last executing test programs: 5.22757559s ago: executing program 4 (id=922): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x80, 0xe3, 0x80, 0xffffffff}, {0x16, 0x37, 0x0, 0x800ee68}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x80, 0xe3, 0x80, 0xffffffff}, {0x16, 0x37, 0x0, 0x800ee68}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919d7aacdfaffffffffffffff46c0fbde0346df012e786031d4b86fc1f36e5250f6d2b982fd3883a8b58c1af70800000000", &(0x7f0000000000)=0x48, 0x0, 0xfffffffffffffd53) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919d7aacdfaffffffffffffff46c0fbde0346df012e786031d4b86fc1f36e5250f6d2b982fd3883a8b58c1af70800000000", &(0x7f0000000000)=0x48, 0x0, 0xfffffffffffffd53) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_open_pts() ioctl$BIOCPROMISC(r0, 0x20004269) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000040)={0x2ec8, 0xb, 0x5, 0x8, "d0c661995bf2fdb41ee9eae6471312059daca17d", 0x941, 0x1000}) (async) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000040)={0x2ec8, 0xb, 0x5, 0x8, "d0c661995bf2fdb41ee9eae6471312059daca17d", 0x941, 0x1000}) ioctl$FIONREAD(r1, 0x4004667f, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000001c0)={0x10, 0x9, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000a5000/0x2000)=nil, 0x10}, {&(0x7f00003c6000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3}, {&(0x7f0000301000/0x1000)=nil, &(0x7f0000ff6000/0x8000)=nil, 0xa}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000507000/0x3000)=nil, 0x5}, {&(0x7f00001dd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x9}, {&(0x7f00002b8000/0x4000)=nil, &(0x7f00003d0000/0xa000)=nil, 0x2dc}, {&(0x7f0000110000/0x3000)=nil, &(0x7f00000ce000/0x3000)=nil, 0x9}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000019e000/0x4000)=nil, 0xffffffff}, {&(0x7f000013a000/0x2000)=nil, &(0x7f0000375000/0x1000)=nil, 0x4}, {&(0x7f0000164000/0x6000)=nil, &(0x7f0000591000/0x2000)=nil, 0x3ff}, {&(0x7f0000312000/0x1000)=nil, &(0x7f00005b1000/0x4000)=nil, 0x2}, {&(0x7f000073b000/0x1000)=nil, &(0x7f0000168000/0x1000)=nil, 0x4}, {&(0x7f00000c8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f00003f2000/0x3000)=nil, &(0x7f00002e4000/0x3000)=nil, 0x16629c0e}, {&(0x7f0000027000/0x4000)=nil, &(0x7f0000448000/0x2000)=nil}, {&(0x7f00000f7000/0x1000)=nil, &(0x7f00000cc000/0x3000)=nil, 0xfffffffffffffff8}], './file0\x00', 0x84}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x18, 0x1, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x18, 0x1, 0x0, 0x1ff}, 0xc) (async) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=@in6={0x18, 0x1, 0x0, 0x1ff}, 0xc) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000000)=0xffffc5db, 0x4) (async) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000000)=0xffffc5db, 0x4) getsockname(r2, 0x0, &(0x7f0000000140)) r3 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_timeval(r3, 0xffff, 0x1005, &(0x7f00000001c0)={0x4, 0x4}, 0x10) getsockopt$sock_timeval(r3, 0xffff, 0x1005, &(0x7f0000000000), &(0x7f0000000100)=0x10) syz_emit_ethernet(0x22, &(0x7f0000000440)=ANY=[]) 5.224598295s ago: executing program 4 (id=924): syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000000009078ac1400bbffffffff4e214e2200089078"]) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async) madvise(&(0x7f0000240000/0x12000)=nil, 0x12000, 0x6) (async) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$VMM_IOC_RESETCPU(r2, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffff8, 0x0, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0x7fffffff, 0x4, 0x6, 0x4, 0x3, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x4, 0x2, 0xfffffffffffffffa], [0xfffffffffffffffa, 0x80000000, 0xf, 0x9c7, 0x5b, 0x1, 0x1fe, 0x0, 0x0, 0x2], [0x100000001, 0x2, 0x0, 0x0, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x4, 0x7fffffffffffffff, 0x100000000, 0x6, 0xc], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xfffc, 0x9, 0x5}, {0x6, 0x2, 0xfffffffc, 0x80}, {0x9, 0x5, 0x4, 0xffffffffffffffff}, {0x6, 0x2, 0x1000, 0x8}, {0x0, 0x2007, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x805}, {0x2, 0xc, 0x6d5, 0x2}}}) (async) r3 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) close(r3) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$VMM_IOC_TERM(r4, 0x80045604, &(0x7f0000000040)={0x1}) (async) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) r5 = socket$inet(0x2, 0x8003, 0x0) (async) getgid() r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$TIOCSETA(r6, 0xcd60441a, &(0x7f0000000180)={0x6, 0xe0d4, 0x2, 0x3, "002f00000a00000f000000aff0338a6b4fc6d720", 0x100008, 0x3}) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) ioctl$FIONREAD(0xffffffffffffffff, 0xc0406938, 0x0) (async) setsockopt(r5, 0x0, 0x1e, &(0x7f0000000340)="15337ac0", 0x4) mknod(0x0, 0x2000, 0x201) (async) r7 = socket(0x1, 0x1, 0x0) close(r7) (async) r8 = socket(0x18, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x88001, 0x2}) (async) connect$unix(r1, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0xa) (async) getsockname$inet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) connect$unix(r8, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) setsockopt(r1, 0x400, 0x8, &(0x7f0000000400)="01", 0x1) 5.127006197s ago: executing program 4 (id=927): mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0xd0) r1 = socket(0x11, 0x8003, 0x0) getsockopt(r1, 0x11, 0x100000, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSTOP(r2, 0x2000746f) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000080)="5778a6658c2563b7429c9ace9d0bcd6990a5664d23d28b39b79d239dc29da1e51d4522ab5ad8aa7125f5558097b987096add377bf701e27943cea7af9f25e7ae757bd7530aff6ac6421c27a53d17878c554b19d8cfe0ee00415b920438084d2f722380", 0x63}, {&(0x7f0000000100)="c98f6d6a7e7177854d12a37d731ddcc227d94ca2a6d51978f1a24989dd3f78c47e339c19e3b52864934382068c7e463c52151bd03d1ee55b3443a228654ddf768e47bf97166d2bcba87eb2bbf426ca6c5214fde74c26474717f932806584c250bc6ce921e372672519ef3d72d14a2b528237dcc62dd0833be40a6aaebaa1f95259ff057a2028f1001b706f483700783387073efc92600fab48d59a5164ce99c3d6a9b07539130d71507fee88f599e41d59e1c5ce740d0ed9f349a983c00a07d4ea95e3ca838ea971469c8d7e26fa9bbde61b5f51ef9dbd30cce0926e9f972b43a0200e0064ac93", 0xe7}, {&(0x7f0000000200)="5b3b98c1ee", 0x5}, {&(0x7f0000000240)="1b5c7ae8d49050148faa7f5ffa491424aea385d99c50fb0172a31f39dcfd7e3c57de4a1bd63d4f9956a5e9aa9e5fb70717f7c504a2d1261fd2c97fe8e41e930c6299af254aaf31b218f612755bf7a2179cfe3c518c569e73406d70d22e0ef0204719b81a8ca6e1cbf4544ae995b3e772311167250441fcd54e85e9e90ecc47612bbec366f14fc9850ea258e09579a0ff062b4764466afb564010c934c53ca159f3a755274fe440df56231ac6ad92daa48dcb", 0xb2}], 0x4) r3 = getppid() fcntl$setown(r0, 0x6, r3) r4 = socket(0x18, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r5 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/86, 0x56}], 0x1, 0xfffffffffffffffd) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) close(r5) open$dir(&(0x7f0000000000)='./file0\x00', 0x10, 0x100) unveil(0x0, &(0x7f00000002c0)='r\x00') getsockopt(r4, 0x29, 0x3b, 0x0, 0x0) fcntl$setown(r0, 0x6, r3) 3.325024423s ago: executing program 7 (id=979): sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x16}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000280)={0x1, 0x9}, 0x2, 0x0, &(0x7f0000000300), &(0x7f0000000340)="4d42a57f", 0x4) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) munlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) mknod(&(0x7f0000000200)='./bus\x00', 0x2000, 0x412dff) r0 = msgget$private(0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$hw(&(0x7f0000000000)={0x7, 0x5}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6097520800000000000000b10000000000000000000000bbff020000000000000000000000000001000a00c2"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) msgsnd(r0, &(0x7f0000000340)=ANY=[], 0x0, 0x800) sysctl$kern(&(0x7f0000000280)={0x1, 0x9}, 0x2, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="4d42a57f", 0x4) 3.276929179s ago: executing program 7 (id=981): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x0, 0xffffffff}, {0x16, 0x7e, 0x0, 0xff}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000640)="3b2aa7", 0x3}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000014c0)="c2a6d6000000002f144d78084f98c0d5187b0c3f", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000280)={0xffffffffffffff78, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500280019078fffc"]) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff, 0xfffffffe}, {0x6, 0x80, 0x12, 0xfffff802}]}) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0xa) ioctl$BIOCFLUSH(r1, 0x20004268) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919d7aacdfaffffffffffffff46c0fbde0346df012e786031d4b86fc1f36e5250f6d2b982fd3883a8b58c1af70800000000000000b5fe1448533302cf7069ee14085a11c77d5527f60000", &(0x7f0000000000)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f00000001c0)={0x0, 0x0}) write(r2, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r3 = fcntl$dupfd(r1, 0xa, r2) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000080)={0x0}, 0xc) setsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000003c0)=[{r5}], 0x1, 0x3ff) close(r6) ktrace(&(0x7f0000000040)='./file0\x00', 0x2, 0x20000404, r4) sysctl$ddb(&(0x7f0000000000)={0x9, 0x3}, 0x2, &(0x7f0000000100)="f5358f02", &(0x7f0000000180)=0x4, 0x0, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 3.03294362s ago: executing program 0 (id=1004): mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 3.030436176s ago: executing program 0 (id=1005): sendmsg$unix(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000100)="370dc7cc4e618589427df061e3ccda4d36eba0d7305e2ebea73c53837ef264cb472dd41c79ad180c06fcd27a61a2565e3f3217ffea0600ce85788a57c706222cdc64022ee103c68104eda3d315512d6236c69527", 0x54}], 0x1, 0x0, 0x0, 0x406}, 0x8) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc450443c, &(0x7f00000000c0)={0x5, 0x1, 0x1, 0x3, "c9f7d246000000023b0bca8f00875a6e80f775d2", 0xfffffffc, 0x6}) 2.998367056s ago: executing program 0 (id=1006): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x40) fchdir(r0) unveil(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000200)='x\x00') mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) r1 = socket(0x2, 0x8003, 0x0) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000000)={0x100000000003, 0xf}, 0x10) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.998134037s ago: executing program 0 (id=1007): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 2.997308227s ago: executing program 0 (id=1008): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) sysctl$vm(&(0x7f0000000000)={0x2, 0x2}, 0x2, &(0x7f00000001c0)="e81d23df39b5890255d10455f727cc978647e16cf12de1d9234e114d0419187d712201cc9004f199191a62bdde8358bbaa405b8eccac83e6d6893e2afe115f6f42ade26009830417b3f7d2d17f3c61d00a1c663998b469648380b0a8bbfd7b9df2e52a4af2d59e31ca4d0567a42a110b12a480bdd9f4fd61b31ab90a1b32df27c8aa9d8df10d9a6ae32895682333168ceb93b128ce0db7adb85e544ab0e7b556446484a2fcdb339ff24034c7b53c20d3ff3c84539d2b2dea7fe700af96786779fe2a7df89ee26a656ffbaa55455a1e00000000", &(0x7f0000000080)=0xd3, 0x0, 0x0) 2.785279505s ago: executing program 0 (id=1009): r0 = socket(0x18, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x2000100000002}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r0, 0x801169ac, &(0x7f00000001c0)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) close(0x3) munmap(&(0x7f00007a8000/0x1000)=nil, 0x1000) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) ioctl$WSDISPLAYIO_GTYPE(r1, 0x40045740, &(0x7f0000000300)) kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001}, {{}, 0xfffffffffffffff9, 0x61, 0x1a, 0x9, 0x66d}], 0x201, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000100)=""/132, 0x84}, {&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000580)=""/151, 0x97}], 0xa, 0xffff) socket(0x18, 0x1, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x2000100000002}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r0, 0x801169ac, &(0x7f00000001c0)) (async) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) close(0x3) (async) munmap(&(0x7f00007a8000/0x1000)=nil, 0x1000) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async) ioctl$WSDISPLAYIO_GTYPE(r1, 0x40045740, &(0x7f0000000300)) (async) kevent(0xffffffffffffffff, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0x200000000000001}, {{}, 0xfffffffffffffff9, 0x61, 0x1a, 0x9, 0x66d}], 0x201, 0x0, 0x0, 0x0) (async) kqueue() (async) kevent(r2, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) (async) preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000000)=""/141, 0x8d}, {&(0x7f00000000c0)=""/60, 0x3c}, {&(0x7f0000000100)=""/132, 0x84}, {&(0x7f0000000200)=""/196, 0xc4}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000580)=""/151, 0x97}], 0xa, 0xffff) (async) 2.60694876s ago: executing program 6 (id=1013): syz_emit_ethernet(0xcb, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaab00000000000080046f400bdfffd000007019078e0000002e0000001440406010000907800640081a84b0758e03420d64a87b759ce5eb237d36051d8928fdeb3613dbb073bfcfc61d9e29a8dfe83ccfc73f7cc8cfe56c3446859b660ef678985de0b375dbf74d3ef0e2b331604ac3ed62b9eb28a14275990cba92e1c3ed9b0671c506bf67823b9f95a70e3e6545a67df2de07d72b5c75537ff56a28001acc220f5fddc15f95a08b7a8d6347eb42f0df1762464db471d77549bce442123710d000000000000"]) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x13, &(0x7f0000000000), 0x4) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x83, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="a7a6d61de4a10989926243003b47915d8156c41f1b4f0919d7aacdfaffffffffffffff46c0786031d4b86fc1f36e5250f6d2b982fd3883a8b58c1af608000000000000004102cf700000000000000000000000005ce01e1b179baa0d9edd8579390a73f7be326e5edd2f7f1dcea4dc6d67ecfff8c72cfc47eaf15a90e3a12531ceffbe142d53927e2ca1d7ba67ad413c4accdc255a1a790cae47327f0e872a451c9cf65a", &(0x7f0000000000)=0xa4, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x11, &(0x7f00003f3000/0x1000)=nil) openat(r0, &(0x7f0000000180)='./file0\x00', 0x20, 0x181) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6076520300080003fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e214e2200089078d800c00eaca5624c171e37d661512bc5b9b9"]) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) sendto$inet(r0, &(0x7f0000000200)="cc91212371aebe6e179ad0d0f8f5d9787757f5aa1994e2cd48f503709a21e3292cd76a21535028bab20ba18d3fbddee269a57de129ad3706c9756c399c962b9f376b1d520ccd0bba6d55c0c2f0624647", 0x50, 0x5, &(0x7f00000001c0)={0x2, 0x1}, 0xc) kqueue() 2.604411663s ago: executing program 6 (id=1014): sync() r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_CREATE(r0, 0xc5005601, &(0x7f0000000000)={0x10, 0x4, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3ff}, {&(0x7f0000005000/0x2000)=nil, 0x0, 0x7fff}, {0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000003}, {&(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000002000/0x1000)=nil, 0x100000000}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7b}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x800000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001000/0x2000)=nil, 0x8}, {0x0, &(0x7f0000003000/0x4000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}], './file0\x00', 0x7}) getppid() r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000200), 0x8, 0x0) ioctl$WSKBDIO_GETMAP(r1, 0xc010570d, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x0, 0x0, 0x9, 0x401, 0x3}, {0x1, 0x0, 0x7026, 0x1, 0x3}]}) ioctl$VMM_IOC_INTR(r0, 0xc0285602, &(0x7f0000000040)={0x1, 0x0, 0xf6}) 1.533760181s ago: executing program 7 (id=1016): minherit(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0x5, 0x78, 0xffffffffffffff9c}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x4b}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) (async) sysctl$vm(&(0x7f0000000380)={0x2, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000000140)="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", 0x107) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(0xffffffffffffffff, 0x1000000000029, 0x3f, 0x0, 0x0) ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000340)={0x0, 0xcb5}) mquery(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x8) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$TIOCSETA(r2, 0xc4504446, &(0x7f0000000740)={0x2f, 0x2, 0x2, 0x5, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x810}) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000af7000/0x4000)=nil, &(0x7f0000604000/0x2000)=nil}, {&(0x7f00004f8000/0x1000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil}, {&(0x7f0000987000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f00004f3000/0xa000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x2}, {&(0x7f0000690000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000b76000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000673000/0x2000)=nil}, {&(0x7f00004f6000/0x4000)=nil, &(0x7f000071b000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f00002e1000/0xc00000)=nil, 0x14b}, {&(0x7f00008c9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x6}, {&(0x7f00004f6000/0x2000)=nil, &(0x7f00009a6000/0x1000)=nil}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff7000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ead000/0x1000)=nil}], './file0\x00'}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0286988, &(0x7f00000001c0)) (async) ioctl$TIOCSCTTY(r2, 0x20007461) 1.521920818s ago: executing program 7 (id=1018): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x34) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[]) r1 = kqueue() r2 = openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f00000000c0)=r3) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) kevent(r1, &(0x7f0000000180)=[{{r4}, 0xffffffffffffffff, 0x37, 0x80000000, 0x3ac, 0xa}], 0x8c0, 0x0, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) (async) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x34) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[]) (async) kqueue() (async) openat$klog(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) ioctl$LIOCSFD(r2, 0x80046c7f, &(0x7f00000000c0)=r3) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) kevent(r1, &(0x7f0000000180)=[{{r4}, 0xffffffffffffffff, 0x37, 0x80000000, 0x3ac, 0xa}], 0x8c0, 0x0, 0x0, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async) 1.519076274s ago: executing program 6 (id=1019): r0 = socket(0x800000018, 0x1, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f00000001c0)={&(0x7f0000000180)}) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000040)=0x1) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000100)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x22, 0x411}, 0x4, 0x10003, 0x0, 0x0, 0x0, 0x2, 0xa, 0x100000000e63}) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) ioctl$FIOGETOWN(r3, 0x4004667b, &(0x7f00000000c0)) (async) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) (async) r4 = getpid() open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) setgroups(0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r4) (async) setuid(0xffffffffffffffff) r5 = socket(0x18, 0x2, 0x0) socket(0x2, 0x2, 0x0) sendmsg(r5, &(0x7f0000000980)={&(0x7f0000000200)=@un=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x10}, 0x10) (async) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 1.518346825s ago: executing program 7 (id=1020): sysctl$hw(&(0x7f0000000000)={0x6, 0x18}, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffff70) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x2}, {&(0x7f0000530000/0xd000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f00007d8000/0x4000)=nil}, {0x0, &(0x7f00000fa000/0x2000)=nil, 0x1}, {&(0x7f000017c000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {0x0, 0x0, 0x40}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00002ec000/0x3000)=nil, 0x1ffffffffffe}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000826000/0x1000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000283000/0x4000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000771000/0x4000)=nil, 0x100000000}, {&(0x7f000027d000/0x2000)=nil, &(0x7f00000ce000/0x1000)=nil, 0x9bbf}, {&(0x7f00003a2000/0x1000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil}], './file0\x00'}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r0 = socket(0x18, 0x1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) accept(r0, &(0x7f0000000280)=@in6, &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f0000000040)={0x1, 0xd}, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000200)={0x1, 0x3a}, 0x2, &(0x7f00000002c0)="f18ac6ebc37f3fb126b139622eb9c690e455ffe97bf55a22e581f1d2c744ba2c8cd5e266dd054753cb4665199189461c0d25663e2ca449e1c2dc54ff7b62b08e93ba83fc9c0921c850b9fb9da003f15726d7c8c880bcc13ef9ce37c74afe90c10e305b456def724e5b60a98090089795cafa58ea64a40c60b3eaaaed105cbb36b66476d76eb769c78776205f2aae9e58a067dd7c097582b7b27e96eb30563724dd44280b2059620d2e67c2b736b3fd16ecfc25a52e88a72f24", &(0x7f0000000380)=0xb9, &(0x7f00000003c0)="9b6fca36b7d0715a033bfda7e6e365bce9c21d6fd7b6bd", 0x17) 1.43918763s ago: executing program 7 (id=1021): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)='mN', 0x2}], 0x1, 0x8) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0x7f, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x1}, {0x16, 0x7e, 0x0, 0x800ee68}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x65, 0x7, 0x8, 0x7, "33c3a5d2b987d914618c355e52c062c25a154e84", 0x3, 0xb2}) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000000)="8454892e1b35bef886ee956a055ede68262d4a4d70ace8d3874ebdeab43962e2c618201360bcaca08e9c773eaf496271fb058e7953c69a3ead7f308278344d020572bc0fad8ebf577cc3a2bfe37edad4d3a99855cdf13645b766370a706d53611d59720d82", 0x65}], 0x1) sysctl$kern(&(0x7f0000000380)={0x1, 0x3}, 0x2, &(0x7f0000000400)="93edc8e16a7ad67d292711c60dd396ac916f0d79f2eb27739f4cbe55b9f4843d9bd48a021b635b0a44d8bc407bf007a3120d9e85c58e", &(0x7f0000000440)=0x36, &(0x7f0000000480)="fca916b300aaab6f77", 0x9) ioctl$TIOCSETD(r2, 0x8004745f, &(0x7f0000000000)=0x8) r3 = syz_open_pts() fcntl$lock(r3, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1000300000000}) flock(r3, 0x1) flock(r3, 0x2) open$dir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x42) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x100000001}) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x2000009, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f0000182000/0x2000)=nil, 0xfe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7fffffffdffffbfd}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x6}, {&(0x7f00004a4000/0x4000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7fd}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f00003bc000/0x2000)=nil, 0x8}, {&(0x7f0000123000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000123000/0x3000)=nil, &(0x7f0000369000/0x3000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000204000/0x4000)=nil, &(0x7f0000286000/0x2000)=nil, 0xffffdffffffffff9}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00001c0000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xe}, {&(0x7f0000750000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000629000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fa}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x2}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa}) ioctl$TIOCSETA(r4, 0xc1084425, &(0x7f0000000040)={0x2, 0x8, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2004000, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 1.438928705s ago: executing program 6 (id=1022): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) (async) select(0x40, &(0x7f0000000180)={0xffffffffdffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x74, 0x181e, 0x8, 0x2000000000000044}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000c0001400f9000000004b7ca3010000ffffac1400aa0000000000000000001a"]) (async) open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x80) (async) mknod(&(0x7f0000000200)='./bus\x00', 0x2000, 0x412dff) (async) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000180)=[{r3, 0x40}], 0x1, 0x0) (async) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000140)='.\x00', r3, 0x3}) (async) close(r3) r5 = kqueue() (async) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f00000000c0)={0x101, 0x5, {0x2, 0x7fffffff}}) ioctl$FIONREAD(r5, 0x4004667f, 0x0) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) 1.438726738s ago: executing program 6 (id=1023): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x20530c) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x3c8}, 0x1}, 0x10, 0x4) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x129) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x7f}, {0x4, 0x7fe, 0x81, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0x8, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a78, 0x8001, 0x1000, 0x3}, {0x1cf, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x3}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x2, 0x10000000}, {0x0, 0x0, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x101, 0x1, 0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0xc0104401, &(0x7f0000000040)={0x0, 0x40003, 0x0, 0x3c}) r3 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r3, 0x0, 0x9, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, &(0x7f0000000200), 0x0) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a6f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x5c, 0x0, 0x0, 0x406}, 0x10) ioctl$TIOCSETA(r0, 0xc4504449, &(0x7f0000000740)={0x9, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x3, 0x6}) setuid(0xee01) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r4, 0x80206980, &(0x7f00000001c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x1d}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) 1.438162317s ago: executing program 6 (id=1024): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000513000000000000000012000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f336443a42118000000720fd38bfbb770c1f5a872c88106002ec589040000000c000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c0112000"/177, 0xb1, 0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f00000012c0)=[{0x34, 0x80, 0x1b, 0x4}, {0x2b, 0x2, 0x51, 0x6}, {0xe, 0x2, 0xfa, 0x3}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fchmod(r2, 0x14d) poll(&(0x7f0000000140)=[{r2, 0x1}, {r0, 0xc1}], 0x2, 0x3) r3 = syz_open_pts() setuid(0xee01) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="721d1a360d2ccfb874", 0x9}], 0x1) pipe2(&(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$WSDISPLAYIO_GETSUPPORTEDDEPTH(r6, 0x4004575c, 0x0) ioctl$FIONBIO(r6, 0x8004667e, 0x0) pread(0xffffffffffffffff, &(0x7f0000000180)="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", 0x801, 0x800) ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, 0x0) execve(0x0, &(0x7f0000001540)=[0x0, 0x0, &(0x7f0000001500)='/dev/wsmouse0\x00'], &(0x7f0000001780)=[0x0, &(0x7f0000001680)='\'\x00', &(0x7f00000016c0)='\x00', &(0x7f0000001700)='/dev/wsmouse0\x00', &(0x7f0000001740)='\r\x00']) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffff0000}) r7 = socket(0x18, 0x2, 0x0) connect$unix(r7, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000a00)=0x1) ioctl$WSDISPLAYIO_USEFONT(r6, 0x80585750, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) writev(r5, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) setgid(0xffffffffffffffff) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000500)=0x7) bind$unix(r7, &(0x7f0000000a40)=@abs={0x0, 0x0, 0x3}, 0x8) 1.247384758s ago: executing program 2 (id=1027): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0x17, 0x2100007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x8, 0x4, 0x71000}, {0x8, 0x9, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x6, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0xa, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x11f0}, {0x5, 0x300, 0x54, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xb, 0x3}, {0x7ff, 0x9, 0x0, 0x9}, {0xb8c, 0x81, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0x6}, {0xc, 0x8, 0x8005}, {0x8000, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000003180)=""/4096, 0x1000}], 0x1) setrlimit(0x3, &(0x7f0000000540)={0x100000, 0xb}) openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) (async) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) sysctl$net_inet_icmp(&(0x7f0000002600)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000002640)="cfbe2d62569d", &(0x7f00000026c0)=0x6, 0x0, 0x0) (async) sysctl$net_inet_icmp(&(0x7f0000002600)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000002640)="cfbe2d62569d", &(0x7f00000026c0)=0x6, 