last executing test programs: 4.900513251s ago: executing program 4 (id=176): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r1 = getpid() r2 = socket(0x6, 0x1, 0x7) sendto$unix(r2, &(0x7f0000000000)="b1000503000004000000000000200000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42118000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = geteuid() getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xc) sendmsg$unix(r3, &(0x7f0000000380)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000280)=[{&(0x7f0000000140)="461184a279d29a55f82d8fbe38a7f29abe9118af2d8b7d0f94137e05ae34069ae5047a0cb84fd9077fc27fc93b00e67002d7710fc6c91625a894a25aec73b8915512e07ca58b798ce55c3cdd9b171ad124ddbbe7bb107282", 0x58}, {&(0x7f00000001c0)="2b8f0978796a69358d87c43c0e10107605c5345dfaa2e296a00890d97ab3833a970f952c138bffea05d00343306306cc3e8894b79c04e96cce27347c8d3dffecf6d9fe43a205552e704061dc35669be2ed029058866648d21d9feec3ae3c5a4a45bba761455adcbbdd11aac0e0cba9cf635f0ed8ae74bf0b84d7b4b9bc9c", 0x7e}, {&(0x7f0000000240)="4323a1ad589610b64b8b735176bda86a04291a78bdcdca6d2945527ea7ed1455feed41d327deac60d6d9f9ddba677e96da0d187e9684", 0x36}], 0x3, &(0x7f0000000300)=[@cred={0x20, 0xffff, 0x0, r1, r4, r5}], 0x20, 0x2}, 0x400) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000340)={&(0x7f0000000000)=[{0x20, 0x10000}, {0x26, 0x5fbb45b}, {0x2, 0x8}], 0x3}) 4.840238407s ago: executing program 4 (id=177): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1}) (async) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="8b11384532d7148c61d483aa9f5c731ad55c", 0x12}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="8b11384532d7148c61d483aa9f5c731ad55c", 0x12}], 0x1) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYRES16=r0, @ANYBLOB="c917f2c0068af03b6882bd94631dc360b4c178219148dd8dffea5b0bf5e4bc7ab531777bbbdd6f465152023d933e5917ccce980143b6b1a6d5a9616d4bcf312acafa02810c57b82cf07c55d2a692a3d97bad45030b54160aad846faceaef29e3cf906104a0338a8b5368cf42aa946ad3f1330834a75ff5482f2d4144dd509404943bb645800f0dc401bbdf1169a849c22e7a5bba7853f9dba3d7d021c5f7193709f39d2a479ba628a64604a771ed48965a4d73c9498007e902584221504422f04ea2a3b4996ce4d064eec24083655879fa9c4c022fcfa807dff7"]) execve(0x0, 0x0, 0x0) 4.727731672s ago: executing program 4 (id=184): sysctl$kern(&(0x7f0000000040)={0x1, 0x24}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) 4.684623902s ago: executing program 4 (id=188): syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000080)={@local, @local, [{[{0x88a8, 0x1, 0x1, 0x4}], {0x8100, 0x4, 0x1, 0x1}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x2000, 0x0, 0xf0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @tcp={{0x0, 0x0, r0, 0x41424344, 0x0, 0x0, 0x18, 0x10, 0x40, 0x0, 0x6d, {[@window={0x3, 0x3, 0x9}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x2a, [0x1, 0x7, 0x0, 0x3, 0x459d, 0x8, 0x80000000, 0x1, 0x1, 0x1]}, @timestamp={0x8, 0xa, 0xb, 0x4}, @md5sig={0x13, 0x12, "163c14942ebf79c90357c034feb31cf1"}]}}}}}}}) r1 = socket(0x11, 0x8003, 0x0) getsockopt(r1, 0x11, 0x84, 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x19e, 0x800) syz_emit_ethernet(0x18, &(0x7f0000000180)={@empty, @local, [{[{0x88a8, 0x7, 0x1, 0x4}], {0x8100, 0x5, 0x1, 0x3}}], {@generic={0x200, "f34f"}}}) syz_extract_tcp_res(&(0x7f0000000140), 0x9, 0x5) 4.623450451s ago: executing program 4 (id=193): mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x3, 0xfc) getsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000100)=""/17, &(0x7f0000000140)=0x11) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000080)={0x6, 0x0, 0x5, 0xfb5e, 0x9}, 0xc) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000503000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b67", 0x51, 0x8, 0x0, 0x0) setuid(0xee01) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = semget(0x1, 0x4, 0x400) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000180)=0xc) getgroups(0x5, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r5 = geteuid() getgroups(0x8, &(0x7f0000000200)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000240)={{0x6754, r3, r4, r5, r6, 0xc9, 0x8}, 0x652, 0x4, 0x2}) r7 = socket(0x18, 0x1, 0x0) setsockopt(r7, 0x1000000029, 0x3c, &(0x7f0000000040)="03000000", 0x4) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 4.622618303s ago: executing program 4 (id=194): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x118) (async) r1 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x118) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) getdents(r1, 0x0, 0x0) (async) getdents(r1, 0x0, 0x0) sysctl$vm(&(0x7f0000000040)={0x2, 0xc}, 0x2, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x30, 0xf, 0x3, 0x9}, {0x26, 0x9, 0x1, 0xfffffff2}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="50041b02003e807047ff000800000000009586b272f7dedb1f0040003c7c3087de4ada9a933366fe46cace638ab36c050000a1abfa4f432c14a6082d9c0614f7b095d60315ae0d31446316630288736384b1295c9f9442a9eecd8c862d848235000e470ee26120124a28024fe2b9f33a65d792bc", &(0x7f0000000000)=0x74, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) mknod(&(0x7f0000000280)='./file1\x00', 0x1, 0xa61) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f00000000c0)="f1a42138cd18f3b0a16bc56a730bda8b263c0f70544fe00a08731bf3c827cdbf05a5fbd23d3f6e9faf40f7b9d4f512b7e1897b8105e05c59464a5dc9d3df6aa0da5099f84904880032cb260da746d9daac347a589c25185d05c378f8161277582bfcf801d0eaa2a89dfae08378672e56069ebd078a436f08f02ea81782cc26019a9ed26cbd039ef8d35862", &(0x7f0000000080)=0x8b, 0x0, 0x0) 3.384491301s ago: executing program 2 (id=210): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffff0000}) r0 = socket(0x18, 0x1, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r1, 0x0, 0x6e, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x6000, 0x5d4a) r2 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r2, 0xc0206921, &(0x7f00000001c0)) 3.381336077s ago: executing program 2 (id=212): r0 = socket(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0xfffffffffffffe14) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000), 0x4) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18, 0x401}, 0x0) sysctl$net_inet_ip(&(0x7f0000000340)={0x4, 0x2, 0x0, 0xc}, 0x4, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) getsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0xfffffffffffffe14) (async) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000), 0x4) (async) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x18, 0x401}, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000340)={0x4, 0x2, 0x0, 0xc}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) 3.294915069s ago: executing program 2 (id=215): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x2410, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0/file0\x00'}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x801) r1 = open(&(0x7f0000002280)='./file0\x00', 0x0, 0xa4) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0xf66d, 0xe6fc, 0x9, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x400, 0xfffff197}) writev(r2, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x693}], 0x1) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffff9c, 0x80585750, &(0x7f0000000080)={'./file0/file0\x00', 0x3, 0x5, 0x9, 0x0, 0x7fff, 0x9, 0x4, 0x1, 0x1, 0x7, 0x1}) ioctl$TIOCFLUSH(r1, 0x80047476, &(0x7f0000000000)=0x1) mmap(&(0x7f0000551000/0x3000)=nil, 0x3000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 3.013071301s ago: executing program 5 (id=239): r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x20, 0x8000, 0x0) setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000040)=0x870, 0x4) r2 = dup2(r1, r0) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x90, 0xdc4, 0x564, 0x9cea, 0x0, 0x8000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100", 0x2, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x18, 0x3, 0x0) setsockopt(r3, 0x1000000029, 0x1a, &(0x7f0000000000)='\"\x00\x00\x00', 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, 0x0, 0x0) recvmsg(r2, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) socket(0x2, 0x2, 0x0) (async) socket(0x20, 0x8000, 