 0x9, &(0x7f00000007c0)=[0x6]) 598.845225ms ago: executing program 7 (id=945): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x26, &(0x7f0000000000), 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = socket(0x2, 0x4001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r1, &(0x7f0000000000), 0x10) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000380), 0x200, 0x0) poll(&(0x7f0000000680)=[{r2, 0x1}], 0x1, 0x1) poll(&(0x7f0000000040)=[{r1, 0x2}, {r2, 0x5}], 0x2, 0x2) poll(0x0, 0x0, 0x8001) close(r2) getpeername(r1, 0x0, &(0x7f0000000140)) socket(0x20, 0x4, 0x6) r3 = socket$inet(0x2, 0x2, 0x81) r4 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, r4) r5 = getuid() chown(&(0x7f0000000040)='./file0\x00', r5, 0xffffffffffffffff) r6 = getgid() sendmsg$unix(r1, &(0x7f0000000280)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f00000001c0)=[{&(0x7f00000000c0)="2c1b6dbcf029010e3a29ca73f7a51417f01bcd5ef57d9d54a651e9de84e63d22c09de8b69bcd751fd5aa02d8b845d81c9c3c83670f6248c8a111d472a133747add50379063203d79f465b6b0aed6ffe0ba0b51591c28abac1fc3d58132", 0x5d}, {&(0x7f0000000180)="49383f605a601550791d7f7dcca7c1bde7c3a264aa8d56db52dafcc1930216", 0x1f}], 0x2, &(0x7f0000000200)=[@cred={0x20, 0xffff, 0x0, r4, r5, r6}, @rights={0x20, 0xffff, 0x1, [r0, r2, r3]}], 0x40}, 0x400) 535.166934ms ago: executing program 5 (id=949): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = socket(0x2, 0x3, 0x2f) dup(r1) (async) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) (async) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) socket(0x18, 0x1, 0x0) (async) r3 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f00000001c0)=0xc) setpgid(0x0, r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x2, 0x3, 0x0) r6 = dup(r2) dup2(r6, r5) connect$unix(r5, &(0x7f0000000000), 0x10) sendto$inet(r2, &(0x7f00000001c0)="5e1351d18b9da08c", 0x90, 0x0, 0x0, 0x0) ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f0000000040)) (async) ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f0000000040)) r7 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r7, 0x8010570e, &(0x7f0000001bc0)={0x7, &(0x7f0000001c00)=[{0x2, 0x9, 0x1, 0x5b8}, {0x5, 0x5, 0x1, 0x6, 0x7c3}, {0x6, 0x1, 0x3, 0x9, 0x80}, {0xfe01, 0x57f2, 0xf, 0x0, 0x78ac}, {0x2, 0x41, 0x1, 0xfff}, {0x4, 0xe, 0x5, 0x400, 0x2}, {0x4, 0x7fff, 0x4, 0xbad, 0x1}]}) (async) ioctl$WSKBDIO_SETMAP(r7, 0x8010570e, &(0x7f0000001bc0)={0x7, &(0x7f0000001c00)=[{0x2, 0x9, 0x1, 0x5b8}, {0x5, 0x5, 0x1, 0x6, 0x7c3}, {0x6, 0x1, 0x3, 0x9, 0x80}, {0xfe01, 0x57f2, 0xf, 0x0, 0x78ac}, {0x2, 0x41, 0x1, 0xfff}, {0x4, 0xe, 0x5, 0x400, 0x2}, {0x4, 0x7fff, 0x4, 0xbad, 0x1}]}) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) recvmmsg(r8, &(0x7f0000001b40)={&(0x7f0000000200)={&(0x7f00000000c0)=@in, 0xc, &(0x7f0000000a80)=[{&(0x7f0000000280)=""/252, 0xfc}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000500)=""/105, 0x69}, {&(0x7f0000000580)=""/217, 0xd9}, {&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000000740)=""/134, 0x86}, {&(0x7f0000000800)=""/154, 0x9a}, {&(0x7f00000008c0)=""/140, 0x8c}, {&(0x7f0000000980)=""/246, 0xf6}], 0xa, &(0x7f0000000b40)=""/4096, 0x1000}, 0x3}, 0x10, 0x1802, &(0x7f0000001b80)={0x5, 0x4041}) 489.146253ms ago: executing program 2 (id=951): r0 = getegid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x80000, 0x0, 0x0, 0x0, r0, 0xf8, 0x100}, 0x5, 0x8000000000000001, 0x0, 0x0, 0x80, 0xf, 0x1000000000009, 0x8000008000000e5f}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x56}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) writev(r1, &(0x7f0000000200)=[{&(0x7f00000002c0)="cff5c05664da004cdd974a82388ef3596bb868f56c0204d9a534054035129bdb3b8c172b8359eb32d47209b20e003b553a10352e3b0b4f4247b103", 0x3b}, {0x0}], 0x2) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) clock_settime(0x2, &(0x7f0000006b00)={0x8, 0xe}) 487.826285ms ago: executing program 5 (id=952): mknod(&(0x7f0000000140)='./bus\x00', 0x6000, 0x6d4) setgid(0xffffffffffffffff) open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0x0, 0x0) open(&(0x7f0000000280)='./bus\x00', 0x80, 0x0) 477.556497ms ago: executing program 2 (id=955): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/158, 0x9e}], 0x1, 0x4) (async) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000503000004000000000105000000331c01040100008000000000ff0100007ae302fffe4e3039d2d236acf20b7810be38164991f7c8cf5f881029ffffff7fda0000510100ad090000006c0000009b672f4d335c223e7d0c032bfa896443a42102000000720fc18bfbb670c1f5a8b67114d66e2ec589040000000000800078e36b361b1257aea8063076000000000000000004bfba353e537e2ba37f50b609f4f707e37183f834371205d1a7f1c057aa", 0xb1, 0x804, 0x0, 0x39) 343.246694ms ago: executing program 5 (id=956): r0 = socket(0x11, 0x3, 0x3) syz_emit_ethernet(0x6e, &(0x7f0000000000)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "009300", 0x0, 0x3a, 0x88, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4, [], "8816fad0a6c8a2ed"}}}}}}}) sendto$unix(r0, &(0x7f0000000280)="b1000501600000000100000007000000041c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc202000000000000004d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09cc94fc59f8738001040781e40500000000000000000b00000000000000", 