0x0, 0x0) ioctl$VNDIOCGET(r3, 0xc4104603, &(0x7f0000000100)={'./file0\x00', 0x9, 0xfff, 0x6d1}) (async) ioctl$VNDIOCGET(r3, 0xc4104603, &(0x7f0000000100)={'./file0\x00', 0x9, 0xfff, 0x6d1}) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2", 0x2}], 0x1, 0x8000000) (async) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2", 0x2}], 0x1, 0x8000000) 1.246860301s ago: executing program 2 (id=1028): mknod(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1d02) (async, rerun: 32) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async, rerun: 32) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) pipe2(&(0x7f0000000040), 0x10004) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5920) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x198) (async) setrlimit(0x1, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfd}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7fd}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000123000/0x3000)=nil, &(0x7f0000369000/0x3000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000204000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffdffffffffff9}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0xe}, {&(0x7f0000750000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000598000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fa}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x2}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa}) (async) acct(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x2, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2004000, 0x5}) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000000100), 0x0) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.172344117s ago: executing program 2 (id=1029): sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1b}, 0x4, &(0x7f0000000600)="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", &(0x7f0000000000)=0x150, &(0x7f0000001640), 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) execve(&(0x7f0000000440)='./bus\x00', &(0x7f0000000980)=[&(0x7f00000005c0)='/dev/tty\x00', &(0x7f0000000780)='/dev/tty\x00', &(0x7f00000007c0)='\x00', &(0x7f0000000800)='{%,},/\x00', &(0x7f0000000840)='/dev/tty\x00', &(0x7f0000000880)='\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)=')#$\x00', &(0x7f0000000940)=',\x00'], &(0x7f0000000b80)=[&(0x7f0000000a00)='@\x00', &(0x7f0000000a40)='/dev/tty\x00', &(0x7f0000000a80)='/dev/tty\x00', &(0x7f0000000ac0)='\\\x00', &(0x7f0000000b00)='\x00', &(0x7f0000000b40)='}}\x00']) r0 = open$dir(&(0x7f0000000200)='./bus\x00', 0x2, 0x180) r1 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r1, &(0x7f0000000000), 0x10) write(r1, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0x20000) ktrace(&(0x7f00000000c0)='./bus\x00', 0x1, 0xa2c, 0x0) r2 = openat$tty(0xffffffffffffff9c, &(0x7f00000003c0), 0x8, 0x0) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000400)={0x4c2, 0x1, 0xfffff744, 0x7, "0d4451da477b1ddb59f92e8fe78a70d48c8248d7", 0x4a}) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="bf30cbcd28783b63fa9dc486a7817494", 0x10}], 0x1) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x1}, 0x3, &(0x7f00000001c0)="e94150768e44aa434fd9abcd7c7d0ad58a7ad3cbaf6f44c0817f997d748fafddaccf0e79d56a74ea7c55debe02564656ce319f3ccd91c4e7475db05ba0c102329c61fc5de9a882263b9f6f33231cddb48e78dfff60a30ada2572ce289edeac4b1a8294fb9be374c4136a99afe7f8437864e8ed5185e04646262b29eb1b60fcb5e71f2284a08770e308c45e9c2ae4de44096a38da4b4cf69caa79dc753f48e03fca87993e7532134b70c9a46f3ccdf1470e717d8a7841688fb4f4f2bddb70d3", &(0x7f00000000c0)=0xbf, &(0x7f00000004c0)="92fff250e97019cb9980d71960b15c34e12e245bc887bd883ab8c0ed21bab7edce73cff8e95bee1b6f1953f9f8b0cc1124b68f2002a8034ece83fe953d5ee7b7f0c4f02d1465b7c36e33bf0f67fe6887c41272488b89a57dbbd59c4b21bcc34e733ed83807f38b253e8bb015e503fdaf7088a508179533aa0c3359634b62eb6a3dde48769424f23d67dc708d27bdcbf42a33e841d2c24d2b60b9078a4c94d745c60e6c9978436f5b575092ac4165a4f2b1078a466afa3beaa46f5f1ae56558ed26a92833553359d5264ce7c1275416", 0xcf) kevent(0xffffffffffffffff, 0x0, 0xfffff7f1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x80000000, 0x9}, {{}, 0xfffffffffffffff9, 0x96, 0x20000000, 0x8000000000000001, 0x46ad}, {{}, 0xfffffffffffffff8, 0x1, 0xf0000000, 0x1, 0x1000000000000008}, {{}, 0xfffffffffffffff8, 0x20, 0x20, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffb, 0x40, 0x1, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x6, 0x1, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x1, 0x2, 0x100000001}, {{}, 0xfffffffffffffff8, 0x80, 0x8, 0x100, 0x2}], 0xb19, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0xe008, 0x3) close(r4) 1.171073254s ago: executing program 2 (id=1030): execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffffff) 1.170789698s ago: executing program 2 (id=1031): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3ffffffffd, [{&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000508000/0x3000)=nil, 0x200007bffffffffe}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4}, {&(0x7f00001ff000/0x2000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x30}, {&(0x7f00000a9000/0x1000)=nil, &(0x7f000072c000/0x3000)=nil, 0xfffffffffffffff9}, {&(0x7f000025b000/0x1000)=nil, &(0x7f0000704000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000401000/0x1000)=nil, 0x80000000}, {&(0x7f0000179000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x20c}, {&(0x7f000021f000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00005c8000/0x3000)=nil, 0xf978}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f000020e000/0x1000)=nil, 0xd}, {&(0x7f000016e000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x127}, {&(0x7f0000473000/0x1000)=nil, &(0x7f0000800000/0x1000)=nil, 0x1000009}, {&(0x7f0000108000/0x11000)=nil, &(0x7f0000714000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000035000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000051d000/0x3000)=nil, 0x50b}, {&(0x7f00001e1000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x400000000005}], './file0/file0\x00', 0x1}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000780)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x10, 0x81, 0x3, 0x48}, {0x48, 0x8, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="c2a6d6000000005ae39d73988d800f00ecfe746fc6d602ff1a1ea6612b158f09acc9ae4e6a9981d79a05f77bf1aeb47b1435ea280e5a6f787f6607280658f5ca06f658dfb61ba646", &(0x7f0000000000)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, 0x0) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f00000003c0)={@empty, @random="3e9ccb4db2bf", [], {@generic={0x3c07}}}) 1.170569364s ago: executing program 2 (id=1032): ktrace(0x0, 0x0, 0x510, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, &(0x7f0000000100)="71f91e34", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000002c0)={0x1, 0x1}, 0x40000000000001d2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000300)=0x1c, 0x0, 0x0) wait4(0x0, 0x0, 0x2, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x81, 0xf0, 0xff, 0x81}]}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x10001, 0xffffffffffffffff}) r0 = socket(0x800000018, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) syz_emit_ethernet(0x62, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x8, 0x6, "4498fb", 0x2c, 0x37, 0xb, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@routing={0x2c, 0x2, 0x0, 0x2, 0x0, [@mcast1]}], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x70fc, 0x0, 0x3}}}}}}}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffc, 0xb, 0x0, 0x9, 0x2000000000000000, 0x210, 0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9c) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x33, 0x0, 0x37) r2 = open(&(0x7f0000000240)='./file0\x00', 0x10000, 0x8) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r3 = socket$inet(0x2, 0x2, 0x0) r4 = dup(r3) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000503000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102", 0x62, 0x8, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket(0x11, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000340)="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", 0xfffffffffffffe65) r5 = dup(r4) dup2(r5, r1) syz_extract_tcp_res$synack(&(0x7f0000000200), 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendto(r4, &(0x7f0000000080)="e7ff520000000000", 0x90, 0x0, 0x0, 0x0) 623.283461ms ago: executing program 5 (id=1034): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xfffffffd, 0x2, 0x3, 0x5, "01000000d000", 0x0, 0x5}) r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = kqueue() open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) r2 = getpid() setreuid(0xee00, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r2) setuid(0xffffffffffffffff) getrusage(0xffffffffffffffff, &(0x7f0000000380)) kevent(r1, &(0x7f0000000180), 0x4008c0, 0x0, 0x0, 0x0) setitimer(0x0, &(0x7f00000000c0)={{0x2bf32bf, 0x1}, {0xffffffff, 0x3}}, 0x0) ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000080)=0x3) setgid(0xffffffffffffffff) r3 = socket(0x1, 0x5, 0x3) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000ff3000/0xb000)=nil, 0xb000, 0x4) r4 = socket(0x2, 0x1, 0x0) bind(r4, &(0x7f0000000000), 0x10) r5 = socket$inet6(0x18, 0x3, 0xfc) ioctl$FIONREAD(r5, 0x4004667f, &(0x7f0000000000)) getsockopt$sock_cred(r3, 0xffff, 0x1022, 