0x0) (async) setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000040)=0x870, 0x4) (async) dup2(r1, r0) (async) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x90, 0xdc4, 0x564, 0x9cea, 0x0, 0x8000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100", 0x2, 0x400, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) socket(0x18, 0x3, 0x0) (async) setsockopt(r3, 0x1000000029, 0x1a, &(0x7f0000000000)='\"\x00\x00\x00', 0x4) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) bind(r0, &(0x7f0000000000), 0x10) (async) socket(0x2, 0x2, 0x0) (async) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) (async) connect$unix(r4, &(0x7f0000000000), 0x10) (async) write(r4, 0x0, 0x0) (async) recvmsg(r2, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) (async) 2.919308499s ago: executing program 5 (id=242): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x8, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000001440)={0x0, 0x1}, 0x10, 0x0) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000000)=@un=@abs, 0x8, &(0x7f0000001480)=[{&(0x7f0000000100)=""/178, 0xb2}], 0x1, &(0x7f0000000340)=""/5, 0x5}, 0x1000) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0x8020697a, 0x0) setsockopt$sock_int(r2, 0xffff, 0x8, &(0x7f0000000340)=0x5880, 0x4) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r3 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffff7fff070b1eac1400aa7f000001000e009078000b0008000003fc0000000400000009"]) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = kqueue() read(r2, &(0x7f0000000000)=""/155, 0x9b) ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, 0x0) ioctl$KDSETMODE(r3, 0x20004b0a, &(0x7f00000003c0)=0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffdfe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x800, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc}], {0x2000, 0x7, 0x9}, {0x29, 0x6, 0xb0, 0x2}}}) r5 = kqueue() kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONREAD(r2, 0x80206916, &(0x7f00000001c0)) 2.917681677s ago: executing program 3 (id=244): sysctl$net_inet_ip(&(0x7f0000001580)={0x4, 0x2, 0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) select(0xe, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000300)={0xcea, 0x20000, 0x80000002, 0x1, 0x1, 0x80, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) (async) select(0xe, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000300)={0xcea, 0x20000, 0x80000002, 0x1, 0x1, 0x80, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) 2.822870891s ago: executing program 0 (id=246): setitimer(0x0, &(0x7f0000000080)={{0x7ffffff, 0x1}, {0x3, 0xc2e1}}, 0x0) setitimer(0x2, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x9) listen(r1, 0x1) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x7ffffff, 0x1}, {0x3, 0xc2e1}}, 0x0) (async) setitimer(0x2, 0x0, 0xffffffffffffffff) (async) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket(0x2, 0x1, 0x0) (async) connect$unix(r1, &(0x7f0000000000), 0x10) (async) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x9) (async) listen(r1, 0x1) (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) (async) 2.821892997s ago: executing program 3 (id=248): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x6, 0x80, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0xfffffffffffffffe, 0x404000000100], [0x5, 0x80000001, 0xffffff7ffffffffa, 0x20200001, 0x5e, 0x100000000007b94, 0x800, 0x9, 0xfffffffffffffffc, 0x1], [0x1, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xfbffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x3, 0x0, 0x7d05}, {0x9, 0x22, 0x5, 0x7fff}, {0x2, 0x0, 0xfffffffe, 0x27c}, {0x5, 0x4, 0x5, 0xff7fffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0x5, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0xfffffffb, 0x6d5, 0x6}}}) r0 = kqueue() r1 = socket$inet(0x2, 0x2, 0x0) getsockopt(r1, 0x0, 0xd, 0x0, 0x0) kevent(r0, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) 1.636772179s ago: executing program 0 (id=250): r0 = socket(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) (async) connect$unix(r0, &(0x7f0000000000), 0x10) shutdown(r0, 0x1) (async) shutdown(r0, 0x1) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) fcntl$getflags(r1, 0x1) r2 = accept$unix(r0, 0x0, &(0x7f0000000040)) pipe(&(0x7f00000002c0)) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCNXCL(r3, 0x2000740e) write(r1, &(0x7f0000000300)="8307a157b048bbc6c9c0fef01a6ff22e1fa9bb9330dafef9b64c4932551d10df7e8c1f597b9e76da1f95d04f1e1a1a3c31279085f35d8ee97c6c6b560e774d4e824a7dd27fcfef279849449a8314f2673b8468ceab7f8579118a87022e8564ca1c4b395778e8909014fd5dbc31a43b5eee663b271faa50b85f7f0448dcab66f0f35e4007739997f2ea6688ba117cf2c0b59add55603a7fd800c68bea6f4620474deb8f4d600d7113d429ec0147b8111ddeda37b7991584bfd6327c30548afbd57cc155ea223c1f2c887b", 0xca) (async) write(r1, &(0x7f0000000300)="8307a157b048bbc6c9c0fef01a6ff22e1fa9bb9330dafef9b64c4932551d10df7e8c1f597b9e76da1f95d04f1e1a1a3c31279085f35d8ee97c6c6b560e774d4e824a7dd27fcfef279849449a8314f2673b8468ceab7f8579118a87022e8564ca1c4b395778e8909014fd5dbc31a43b5eee663b271faa50b85f7f0448dcab66f0f35e4007739997f2ea6688ba117cf2c0b59add55603a7fd800c68bea6f4620474deb8f4d600d7113d429ec0147b8111ddeda37b7991584bfd6327c30548afbd57cc155ea223c1f2c887b", 0xca) getpeername$unix(r2, &(0x7f0000000080)=@file={0x0, ""/260}, &(0x7f0000000280)=0x106) syz_open_pts() shutdown(r0, 0x2) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast2, @remote={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8000, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0x200}, @generic={0x3, 0x4, "3303"}]}}}}}}}) (async) syz_emit_ethernet(0x46, &(0x7f00000001c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x66, 0x0, 0x0, 0x6, 0x0, @multicast2, @remote={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x8000, 0x0, 0xfffc, {[@timestamp={0x8, 0xa, 0x200}, @generic={0x3, 0x4, "3303"}]}}}}}}}) 1.635348344s ago: executing program 7 (id=252): r0 = open(&(0x7f0000000100)='./file0\x00', 0x80000000000206, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xee01) truncate(&(0x7f0000000080)='./file0\x00', 0x7) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8) 1.607676814s ago: executing program 5 (id=253): setuid(0xffffffffffffffff) sysctl$vfs_fuse(&(0x7f0000000000)={0xa, 0xd}, 0x3, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, &(0x7f0000000180)=0xffffc55b, 0xfd72) sysctl$net_inet6_icmp6(&(0x7f0000001600), 0x8, 0x0, 0x0, &(0x7f0000000380)="3458fd190e73f5449e403fbfbde39a49ff8f01fe405448aafcbeaeaea060df9546f3c0de896126697629e6e4866c5bb039241bdf713957c8ab5e624c5ab5e5b8a60f7ee7f6dfdc502ec7a24301dc6a34a3e0c819cd91f82cfc869c01f3741a921ff9f5e89f4f2b367e347ba071accc1a7c544259039be659893bfce997f9b369ed79d996c18f68c4b1c2dec138c97e39540ca2ec29cc5351fd24d6d4b34cf3bec879f51561eb243c22c583a33b0021e4a2af72c13ff6e2962553b35044bf61e0b4a4c42211d36eb16a32cc1d86f0a005ddfa653aea236ad7455abe31ae421d30", 0xe0) getsockname(r0, 0x0, &(0x7f0000000140)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x2, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x79}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffffffff0000}) r2 = socket(0x18, 0x2, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) 1.599562227s ago: executing program 3 (id=254): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x82, 0x11, 0x9, 0x45}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="00231b000f407061035c2532d7a0ea9200001f00385c24fc3be7d5c1a5db0c8043846b45c6888320424dca5d2c044a51f48cef4008b3b6aea789af305a16b33e3f9ee1f24abe2d475001665eaf211d925f4a4da6", &(0x7f0000000000)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r1, &(0x7f00000003c0)="f81ad3010006000000010000f500", 0xe) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000004c0)={0x3, &(0x7f0000000080)=[{0x94, 0xe1, 0x5, 0x80002a17}, {0x48, 0xf, 0x3, 0xfb11}, {0x6, 0x81, 0x8, 0x1}]}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[]) 1.597861456s ago: executing program 0 (id=255): r0 = socket(0x18, 0x1, 0x0) r1 = socket$inet(0x2, 0x0, 0xe) r2 = socket(0x800000018, 0x1, 0x0) r3 = dup(r2) getsockopt(r3, 0x7fff, 0x7, &(0x7f00000004c0)=""/93, &(0x7f0000000440)=0x5d) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) listen(r2, 