0xb1, 0x2, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x1}, {0x2, 0x3}, {}, {0x1}, {0x3}, {0x2, 0x20000000}, {0x1, 0xffffffff}, {}, {0xcbd23ee33f7696d0}, {}, {0x1, 0x80000}, {0x0, 0x3b6}, {0x3, 0x400000}, {}, {0x2, 0x3}, {0x3, 0x800}, {0x1}, {0x0, 0x7ff}, {0x5}, {0x0, 0x7}, {0x3}, {0x3, 0x400}, {}, {0x2, 0x3}, {0x0, 0xfffffffd}, {}, {0x2}, {}, {0x1, 0xa}, {0x1}]}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff}) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) socket$inet6(0x18, 0x1, 0x6) 342.435329ms ago: executing program 3 (id=957): open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) pledge(0x0, &(0x7f00000000c0)='\x00') r0 = socket(0x18, 0x2, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 338.25ms ago: executing program 6 (id=958): syz_emit_ethernet(0x5e, &(0x7f00000011c0)={@local, @local, [], {@ipv6={0x86dd, {0x4, 0x6, "ff0082", 0x28, 0x0, 0xf, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0xf0, 0x2, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @generic={0x3}, @enc_lim={0x4, 0x1, 0x80}, @pad1, @jumbo={0xc2, 0x4, 0x5}]}], @icmpv6=@ndisc_rs}}}}}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x2}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x7}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000697000/0x4000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xefffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000446000/0x1000)=nil, 0x4}, {&(0x7f00004d8000/0x1000)=nil, &(0x7f0000ffa000/0x6000)=nil, 0x1}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x1}], './file0\x00'}) setitimer(0x2, &(0x7f0000000140)={{0x0, 0x122800000000009}, {0x7ffffffc, 0x7ff}}, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x4000)=nil, 0x0) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) shmat(0x0, &(0x7f0000000000/0x3000)=nil, 0x2000) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x0) socket(0x18, 0x1, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x41}, 0x2, &(0x7f0000000080), 0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0x81206919, &(0x7f0000000100)) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) connect(r0, &(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0xa) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='r\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') 321.635352ms ago: executing program 0 (id=959): syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaae404aa86dd6603816a003806300000000000000000000000000000000000000000aa3d259c06b15a443aa1d72c0ce98378b65dde37b9ed8455da3b03"]) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, 0x0, 0x0) r2 = socket(0x800000018, 0x1, 0x0) getsockname$unix(r2, &(0x7f0000002d00)=@file={0x0, ""/520}, &(0x7f0000000280)=0x20a) getsockopt(r0, 0x0, 0x6, 0x0, 0x0) 316.021381ms ago: executing program 2 (id=960): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c00000003000090220008907835ed170bd02d168afa8216238f92975d38ffc0429a9de3f5ca4bfdf37a056bb46e48ece4948bd6de96f4a1044e"]) (async) mknod(0x0, 0x2000, 0x40000802) (async) r0 = open(0x0, 0x0, 0x0) r1 = accept$inet6(r0, 0x0, 0x0) accept(r1, &(0x7f0000000340)=@in6, &(0x7f0000000380)=0xc) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x13, &(0x7f0000000000), 0x4) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x33}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x3, 0x1) connect$unix(r3, &(0x7f0000000000), 0x10) (async) sendto(r3, &(0x7f0000000380)="98edc1cf9d242ff3", 0x8, 0x0, 0x0, 0x0) (async) setrlimit(0xa00a2adee21ce02b, 0x0) (async) mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) 267.439814ms ago: executing program 3 (id=961): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0xf672, 0xffff, 0x1, 0xffffbb81, "1b1837b3127d35044487576a00002f9e68cd3304", 0xb, 0x40007}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0x109}], 0x1, 0x0}, 0x80000006}, 0x10, 0x40, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) execve(0x0, 0x0, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r2, 0x300000) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x40, &(0x7f0000000000)={0x400}, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000009c0)="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", 0x19b}], 0x1) sysctl$hw(&(0x7f0000000000)={0x6, 0x2}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) 264.724013ms ago: executing program 2 (id=962): setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) (async) r0 = socket$inet(0x2, 0x4000, 0x9) close(r0) (async) kevent(0xffffffffffffffff, 0x0, 0xfffbdff7, 0x0, 0x5, &(0x7f0000000240)={0x6, 0x3}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x18, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x3) (async) r2 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0xf9) setuid(0xee01) (async) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f00000010c0)=0x9) (async) setsockopt(r1, 0x1000000029, 