0x0, &(0x7f0000000340)) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00005dd000/0x2000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfd}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7fd}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x4}, {&(0x7f0000123000/0x3000)=nil, &(0x7f0000369000/0x3000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000204000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffdffffffffff9}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00007ca000/0x3000)=nil, &(0x7f0000508000/0x2000)=nil, 0xe}, {&(0x7f0000750000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000598000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fa}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x2}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa}) socket(0x10, 0x4d210b2dda3d7f67, 0x78) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000803) r6 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0xa) ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000140)=0x8) close(r6) ioctl$TIOCSETA(0xffffffffffffffff, 0xc1084425, &(0x7f0000000040)={0x2, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2004000, 0x5}) 622.724003ms ago: executing program 5 (id=1035): r0 = getpgid(0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0xffffffff, 0x7, 0xffffffffffffffff}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x8, 0x81, 0x4, 0x1}, {0x16, 0x1, 0x0, 0x800ee68}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000240)="840cbf3e87c006a62a075a37308e7bd3403e6b8bc8bf2c2db10fa8389d9c479df600cc9f9fb133cc4e654e22a11ffbe84cf292ab289e9f28b43b158fff49a341dff8b210cf9d7d94", 0x48}], 0x1) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x21}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[]) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x4f4f875e0ad02552, 0x0, 0x814, 0xffffffffffffff93}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r4 = socket(0x18, 0x1, 0x0) setuid(0xee01) ioctl$FIONREAD(r4, 0x8020699d, &(0x7f00000001c0)) (async) getpgid(r0) 420.28365ms ago: executing program 5 (id=1036): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x106) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) 420.157235ms ago: executing program 5 (id=1037): syz_emit_ethernet(0x7e, &(0x7f0000000080)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "765203", 0x48, 0x0, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x18, 0x1, '\x00', [@ra={0x5, 0x2, 0xfffd}, @pad1, @enc_lim={0x4, 0x1, 0xe}, @generic={0x4}]}], @icmpv6=@dest_unreach={0x1, 0x7, 0x0, 0x40, '\x00', {0x7, 0x6, "dbe371", 0x160, 0x8, 0x4, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}}) msgsnd(0x0, 0x0, 0x401, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x11bc62ce) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 419.170837ms ago: executing program 5 (id=1038): r0 = open(&(0x7f0000000300)='.\x00', 0x8000, 0xd1) poll(&(0x7f0000000000)=[{r0, 0x4}], 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 418.091427ms ago: executing program 5 (id=1039): r0 = socket$inet(0x2, 0x3, 0x0) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) r1 = getpid() r2 = socket$unix(0x1, 0x5, 0x0) listen(r2, 0x300000) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setrlimit(0x1, &(0x7f0000000280)={0x7, 0x2}) setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) nanosleep(&(0x7f0000000000)={0x3, 0x5}, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r3 = syz_open_pts() mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x2011, r3, 0x0) r4 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) close(r4) bind(r0, &(0x7f0000000040)=@in={0x2, 0x1}, 0xc) r5 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$BIOCGDLTLIST(r6, 0xc010427b, &(0x7f00000001c0)={0x4, &(0x7f00000000c0)=[0x200, 0x7, 0x6, 0x5]}) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) 371.277092ms ago: executing program 1 (id=1043): r0 = socket(0x2, 0x3, 0x0) close(r0) (async) r1 = socket(0x18, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0xc, 0x8001, 0xfffffffffffffffa}) (async) r2 = socket(0x18, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) r3 = socket(0x18, 0x4003, 0xa) setsockopt(r3, 0x1000000000029, 0x40, 0x0, 0x0) (async) getsockname$inet(r2, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) (async) semop(0x0, &(0x7f00000000c0)=[{0x0, 0x0, 0x800}, {0x2, 0x2ff, 0x1000}], 0x2) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) write(r0, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$unix(r4, &(0x7f00000000c0)=@abs, &(0x7f0000000100)=0x8) (async) r5 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) close(r5) 370.820753ms ago: executing program 1 (id=1044): openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000131, &(0x7f0000000040)}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x47ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x902, 0x10, [{0x0, 0x9, 0x2, 0x71002}, {0x2, 0xfff, 0x8, 0xfffffff7}, {0x110, 0xfffff4a1, 0x0, 0x9}, {0x1, 0x803, 0x8007, 0xb6b}, {0xa, 0x200727, 0x9f7, 0x7}, {0x1, 0x650, 0x5, 0xc7}, {0xce1, 0xffffffff, 0x1, 0x6d}, {0xffe, 0x7ff, 0x14, 0xc}, {0x2, 0x200083, 0x8000005, 0x5}, {0x6a76, 0x8003, 0x8001, 0x4}, {0x3, 0x10001, 0xe, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8c, 0x555981a7, 0x3, 0x6}, {0x29a71717, 0xfffffff6, 0xffffffff, 0x7}, {0xd, 0x3, 0x5, 0x10000000}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9, 0x7, 0x101, 0x80000003, 0x1, 0x80000000, 0x10, [{0x4, 0x9, 0x0, 0xfffffffb}, {0x7, 0x6, 0x6, 0xfffffffc}, {0x8, 0xf86, 0x0, 0xaf9}, {0x2000004, 0x800, 0x7, 0x40}, {0x3, 0x7fffffff, 0x0, 0x7}, {0x2, 0x6, 0x3, 0x101}, {0xcdf, 0x1, 0x1, 0x6c}, {0x200a, 0x80803, 0x17, 0x8}, {0x0, 0x4, 0x7, 0x9}, {0x6, 0x8002, 0x100000c7, 0x4088}, {0x4, 0xffffaac5, 0x34, 0x10000aeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffff9, 0x6, 0x6}, {0x4, 0x7, 0x4}, {0x0, 0x1, 0x0, 0x30000}]}) r2 = kqueue() kevent(r2, &(0x7f0000000380)=[{{r0}, 0xfffffffffffffffe, 0x81, 0x1, 0x9b, 0x8}], 0x1ff, 0x0, 0x14, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$hw(&(0x7f0000000040)={0x6, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000040)={0x6, 0x12}, 0x2, &(0x7f00000005c0), &(0x7f0000000080), 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0x6, 0x3, 0x80002001, 0x8, 0x10, [{0x4, 0x7, 0x4, 0x3}, {0x7, 0x4, 0x9, 0x7}, {0x6, 0xf86, 0x100, 0x2f9}, {0x5, 0x8, 0xc, 0x3}, {0x7, 0xfffffffb, 0xe, 0x3}, {0xfffffffe, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0x1, 0x5, 0x2}, {0x2000a, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x3ff, 0x8001, 0xc7}, {0x1, 0x5, 0x9, 0x10aeb}, {0x803, 0x40, 0x1, 0x5}, {0xe0, 0x4, 0x5, 0x8}, {0x29a71717, 0xfffffffa, 0x3, 0x100006}, {0x8, 0x5, 0x7}, {0x0, 0x5, 0x4, 0x30020}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 370.654728ms ago: executing program 1 (id=1045): truncate(&(0x7f0000000000)='./file0\x00', 0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0xa8) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{}, 0x101}) mknod(&(0x7f0000000100)='./file0\x00', 0x10, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x3, 0x3a) getsockopt(r1, 0x29, 0x2a, 0x0, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) r3 = socket$unix(0x1, 0x2, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) getsockopt(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0xe) setuid(0xffffffffffffffff) shmget$private(0x0, 0x1000, 0x440c6d94352ab3e5, &(0x7f0000521000/0x1000)=nil) shmget(0x2, 0x2000, 0x300, &(0x7f0000521000/0x2000)=nil) shmget(0x2, 0x4000, 0x300, &(0x7f0000c21000/0x4000)=nil) r4 = kqueue() setrlimit(0x7, &(0x7f00000000c0)={0x5, 0x3}) writev(r4, &(0x7f0000000140)=[{0x0}], 0x1) pwrite(r4, &(0x7f0000000240)="ffe83b84991055ef83e80a1a2ebdafdafe609cf5afda97200070762d4dbb689aa54916350d72cee5883314b6d436e9aef15576bcf68efe43a660b8ae7e81a892945b84247dc396bf32667db38177631f2dfc7668a83d804e41ade2100b992e33d8c1ad3cbd11ccbafbf7604e7758fc30c4f439a85bc8c36c021d311d1a44b677a717419e100879126b2b7336607a83c08dc45986fd8924e9e25fd215b0c5bfdf813f2aaeb542cd80905eb8e8e9ee70e108a226421f7de37730146251fd80e387f5b9bf5730eb7fbe5b59b8ee4716a8c78d70829150", 0xd5, 0x4) ioctl$VT_OPENQRY(r0, 0x40047601, &(0x7f0000000080)) 155.368863ms ago: executing program 1 (id=1046): r0 = socket(0x18, 0x1, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x0, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x180, 0xd, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x7, 0x9, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0x10000, 0x4000000000000200, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x3, 0x6], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x1}, {0x8, 0xfffffffe, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0x1f, 0xc38a, 0x0, 0x7}, {0xe4, 0x6, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfffb, 0xffffbfc0, 0x8}}}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r1 = socket(0x2, 0x3, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x7, 0x80000001, 0x7, 0xd7, "00000000000000000000cf8c077b00", 0x8, 0x3}) (async) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_INTR(r2, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) (async) ioctl$FIONREAD(r1, 0xc0206921, &(0x7f00000001c0)) (async) setsockopt(r0, 0x1000000000029, 0x8, &(0x7f0000000040)="00000080", 0x4) (async) getsockopt(r0, 0x29, 0x3e, 0x0, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x820, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x1, 0x0, 0x1, 0x7ff}]}) 155.249976ms ago: executing program 1 (id=1047): r0 = socket$inet(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt(0xffffffffffffffff, 0xffff, 0x40, 0x0, 0x0) 155.070937ms ago: executing program 1 (id=1048): r0 = syz_open_pts() ioctl$TIOCMSET(r0, 0x8004746d, &(0x7f0000000180)=0x10000) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) r1 