0x1) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) setsockopt$sock_int(r2, 0xffff, 0x1002, &(0x7f0000000680)=0x2, 0x4) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="5e0deda49c", 0x5, 0x5, 0x0, 0x0) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x4}, 0x4, &(0x7f00000001c0)="6f5ed23626161172e0e3154d3d77016c4acf1bca593179b29a0ddf70963a35b20c361b6bcecfe2416f76efe52bef43828399b0e93596f35f8943c43276a9d4081430e11b783a434f87ebdf05d37be53b022dfd285f615bf7e503c73832033000000030219c37adf3463681fbc91731a1fd6f282e6e32dc437c0b0000c6f00b1d0b3848ffabe5ea8d01e21e214f652f8d0b9be90df749f3a7f76e4c52cb04bc6d1c59c3936dcd39e998b1b70979d57dd56dcbb0c09e4474b23834df1e1ca65d7044543f44e721e977ac54b5792d39a6e15f001471", &(0x7f00000002c0)=0xd4, &(0x7f0000000540)="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", 0xfc) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x64, 0x8d, 0x2, 0x50}, {0x30, 0xfa, 0x5, 0x20}, {0x16, 0x2, 0x4, 0x10000000}]}) sysctl$kern(&(0x7f0000000000)={0x1, 0x12}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r4, &(0x7f00000003c0)="f80300"/14, 0xe) setuid(0xee01) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501", 0x4, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb61b98df192f9781ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) 1.553123856s ago: executing program 2 (id=256): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x5, &(0x7f0000000080)=[{0x44, 0x1, 0x5, 0x1}, {0x3c56, 0x4, 0x36}, {0x400, 0x1, 0x3, 0x200007f}, {0x3, 0xd6, 0x0, 0x8001}, {0x81, 0xb5, 0x5, 0x3}]}) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000200)={'./file0\x00', 0x4, 0x40, 0x100}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) setrlimit(0xa00a2adee21ce02b, 0x0) mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) r2 = socket(0x11, 0x3, 0x1) getsockopt(r2, 0x11, 0x2, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(0xffffffffffffffff, 0xc0206923, 0x0) r4 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0xc0206925, &(0x7f00000001c0)) close(r3) syz_open_pts() ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f00000000c0)=0x20000) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000040)={0xf66d, 0xe6fd, 0x9, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x400, 0xfffff197}) writev(r3, &(0x7f0000000240)=[{&(0x7f0000001480)="2bd57b95b55c4ecfafa91339aa721c08c7a13e6771e2feb079481bdf498fa0e2a6cdf284a0491ac52c5444880ab50debbc15fd105c73a9bd7dc0c0cd0ff76e0fb6c37d2a69e8a32bec4ef58733fc149d672d49f372d3d4dfa5d7229d902b1a05ff7af4d31e1b711aa4a37ef7d49e339f65122ab89a7da13e8177f58c65e3c079ed055cdc98f4e091608da983d9e3e328a9b217fd2988b72985c1bc3fddd6ac4e42bbd2ea55f0b6fa595ba530b13c1264bfa3fd9c6e78b3b841f408f78918912326a9625d78b14eed8c61ea5afd4f219140dd9a602e216e20e981f8576503a7aa8c93166ac5b4b9a49afff4d264a7ffed6e49565447cbc736b435c4c25de242eecafa8cf237270449482d8cc43c5934b09c0eb0728a836187cddaf446de5123c2bcf19f24f6de19a1c8434d8e9cdb9551ef99b97bd29128531a24337da08b40695546831cbe949c258391bc1382967e6c14bad658cf16fb7c1d8d2083e90ff1b617eb5e4ff15e0042b5d8d86ef15c4b6576c32aae0056c79430f689b04711d8a64b59e173a9b3eba6877cd625f9aad9096d0de03338a9d31bc6f0431ffc66ddb1ba014d0280d17f03778198d6cce7efc8ae9fe3072444bd5a46efe19b568240d105fdfc4a2e890b084fbf6a58f4dd92f61aa97e2ac1b1490acc40b6f1119f264a9a1409b3df1ba0d682d2a9f5bd252761cebdbca261bb0c3743be623d55def11fb2d5b5f77a486529787ff24d189da845db6af7ebd8ec8f0799a3d552585cb50fffa6759a3756f0c5b186c6f9f8ae46b1ac81e7a53185ce09f974e16922995125dc30fa3c3f4ce7335ebc0b32994ef90c860e2fe8ae430e39066bc67dc9c72baa4290508bb41de6ab2630c6caf50517b8575552cf31f00f7a8bd1b722fd923ef2336848cbf71b1bf3e9747e936654fd94bb486a3de7537069674749e51c67ba8fcdea38491bdbd4bf6abb77761c110344de03f5bfd554b024db991e2901e6ecef42a3720222955f62fdc4e6b53a8a22a6e330b596c8cfc88c7f454bcf3bb5567ffc7685161ea142a99775c490d5f5c8cffdb212323c964526983e1187cc69736a1da0a7129217b56593e9ef14796743b0c2b071246f2d00a61d81767c65a9c1cfef3ec7709c26da1b6983fdd2a279edf6ec9a06a3bca576da47aade2cfca058d245c3ecac5aea2a6909ee4645112187c06f3384410807829b68227f6915db3cc40712006710b28d5666923003d7fd77c7b8f302db0e16a5b4861a76a41c19c8d3aaf67a48ae4b92d7bed95f54fe93e32e8bede41a5c206e36181cf21f1ea6be52da3e6528d18379f4fb235bcb7c9bd4cf4aa343075f1758f24c8a3f61860ec71b303c52e61ed69766fdb40810864d4c63b26d517358ea2a8f5887752ec613306d00c5a45f4ab4764f09556b447a14bec38cdca9bec0f1bd0999da94c1f6b3a682d04ab49203bb9abca73014de6ebb31220a01a8cb564f72fb5474854696ba3849aebefb9fae7b36506588d96b59f7a0db786d688821e630a75b20750f72c8c4870bf54de5bf5d7cf8adf0a09b512402279002654d6766216e286b2b9b2403413995252afe896d31fb1b5b709807bd21182efffdd9549fb926f93be4885f8c0d766d2e8d3931ffdc563a4d136e5362ca7555919cabce7d548c4ba04382ed50b8c05e852924674453ccf3244e8b6d18b344610a27136ce0bd7f60c1a12592a745175f9b2ff72445c27e22135435669dc61e71820c84d72d512237b4d705a2c43f80ccfa39498e74de1304d71adb83c3a7ebb56a038cb2bb1ddd97533b88ac34a48caec425c59995b027c51151b1d2faf78586c50a89e6b4df7656c65a16c45baa74c57d03ca60b6b26fc03b29c0d0b8611c7a6455c46f7608b596b1581420b0769d52fe84862a648fc71c20b04a043a98c1391d28897c04831436bf786c04c58e1fc83714f7651dccb458177fa50267b303ea06499a2c8a144f7c92d7d542c88d1056f56f9aff2fba23aaf60d87024c82f91073d24adfa8d923011879100fab351038423df796f9e75e7a92e655a4741028f3e3c7322beae0bcef728d6467a9dcbb57627137c6f936231190c478230a6ffe0a61763e0ecaf9499999b8704e2f717015ebcbbbcf6a0410fc9709d69986f2ca6db015966afcabf72ff6f639824116822a1b92d5102baf1800f31fb8238004ef2ff1cb85dcf287fdb20472d7bf991627c2d9ac28607d1add2a5ed7e06311be5de117f05cb58a450af63569f0d3012561e11ec39f79e5c5110b02f5d229de740379fcbc4577e76d29a2b1e1a6fdaabd680ceeaf2c4416c12b454b9de72736e7982170026b47d7192128de5d165f3bb061c2e5a6f71562db7ad756fd31cde2a3057ebe7e90812fd616431f057f4fc6d48def5e5992a75ba18614a1b4cb3511d2c5129d90a55eb7680fcaa62e0b58e5aea64d1ee2519f5de6fc185f0b942288c20aba553bc6d7801f2f5ef61824053080dc", 0x6e0}, {&(0x7f00000012c0)="b342f80f72db", 0x6}], 0x2) mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2) mquery(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000880)) getpeername$unix(r2, &(0x7f0000001280)=@file={0x0, ""/244}, &(0x7f0000000100)=0xf6) syz_emit_ethernet(0x10004, &(0x7f0000000280)=ANY=[]) 1.551186621s ago: executing program 5 (id=258): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x4, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x406, 0x3, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xfffffffffffffffc, 0x200000000002, 0xd, 0x4, 0x0, 0x400000000100], [0xfffffffffffffffe, 0xaa, 0x1000, 0x20000001, 0x5d, 0x7b98, 0x4f0e], [0x100000001, 0x8000, 0x40000003, 0x4, 0xb, 0x11000, 0xffffffff00000003], [0x104, 0x1fffffffffc, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1bb9], [{0x0, 0x4, 0x0, 0x7d06}, {0xf7fc, 0x22, 0x5, 0x2aae}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7d, 0x4}, {0x0, 0x1, 0x9, 0x2000000000000000}, {0xff, 0xfffffffe, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x0, 0x3}, {0xfffe, 0x3, 0x6d4, 0x6}}}) setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000140)=0x2) ioctl$TIOCSTOP(r1, 0x2000746f) read(r0, &(0x7f0000000200)=""/162, 0xa2) r2 = kqueue() kevent(r2, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r3 = socket(0x2, 0x1, 0x0) listen(r3, 0x4) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VMM_IOC_RESETCPU(r4, 0x82405605, &(0x7f0000000240)={0xcf7, 0x8, {[0xffffffff80000001, 0x800, 0x4, 0xfff, 0x7, 0x790, 0x6, 0x6, 0x9, 0x6, 0x0, 0x4, 0x6, 0x5, 0x3ff, 0x5, 0x2, 0x8], [0xffffffffffffffff, 0x0, 0x1, 0x6, 0x1, 0x7, 0x1, 0x8000, 0x4, 0xa30], [0x5, 0x2, 0x9, 0x101, 0x8, 0xd1f, 0x6], [0x9, 0x10000, 0xa9c6, 0x9c, 0x5, 0x7fffffffffffffff], [{0x81, 0xf, 0x3, 0xfffffffffffffff9}, {0x8467, 0x4, 0x3, 0xa0000000000}, {0x3, 0x2, 0x9, 0x75}, {0x9, 0x9, 0x3ef11544, 0xffff}, {0xa, 0x3, 0x6, 0x5}, {0x0, 0xc, 0x1, 0x10ea}, {0x3, 0x0, 0x2, 0x5}, {0x4, 0xfffff776, 0x4, 0xed}], {0x5, 0x7, 0xffffffff, 0xf88}, {0x5, 0x7, 0xfff, 0xd4b}}}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000000240), 0x0) shutdown(r3, 0x2) accept(r3, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r4, 0x2}], 0x1, 0x1f9e) r6 = socket(0x800000018, 0x1, 0x0) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731893, 