0x27, &(0x7f0000000000)="5ab7776a", 0x4) (async) r3 = getuid() (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) setreuid(r3, r4) (async) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) sysctl$hw(&(0x7f0000000080)={0x6, 0x13}, 0x2, 0x0, 0x0, &(0x7f00000000c0), 0x0) ftruncate(r5, 0x3) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async) setitimer(0x0, &(0x7f0000000280)={{0x70f3, 0x10}, {0xffffffff}}, 0x0) (async) r6 = kqueue() r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (async) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) r9 = socket(0x18, 0x2, 0x0) setsockopt(r9, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) r10 = fcntl$dupfd(r5, 0x0, r0) kevent(r6, &(0x7f00000002c0)=[{{r1}, 0xfffffffffffffffd, 0x40, 0x1, 0x65c, 0x5}, {{r1}, 0xfffffffffffffffa, 0x87, 0x1, 0x6a7, 0x1}, {{r5}, 0xfffffffffffffffa, 0x0, 0x1, 0xadc, 0x23f3}, {{r7}, 0xfffffffffffffffd, 0x27, 0x1, 0x2, 0x587}, {{r0}, 0xfffffffffffffff8, 0x84, 0x10, 0x0, 0x1}, {{r0}, 0x7, 0x48, 0x4, 0x5, 0xa}, {{r8}, 0xfffffffffffffffb, 0x68, 0x8, 0x13, 0x40}, {{r0}, 0xfffffffffffffffd, 0xb0, 0x40000000, 0x8000000000000000, 0x5}, {{0xffffffffffffff9c}, 0xfffffffffffffff9, 0x40, 0x80, 0x10001, 0x2}], 0x8, &(0x7f0000000140)=[{{r1}, 0xffffffffffffffff, 0x41, 0x0, 0x4, 0x9}, {{r9}, 0xffffffffffffffff, 0x14, 0x2, 0x7ff, 0x100000000}, {{r1}, 0xfffffffffffffff8, 0x23, 0x8, 0x4, 0xf37}, {{r0}, 0xfffffffffffffffc, 0xe0, 0x4, 0x5, 0xfffffffffffffffd}, {{r10}, 0xfffffffffffffffa, 0x1, 0x1, 0x80000001, 0x2}], 0xd, &(0x7f0000000200)={0x5}) sysctl$kern(&(0x7f0000000280)={0x1, 0x47}, 0x3, &(0x7f0000000100)="71f91e3471ac00584dedbc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0xfffffd5c) 250.78084ms ago: executing program 5 (id=963): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x6a) (async, rerun: 64) setuid(0xee01) (rerun: 64) chdir(&(0x7f0000000100)='./file0\x00') (async) r1 = getpid() (async, rerun: 64) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) (async, rerun: 64) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000640)=""/152, 0x98}], 0x1000000000000006, 0x6) (async) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r1) (async, rerun: 64) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x7fff}, {0x7, 0x4}}, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r0, 0x0) (async) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) 250.137337ms ago: executing program 0 (id=964): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x80, 0x0, 0x3, 0x8, "fc686b340da1e4795af94547bd1305d65c21963c", 0x2}) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000001180), 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0xf672, 0xffff, 0xe2d, 0xffffbb7d, "1b1837b3127d35044487576a00002f9e68cd3304", 0xb, 0x400}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000009c0)="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", 0x19b}], 0x1) r1 = syz_open_pts() fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000300000000}) flock(r1, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad9003c766403d49d367eca5aba85283a0000000000000000000000000000000000fe8000000000000000000000000000000001007800000000ff010000002e0000000000000000000100"/106]) flock(r1, 0x3) fcntl$lock(r1, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x40004, 0x100000001}) 238.977109ms ago: executing program 5 (id=965): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) unlinkat(r0, &(0x7f0000000200)='./file1\x00', 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) sysctl$vfs_nfs(&(0x7f0000000000), 0x7, &(0x7f00000025c0), 0x0, 0x0, 0xfffffffffffffe5f) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x2, &(0x7f00000011c0), 0x0, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000040)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000080)="4a6bd34660b05134ddd7f59afd9f2da43f636d18135b2c0d0e5cfdb4868139", &(0x7f00000000c0)=0x1f, &(0x7f0000000140)="65008835ee3e14f6fab21055b69871da3792a8af99a5a3c374f2e627d016d051c9653150d5e93f18c7cad01b1ce3ec122ff7d60c3967fb001fa296454a75dff4684cc610e9b36a327c28bd4a6d64884498fb1bfcd866c5e94e2c95ba43a641ba116f9cabcec729cdb4459fd67802f222c3116511d69726e50ff6558cae265ebff83dc6", 0x83) 237.93768ms ago: executing program 0 (id=966): sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x85, 0x45}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004745f, &(0x7f0000000000)=0x1d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000002c80)=ANY=[]) sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0xc, &(0x7f00000003c0)="6c6f545fedadaeeab98902000000352ee25c277f7ae307710e55b11edccfa46169f9c3cbacc5d142f5ed3ef8ebb641d58ac2ddc155a278d9260b24", 0x0, 0x0, 0xfffffffffffffdc4) 235.887493ms ago: executing program 6 (id=967): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x80}, {0x0, 0x4}}, 0x0) getitimer(0x0, &(0x7f0000000380)) (async) sysctl$vfs_nfs(&(0x7f0000000100)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000040)="7805937d0be7e575cf06465be8497f1e6bf9907cafa2957f2985a94d36c6287f46a7a7a6ae3878ed53a98aa323bebf6e3c0754ca", &(0x7f0000000140)=0x34, 