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) kevent(0xffffffffffffffff, 0x0, 0x401, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffb, 0x44, 0x0, 0x0, 0x8000005}, {{}, 0xfffffffffffffffc, 0xc1, 0x20000000, 0xe6a8, 0x4000000046ad}, {{r1}, 0xfffffffffffffffa, 0x1, 0xf0000000, 0x1, 0x2}, {{}, 0xfffffffffffffffd, 0x20, 0x40, 0x7, 0x400}, {{}, 0xfffffffffffffffb, 0x4a, 0x20000000, 0x9, 0x3}, {{}, 0xfffffffffffffffc, 0x6, 0x1, 0xe, 0x10000}, {{}, 0xfffffffffffffff8, 0x11d, 0x1, 0x1, 0x100000401}, {{}, 0xfffffffffffffffd, 0x38, 0x4, 0x4000100, 0xfffffffffffffff8}], 0xb19, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x3) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYRES32=r1]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x1, 0x0) bind(r2, &(0x7f0000000000), 0x10) listen(r2, 0x0) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) write(r3, &(0x7f0000000080)="d99aca906c", 0xfd23) r4 = accept(r2, 0x0, &(0x7f0000000040)) sendto$unix(r4, &(0x7f00000000c0)="07dc6c", 0x3, 0x404, 0x0, 0x0) 118.940063ms ago: executing program 4 (id=1049): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0x7f, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x1}, {0x16, 0x7e, 0x0, 0x800ee68}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="840cbf3e87c0c89c479dd6", 0xb}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000840)="c2a6d6000000005ae39d54988decfe746fc6d26656004240fc71aa9c75d7c96107f8d5001ffb39dbdf000000604c0528ac20ab828139026fba9fe80bd626630030b7126b7068d1d6b676a820f8955882e7a77b04589a44df4ddf9c656bff4325f26057f70489728af6d2e5bfdc9f3552e2a2b1d2e706022686aef19a2cdfd970b5", &(0x7f0000000000)=0x81, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 115.7578ms ago: executing program 4 (id=1050): open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) setrlimit(0x5, &(0x7f0000000040)={0xec53, 0x10001}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000000) r0 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10) ftruncate(r0, 0x80002) open(&(0x7f0000000080)='./file0\x00', 0x10686, 0x8) read(r0, &(0x7f0000000140)=""/246, 0xf6) setrlimit(0x1, &(0x7f0000000100)={0xa, 0x5}) 40.306037ms ago: executing program 4 (id=1051): r0 = socket(0x800000018, 0x3, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) (async) r1 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) ktrace(&(0x7f00000001c0)='./file0\x00', 0x1, 0x40002344, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x5cda) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaac8aabb00000000000081000f0060071d6eec37868304ad46324b4b06b90a707c701a0275850fea4ac64247697f82697b6431e4a8f4b91d2fc1bf7810dcf68a1fcb560509cd6a"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) writev(r2, &(0x7f0000000180)=[{0x0}], 0x1) (async) dup2(r0, r1) (async) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x129) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x10) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f00000000c0)={0x101, 0x4, 0x8a38, 0xfffffffc, "070609000013160000050800", 0x0, 0x7f7}) (async) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000040)={0x30, 0xe731, 0xc, 0x6, "8275ccb7478a688f124e79cc3af74d02c9641038", 0x8, 0x23306f19}) 37.502177ms ago: executing program 3 (id=1053): ioctl$WSDISPLAYIO_LSFONT(0xffffffffffffff9c, 0xc058574e, &(0x7f0000000000)) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f00000000c0)={'./file0\x00', 0x4, 0x0, 0x6d77}) ioctl$VT_GETSTATE(0xffffffffffffffff, 0x40067664, &(0x7f0000000500)) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x8, 0x0) ioctl$WSKBDIO_GETMODE(r1, 0x40045714, &(0x7f0000000580)) write(r0, &(0x7f00000005c0)="25ee8578c150138644c83535fda306019ce272b8", 0x14) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000680)={&(0x7f0000000600)='./file0\x00', 0x4, &(0x7f0000000640)='./file0\x00', 0x8}) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000740)={&(0x7f00000006c0)='./file0\x00', 0x8000000000000000, &(0x7f0000000700)='./file0\x00', 0x8}) socketpair(0x6, 0x1, 0x95, &(0x7f0000000780)={0xffffffffffffffff}) r3 = getpgrp() fcntl$lock(r2, 0x9, &(0x7f00000007c0)={0x3, 0x2, 0xffffffff, 0x0, r3}) r4 = open$dir(&(0x7f0000000800)='./file0\x00', 0x10, 0x40) fcntl$lock(r0, 0x8, &(0x7f0000000840)={0x2, 0x1, 0x9, 0x7fffffff, r3}) readv(r2, &(0x7f0000000980)=[{&(0x7f0000000880)=""/69, 0x45}, {&(0x7f0000000900)=""/122, 0x7a}], 0x2) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f00000009c0)={'./file0/file0\x00', 0x1, 0xcc, 0x4, 0x1, 0x7, 0x6, 0x8, 0x2, 0x2, 0x8, 0x4}) r5 = geteuid() r6 = getegid() getgroups(0x6, &(0x7f0000000d00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) r10 = open(&(0x7f0000000d40)='./file0\x00', 0x40, 0x0) r11 = openat$pci(0xffffffffffffff9c, &(0x7f0000000d80), 0x400, 0x0) sendmsg$unix(r2, &(0x7f0000000e80)={&(0x7f0000000a40)=@file={0x1, './file0/file0\x00'}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000a80)="3557e5efc3d69061419b294e24765c9ff31319e02cba9c0601d8c3294f0fa700cf56f8ee7623bd205241aea561fa871a47437c85aff6943389b0550a6903e9ad207a0ef0062baa0b60520d9de5f4bcc1c9f540b16791e714f4c84e4ede0eecbc9ef7f7f3de1ad6ee25b4c51a0da52a61789bcd7354b55bb49d23f2db1ccfa57fd0c127cd320a1e75f08f9b6f8b3e8c58cedb45d67697575229a32a9c3dd5d248bdb39e2efba2572222d6372490c17c40e3bf8a9aae6357fd08b7e5a01285f3", 0xbf}, {&(0x7f0000000b40)="f721790f1e135bcf6e353c7a12d26761820d3ee87c3a855ff5bda08d0140b2ca771882585e201329d3927226a146d207c9616efea9c2a6651a7977672241d762bd08171ae09f46f2d5247fea96ccd85633ff5f123f36c064b06f6254ff547eafea9b829b536e10c5c2ee80afdb06f26fe0cd3e2c2b895120285f9ad673f37e955b897eaada250717cacd1e8ef16f25e1cb22764af3e0415df5149f82d72e7a7e826566f0", 0xa4}, {&(0x7f0000000c00)="67fbb29182266d939d48113b20693269b4d71d51d98b2295508e8236fbc8d793098133c6a0c9c74d9f6ff1ab58c6896e78e8ca2bac64ff6450ef947c13dec57865627ee6214da4cca2f1f22cfe432d4143d335ad31141e8afa3a3e2b1119f3c7f00d8e853616373d95dc9d1fb8619761d78a3c954538af9c30787ab1af1823b50afa741a399d7b2f168ce37df27897096b4be39a1368ad0c5225c3a6c78624b464aa1f728bf2e3247ac97a1d8e6d", 0xae}], 0x3, &(0x7f0000000dc0)=[@cred={0x20, 0xffff, 0x0, r3, r5, r6}, @cred={0x20, 0xffff, 0x0, r3, 0x0, r7}, @rights={0x28, 0xffff, 0x1, [r0, 0xffffffffffffffff, r4, r1, r2]}, @rights={0x18, 0xffff, 0x1, [r10]}, @rights={0x20, 0xffff, 0x1, [r1, r11, r0, r4]}], 0xa0, 0xc}, 0x400) ioctl$TIOCSFLAGS(r2, 0x8004745c, &(0x7f0000000ec0)=0x9) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000f00)={{0x7fffffff, r5, r9, r5, r8, 0x20, 0xf8}, 0x100000001, 0xfffffffffffffffd, r3, r3, 0x5ece, 0x7fff, 0x200, 0x694}) ioctl$BIOCSETIF(r10, 0x8020426c, &(0x7f0000000f80)={'tap', 0x0}) bind$unix(r2, &(0x7f0000000fc0)=@file={0x1, './file0/file0\x00'}, 0x10) syz_emit_ethernet(0x83a, &(0x7f0000001000)={@random="2c2fe14a7371", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "59caeb", 0x804, 0x89, 0xf0, @mcast2, @remote={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x50, 0x38, '\x00', [@generic={0x0, 0x6, "c01137a583d1"}, @generic={0x4, 0xac, "770b68479885d53a897945c4b3417188e5d4d0f07636561db824afba65fa29dc47daa48bbd5e59bf98ed92c927f2028668560e676ec69bc90fc772c2de2103577a768302f0cd7aa72a5e8d5998924efd21c07186c90156df40773d0db835de46a7d518e540f08b7fe8278af3bb9ddbaf64b9bbfaebd203a1ae5ad171ed43644e0293aa68de78b622fe9d6dca47f0300667c733ac1a5c00c84e2922a1b513d8776ac4d3e4b65c01bb1359f151"}, @jumbo={0xc2, 0x4, 0xfffff801}, @enc_lim={0x4, 0x1, 0x7}, @pad1, @generic={0x7, 0xf9, "d8e2f634dc70038a494dceac99bd3eb27595b8934de4fb55e324984cdb754114d7e8559c63a2962c9e380d8f57c034e36f633cb57bac41c3ce8758c84fe67e9e9c760d6c46b31030eb1bb072615a7c0b262b6b3d0d7f47cbd33c7d47a905fc14a40aca3033aa6e77f03b88ae38603bb285526fb90fe743d48324421712345e16de7365cb94a218dfdd855b310c16a959d19ce729c25b405c6cec6037832e1292f1cd757231e35d3d215114a044ef36b436c99eaaf707454b1284b5a9a29640127361f8273cf900e8c4d4f410f4ce4555f1a5b36a204096c937e85a4ca21ffe4bef4d08c1b6c942582acd3af501806f643eebd0a845389ac0d0"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}]}, @dstopts={0xf0, 0xe, '\x00', [@generic={0x80, 0xb, "b29e36f74ce099561bf3c2"}, @pad1, @generic={0x3, 0x59, "aef0512b83e3318a647220766e310821a2f3ccdc15f3061c68e68871fe76360cc4c8973c709c33ef4aeecde188cf3eae4bdae0e0ea3e5aa60012dc86abed719fdd44473ba6ddcedabcbc0faa55de906a4cc21047e66cffc655"}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @routing={0x2b, 0xe, 0x0, 0x9b, 0x0, [@empty, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1, @local={0xfe, 0x80, '\x00', 0x0}, @loopback]}], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0xe2, '\x00', {0x2, 0x6, "b70ec9", 0x1c0, 0xff, 0x0, @mcast2, @empty, [@routing={0x3, 0x10, 0x0, 0x8, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @loopback, @empty, @rand_addr="e4c86bf4569180ed9a9f40bfbc75160a", @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, @mcast2]}, @hopopts={0x3, 0x33, '\x00', [@generic={0xe, 0xcc, "25b2542a369ff7c6a0d0ae28a96e87fc871d33b61a7cafae6fdf36c4e53ab200a3db6a281831b6afb89f54a685e79e3dea8b3a4115be7ea3afdf35074562e2e7b8819ce7976a0afbe3a308206b4f80d201c6b96ac6728abbdd6a2a370d063fbe518efc40a505edc2409d1fcb751bb532fd24823e332cceef593de51f7a8e1e155583913a4322210c323b07815fc59c48087dde532b0bcb4f81485fc446a27ccc95c4b5e02e5641ec46c9b8f61f7849a7a521b9f12d12785636c78dbd768bf06f04d4bc63c87b96e4468b2257"}, @generic={0xfd, 0xa7, "6361dbe6e64cb6b9c02cbda61a58bf1d58dd2524d8e0b7c8041bad32328d31e748ed75d32c0ba9d7cb5e0afc5e0f1bce23c879103347006c5d8c0d3825b5235edcf0c68895831cb9635642dc0ed96a849cef4438161f1f32dcd2feeecab731d9e77ff110ca22e07ae91ead4ec92612be04b63e70b0345e36d7308227bd510b5a692b503ada896403899b720d7957a1bebf6b5434861ef9dda3b36046fa149a53f53eedc4805155"}, @generic={0x5e, 