0x7}, 0x8) 1.444587713s ago: executing program 1 (id=261): r0 = socket(0x2, 0x1, 0x8) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) r1 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x40) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$WSKBDIO_SETMODE(r2, 0x80045713, &(0x7f0000000100)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x2c) dup2(r0, r1) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) execve(0x0, 0x0, 0x0) 1.444394645s ago: executing program 3 (id=262): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) rename(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.443622285s ago: executing program 7 (id=264): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) ioctl$VMM_IOC_INFO(r1, 0xc0185603, &(0x7f0000000500)={0xe7, 0x0, &(0x7f0000000400)=""/231}) link(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x8, 0x6, 0x80, 0x10, [{0x1000000, 0x7, 0xffffffff, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0x8, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x40000002, 0x1, 0x8, 0x95}, {0x82ce1, 0x800, 0x9c29, 0x400006d}, {0x3, 0x803, 0x14, 0x6}, {0xffffffff, 0x82, 0x4, 0x400009}, {0x5, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x7, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0xffe}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x9, 0x6}, {0x0, 0x3, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) open(&(0x7f0000000180)='./file0\x00', 0x8000, 0x0) 382.348371ms ago: executing program 3 (id=265): r0 = socket(0x10, 0x8000, 0xf8) r1 = syz_open_pts() ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f0000000000)) r2 = kqueue() pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10002) r5 = socket$inet(0x2, 0x3, 0x4) r6 = accept$inet6(r0, &(0x7f0000000140), &(0x7f0000000180)=0xc) kevent(r2, &(0x7f0000000080)=[{{r4}, 0xfffffffffffffffb, 0x2, 0xf0000021, 0x7, 0x7}, {{r1}, 0x0, 0x84, 0x80000000, 0x4}, {{r1}, 0xfffffffffffffff8, 0x18, 0x8, 0x0, 0x1}, {{r5}, 0xfffffffffffffffe, 0x0, 0x4, 0x55e125c0000000, 0xa000000000000000}, {{r0}, 0xfffffffffffffff9, 0xc0, 0x80000000, 0x8}, {{0xffffffffffffff9c}, 0xfffffffffffffffd, 0x48, 0x2, 0xa79, 0x8}], 0x4, &(0x7f00000001c0)=[{{r6}, 0x8000000000000003, 0x21, 0xfffff, 0x5, 0x5}, {{r1}, 0xfffffffffffffffe, 0xd8, 0x20, 0xffffffffffffffff, 0x2}, {{r2}, 0xfffffffffffffff9, 0x28, 0x4, 0x5, 0x4000000000000000}, {{r1}, 0xffffffffffffffff, 0x0, 0x20, 0xa00000000000, 0x100000000}, {{r2}, 0xfffffffffffffff9, 0x98, 0x20000006, 0x7fffffff, 0x2}], 0x40, &(0x7f0000000280)={0x5, 0x39}) openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r7 = socket(0x10, 0x8000, 0x6) r8 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000300), 0x20, 0x0) ioctl$DIOCMAP(r8, 0xc0106477, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r7, 0x2}) ioctl$TIOCSTART(r3, 0x2000746e) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f00000003c0)=0xfff) faccessat(r4, &(0x7f0000000400)='./file0\x00', 0x21, 0x1) bind$inet6(r6, &(0x7f0000000440)={0x18, 0x2, 0x8, 0x5}, 0xc) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000480)) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$TIOCSETA(r10, 0x802c7414, &(0x7f0000000500)={0x9, 0x5, 0xffff8abb, 0x1, "2277209d3c138dab3ed6e0c6f32e73220031cba3", 0x9, 0x1ff}) r11 = socket$inet(0x2, 0x4000, 0xbb) recvfrom$inet(r11, &(0x7f0000000540)=""/112, 0x70, 0x1, &(0x7f00000005c0)={0x2, 0x1}, 0xc) read(r5, &(0x7f0000000600)=""/254, 0xfe) ioctl$TIOCOUTQ(r4, 0x40047473, &(0x7f0000000700)=0x28000) ioctl$TIOCSETAW(r9, 0x802c7415, &(0x7f0000000740)={0x7fffffff, 0x8, 0x2d7, 0x9, "773932f6588dbec9acaec7de5b66f1fcfc14567b", 0xc, 0x2}) ioctl$TIOCMBIC(r4, 0x8004746b, &(0x7f0000000780)=0x3) openat(r4, &(0x7f00000007c0)='./file0\x00', 0x2c06a05a56d9de93, 0x1f6) select(0x40, &(0x7f0000000800)={0x4, 0xa4, 0x2, 0x70d, 0x6, 0x7, 0x1, 0xffffffff}, &(0x7f0000000840)={0x0, 0x2, 0x38, 0xf7a, 0xff, 0x8, 0x6, 0x2}, &(0x7f0000000880)={0x400, 0xd6a, 0x4, 0x8, 0xfff, 0x9, 0x7, 0x6}, &(0x7f00000008c0)={0x5, 0x5}) r12 = openat$tty(0xffffffffffffff9c, &(0x7f0000000900), 0x400, 0x0) ioctl$TIOCOUTQ(r12, 0x40047473, &(0x7f0000000940)=0x6) syz_open_pts() 376.580407ms ago: executing program 6 (id=266): sysctl$kern(0x0, 0x0, &(0x7f0000000200)="e1298e4feec76a87d0482e96c76f41ff89dd031a450ebb8e4fd92ddd414487105646764b2c81e9411142b1919dc92176a25c522091ac09cddb9d25c987aa38aa42897e8e66982d7ea27c565c2a5fba7e2d56662dae953373032df8de8bed282e", &(0x7f0000000040)=0x60, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x18) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x3, 0xffffffff, 0x200, 0x2c, "1800e6cfb500", 0x8000, 0x7}) sysctl$kern(&(0x7f0000000000)={0x1, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001440), 0x0) r1 = syz_open_pts() readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x18, 0x5, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r2, 0x80085762, &(0x7f0000000300)={0x1}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) ioctl$WSDISPLAYIO_DELSCREEN(r3, 0x80085754, &(0x7f0000000180)={0x832, 0x1}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) setuid(0xffffffffffffffff) fchmod(r0, 0x105) stat(&(0x7f0000000080)='./bus\x00', 0xfffffffffffffffe) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f00000000c0)={0x1}) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x20008, "59a6a348c00e00000000000000000000000100", 0xe3, 0xa}) unveil(0x0, &(0x7f00000000c0)='c\x00') r4 = semget$private(0x0, 0x4, 0x2df) semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000000d80)=""/32) 374.724108ms ago: executing program 7 (id=267): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x2}, 0x8) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x82, 0x11, 0x9, 0x45}, {0x40, 0xf3, 0xff, 0x4}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffff9c, &(0x7f0000000000)=[{&(0x7f00000001c0)="6d1d1a7055c3cb4e3451213800a05e9f1ebc17efc8b19702b0ef90729dc6b2864fe751ce1d38ce758af34d1d021d9c78eac721a9547308b274560731001a2654ba0fcd9d49be55538860c37ecd4f03279200b08855c88d6d1067b245d08b2bfc8f3111b07c963c02ec288eaff9f57dac5a7c913f60b3ac1a48623aaf87f3a202ed3d9aff7483d3", 0x87}], 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x18, 0x1, 0x0) syz_open_pts() close(r3) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r4 = socket$unix(0x1, 0x5, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x24) r5 = syz_open_pts() r6 = syz_open_pts() dup2(r5, r6) syz_open_pts() fcntl$lock(r6, 0x7, &(0x7f0000000080)={0x0, 0x1, 0x4, 0x3}) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 316.330755ms ago: executing program 7 (id=268): setrlimit(0x3, &(0x7f0000000400)={0x10000, 0x100000}) r0 = socket(0x2, 0x2, 0x0) symlink(&(0x7f0000000780)='./bus/\x00', &(0x7f0000000740)='./bus\x00') open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x0) (async) open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x23, &(0x7f0000000080)="c5f5d8ff", 0x4) r2 = dup2(r1, r0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) (async) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000340), 0x80, 0x0) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="4103000000817aa201e47374ec73a21c2e875ac85e6f4c", 0x17}, {0x0}, {&(0x7f0000000200)="5df460db1075849dc2adb705509737087f467ff2c7825493a29795445e4c7ef476289628062c14d0ede2b6a862e093ec29b452b2f65248a7bd558a63aca7ddcddb93cc13744b4f2e7fad7cbba1b842ac0db905c868810772d388a91cefecb31d902661a4866dad30ed809394acc7f319656f10adf94c992fd169cd1243ff4dd05257e52d95d253cef4b7ceccd79034f5b33d7d181d1e92cf8a0f53ec2187255641f853e48498412e28737f3f24a13a619b065a6d568f03490591884ee77320965740196e1c", 0xc5}], 0x3) execve(0x0, 0x0, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) shutdown(r1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f00000000c0), &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x1, 0x3c, 0x0, 0x3}, {0x80, 0x9, 0x5, 0x1}, {0x3c, 0x9, 0x6, 0x1}, {0x3c56, 0x4, 0x36}]}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) syz_emit_ethernet(0x138, &(0x7f0000000180)=ANY=[@ANYRES8=r2]) (async) syz_emit_ethernet(0x138, &(0x7f0000000180)=ANY=[@ANYRES8=r2]) ioctl$TIOCSTOP(r2, 0x2000746f) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x8f02, 0xfffffff9, 0x1, 