0x0, 0x0) 130.832079ms ago: executing program 0 (id=968): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCGFILDROP(r0, 0x40044278, &(0x7f0000000040)) ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f0000000080)=0xe) r1 = semget(0x1, 0x4, 0x9) semctl$SETALL(r1, 0x0, 0x9, &(0x7f00000000c0)=[0x100, 0x8, 0x2, 0x7, 0x101, 0x2a9c, 0x3]) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r4 = msgget(0x3, 0x65a) msgrcv(r4, &(0x7f0000000180)={0x0, ""/81}, 0x59, 0x1, 0x800) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000200)) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f0000000240)={'./file0\x00', 0x1000, 0x79580000, 0x8, 0x1, 0xa, 0x8, 0x81, 0x0, 0x1, 0x8, 0x100}) r5 = getpid() getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc) setpgid(r5, r6) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000300)=0x9) setgid(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000380), 0x20, 0x0) ioctl$WSDISPLAYIO_LSFONT(r9, 0xc058574e, &(0x7f00000003c0)) ioctl$BIOCSHDRCMPLT(0xffffffffffffff9c, 0x80044275, &(0x7f0000000440)=0x100) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000480), 0x8, 0x0) ioctl$BIOCSRSIG(r2, 0x80044272, &(0x7f00000004c0)=0x5) fcntl$setown(r8, 0x6, r5) getgroups(0x1, &(0x7f0000000500)=[r7]) ioctl$WSMUXIO_LIST_DEVICES(r9, 0xc1045763, &(0x7f0000000540)={0x70000, [{0x2, 0x8}, {0x3, 0x4f}, {0x3, 0x6}, {0x1, 0xf}, {0x2, 0x9}, {0x1, 0x5b79}, {0x3, 0xffffffff}, {0x3, 0x9587}, {0x1}, {0x3, 0x40}, {0x3, 0x8000}, {0x3, 0x6}, {0x3, 0x4}, {0x1, 0x10}, {0x1, 0x80000001}, {0x2, 0x2}, {0x2, 0xffff}, {0x2}, {0x1}, {0x1, 0x4}, {0x3, 0x4}, {0x1, 0x38}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0x8}, {0x0, 0xfffffffe}, {0x3, 0x4}, {0x2, 0x300000}, {0x1, 0x4c33}, {0x0, 0xce6}, {0x1, 0x4}, {0x1, 0x9}]}) close(r9) ioctl$VT_GETACTIVE(0xffffffffffffff9c, 0x40047607, &(0x7f0000000680)) socket$inet(0x2, 0x2, 0x4d) msgctl$IPC_STAT(0x0, 0x2, &(0x7f00000006c0)=""/191) 130.030391ms ago: executing program 6 (id=969): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/39, 0x27}], 0x1, 0x0}}, 0x10, 0x2040, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) ioctl$BIOCSETIF(r2, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETIF(r2, 0x40384900, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0x80184901, &(0x7f00000000c0)={0x3, '.\x00'}) execve(0x0, 0x0, 0x0) 116.756464ms ago: executing program 6 (id=970): ktrace(0x0, 0x1, 0x40002344, 0x0) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x2, 0x4d00, 0x3, 0x1, "d94b53455427845fb0faa985bbbcea26e1c2d400", 0xffe5, 0x400}) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x2, 0x4d00, 0x3, 0x1, "d94b53455427845fb0faa985bbbcea26e1c2d400", 0xffe5, 0x400}) socket$inet(0x2, 0x3, 0x2) (async) socket$inet(0x2, 0x3, 0x2) mmap(&(0x7f0000c4e000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socket(0x1, 0x2, 0x0) (async) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) open(&(0x7f0000000240)='./file0\x00', 0x2, 0xa8) ioctl$FIONREAD(r2, 0x80206910, &(0x7f0000000100)) kqueue() mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) fcntl$setflags(r1, 0x2, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) r3 = accept(0xffffffffffffff9c, &(0x7f0000000100)=@un=@file={0x0, ""/261}, &(0x7f0000000040)=0x107) setsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f0000000080)={0xff, 0x8}, 0x8) 113.768483ms ago: executing program 0 (id=971): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) (async) open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x3, 0x8, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0xfffffffc, 0x2890, 0x4, 0x5}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1, 0xfffffffa, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x4, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x3, 0x7}, {0xd0f5, 0x82, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x7, 0xa, 0x8}, {0x3, 0x7, 0x6, 0x1}, {0x6, 0xfffffffa, 0x60, 0x6}, {0x10008, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="00000c00e800", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x1c, 0xfffd, 0x0, 0x7, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @icmp=@generic={0x3, 0xdf, 0x0, "e4990320"}}}}}) (async) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @random="00000c00e800", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x1c, 0xfffd, 0x0, 0x7, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @icmp=@generic={0x3, 0xdf, 0x0, "e4990320"}}}}}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 112.429453ms ago: executing program 6 (id=972): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x1) (async) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x1) open(&(0x7f00000000c0)='./file0\x00', 0x800, 0x2) 111.060657ms ago: executing program 3 (id=973): r0 = socket(0x11, 0x3, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffefffff9, 0x44809e9d, 0x7fffffffffffffff, 0x4, 0x2800000000000000, 0x181c, 0x8, 0x423f}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r1 = open(&(0x7f0000000040)='./file1\x00', 0x110, 