0x20, "9acb6f31ec3be275a68654f9c74708ebb949a2d83b71aab46a29914c1d0176e5"}]}, @hopopts={0x67, 0x56, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xc5, 0xd1, "db355952fb00495b7ad5889d1d338d83ccac9092dbdc2909286c0e1d409220a3817e9c1de75d7c8f22187cd4847b156729d279bb7269338c2c1c55c2dfc6098059711030949613d1ddaf9789f6c008c3b8a0ec951a55209618d2da67acee10f3a719868ba3590085e222e2f98de41d3733cdb09ffeb5026eeb69655a398ea79f0ccd7c13beab3fcd3bf07d8aaaa501a8504e3145f3cbed52d4f2c9d701bb73ef5302fde3d751f3f0022009fbfe6383f7ecff11b8a6c393d3506c2e4a8bf86c58acdd468eca6f12465003aede416a0538f3"}, @generic={0x5, 0x49, "de7ad07a0176764e1eca2d27233b90325103cf5c51c3448bf17cb630e2fb138f8c32c3175ba395c0aa0506e65081562c6dcddc2647b81ca2870e337dd43a3376296a2ec6833cad1ca1"}, @ra={0x5, 0x2, 0x8}, @pad1, @generic={0xf, 0xe5, "40ca8719fc3b88885b7299c53349c1b7e4f6683d7153978ace19631e7bd6e681ca001732ea85c3264933e65e16b33693b327a5c1527e1d9b2cfc18668a030e04b18224c569aee0a7e943fdc8dfd99bd6f75f8b57ba567520c7c98e8a32194670a3287aaf454bdd2616286550b6b54fd974ae582da402e7bb769c6cda0b48bce04cdf1035088c7552cdf2e6929182803d5b4241eec7802d187040b06661aa189e357edb355881a0eb2dd0f4bea8644b802111c6c62b09bf294e95b9402a36d5ac264f4c55e57446eb9c7d530937da2847148cefc3a9399dd14ff887f79d799d72645e654ce1"}, @generic={0xa, 0x99, "0ef7305db69fd25f9a0a97c4359ef76f7890914768550cec5d2838e47d412261339d9aaaf31866193cff6e07a3054cedb4086c3c49a9ee99d3a226574150c502a8c1b72352123234e03efbd2d00392a436023f43b9809d7c8745083a1a59f8aaa790834ea00b22e63d03c065188244f541c4a8711bfdc0ede2a23c1c8b6e503c9a9fe2b4590e45591cbad6aeb25c11bf78077a61447383c498"}, @jumbo={0xc2, 0x4, 0x1}]}], "3c63f9d26bb38f09125874afeb7477aeb9b30b0be23fa3c9ee1981d5"}}}}}}}) sysctl$net_inet_tcp(&(0x7f0000001840)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000001880)="984fdbdcab5a9e64aa0c9bce5257b992185c931b176dbafc9e2528af233223a7d965480ca678526cbbd21446254595863d0dee3e7d4313f009d14a4fabec2fbbf3aa6cadd08afc0badd10110a7bf994c3ea87884673f37146ebe965abf6f8b909d1eaf2c0741cf0466ec251950dbd6147aa9c932311efea9e1ae5e0d7323992a45c54170027e8908e2a42fd0eaa1274c66aa0aa82a9954403fc0d8e44157dd96bdc8b27aa685401ceb90e85a0a689d46ab6f9975592a4ccb06ad25ba11ae8d515778b1bb9f3b064536bd649ff9e64393087f66edbd0dc91047532b2f1f2296f2", &(0x7f0000001980)=0xe0, &(0x7f00000019c0)="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", 0xfb) link(&(0x7f0000001ac0)='./file0/file0\x00', &(0x7f0000001b00)='./file0\x00') rename(&(0x7f0000001b40)='./file0/file0\x00', &(0x7f0000001b80)='./file0\x00') 36.248837ms ago: executing program 3 (id=1054): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) kqueue() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0xfffffff7, 0xfff, 0xffffffffffffffff}) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x40) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setitimer(0x1, &(0x7f0000000140)={{0xfffffffffffff000, 0x100d00000000009}, {0xffffffffffbfffff, 0xffffffeffffffffc}}, 0x0) socket(0x18, 0x3, 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) utimes(0x0, &(0x7f0000000040)={{0x2c4715b4, 0x6}, {0x19c06, 0xffff}}) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x406) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$WSDISPLAYIO_GETSUPPORTEDDEPTH(r4, 0x4004575c, 0x0) ioctl$FIONBIO(r4, 0x8004667e, 0x0) fcntl$setstatus(r0, 0x4, 0x4) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, 0x0) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000280)="b1000501600000000100000007000000201c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282118000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e4b2fff040ff00"/177, 0xb1, 0x0, 0x0, 0x0) ioctl$FIONREAD(r5, 0x80206913, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0xa, 0xffffffffffffffff) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt(r6, 0x0, 0x3, 0x0, 0x0) open(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x800, 0x8c) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000440)) 1.550768ms ago: executing program 3 (id=1055): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xe3, 0x80, 0xffffffff}, {0x4bf, 0x81, 0x0, 0x1}, {0x16, 0x35, 0x0, 0x800ee68}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)="840cbf3e87c006a62a075a37308e7bd3403e6b8b", 0x14}], 0x1) (async) r2 = socket(0x18, 0x3, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@broadcast, @random="e04b1c561ac4", [], {@ipv6={0x86dd, {0x0, 0x6, "36e282", 0x8, 0x1, 0x0, @mcast1, @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x1, 0x0, 0x8}}}}}}}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x5, 0x80000001, 0x7, 0x0, "00000100000000000000908b7f7f00", 0x3, 0x3}) (async, rerun: 64) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) (rerun: 64) ioctl$VMM_IOC_INTR(r3, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) (async, rerun: 32) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (rerun: 32) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) (async, rerun: 32) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff65ebf1d905cf86dd60db834400081100fed38d5ba80b9e61cd0c535a98f7ffffff"]) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x1000, 0xd5, 0xfe, 0xe}, {0x0, 0x0, 0x0, 0x4000002}]}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000300)=0xc) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) 780.337µs ago: executing program 3 (id=1056): openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) (async) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x5, 0x80000001, 0x7, 0x0, "00000100000000000000908b7f7f00", 0x3, 0x3}) openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) (async) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x80, 0x154) ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$VMM_IOC_INTR(r0, 0xca605601, &(0x7f0000000040)={0x1, 0x0, 0x1}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x1000, 0xd5, 0xfe, 0xe}, {0x0, 0x0, 0x0, 0x2}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000300)=0xc) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xd}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xd}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) 400.773µs ago: executing program 3 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000010c0), 0x210) r0 = socket(0x2, 0x3, 0x5) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BIOCGFILDROP(r1, 0x40044278, &(0x7f00000001c0)) fchdir(r0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x802069a1, &(0x7f0000000100)) readlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x7c110232708317ba) 0s ago: executing program 3 (id=1058): msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0xfffffdff, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x2}, 0x3, 0x8008000000000001, 0x0, 0x0, 0x8000000d, 0x2008004, 0x400000000000a8, 0x7fffffff}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0x37) (async) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180), 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) (async) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000000240), 0x0) (async) fcntl$setown(r0, 0x6, 0x0) (async) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error uvn_flush: obj=0xfffffd806b5ff880, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error panic: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va 0x200000016000, opte 0xffffffffffffffff Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND db_enter() at db_enter+0x25 panic(ffffffff8349ec7d) at panic+0x1cf pmap_remove_pte(fffffd805fe7f528,fffffd8007178380,7f9000000080,200000010000,200000200000,0) at pmap_remove_pte pmap_do_remove(fffffd805fe7f528,200000010000,200000400000,0) at pmap_do_remove+0x53a uvm_unmap_kill_entry_withlock(fffffd806562b470,fffffd806961fdd0,0) at uvm_unmap_kill_entry_withlock+0x269 uvm_map_teardown(fffffd806562b470) at uvm_map_teardown+0x117 exit1(ffff80003c91ba10,0,0,3) at exit1+0x6e6 proc_suspend_check_locked(ffff80003c91ba10,0) at proc_suspend_check_locked+0x4ba userret(ffff80003c91ba10) at userret+0x8c syscall(ffff8000314d7490) at syscall+0xa56 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7453a36da910, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: pmap_remove_ptes: unmanaged page marked PG_PVLIST: va 0x200000016000, opte 0xffffffffffffffff ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8349ec7d) at panic+0x1cf pmap_remove_pte(fffffd805fe7f528,fffffd8007178380,7f9000000080,200000010000,200000200000,0) at pmap_remove_pte pmap_do_remove(fffffd805fe7f528,200000010000,200000400000,0) at pmap_do_remove+0x53a uvm_unmap_kill_entry_withlock(fffffd806562b470,fffffd806961fdd0,0) at uvm_unmap_kill_entry_withlock+0x269 uvm_map_teardown(fffffd806562b470) at uvm_map_teardown+0x117 exit1(ffff80003c91ba10,0,0,3) at exit1+0x6e6 proc_suspend_check_locked(ffff80003c91ba10,0) at proc_suspend_check_locked+0x4ba userret(ffff80003c91ba10) at userret+0x8c syscall(ffff8000314d7490) at syscall+0xa56 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7453a36da910, count: -11 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff8000314d6fa0 rbx 0xfffffd8007178380 rdx 0 rcx 0 rax 0xffff80003c91ba10 r8 0x101010101010101 r9 0x8080808080808080 r10 0x41b13c2158adc136 r11 0x6d2c0687a46ce4d4 r12 0 r13 0x7f90000000b0 r14 0 r15 0x1 rip 0xffffffff81bd0215 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000314d6f90 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=331092 pid=8643 tcnt=0 stat=onproc flags process=1008 proc=82000 runpri=32, usrpri=78, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c91b248 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002f0d0fa8,0xffff80003c91a560 