0x3, "36777c83157546ccb71bdb5c127188c4f004d8d1"}) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x1}, 0xc) (async) bind(r0, &(0x7f00000000c0)=@in={0x2, 0x1}, 0xc) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='c\x00') (async) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='c\x00') openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) (async) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000300)={0x0, &(0x7f0000000380)}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) r6 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) 313.855837ms ago: executing program 0 (id=269): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0x9}, {0x6, 0xa, 0x8, 0xfffff7fe}]}) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="7f45caaa6081000000b1c04c4602df7a2c4ee4975f55011a49b70cb7794ffa08bb119afcdc24ff4c5d2c0000050000000000fae5830c240c76cc27587564bb941735891b46d66ec9bcf9edafff3ea852b092b0899ed39204ec9d89013c77dd0ddcb3d849090d721ab182118ff8329e04", 0x70}], 0x1) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r0 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x0) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x3) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r1 = socket(0x2, 0x1, 0x0) shutdown(r1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x0, 0x0, 0x13) setsockopt(r2, 0x1000000029, 0x26, &(0x7f0000000000)="5ab7776a", 0x4) ioctl$FIONREAD(r1, 0xc0287533, &(0x7f0000000440)) connect(r1, &(0x7f0000000100)=@in={0x2, 0x1}, 0xc) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="dd3b00e419ccaacd118c365c57e1263c92f0b2eccb0dd81c117aca5040fc901fa633213c525372dc7c9c688b5a4621c8851ccb2a8a87d5f0fb3b3e5cd02f7ecdbb1893a744e5cd2ddee90928f7", &(0x7f0000000000)=0x4d, 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0xffffffffffffff9e, 0x0}) write(r3, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) socket$unix(0x1, 0x1, 0x0) 313.237784ms ago: executing program 1 (id=270): writev(0xffffffffffffffff, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000340)}], 0x2) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b798e5806ce228c9299f7504ec", 0x2f}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) fcntl$dupfd(r0, 0x0, r0) socket(0x18, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x26, 0x0, 0x0, 0x0, 0x1f, 0x2}, 0x806) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x3}, 0x2, &(0x7f0000000180)="d1835fc8efbfc8e147ad0345cad7ab2cdfb2f2cfb7b2dbf7006bf09046303236e31475c1fe14beb1b642b792a7350c93f08aa2c6180347c29732e58bb1d3ac207e422914977cfa091f4fc887aaf5169f42f24ec2187f413e83c8b84a3b1a079adc87637b50f79a2249fcd0c98b", &(0x7f0000000100)=0x6d, &(0x7f0000000240)="c43bacfc635ad6d7471f8bff61783b57dea326ce86ca6ae20350fa09b12c792120af09a31c38b64a4574a37bb13dd1f4839ee6824383b591905e67437705285e54bf37b72af3118759b4edc15039ac6fb1e4319570c78d195a523764e69be37f140ab9a682d9dfedf27e1581b8837f0bb402884eff99416169b4b153f60def7750b0e077bcb8696aa5e21636e59d9ec2a73e5e6f5fccc5feed8295e67811cdc6c571c73eee1236a1af3c2f7c7c635c2d56c5a57fa797d797563481a2f64e4e6e3bbc7cce8d7def8578f55ecc19b777d86ad6d345455b78d9f2b602b0eb601106108d356b7c782b9a6b5fb5b3fe", 0xed) 242.742505ms ago: executing program 1 (id=271): r0 = socket(0x800000018, 0x1, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close(r1) setuid(0xee01) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VMM_IOC_CREATE(r2, 0xc2585601, &(0x7f00000000c0)={0x10, 0x100000007, [{&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000385000/0x4000)=nil, 0x2}, {&(0x7f0000028000/0x1000)=nil, &(0x7f0000162000/0x1000)=nil, 0x8005}, {&(0x7f0000578000/0x9000)=nil, &(0x7f00006d0000/0x2000)=nil, 0x9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000467000/0x1000)=nil, 0xeffffffffffffffd}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000183000/0x3000)=nil, 0xffffffffffff7611}, {&(0x7f000026d000/0x4000)=nil, &(0x7f00006c7000/0x4000)=nil, 0x8000000010000000}, {&(0x7f0000e64000/0x1000)=nil, &(0x7f0000657000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f000000a000/0x1000)=nil, 0xff}, {&(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6}, {&(0x7f000033f000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xd10a}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000385000/0x3000)=nil}, {&(0x7f0000ff2000/0xb000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x74b6}, {&(0x7f0000167000/0x4000)=nil, &(0x7f0000e64000/0x3000)=nil, 0xfffff7ffb7fffff9}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f00000d2000/0x1000)=nil, 0xf}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0xd000)=nil, 0x1007f}], './file0/../file0\x00', 0x4}) mquery(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x1, 0x10, r2, 0x877c) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x3, 0x4, 0x3, 0x205, "210d000000000000000000000000000000000600", 0x4, 0xffffffff}) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x3c, &(0x7f0000000040)="03000000", 0x4) readv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000200)=""/202, 0xca}], 0x2) r4 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x48) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$VNDIOCSET(r5, 0x40204402, &(0x7f00000001c0)={0x0, 0x0, 0x0}) shmctl$IPC_SET(0x0, 0x1, 0xffffffffffffffff) sendto$inet6(r4, &(0x7f0000000000)="864ff414126e7d812b59bc4c57ca97ecc80950c5ced49ea1bb0c8930f20ad1a757a12961b5219cd8b7a177cb689e7182213d618c93b59db0c168eca10c03d518d61a2e2736f954806abe904890151cc5f12fa959d6b740d5bddd70c6263aff067fbbefa190e1ad1ef22e524a15d7aa4e67eb00ab632499e5f6aaf5a23fd15c3804929e01913f479fc75b14aa055a4415e498e4a9adacbe4324b3483ef0b4bf77a48ae92ca524543d2486ab", 0xab, 0x8, 0x0, 0x0) 242.237045ms ago: executing program 7 (id=272): setgid(0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x1ffa, 0x80000000) 241.694305ms ago: executing program 5 (id=273): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0xaa19}, {0x2, 0x1}, {0x3, 0xffffffff}, {0x2}, {0x2, 0x4}, {0x0, 0x87}, {0x0, 0x3}, {}, {0x0, 0x6}, {0x2, 0x287}, {0x2, 0x40000001}, {0x3}, {0x0, 0xffffffff}, {0x0, 0x7ff}, {0x1, 0x5}, {0x2}, {0x5}, {0x2}, {}, {0x2, 0x1}, {}, {0x0, 0x7}, {0x2}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x100004}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) sysctl$kern(&(0x7f0000000180)={0x1, 0x2}, 0x2, &(0x7f0000000240)="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", &(0x7f00000001c0)=0x1000, &(0x7f0000001240)="7f1e8d1ef723d2870de14e4e95a3f6336f584542a1d5d8d7811e06c0cfd371", 0x1f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) 152.975224ms ago: executing program 2 (id=274): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000080)=0x8) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) sysctl$net_pipex(0x0, 0x0, &(0x7f0000000180)="7471de4b27003bdf69f6df14bd737e1cb5eab47538b75f108367bbe66dd7afaf6395507b87c8a1703304", 0x0, 0x0, 0x0) (async) r2 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x3) (async) sendmsg$unix(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="ca", 0x1}], 0x1}, 0x0) (async, rerun: 32) write(r0, &(0x7f0000000000)="ed", 0x1) (rerun: 32) 152.513972ms ago: executing program 2 (id=275): ktrace(0x0, 0x4, 0xd27d43220c7df9f, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x90, 0xff, 0x47}, {0x4, 0xf1, 0xff, 0x9}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) syz_emit_ethernet(0x42, &(0x7f0000000480)=ANY=[@ANYBLOB="43d96654789effffffffffff080600183c0a0610005b895ac9000000fccd3f7e073baf62b070588fed360d64aaaaaaaaaaaa227722326317482a07dda5d259a5686f"]) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x7}) r1 = syz_open_pts() r2 = socket(0x800000018, 0x2, 0x0) r3 = socket(0x2, 0x2, 0x0) r4 = dup(r3) setsockopt$inet_opts(r4, 0x0, 0x14, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00007de000/0x4000)=nil, 0x4000, 0x5) r5 = socket(0x18, 0x1, 0x0) dup2(r5, r2) listen(r2, 0x0) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f00000001c0)={0x2df57366, 0x8, 0x5, 0xfffffff5, "6400b72860147bcc0100d49a540e34b9e1c800", 0x8, 