0x82) r2 = kqueue() mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) kevent(r2, &(0x7f0000000200)=[{{r1}, 0xfffffffffffffff9, 0xf4, 0x1, 0x2, 0xb7b}, {{r2}, 0xffffffffffffffff, 0x8, 0x8, 0x400, 0xbf}, {{r1}, 0x5, 0x21, 0x2, 0x36, 0x5f4}, {{r0}, 0xfffffffffffffff9, 0x46, 0x7c0e3231b12fd174, 0x0, 0x80}, {{r2}, 0xfffffffffffffff9, 0x3, 0x8, 0x9, 0x7fffffff}], 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0xfffffffffffffe6d, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r4, 0x5) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) mkdirat(r1, &(0x7f00000000c0)='./file1\x00', 0x20) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0xc0307004, &(0x7f0000000080)={0x80000000001, 0x100000000000000}) sendto$unix(r0, &(0x7f0000000340)="b10005010000009f05003f0107000000211c13fecea79c5dfaf66e8d0300000000000000fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32618210000720fd38bdb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f834371205050052fbe03f49b11b7aaeb70000fca65361ba84913f0100000000000006000000", 0xb1, 0x408, 0x0, 0x0) 9.831202ms ago: executing program 3 (id=974): mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) accept$inet6(r0, &(0x7f0000000140), &(0x7f0000000280)=0xc) (async) accept$inet6(r0, &(0x7f0000000140), &(0x7f0000000280)=0xc) ioctl$TIOCSETA(r0, 0xc444443b, &(0x7f0000000040)={0xfffffffd, 0x2f, 0xa, 0xe6b, "a2a481001000f4060033000e0100", 0xfffffffc, 0x4}) (async) ioctl$TIOCSETA(r0, 0xc444443b, &(0x7f0000000040)={0xfffffffd, 0x2f, 0xa, 0xe6b, "a2a481001000f4060033000e0100", 0xfffffffc, 0x4}) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) setuid(0xee01) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000080)) (async) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000080)) r1 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2, 0x0, 0xfffffffffffffffe, 0x100000001}) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') readlinkat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)=""/132, 0x84) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x112) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x8, 0x0) readv(r2, &(0x7f0000000080), 0x31) (async) readv(r2, &(0x7f0000000080), 0x31) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r1) ioctl$BIOCGETIF(r3, 0x4020426b, &(0x7f00000002c0)={""/16, @ifru_media}) 9.319625ms ago: executing program 3 (id=975): mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = open(&(0x7f0000000140)='./file0\x00', 0x3a0, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) pread(r1, &(0x7f00000000c0)="7e4b1e20ef090e8340a759fa66c8b0cad2cb04a5a6b2d6afbb1baf513295b5f27a634c188a678fe82071898e9b58db25042a95c28d7db5400158b3f0f1674ea2dbb0471a1e94a1b209a389c442ce6a703bd559a9", 0x54, 0x9527) r2 = kqueue() r3 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x8, 0x126) kevent(r2, &(0x7f0000000040)=[{{r3}, 0xfffffffffffffffd, 0x40, 0x1, 0x1, 0x181b59e5}, {{r0}, 0x3, 0x4, 0x90000086, 0x0, 0x452}], 0x8, 0x0, 0x15, 0x0) 1.125376ms ago: executing program 0 (id=976): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6}, 0x10, 0x1001, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0x0, 0x3, 0x0, "010000010000000800000000000037ea00", 0x0, 0x9}) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) chroot(&(0x7f0000000740)='.\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') setuid(0xffffffffffffffff) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3ffffffffffffdf3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x47}, 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) 431.666µs ago: executing program 6 (id=977): sendmmsg(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], 0x250}, 0xfffffff6}, 0x10, 0x1) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x4, &(0x7f0000000140)=[{0x16, 0x0, 0xd, 0x7ff}, {0x2c, 0x6, 0x9, 0x7}, {0x87, 0x90, 0x7, 0x2}, {0x4, 0xd, 0x6, 0x23cb}]}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x200, [{&(0x7f0000448000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil, 0xe9c}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000123000/0x13000)=nil, 0x40000000006}, {&(0x7f000077c000/0x1000)=nil, &(0x7f000011c000/0x3000)=nil, 0x4}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x82}, {&(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000328000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}, {&(0x7f00002bf000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000c0000/0x1000)=nil}, {&(0x7f0000760000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000142000/0x1000)=nil, 0xa}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil, 0x1}, {&(0x7f0000801000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000014c000/0x4000)=nil, &(0x7f0000305000/0x2000)=nil, 0x86}, {&(0x7f0000622000/0x1000)=nil, &(0x7f00002f9000/0x4000)=nil, 0xfffffffffffffff7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4000000000003}], './file0\x00'}) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"]) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) socket(0x11, 0x3, 