process=0xffff8000ffffa418 user=0xffff8000314d2000, vmspace=0xfffffd806562b470 estcpu=28, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 13172 337733 87450 0 3 0x80 fsleep syz-executor 13172 330813 87450 0 3 0x4000080 fifor syz-executor 15142 472800 43832 0 3 0x80 nanoslp syz-executor 15142 132085 43832 0 3 0x4000080 fsleep syz-executor 15142 356998 43832 0 3 0x4000080 ttyopn syz-executor 15142 490909 43832 0 3 0x4000080 fsleep syz-executor 88932 430549 14883 0 3 0x80 fsleep syz-executor 88932 336104 14883 0 3 0x4000080 netacc syz-executor 51592 181015 55661 -1 3 0x90 fsleep syz-executor 51592 382716 55661 -1 3 0x4000090 nanoslp syz-executor 23879 344027 70209 0 3 0x80 fsleep syz-executor 23879 384732 70209 0 3 0x4000080 kqsel syz-executor 99589 147040 68609 60929 3 0x90 fsleep syz-executor 99589 21663 68609 60929 3 0x4000090 piperd syz-executor 80882 54885 15157 0 3 0x80 fsleep syz-executor 80882 269272 15157 0 3 0x4000080 ttyout syz-executor 43832 163345 53429 0 3 0x82 nanoslp syz-executor 71770 517779 61308 27 3 0x1100092 kqread sshd-auth 61308 111374 29542 0 3 0x82 kqread sshd-session 55661 44944 53429 0 3 0x82 nanoslp syz-executor 35723 82302 14851 27 3 0x1100092 kqread sshd-auth 14851 1973 29542 0 3 0x82 kqread sshd-session 20349 47122 0 0 3 0x14200 acct acct 15157 252465 53429 0 3 0x82 nanoslp syz-executor 68609 362956 53429 0 3 0x82 nanoslp syz-executor 87450 122736 53429 0 3 0x82 nanoslp syz-executor 70209 337215 53429 0 3 0x82 nanoslp syz-executor 14883 82433 53429 0 3 0x82 nanoslp syz-executor 49459 281483 53429 0 2 0x2 syz-executor 53429 305849 77971 0 3 0x82 kqread syz-executor 77971 178502 73271 0 3 0x10008a sigsusp ksh 73271 189613 90937 0 3 0x98 kqread sshd-session 90937 386309 29542 0 3 0x92 kqread sshd-session 94567 63001 1 0 3 0x100083 ttyopn getty 29542 160267 1 0 3 0x88 kqread sshd 3735 66994 1378 73 3 0x1100090 kqread syslogd 1378 287910 1 0 3 0x100082 sbwait syslogd 14163 219272 1 0 3 0x100080 kqread resolvd 54714 38161 70949 77 3 0x100092 kqread dhcpleased 76571 478111 70949 77 3 0x100092 kqread dhcpleased 70949 417318 1 0 3 0x80 kqread dhcpleased 91654 39277 0 0 3 0x14200 bored smr 57521 49590 0 0 3 0x14200 pgzero zerothread 42424 64134 0 0 3 0x14200 aiodoned aiodoned 89445 117469 0 0 3 0x14200 syncer update 84557 225444 0 0 3 0x14200 cleaner cleaner 99865 309853 0 0 3 0x14200 reaper reaper 9343 160474 0 0 3 0x14200 pgdaemon pagedaemon 91149 48762 0 0 3 0x14200 bored viomb 89295 339400 0 0 3 0x40014200 acpi0 acpi0 7534 317569 0 0 3 0x14200 bored softnet0 17884 191077 0 0 3 0x14200 bored systqmp 41983 20861 0 0 3 0x14200 bored systq 82607 85962 0 0 3 0x40014200 tmoslp softclock 75239 188970 0 0 3 0x40014200 idle0 1 287996 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11057 12196K 12774K 166960K 14241 0 pcb 20 16K 18K 166960K 417 0 rtable 215 11K 11K 166960K 636 0 pf 40 15K 20K 166960K 161 0 ifaddr 37 6K 7K 166960K 94 0 ifgroup 51 2K 2K 166960K 138 0 sysctl 4 1K 9K 166960K 46 0 counters 34 17K 18K 166960K 85 0 ioctlops 0 0K 4K 166960K 424 0 iov 1 1K 24K 166960K 122 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1421 89K 90K 166960K 2560 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 16 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 92 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 228K 166960K 1234 0 sigio 0 0K 0K 166960K 52 0 proc 60 59K 124K 166960K 635 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 141 0 in_multi 77 5K 7K 166960K 166 0 ether_multi 1 0K 0K 166960K 12 0 mrt 0 0K 0K 166960K 27 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 109 493K 493K 166960K 109 0 exec 0 0K 1K 166960K 552 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 268 179K 196K 166960K 12340 0 UVM aobj 113 20K 20K 166960K 117 0 pinsyscall 46 92K 98K 166960K 2404 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 63 0 NDP 11 0K 2K 166960K 63 0 temp 71 9074K 9150K 166960K 59766 0 kqueue 20 30K 36K 166960K 223 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 127 0 122 1 0 1 1 0 8 0 rtentry 136 163 0 80 4 0 4 4 0 8 0 unpcb 144 678 0 650 2 0 2 2 0 8 0 syncache 336 8 0 8 2 1 1 1 0 8 1 tcpqe 32 1 0 1 1 0 1 1 0 8 1 tcpcb 736 532 0 519 8 1 7 7 0 8 5 arp 96 26 0 13 1 0 1 1 0 8 0 ipq 40 3 0 2 1 0 1 1 0 8 0 ipqe 40 4 0 2 1 0 1 1 0 8 0 inpcb 328 1495 0 1475 12 3 9 12 0 8 7 nd6 112 32 0 13 1 0 1 1 0 8 0 pkpcb 40 10 0 10 1 0 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 ppxss 1072 42 0 41 1 0 1 1 0 8 0 pppxif 1384 7 0 6 1 0 1 1 0 8 0 pfstscr 40 2 0 2 1 0 1 1 0 8 1 pffrag 232 3 0 0 1 0 1 1 0 482 0 pffrnode 88 3 0 0 1 0 1 1 0 8 0 pffrent 40 5 0 1 1 0 1 1 0 8 0 pfrktable 1344 8 0 4 2 1 1 1 0 8 0 pfanchor 1288 5 0 2 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 4 0 0 1 0 1 1 0 8 0 pfstkey 128 16 0 12 1 0 1 1 0 8 0 pfstate 384 9 0 7 1 0 1 1 0 8 0 pfrule 1360 16 0 14 1 0 1 1 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 716 0 332 30 0 30 30 0 8 4 art_table 40 719 0 332 5 0 5 5 0 8 0 art_node 32 161 0 88 1 0 1 1 0 8 0 sysvmsgpl 40 18 0 11 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 83 0 73 1 0 1 1 0 8 0 shmpl 112 105 0 3 3 0 3 3 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 3605 0 2148 92 0 92 92 0 8 0 ffsino 256 3605 0 2148 92 0 92 92 0 8 0 nchpl 144 5223 0 3522 64 0 64 64 0 8 0 rtmask 32 8 0 8 2 1 1 1 0 8 1 vnodes 216 4433 0 0 247 0 247 247 0 8 0 namei 1024 19167 0 19167 3 2 1 2 0 8 1 vcpupl 3904 9 0 1 1 0 1 1 0 8 0 vmpool 808 9 0 1 1 0 1 1 0 8 0 pfiaddrpl 120 2 0 0 1 0 1 1 0 8 0 kstatmem 264 86 0 64 3 0 3 3 0 8 1 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 scsiplug 72 5 0 5 1 0 1 1 0 8 1 scxspl 216 20410 0 20410 9 7 2 8 1 8 2 plimitpl 152 558 0 541 1 0 1 1 0 8 0 sigapl 424 1519 0 1471 6 0 6 6 0 8 0 knotepl 120 427530 0 427471 17 7 10 16 0 8 7 kqueuepl 184 554 0 538 4 0 4 4 0 8 3 pipepl 304 266 0 236 3 0 3 3 0 8 0 fdescpl 448 1504 0 1471 5 1 4 5 0 8 0 filepl 120 10115 0 9861 13 1 12 12 0 8 2 lockfpl 104 524 0 521 3 1 2 2 0 8 1 lockfspl 48 200 0 197 1 0 1 1 0 8 0 sessionpl 144 28 0 18 1 0 1 1 0 8 0 pgrppl 48 87 0 69 1 0 1 1 0 8 0 ucredpl 104 1511 0 1496 1 0 1 1 0 8 0 zombiepl 144 1472 0 1471 2 1 1 1 0 8 0 processpl 1152 1519 0 1471 4 0 4 4 0 8 0 procpl 664 3089 0 3032 7 1 6 6 0 8 0 sosppl 176 3 0 3 1 0 1 1 0 8 1 sockpl 552 2353 0 2300 12 2 10 12 0 8 6 mcl64k 65536 47 0 45 2 1 1 1 0 8 0 mcl16k 16384 1 0 1 1 0 1 1 0 8 1 mcl12k 12288 1 0 1 1 0 1 1 0 8 1 mcl9k 9216 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 16 0 16 2 1 1 1 0 8 1 mcl4k 4096 3938 0 3884 17 8 9 16 0 8 1 mcl2k 2048 1345 0 1339 7 3 4 4 0 8 3 mtagpl 96 46 0 8 1 0 1 1 0 8 0 mbufpl 256 18087 0 17854 77 53 24 77 0 8 6 bufpl 280 6496 0 281 445 0 445 445 0 8 0 anonpl 24 219500 0 208990 126 4 122 122 0 187 30 amapchunkpl 152 41850 0 41078 46 8 38 38 0 158 8 amappl16 200 4432 0 4067 57 19 38 50 0 8 8 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 431 0 430 1 0 1 1 0 8 0 amappl13 176 127 0 113 1 0 1 1 0 8 0 amappl12 168 1803 0 1770 2 0 2 2 0 8 0 amappl11 160 4 0 4 1 1 0 1 0 8 0 amappl10 152 57 0 47 1 0 1 1 0 8 0 amappl9 144 267 0 267 1 1 0 1 0 8 0 amappl8 136 100 0 98 1 0 1 1 0 8 0 amappl7 128 149 0 133 1 0 1 1 0 8 0 amappl6 120 168 0 165 1 0 1 1 0 8 0 amappl5 112 99 0 86 1 0 1 1 0 8 0 amappl4 104 282 0 267 1 0 1 1 0 8 0 amappl3 96 8419 0 8300 4 0 4 4 0 8 0 amappl2 88 585 0 507 2 0 2 2 0 8 0 amappl1 80 16214 0 15313 19 0 19 19 0 8 0 amappl 88 11384 0 11202 5 0 5 5 0 92 0 uvmvnodes 80 123 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 8 0 8 2 1 1 1 0 8 1 dma128 128 256 0 256 2 1 1 1 0 8 1 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 8 0 8 2 1 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 116 0 4 3 0 3 3 0 8 0 uaddrrnd 24 1504 0 1470 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1504 0 1470 1 0 1 1 0 8 0 vmmpekpl 168 13282 0 13231 3 0 3 3 0 8 0 vmmpepl 168 103146 0 100432 138 7 131 131 0 357 7 vmsppl 368 1503 0 1470 5 1 4 4 0 8 0 rwobjpl 40 28810 0 26990 21 0 21 21 0 8 0 pdppl 4096 3032 0 2950 141 58 83 83 0 8 1 pvpl 32 650055 0 631666 215 5 210 210 0 265 35 pmappl 216 1512 0 1471 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 496 0 132 12 0 12 12 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8349ec7d) at panic+0x1cf pmap_remove_pte(fffffd805fe7f528,fffffd8007178380,7f9000000080,200000010000,200000200000,0) at pmap_remove_pte pmap_do_remove(fffffd805fe7f528,200000010000,200000400000,0) at pmap_do_remove+0x53a uvm_unmap_kill_entry_withlock(fffffd806562b470,fffffd806961fdd0,0) at uvm_unmap_kill_entry_withlock+0x269 uvm_map_teardown(fffffd806562b470) at uvm_map_teardown+0x117 exit1(ffff80003c91ba10,0,0,3) at exit1+0x6e6 proc_suspend_check_locked(ffff80003c91ba10,0) at proc_suspend_check_locked+0x4ba userret(ffff80003c91ba10) at userret+0x8c syscall(ffff8000314d7490) at syscall+0xa56 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7453a36da910, count: -11 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff8349ec7d) at panic+0x1cf pmap_remove_pte(fffffd805fe7f528,fffffd8007178380,7f9000000080,200000010000,200000200000,0) at pmap_remove_pte pmap_do_remove(fffffd805fe7f528,200000010000,200000400000,0) at pmap_do_remove+0x53a uvm_unmap_kill_entry_withlock(fffffd806562b470,fffffd806961fdd0,0) at uvm_unmap_kill_entry_withlock+0x269 uvm_map_teardown(fffffd806562b470) at uvm_map_teardown+0x117 exit1(ffff80003c91ba10,0,0,3) at exit1+0x6e6 proc_suspend_check_locked(ffff80003c91ba10,0) at proc_suspend_check_locked+0x4ba userret(ffff80003c91ba10) at userret+0x8c syscall(ffff8000314d7490) at syscall+0xa56 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7453a36da910, count: -11