0x100000c}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)="468cac6f0d21ad30ea06a66da6e35ca182b6f8ac09aae2791394b81cdc227df8708a627986346b1c74c5b7ceede23281d70c3cd17aa2896df45b0507e270157239b6da65d09ddd12dcf64fb31e09c46cbd7c19411f6a1e17bd1a22ee472267bec369f7f21a2575dcb7baf509bbade09225d462863384c68d2c1aa494ad6f6243cb10551cf2cefb381e9e3e4802ca4bbf7dc77ed2353ac3cd3b219b24218fc5d56c1402b62f1ca581b95d496f8b7375e62fa8613c0cb75abacf2c715bcb954c745df34c5b2d48434d6db0583981ab8c3a7984ee5445d28b1e0737294f30d90d96dca7", 0xe2}], 0x1) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x5, 0x802, 0x9, 0x0, 0xc, 0x0, 0x1000000000, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffb, 0x10001], [0x63, 0x5, 0x4, 0x4, 0x0, 0xc62, 0x5, 0x0, 0x9, 0x1a4d], [0x7ffffffff7ffffff, 0x8, 0x0, 0x0, 0x9], [0xdb9d, 0x0, 0x0, 0x165, 0x0, 0xb], [{0x0, 0x10, 0x0, 0x8000000000000}, {0x0, 0x0, 0x6, 0x4}, {0x1000, 0xa, 0x0, 0x1}, {0x0, 0x1000, 0x0, 0x1}, {0xff, 0x0, 0xd8, 0x7ffffffffffffffe}, {0x9, 0x9672, 0x0, 0x1}, {0xfffb, 0x0, 0xaa, 0xfffffffffefffff9}, {0x0, 0xb4, 0xc00000, 0x100000000000002}], {0xffeb, 0xfffffffd, 0x20000003, 0xf5a752c}, {0x3, 0x6, 0x10000000}}}) madvise(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x80206979, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) select(0x0, 0x0, &(0x7f0000000580)={0x0, 0x1}, &(0x7f0000001900)={0x100000000000000, 0x0, 0x0, 0x21b3, 0x0, 0x12a5}, &(0x7f0000000440)) r6 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) r7 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$TIOCGTSTAMP(r7, 0x4010745b, &(0x7f0000000500)) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f00000000c0)={0xc0f8, 0x1, 0x6, 0x8, "26ff6f26f26cc8a22b34b3adf97471a9b433eb88", 0x2, 0x2}) 151.648901ms ago: executing program 5 (id=276): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x65b3) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x27ffb, 0x6, 0x3ef, 0xfffffffc, "102e2618007b6e3cebe40000efff001000", 0x8, 0x9}) (async) execve(0x0, 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000001c80)="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", 0x3f8}], 0x1) (async) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 148.761221ms ago: executing program 6 (id=277): open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) (async) r0 = semget$private(0x0, 0x4, 0x309) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000d80)=""/32) (async) sysctl$vm(&(0x7f00000000c0)={0x2, 0xc}, 0x2, &(0x7f00000001c0)="482f92e4bf2369", &(0x7f0000000240)=0x7, &(0x7f0000000280)="d277826eecd7078a6456ab6308ad8555e613f3424f543be7", 0x18) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) 147.322871ms ago: executing program 1 (id=278): r0 = shmget$private(0x0, 0x1000, 0x1ab, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) shmget$private(0x0, 0x3000, 0x2c2, &(0x7f0000ffc000/0x3000)=nil) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x326, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f00000003c0)=""/4096) getitimer(0x0, &(0x7f0000000380)) shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x2000) shmat(r0, &(0x7f0000000000/0x1000)=nil, 0x2000) 80.848592ms ago: executing program 6 (id=279): openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) select(0x40, &(0x7f0000001c40)={0x7, 0x4e6, 0x8e, 0x4, 0x200, 0x9, 0x1, 0x6}, 0x0, &(0x7f0000001cc0)={0x8, 0x0, 0x7fffffffffffffff, 0xf3f, 0x5, 0x200, 0x10, 0xff}, &(0x7f0000001d00)={0x0, 0x401}) 80.191179ms ago: executing program 1 (id=280): execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r0 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffffffff070b1eac1400aa7f800001000e009078000b0008000003fc0000000400000009"]) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$FIONREAD(r0, 0x8020690c, &(0x7f00000001c0)) r2 = socket(0x18, 0x3, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @random="b55d145e54af", [], {@ipv4={0x88e7, {{0x5, 0x4, 0x1, 0x8, 0x1c, 0x65, 0xfff, 0x0, 0xf0, 0x0, @local={0xac, 0x14, 0x0}, @loopback}, @udp={{0x0, 0x3, 0x8}}}}}}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) r4 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x20000008, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x800f, 0x7}, {0x1c, 0xffff, 0x7, 0x9}, {0x1, 0x653, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0x0, 0x14, 0x5910}, {0x2000002, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0x1000, 0x7f}, {0x1cc, 0x4, 0xdaa1, 0x3}, {0x3, 0xa, 0x8}, {0x4, 0x7, 0x89, 0x8}, {0x29a71717, 0x7f, 0x60, 0x7}, {0x1100c, 0x3, 0x9654, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0xa, 0x2a2, 0xffffffffffffffff, 0x0, 0x3, 0x80000000000000f, 0x7, 0x40}) poll(&(0x7f0000000240)=[{r2, 0x40}], 0x1, 0xfffffffe) r5 = accept$inet(r4, 0x0, &(0x7f00000002c0)) listen(r5, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r2, 0x1000000029, 0x27, &(0x7f0000000000)="5ab7776a", 0x4) 79.0653ms ago: executing program 7 (id=281): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x85, 0x45}, {0x40, 0xf3, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x2, 0x6c, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) r1 = syz_open_pts() syz_open_pts() open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) writev(0xffffffffffffffff, &(0x7f0000000280), 0x0) select(0x40, &(0x7f0000000080)={0x8, 0x3ff, 0x0, 0x7, 0x0, 0x1, 0x8000000000000000, 0x8}, &(0x7f0000000380)={0xffb, 0x0, 0x8, 0x0, 0x2, 0x4, 0x2}, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) chflagsat(0xffffffffffffffff, 0x0, 0x1, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)="4800660904b715fa967b4c44bae97c7ccd5b69ed32b0e02264f6d10eaa6897675cd70ea509878f72126a6b1e2c5ec391c06a0052ecb8819db65293ef360f60a23b4eea03", 0x44}], 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000002c80)=ANY=[]) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x91, 0xff, 0x47}, {0x40, 0xf3, 0xff, 0xf}, {0x6, 0x80, 0x8, 0xfffff7fe}]}) sysctl$hw(0x0, 0x3ffffffffffffef3, &(0x7f0000000080)="9ebd5300140400000096fc3c2ca7ed85ef04666db4b94ad409006a310aa715a9a035ee2700000000000000800022000000007400cd", &(0x7f0000000000)=0x35, 0x0, 0x0) mprotect(&(0x7f000072a000/0x2000)=nil, 0x2000, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x0, 0x0, 0x2, 0xa1b0, 0x40010001, 0x10, [{0x10001, 0x2890, 0x9, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x4}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x9}, {0x6, 0x0, 0x14, 0x8}, {0x2000002, 0x82, 0x5, 0x6}, {0x6, 0x8009, 0x1000, 0x4}, {0x1cc, 0x800, 0xc, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x9, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 78.69997ms ago: executing program 6 (id=282): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c", 0x4) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) setegid(0xffffffffffffffff) (async) sysctl$net_inet_carp(&(0x7f0000000100)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f0000000040)="5efd1df13100000000", 0x9) (async) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) recvmmsg(r0, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/265, 0x153}], 0x0, 0x0, 0xfffffffffffffd8d}, 0x6}, 0x10, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) (async, rerun: 64) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x80, 0x9, 0x5, 0x1}]}) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket$inet(0x2, 0x1, 0x0) close(r1) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) (async) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000040)="01", 0x1) (async, rerun: 32) sendmmsg(r0, &(0x7f0000000340)={0x0, 0x9}, 0x10, 0xa) (async, rerun: 32) clock_settime(0x100000000000000, &(0x7f0000000000)={0xf61eccfe, 0x9f6}) 78.405209ms ago: executing program 0 (id=283): mkdir(&(0x7f0000000100)='./file0\x00', 0x64) (async) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0xfa) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000340)={&(0x7f00000001c0)='./file0\x00', 0x9, &(0x7f0000000280)='./file0\x00', 0x8}) setuid(0xee01) chdir(&(0x7f0000000100)='./file0\x00') (async) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000180)={0x4, 0x2, 0x6, 0x13}, 