0xc) setitimer(0x2, &(0x7f0000000200)={{0x20000000000200, 0x7ffe}, {0x5, 0x4}}, 0x0) r1 = semget(0x0, 0x1, 0x281) semop(r1, &(0x7f0000000000)=[{0x0, 0xfe00, 0x1000}], 0x1) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000200)) ioctl$WSKBDIO_SETMODE(0xffffffffffffffff, 0x8004570b, 0x0) dup(0xffffffffffffffff) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, 0x0) kevent(0xffffffffffffffff, 0x0, 0x1005, 0x0, 0x7, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) socket(0x18, 0x2, 0x0) acct(0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x82, 0x11, 0x9, 0x45}, {0x40, 0xf3, 0xff, 0x4}]}) writev(r2, 0x0, 0x0) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="00231b000f407061035c2532d7a0ea9200001f00385c24fc3be7d5c1a5db0c8043846b45c6888320424dca5d2c044a51f48cef40", &(0x7f0000000000)=0x34, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501", 0x4, 0x404, 0x0, 0x0) 0s ago: executing program 2 (id=978): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xea2d}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) getdents(r1, 0x0, 0x0) r2 = socket$inet(0x18, 0x3, 0x42) getsockopt(r2, 0x44, 0x7, 0x0, 0x0) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000180), 0xc) mknod(&(0x7f0000000280)='./file1\x00', 0x1, 0xa61) (async) mknod(&(0x7f0000000280)='./file1\x00', 0x1, 0xa61) syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCGHDRCMPLT(r3, 0x40044274, &(0x7f0000000140)) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) mknodat(r0, &(0x7f0000000080)='./file1\x00', 0x2000, 0xfffeffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.250' (ED25519) to the list of known hosts.   OpenBSD/amd64 (ci-openbsd-multicore-8.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 vnd0: sloppy read from proc 31744 (syz-executor): blkno 0 bcount 117 denied attempt to set clock back 1767727902 seconds pckbd_enable: command error pckbd_enable: command error denied attempt to set clock forward to 4263431296 h OTNe셛8Qĕg[miF^)/0}Fg':%LZ$ĹLX'3 EjȞS82#)/ ainiE:}`\9]Urʃ1tS:UWn#$SuQyu4a$[6Dй][0o(blPg\"JՑkw4gf :3Ry>w[|>Ъw0N>J?w,Wg7HYGPvV^ѢN5@6o4STwNQV'XƧvB;85jAbv,fFw-0 !,.9nw>ˇT(آrH_YL}pppx: unable to set addresses for pppx1, error=17 WARNING: thread `nfsio' (426059) exits with status -1 WARNING: thread `nfsio' (159333) exits with status -1 WARNING: thread `nfsio' (15735) exits with status -1 WARNING: thread `nfsio' (471390) exits with status -1 WARNING: thread `nfsio' (218939) exits with status -1 WARNING: thread `nfsio' (469178) exits with status -1 WARNING: thread `nfsio' (428235) exits with status -1 WARNING: thread `nfsio' (314940) exits with status -1 WARNING: thread `nfsio' (230569) exits with status -1 WARNING: thread `nfsio' (154125) exits with status -1 WARNING: thread `nfsio' (324784) exits with status -1 WARNING: thread `nfsio' (56515) exits with status -1 WARNING: thread `nfsio' (170015) exits with status -1 WARNING: thread `nfsio' (441429) exits with status -1 WARNING: thread `nfsio' (508839) exits with status -1 WARNING: thread `nfsio' (357795) exits with status -1 WARNING: thread `nfsio' (153568) exits with status -1 WARNING: thread `nfsio' (414121) exits with status -1 WARNING: thread `nfsio' (202259) exits with status -1 WARNING: thread `nfsio' (82136) exits with status -1 in6_pcbnotify: Huh? Thought we never got called with mapped! wStopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806f3e4808,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806f3e47f0,1) at rw_do_enter_write+0xba rrw_enter(fffffd806f3e47f0,1) at rrw_enter+0xc6 VOP_LOCK(fffffd805e468b08,2001) at VOP_LOCK+0xbd vn_lock(fffffd805e468b08,2001) at vn_lock+0xa4 vfs_getcwd_common(fffffd805e468b08,fffffd805e4687a8,0,0,200,0,a108f2de6e87647d) at vfs_getcwd_common+0xd1 vn_isunder(fffffd805e468b08,fffffd805e4687a8,ffff8000fffef770) at vn_isunder+0x56 unp_externalize(fffffd80619e9800,33,0) at unp_externalize+0x26f soreceive(ffff800010fdda80,ffff80003bff26e8,ffff80003bff2698,0,ffff80003bff26d0,ffff80003bff285c,7140f04418b0ec45) at soreceive+0xc24 recvit(ffff8000fffef770,4,ffff80003bff2830,0,ffff80003bff28e0) at recvit+0x40b sys_recvmsg(ffff8000fffef770,ffff80003bff2990,ffff80003bff28e0) at sys_recvmsg+0x1bf syscall(ffff80003bff2990) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x18b42481060, count: -14 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003bff2170 rbx 0 rdx 0xffff800001565640 rcx 0xffff8000fffef770 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003bff2050 r9 0x8080808080808080 r10 0x1f131220855a6f71 r11 0x9cd2d696a211b2cb r12 0xfffffd8003f4f880 r13 0xfffffd8004738560 r14 0x3 r15 0xffffffff83421f66 substchar+0xa681 rip 0xffffffff819532b5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003bff2160 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=83689 pid=1328 tcnt=3 stat=onproc flags process=1000010 proc=4000000 runpri=32, usrpri=83, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffeea78,0xffff8000fffeefb8 process=0xffff8000fffdf048 user=0xffff80003bfed000, vmspace=0xfffffd8060043028 estcpu=33, cpticks=1, pctcpu=0.0, user=1, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 28597 454713 56569 0 7 0 syz-executor 28597 90612 56569 0 3 0x4000080 fsleep syz-executor 18807 404199 11367 0 2 0 syz-executor 18807 227076 11367 0 3 0x4000080 fsleep syz-executor 72683 45374 50291 0 3 0x80 nanoslp syz-executor 72683 389763 50291 0 3 0x4000080 kqsel syz-executor 72683 81496 50291 0 3 0x4000080 fsleep syz-executor 1328 515651 16057 -1 2 0x1000010 syz-executor * 1328 83689 16057 -1 7 0x5000010 syz-executor 1328 503711 16057 -1 3 0x5000090 fsleep syz-executor 83767 179981 86115 0 3 0x82 sbwait sshd-session 15899 461460 63305 0 3 0x80 nanoslp syz-executor 15899 315679 63305 0 3 0x4000080 kqpoll syz-executor 15899 442302 63305 0 3 0x4000080 fsleep syz-executor 15899 166953 63305 0 3 0x4000080 fsleep syz-executor 63305 360431 47766 0 3 0x82 nanoslp syz-executor 79917 98168 1 0 3 0x100083 ttyopn getty 50291 477040 47766 0 3 0x82 nanoslp syz-executor 11367 366956 47766 0 3 0x82 nanoslp syz-executor 48028 281765 47766 0 3 0x82 nanoslp syz-executor 56569 502720 47766 0 3 0x82 nanoslp syz-executor 33553 297265 47766 0 3 0x2 biowait syz-executor 21924 162 47766 0 3 0x82 nanoslp syz-executor 16057 45488 47766 0 3 0x82 nanoslp syz-executor 47766 313098 59130 0 3 0x82 kqread syz-executor 59130 355898 60250 0 3 0x10008a sigsusp ksh 60250 195853 57420 0 3 0x98 kqread sshd-session 57420 472390 86115 0 3 0x92 kqread sshd-session 86115 334152 1 0 3 0x88 kqread sshd 73716 146363 24016 74 3 0x1100092 bpf pflogd 24016 76285 1 0 3 0x80 sbwait pflogd 57559 480850 42303 73 3 0x1100090 kqread syslogd 42303 234772 1 0 3 0x100082 sbwait syslogd 45984 114301 1 0 3 0x100080 kqread resolvd 28022 485558 34209 77 3 0x100092 kqread dhcpleased 88715 406556 34209 77 3 0x100092 kqread dhcpleased 34209 493888 1 0 3 0x80 kqread dhcpleased 75325 331327 0 0 3 0x14200 bored smr 33200 60462 0 0 2 0x14200 zerothread 44308 306136 0 0 3 0x14200 aiodoned aiodoned 9396 141671 0 0 3 0x14200 syncer update 69724 284850 0 0 3 0x14200 cleaner cleaner 2772 88465 0 0 3 0x14200 reaper reaper 88801 182008 0 0 3 0x14200 pgdaemon pagedaemon 32573 30046 0 0 3 0x14200 bored viomb 19257 331646 0 0 3 0x40014200 acpi0 acpi0 78165 99481 0 0 3 0x40014200 idle1 15131 64787 0 0 3 0x14200 bored softnet1 98930 427187 0 0 3 0x14200 bored softnet0 6865 9470 0 0 3 0x14200 bored systqmp 14727 102427 0 0 3 0x14200 bored systq 50550 114584 0 0 3 0x14200 tmoslp softclockmp 80462 87059 0 0 3 0x40014200 tmoslp softclock 17201 273218 0 0 3 0x40014200 idle0 1 500954 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 28597 (syz-executor) thread 0xffff80002a260810 (454713) exclusive rwlock uobjlk r = 0 (0xfffffd806d213f18) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault+0x1e5 #3 upageflttrap+0xa9 #4 usertrap+0x42f #5 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd8060043e80) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x42f #7 recall_trap+0x8 Process 1328 (syz-executor) thread 0xffff8000fffef770 (83689) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838bc7c8) #0 witness_lock+0x5f1 #1 unp_externalize+0x155 #2 soreceive+0xc24 #3 recvit+0x40b #4 sys_recvmsg+0x1bf #5 syscall+0xbd4 #6 Xsyscall+0x128 exclusive rwlock sbufrcv r = 0 (0xffff800010fddb70) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 soreceive+0x27d #4 recvit+0x40b #5 sys_recvmsg+0x1bf #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 33553 (syz-executor) thread 0xffff80002a262010 (297265) exclusive rrwlock inode r = 0 (0xfffffd806c8afec0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806d1f61f8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11082 12095K 12429K 166960K 13248 0 pcb 18 14K 15K 166960K 251 0 rtable 244 11K 11K 166960K 582 0 pf 34 17K 81K 166960K 210 0 ifaddr 42 7K 8K 166960K 112 0 ifgroup 55 2K 3K 166960K 186 0 sysctl 4 1K 9K 166960K 14 0 counters 70 37K 38K 166960K 194 0 ioctlops 0 0K 4K 166960K 1781 0 iov 0 0K 12K 166960K 110 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1421 89K 90K 166960K 2429 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 19 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 118 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 240K 166960K 1140 0 sigio 0 0K 0K 166960K 58 0 proc 72 115K 164K 166960K 650 0 subproc 72 4K 4K 166960K 82 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 215 0 in_multi 92 6K 7K 166960K 176 0 ether_multi 1 0K 0K 166960K 6 0 mrt 1 0K 0K 166960K 14 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 175 784K 784K 166960K 175 0 exec 0 0K 1K 166960K 596 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 3 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 267 177K 192K 166960K 12415 0 UVM aobj 16 4K 8K 166960K 19 0 pinsyscall 44 88K 109K 166960K 2299 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 74 0 NDP 13 0K 2K 166960K 73 0 temp 76 8678K 8805K 166960K 61013 0 kqueue 14 22K 30K 166960K 251 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 187 0 183 3 2 1 3 0 8 0 rtentry 176 174 0 77 6 0 6 6 0 8 0 unpcb 144 706 0 684 6 4 2 4 0 8 1 syncache 336 