0x4, &(0x7f0000000040)="f10ffbd56950626010d7cc9a9bad450e7aa00390fc55644a3a72f447fe56b9723065b5d9c3edc1bedc496521dc7e59c9907faa42edaa972129f787f0b2d1e81340d76fa8cb3df82c44c328aed29be6288407dffe7fff9e87972ec56ce2123572b0239ea06e74b6c22404b302418a36a6001829a677c2901309c427bdfda256c0546b9026c577fd68e1f57177d6ece5886407e9450ca65f5828c59fb234b98308003b1e9e4e0bc0a9cab7cf1712a13cf84383217315e5dc4627ee24b9954457e7a367315c0484ccd3ad1551d4934afc28e168270a0a2a63cd73bf64dd7e8521f47afa51a600c51974eb", &(0x7f0000000140)=0xe9, &(0x7f0000000200)="93e6c543a471186a5745f175219e4cefb9c9b292fcdd85078b72534ac62b6d9183e7e0b4a42580acab35083faebe319cf7b0104ceb0b26b7eeb086fa3ef053793b301bad3cfcdf931dbb1a2c1f0c363b", 0x50) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) (async) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0xffffabf5, 0xffff, 0x0, 0x21, 0x2, 0x4000001, 0x0, 0x2, 0x1, 0xf1d}) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) close(r2) acct(&(0x7f0000000000)='./file0\x00') 2.640325ms ago: executing program 1 (id=284): r0 = socket(0x18, 0x2, 0x0) kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x7}], 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) close(r0) close(0xffffffffffffffff) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setrlimit(0x1, &(0x7f0000000000)={0xfff7fffffffffffd, 0xffffffffffffffff}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r3, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x13, 0x3}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000100)={{0x18, 0x3, 0xffff}, {0x18, 0x0, 0x5}, 0xb, [0xf03, 0xfffffffe, 0x9, 0x5, 0xff, 0x800, 0x9, 0x67f]}, 0x3c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd64ff00820050000ffe8000000000000000000000000000aafe800000000000000000d2d40000000000aaf0080000000000000401a00102000005020006050200030329511859dc0c718b402f951685669d70bdc82ec5ea23bfc8e4e835e38ab331322057e5087c656b4280560401800001008500907800000000"]) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) close(r1) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) 2.34093ms ago: executing program 6 (id=285): syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @random="663a4d5696b5", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x64, 0x0, 0x3, 0x1, 0x0, @remote={0xac, 0x14, 0x0}}, @icmp=@parameter_prob={0xc, 0x3, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x17, 0xfffc, 0x0, 0x0, 0x8, 0x33, 0xf0, @multicast1, @multicast1}}}}}}) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 2.178161ms ago: executing program 0 (id=286): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x3) r0 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0xa1) ioctl$TIOCSCTTY(r0, 0x20007461) 1.208933ms ago: executing program 3 (id=287): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)='./file0\x00', 0x8}) fcntl$dupfd(r0, 0xa, 0xffffffffffffff9c) chflagsat(r2, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x2) readlinkat(r2, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/131, 0x83) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x6}, 0x4, &(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0xe78db160dda7900e, 0x0) 0s ago: executing program 6 (id=288): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x1c}, 0x2, &(0x7f0000000200)="71f91e5a91501d94a34bdf536647f49a902027647169008c0000000000", &(0x7f0000000180)=0xfffffffffffffce1, 0x0, 0x0) r1 = socket(0x1, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x80206916, &(0x7f00000001c0)) setitimer(0x1, &(0x7f0000000140)={{0x7, 0x79d9}, {0x8000020b6, 0xc92}}, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000080)=0x8001) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x7, 0x13, 0xa, 0xfffffffd}, {0x2, 0x4, 0xfa, 0x9}, {0x400, 0x6, 0x40, 0xffff}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.12' (ED25519) to the list of known hosts. pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error witness: shared lock of (rwlock) maddr while exclusively locked panic: excl->share Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 160743 88709 0 0 0 0 syz-executor *505685 23297 0 0x14000 0x200 1 softclockmp db_enter() at db_enter+0x25 panic(ffffffff833b4a35) at panic+0x1e5 witness_checkorder(ffff800001588078,1,0) at witness_checkorder+0x122c rw_do_enter_read(ffff800001588060,0) at rw_do_enter_read+0x99 in6_hasmulti(fffffd806c8da7f0,ffff800001588000) at in6_hasmulti+0x41 ip6_output(fffffd806c8da700,ffffffff839eee58,0,0,ffff80002a1fe9e0,0) at ip6_output+0x13bd mld6_sendpkt(ffff800001551e00,83,0) at mld6_sendpkt+0x385 mld6_fasttimo() at mld6_fasttimo+0x16d pffasttimo(ffffffff83a15020) at pffasttimo+0x184 timeout_run(ffffffff83835dd8,ffffffff83a15020) at timeout_run+0x159 softclock_thread_run(ffffffff83835dd8) at softclock_thread_run+0xe7 softclock_thread_mp(ffff8000ffffe530) at softclock_thread_mp+0x86 end trace frame: 0x0, count: 3 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: excl->share ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833b4a35) at panic+0x1e5 witness_checkorder(ffff800001588078,1,0) at witness_checkorder+0x122c rw_do_enter_read(ffff800001588060,0) at rw_do_enter_read+0x99 in6_hasmulti(fffffd806c8da7f0,ffff800001588000) at in6_hasmulti+0x41 ip6_output(fffffd806c8da700,ffffffff839eee58,0,0,ffff80002a1fe9e0,0) at ip6_output+0x13bd mld6_sendpkt(ffff800001551e00,83,0) at mld6_sendpkt+0x385 mld6_fasttimo() at mld6_fasttimo+0x16d pffasttimo(ffffffff83a15020) at pffasttimo+0x184 timeout_run(ffffffff83835dd8,ffffffff83a15020) at timeout_run+0x159 softclock_thread_run(ffffffff83835dd8) at softclock_thread_run+0xe7 softclock_thread_mp(ffff8000ffffe530) at softclock_thread_mp+0x86 end trace frame: 0x0, count: -12 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80002a1fe630 rbx 0xffff8000299dee07 rdx 0 rcx 0xffff8000ffffe530 rax 0xffff8000299ddff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xb052c5c20e83426e r11 0xdc54a320578959a0 r12 0xffff8000299dec08 r13 0 r14 0 r15 0x1 rip 0xffffffff810e0165 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002a1fe620 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (softclockmp) tid=505685 pid=23297 tcnt=1 stat=onproc flags process=14000 proc=200 runpri=0, usrpri=50, slppri=0, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffffe7c8,0xffff8000ffffe010 process=0xffff8000ffffa680 user=0xffff80002a1f9000, vmspace=0xffffffff83a0c438 estcpu=0, cpticks=2, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 51201 402599 80012 0 2 0 syz-executor 51201 263611 80012 0 3 0x4000080 fsleep syz-executor 88709 160743 70284 0 7 0 syz-executor 88709 282232 70284 0 2 0x4000000 syz-executor 50141 37083 20014 0 2 0 syz-executor 50141 440058 20014 0 2 0x4000000 syz-executor 50141 104412 20014 0 3 0x4000000 inode syz-executor 44179 406656 43932 0 3 0x80 nanoslp syz-executor 44179 219429 43932 0 3 0x4000080 kqsel syz-executor 44179 396868 43932 0 3 0x4000080 fsleep syz-executor 62765 495352 1330 0 3 0x80 nanoslp syz-executor 62765 80854 1330 0 3 0x4000080 ttyretype syz-executor 62765 327508 1330 0 3 0x4000080 fsleep syz-executor 69069 148060 88142 0 2 0xc80 syz-executor 69069 503441 88142 0 3 0x4000080 kqsel syz-executor 69069 401099 88142 0 3 0x4000080 fsleep syz-executor 86559 69772 62179 0 3 0x3000 suspend syz-executor 86559 200483 62179 0 2 0x4081000 syz-executor 86559 126965 62179 0 3 0x4081000 inode syz-executor 87902 76929 0 0 3 0x14200 acct acct 43932 115973 25872 0 3 0x82 nanoslp syz-executor 70284 400259 25872 0 3 0x82 nanoslp syz-executor 1330 69664 25872 0 3 0x82 nanoslp syz-executor 62179 489069 25872 0 3 0x82 wait syz-executor 47270 203393 25872 0 2 0x2 syz-executor 88142 170863 25872 0 3 0x82 nanoslp syz-executor 20014 513191 25872 0 2 0xc82 syz-executor 80012 85863 25872 0 2 0xc82 syz-executor 25872 156098 1976 0 3 0x82 kqread syz-executor 1976 136291 34107 0 3 0x10008a sigsusp ksh 34107 498182 35539 0 3 0x98 kqread sshd-session 35539 169396 1672 0 3 0x92 kqread sshd-session 59512 522802 1 0 3 0x100083 ttyin getty 1672 445860 1 0 3 0x88 kqread sshd 2961 110829 59329 74 3 0x1100092 bpf pflogd 59329 82308 1 0 3 0x80 sbwait pflogd 46484 271387 30728 73 3 0x1100090 kqread syslogd 30728 194634 1 0 3 0x100082 sbwait syslogd 39548 38195 1 0 3 0x100080 kqread resolvd 3048 331022 84622 77 3 0x100092 kqread dhcpleased 27831 422124 84622 77 3 0x100092 kqread dhcpleased 84622 164870 1 0 3 0x80 kqread dhcpleased 12000 137523 0 0 3 0x14200 bored smr 25558 9605 0 0 3 0x14200 pgzero zerothread 59131 144840 0 0 3 0x14200 aiodoned aiodoned 78448 