7 0 7 4 3 1 1 0 8 1 tcpqe 32 2 0 2 1 1 0 1 0 8 0 tcpcb 736 301 0 292 9 7 2 7 0 8 1 arp 136 25 0 9 1 0 1 1 0 8 0 inpcb 328 1122 0 1107 11 8 3 7 0 8 1 nd6 152 35 0 6 2 0 2 2 0 8 0 pkpcb 40 11 0 11 4 3 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1192 43 0 43 3 2 1 1 0 8 1 pppxif 1504 11 0 11 3 2 1 1 0 8 1 pffrag 232 9 0 1 1 0 1 1 0 482 0 pffrnode 88 6 0 0 1 0 1 1 0 8 0 pffrent 40 13 0 5 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 86 0 29 1 0 1 1 0 8 0 pfstkey 128 86 0 29 2 0 2 2 0 8 0 pfstate 448 86 0 29 7 0 7 7 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 rttmr 136 3 0 3 2 2 0 1 0 8 0 art_heap8 4096 5 0 0 5 0 5 5 0 8 0 art_heap4 256 815 0 350 36 5 31 31 0 8 0 art_table 40 820 0 350 5 0 5 5 0 8 0 art_node 32 173 0 86 1 0 1 1 0 8 0 sysvmsgpl 40 11 0 8 1 0 1 1 0 8 0 semapl 112 115 0 105 1 0 1 1 0 8 0 shmpl 112 13 0 1 1 0 1 1 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 3675 0 2175 95 0 95 95 0 8 0 ffsino 296 3675 0 2175 117 0 117 117 0 8 0 nchpl 144 5310 0 3613 64 0 64 64 0 8 0 rtmask 32 6 0 6 3 2 1 1 0 8 1 vnodes 216 4268 0 0 238 0 238 238 0 8 0 namei 1024 18354 0 18353 4 2 2 2 0 8 1 percpumem 16 112 0 62 1 0 1 1 0 8 0 vcpupl 3968 2 0 1 1 0 1 1 0 8 0 vmpool 848 3 0 2 1 0 1 1 0 8 0 kstatmem 264 106 0 78 5 2 3 3 0 8 1 scsiplug 72 6 0 6 4 3 1 1 0 8 1 scxspl 216 22491 0 22490 8 7 1 7 1 8 0 plimitpl 152 331 0 314 1 0 1 1 0 8 0 sigapl 424 1461 0 1413 8 0 8 8 0 8 1 knotepl 120 832 0 0 24 0 24 24 0 8 0 kqueuepl 224 461 0 450 7 5 2 3 0 8 1 pipepl 344 222 0 195 3 0 3 3 0 8 0 fdescpl 528 1422 0 1390 3 0 3 3 0 8 0 filepl 160 9193 0 8961 25 12 13 18 0 8 2 lockfpl 104 646 0 644 3 1 2 2 0 8 1 lockfspl 48 166 0 164 1 0 1 1 0 8 0 sessionpl 144 27 0 17 1 0 1 1 0 8 0 pgrppl 48 95 0 77 1 0 1 1 0 8 0 ucredpl 104 1615 0 1601 1 0 1 1 0 8 0 zombiepl 144 1786 0 1784 2 1 1 1 0 8 0 processpl 1232 1461 0 1413 6 0 6 6 0 8 2 procpl 664 3276 0 3219 10 2 8 8 0 8 1 sosppl 176 6 0 6 2 1 1 1 0 8 1 sockpl 752 2064 0 2023 19 12 7 14 0 8 2 mcl64k 65536 18 0 0 3 0 3 3 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 5 0 0 1 0 1 1 0 8 0 mcl4k 4096 114 0 0 15 0 15 15 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 39 0 0 5 1 4 4 0 8 0 mtagpl 96 10 0 0 1 0 1 1 0 8 0 mbufpl 256 314 0 0 20 0 20 20 0 8 0 bufpl 280 7962 0 1826 439 0 439 439 0 8 0 anonpl 32 9647 0 0 79 1 78 78 0 246 0 amapchunkpl 152 42469 0 41923 59 25 34 34 0 158 11 amappl16 200 4938 0 4900 35 20 15 15 0 8 4 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 8 0 8 1 1 0 1 0 8 0 amappl13 176 439 0 438 1 0 1 1 0 8 0 amappl12 168 1833 0 1789 3 0 3 3 0 8 0 amappl11 160 8 0 8 2 1 1 1 0 8 1 amappl10 152 51 0 36 1 0 1 1 0 8 0 amappl9 144 244 0 244 1 1 0 1 0 8 0 amappl8 136 46 0 43 1 0 1 1 0 8 0 amappl7 128 86 0 84 1 0 1 1 0 8 0 amappl6 120 308 0 294 1 0 1 1 0 8 0 amappl5 112 81 0 69 1 0 1 1 0 8 0 amappl4 104 445 0 413 1 0 1 1 0 8 0 amappl3 96 7283 0 7184 4 1 3 3 0 8 0 amappl2 88 1560 0 1476 2 0 2 2 0 8 0 amappl1 80 14107 0 13429 15 1 14 15 0 8 0 amappl 88 11468 0 11288 5 0 5 5 0 92 0 uvmvnodes 80 137 0 0 3 0 3 3 0 8 0 dma32768 32768 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 18 0 3 1 0 1 1 0 8 0 uaddrrnd 24 1422 0 1390 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1422 0 1390 1 0 1 1 0 8 0 vmmpekpl 168 13485 0 13441 3 0 3 3 0 8 0 vmmpepl 168 96661 0 94579 125 22 103 103 0 357 2 vmsppl 488 1421 0 1390 6 1 5 5 0 8 0 rwobjpl 80 28375 0 27172 32 2 30 30 0 8 0 pdppl 4096 2858 0 2785 114 39 75 86 0 8 2 pvpl 32 16593 0 0 135 1 134 134 0 265 0 pmappl 256 1424 0 1392 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 331 0 62 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff837eaff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838bc5c0) at __mp_lock+0x192 intr_handler(ffff80003c3fe330,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff838bc5c0) at __mp_lock+0x192 uvm_fault(fffffd8060043d80,d538d61e000,0,1) at uvm_fault+0x1ea upageflttrap(ffff80003c3fe6d0,d538d61e000) at upageflttrap+0xa9 usertrap(ffff80003c3fe6d0) at usertrap+0x42f recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x79e1cc756a60, count: -11 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806f3e4808,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806f3e47f0,1) at rw_do_enter_write+0xba rrw_enter(fffffd806f3e47f0,1) at rrw_enter+0xc6 VOP_LOCK(fffffd805e468b08,2001) at VOP_LOCK+0xbd vn_lock(fffffd805e468b08,2001) at vn_lock+0xa4 vfs_getcwd_common(fffffd805e468b08,fffffd805e4687a8,0,0,200,0,a108f2de6e87647d) at vfs_getcwd_common+0xd1 vn_isunder(fffffd805e468b08,fffffd805e4687a8,ffff8000fffef770) at vn_isunder+0x56 unp_externalize(fffffd80619e9800,33,0) at unp_externalize+0x26f soreceive(ffff800010fdda80,ffff80003bff26e8,ffff80003bff2698,0,ffff80003bff26d0,ffff80003bff285c,7140f04418b0ec45) at soreceive+0xc24 recvit(ffff8000fffef770,4,ffff80003bff2830,0,ffff80003bff28e0) at recvit+0x40b sys_recvmsg(ffff8000fffef770,ffff80003bff2990,ffff80003bff28e0) at sys_recvmsg+0x1bf syscall(ffff80003bff2990) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x18b42481060, count: -14