330905 0 0 3 0x14200 syncer update 57112 340334 0 0 3 0x14200 cleaner cleaner 33148 305617 0 0 3 0x14200 reaper reaper 61580 23037 0 0 3 0x14200 pgdaemon pagedaemon 3831 173703 0 0 3 0x14200 bored viomb 63619 127400 0 0 3 0x40014200 acpi0 acpi0 39602 109670 0 0 3 0x40014200 idle1 24153 198882 0 0 3 0x14200 bored softnet1 76741 446520 0 0 3 0x14200 bored softnet0 16511 486120 0 0 3 0x14200 bored systqmp 34828 357685 0 0 3 0x14200 bored systq *23297 505685 0 0 7 0x14200 softclockmp 30032 283954 0 0 3 0x40014200 tmoslp softclock 16568 57157 0 0 3 0x40014200 idle0 1 137253 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 50141 (syz-executor) thread 0xffff80002a2614d8 (440058) exclusive rrwlock inode r = 0 (0xfffffd806175fda0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 50141 (syz-executor) thread 0xffff80003c431a18 (104412) exclusive rrwlock inode r = 0 (0xfffffd8077bb3118) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 uipc_bind+0x328 #8 sys_bind+0x2f6 #9 syscall+0xbd4 #10 Xsyscall+0x128 Process 86559 (syz-executor) thread 0xffff80003c430a88 (200483) exclusive rrwlock inode r = 0 (0xfffffd806175f0e8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 23297 (softclockmp) thread 0xffff8000ffffe530 (505685) exclusive rwlock maddr r = 0 (0xffff800001588078) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 mld6_fasttimo+0x8c #3 pffasttimo+0x184 #4 timeout_run+0x159 #5 softclock_thread_run+0xe7 #6 softclock_thread_mp+0x86 #7 proc_trampoline+0x10 shared rwlock netlock r = 0 (0xffffffff83891cc0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 mld6_fasttimo+0x5f #3 pffasttimo+0x184 #4 timeout_run+0x159 #5 softclock_thread_run+0xe7 #6 softclock_thread_mp+0x86 #7 proc_trampoline+0x10 shared rwlock timeout r = 0 (0xffffffff83835d78) #0 witness_lock+0x5f1 #1 timeout_run+0x131 #2 softclock_thread_run+0xe7 #3 softclock_thread_mp+0x86 #4 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11087 12219K 12414K 166960K 12658 0 pcb 18 14K 15K 166960K 114 0 rtable 207 6K 7K 166960K 400 0 pf 32 17K 20K 166960K 76 0 ifaddr 39 6K 7K 166960K 66 0 ifgroup 51 2K 2K 166960K 98 0 sysctl 1 1K 9K 166960K 9 0 counters 68 36K 37K 166960K 108 0 ioctlops 0 0K 5K 166960K 1523 0 iov 0 0K 16K 166960K 10 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1373 86K 87K 166960K 1632 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 17 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 106K 166960K 426 0 sigio 0 0K 0K 166960K 6 0 proc 71 115K 164K 166960K 553 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 15 0 in_multi 88 6K 7K 166960K 113 0 ether_multi 1 0K 0K 166960K 1 0 mrt 1 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 193 864K 864K 166960K 193 0 exec 0 0K 1K 166960K 395 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 251 175K 193K 166960K 5691 0 UVM aobj 8 2K 2K 166960K 9 0 pinsyscall 42 84K 100K 166960K 1563 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 24 0 NDP 11 0K 1K 166960K 40 0 temp 42 8667K 8734K 166960K 17027 0 kqueue 13 20K 29K 166960K 80 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 59 0 56 1 0 1 1 0 8 0 rtentry 176 121 0 30 6 0 6 6 0 8 0 unpcb 144 156 0 138 2 0 2 2 0 8 1 syncache 336 7 0 7 1 0 1 1 0 8 1 tcpqe 32 3 0 3 1 0 1 1 0 8 1 tcpcb 736 92 0 86 1 0 1 1 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 inpcb 328 361 0 351 7 0 7 7 0 8 5 nd6 152 25 0 3 1 0 1 1 0 8 0 pkpcb 40 3 0 3 1 1 0 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 12 0 12 1 0 1 1 0 8 1 pppxif 1576 6 0 6 1 0 1 1 0 8 1 pffrag 232 5 0 3 1 0 1 1 0 482 0 pffrnode 88 5 0 3 1 0 1 1 0 8 0 pffrent 40 9 0 7 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 36 0 0 1 0 1 1 0 8 0 pfstkey 128 36 0 0 2 0 2 2 0 8 0 pfstate 448 36 0 0 4 0 4 4 0 8 0 pfrule 1344 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 510 0 109 29 1 28 29 0 8 1 art_table 40 512 0 109 5 0 5 5 0 8 0 art_node 32 120 0 38 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semapl 112 13 0 3 1 0 1 1 0 8 0 shmpl 112 6 0 1 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2115 0 605 96 0 96 96 0 8 0 ffsino 296 2115 0 605 118 0 118 118 0 8 0 nchpl 144 2707 0 1006 64 0 64 64 0 8 0 vnodes 216 2358 0 0 131 0 131 131 0 8 0 namei 1024 8659 0 8658 1 0 1 1 0 8 0 percpumem 16 69 0 20 1 0 1 1 0 8 0 kstatmem 264 50 0 26 3 0 3 3 0 8 1 scxspl 216 11154 0 11154 3 2 1 2 1 8 1 plimitpl 152 137 0 115 1 0 1 1 0 8 0 sigapl 424 732 0 684 7 1 6 7 0 8 0 knotepl 120 502 0 0 16 0 16 16 0 8 0 kqueuepl 224 148 0 137 3 0 3 3 0 8 2 pipepl 344 134 0 107 3 0 3 3 0 8 0 fdescpl 528 715 0 684 3 0 3 3 0 8 0 filepl 160 3556 0 3335 14 0 14 14 0 8 4 lockfpl 104 101 0 99 1 0 1 1 0 8 0 lockfspl 48 45 0 43 1 0 1 1 0 8 0 sessionpl 144 26 0 17 1 0 1 1 0 8 0 pgrppl 48 37 0 20 1 0 1 1 0 8 0 ucredpl 104 459 0 446 1 0 1 1 0 8 0 zombiepl 144 685 0 684 1 0 1 1 0 8 0 processpl 1232 732 0 684 5 0 5 5 0 8 0 procpl 664 1204 0 1144 6 0 6 6 0 8 0 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 752 586 0 555 10 0 10 10 0 8 6 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 121 0 0 16 0 16 16 0 8 0 mcl2k 2048 32 0 0 4 0 4 4 0 8 0 mtagpl 96 12 0 0 1 0 1 1 0 8 0 mbufpl 256 170 0 0 11 0 11 11 0 8 0 bufpl 280 4272 0 131 296 0 296 296 0 8 0 anonpl 32 7959 0 0 65 0 65 65 0 246 0 amapchunkpl 152 17733 0 17211 28 0 28 28 0 158 7 amappl16 200 2303 0 2020 17 2 15 15 0 8 0 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 25 0 25 1 1 0 1 0 8 0 amappl13 176 427 0 426 1 0 1 1 0 8 0 amappl12 168 1155 0 1113 3 0 3 3 0 8 0 amappl11 160 3 0 3 1 1 0 1 0 8 0 amappl10 152 50 0 36 1 0 1 1 0 8 0 amappl9 144 255 0 255 1 1 0 1 0 8 0 amappl8 136 68 0 66 1 0 1 1 0 8 0 amappl7 128 93 0 92 1 0 1 1 0 8 0 amappl6 120 281 0 268 1 0 1 1 0 8 0 amappl5 112 75 0 64 1 0 1 1 0 8 0 amappl4 104 435 0 405 1 0 1 1 0 8 0 amappl3 96 2906 0 2810 4 1 3 3 0 8 0 amappl2 88 856 0 780 2 0 2 2 0 8 0 amappl1 80 11263 0 10668 14 0 14 14 0 8 0 amappl 88 4894 0 4721 5 0 5 5 0 92 0 uvmvnodes 80 108 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 8 0 1 1 0 1 1 0 8 0 uaddrrnd 24 715 0 684 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 715 0 684 1 0 1 1 0 8 0 vmmpekpl 168 7692 0 7658 2 0 2 2 0 8 0 vmmpepl 168 53645 0 51468 98 0 98 98 0 357 1 vmsppl 488 714 0 684 5 0 5 5 0 8 0 rwobjpl 80 17644 0 16345 27 0 27 27 0 8 0 pdppl 4096 1438 0 1368 100 28 72 84 0 8 2 pvpl 32 15779 0 0 129 1 128 128 0 265 0 pmappl 256 714 0 684 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 277 0 31 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837e3ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x7411c611f9c0, count: 12 ddb{0}> trace x86_ipi_db(ffffffff837e3ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x7411c611f9c0, count: -3 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833b4a35) at panic+0x1e5 witness_checkorder(ffff800001588078,1,0) at witness_checkorder+0x122c rw_do_enter_read(ffff800001588060,0) at rw_do_enter_read+0x99 in6_hasmulti(fffffd806c8da7f0,ffff800001588000) at in6_hasmulti+0x41 ip6_output(fffffd806c8da700,ffffffff839eee58,0,0,ffff80002a1fe9e0,0) at ip6_output+0x13bd mld6_sendpkt(ffff800001551e00,83,0) at mld6_sendpkt+0x385 mld6_fasttimo() at mld6_fasttimo+0x16d pffasttimo(ffffffff83a15020) at pffasttimo+0x184 timeout_run(ffffffff83835dd8,ffffffff83a15020) at timeout_run+0x159 softclock_thread_run(ffffffff83835dd8) at softclock_thread_run+0xe7 softclock_thread_mp(ffff8000ffffe530) at softclock_thread_mp+0x86 end trace frame: 0x0, count: 3 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833b4a35) at panic+0x1e5 witness_checkorder(ffff800001588078,1,0) at witness_checkorder+0x122c rw_do_enter_read(ffff800001588060,0) at rw_do_enter_read+0x99 in6_hasmulti(fffffd806c8da7f0,ffff800001588000) at in6_hasmulti+0x41 ip6_output(fffffd806c8da700,ffffffff839eee58,0,0,ffff80002a1fe9e0,0) at ip6_output+0x13bd mld6_sendpkt(ffff800001551e00,83,0) at mld6_sendpkt+0x385 mld6_fasttimo() at mld6_fasttimo+0x16d pffasttimo(ffffffff83a15020) at pffasttimo+0x184 timeout_run(ffffffff83835dd8,ffffffff83a15020) at timeout_run+0x159 softclock_thread_run(ffffffff83835dd8) at softclock_thread_run+0xe7 softclock_thread_mp(ffff8000ffffe530) at softclock_thread_mp+0x86 end trace frame: 0x0, count: -12