last executing test programs: 5.787634042s ago: executing program 3 (id=175): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200025}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) pread(0xffffffffffffffff, &(0x7f0000000180), 0xfffffffffffffe88, 0x100000000) r1 = socket(0x11, 0x3, 0x0) sysctl$vfs_nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000480)='./file0/file0/../file0\x00', 0x200, 0x0) recvmmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0}}, 0x10, 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x8, 0x146) wait4(0xffffffffffffffff, &(0x7f0000004980), 0x3, &(0x7f00000049c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200025}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x1, 0x0) (async) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) (async) pread(0xffffffffffffffff, &(0x7f0000000180), 0xfffffffffffffe88, 0x100000000) (async) socket(0x11, 0x3, 0x0) (async) sysctl$vfs_nfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) open$dir(&(0x7f0000000480)='./file0/file0/../file0\x00', 0x200, 0x0) (async) recvmmsg(r1, &(0x7f0000000100)={&(0x7f0000000180)={&(0x7f0000000480)=@un=@file={0x0, ""/520}, 0x20a, 0x0, 0x0, 0x0}}, 0x10, 0x2, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x8, 0x146) (async) wait4(0xffffffffffffffff, &(0x7f0000004980), 0x3, &(0x7f00000049c0)) (async) 5.778956076s ago: executing program 3 (id=180): openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0x400409) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x100) (async) open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) setuid(0xee01) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000006c0)={0x0, 0xfffffff8, 0xffff, 0xff7ffff8, "ffff0d000300ef010155000000ff00", 0x7, 0x8}) (async) syz_open_pts() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x30, 0xf4, 0x5, 0x10002}, {0x3, 0x7, 0x6, 0xb}, {0x6, 0x0, 0x1, 0xfffc}]}) listen(0xffffffffffffffff, 0x4) (async) socket$unix(0x1, 0x5, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000180)="32b1deb509f7481f435c67df4f930c148e92b8aa4e59e86b3eee2195d81ba19b2af590dc7fb9c105ac69f95b328015b349c22ea5d63bbe9c2629579ae869f391d7edb2c4b98f6041115f4d5707e107ad51613a0b5ccf44833f57b28c96b8fed123638bffe6c4ee6316d0a68a2efea55dcf8e9b4b120aedcc", 0x78}], 0x1) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000000)=""/201, 0xc9}], 0x1) r3 = semget$private(0x0, 0x3, 0xac) (async) setgid(0xffffffffffffffff) r4 = socket$inet(0x2, 0x3, 0x2) getsockopt(r4, 0x0, 0x6b, 0x0, 0x0) (async) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) (async) r5 = getgid() semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000140)={{0xff, 0x0, r5, 0x0, 0x0, 0x13d, 0x5}, 0x6, 0x3ff, 0x4a}) (async) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x80087467, &(0x7f0000000040)={0x2086, 0x3, 0x4, 0x5}) (async) getgroups(0x0, 0x0) (async) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 5.737700454s ago: executing program 3 (id=184): openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x3) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x147) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r0 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff7, 0x100], [0x5, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80000000, 0x0, 0x0, 0x0, 0x47], [0x8, 0x2, 0x100000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0x97d2, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x4, 0x2}}}) kevent(r0, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) socket(0x11, 0x3, 0x3) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000040)) 5.667915408s ago: executing program 3 (id=186): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) listen(0xffffffffffffffff, 0x8) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000200)=[{0x3d, 0x9, 0x3, 0x4}, {0x3, 0x2, 0xf, 0x8}, {0x7f, 0x8, 0x1, 0x3}, {0x8, 0x4, 0x81, 0x1}]}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x3) 5.662662544s ago: executing program 3 (id=189): sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, &(0x7f0000000180)="3bf2ee74", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb", 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x3) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0x117}], 0x50, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x44}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) 5.562941942s ago: executing program 3 (id=194): r0 = semget(0x2, 0x3, 0x40) semctl$SETVAL(r0, 0x3, 0x8, &(0x7f0000000380)=0x3) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setuid(0xffffffffffffffff) r2 = socket(0x6, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x1}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r2, &(0x7f0000000000), 0x10) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="4d6edcd1393ed4857a3b3b0e000000000000805b2031c38e43ab24", 0x1b}, {&(0x7f0000000100)="512f5eff4e8fed3fa3f1486754c07d038896e4540326958a4fda4fef728358fa28228a705e282f4368958b71871b8645bebe0d722f800ba9be5772576aced460b67e003e9f18462b6d75f13be948e7fa074da9ccab65bab3a0d977b978ae86897d8a98e7e8546bd4b8f932e7c66c48dcf90b0bdd3983d2d18845ae026d497f0ae80b1a3e8b1ee8902cd39d3796c3ec69d6d591d57882f5b908e8cf63da99ad443dc28bc6de38cd3f0008d108c94acd0f66f6ca7dfdaf0251859818438ced205a3dea172fb4e74c2d6ae15b7b85d95242a4b8cb2a58a949912802379e2cf74f72ab", 0xe1}], 0x2) r3 = accept(r2, 0x0, &(0x7f0000000200)) connect(r3, &(0x7f00000003c0)=@in6={0x18, 0x2, 0xdce1, 0x8}, 0xc) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000080)=0xc) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x10000000000001b4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) connect$unix(r8, &(0x7f0000000000), 0x10) setregid(r7, 0xffffffffffffffff) setsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000340)={r4, r5, r7}, 0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r9 = syz_open_pts() ioctl$TIOCSETA(r9, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xfffffffd, 0xffef9ff6, 0x6, "4b06a6bcff0300dba800000000000800", 0x0, 0xf}) ioctl$TIOCSETA(r9, 0x802c7414, &(0x7f00000000c0)={0x0, 0x5, 0x1, 0x2, "9f3a45a4fe2e857f034da7d542fdd21e107814d0", 0x4, 0x400}) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000300)="e7c4a4d86cb242843ec2cbd63a9e170a73cef2a623e23e5eda0501c23699e258b514174ca57079fff349534637a55fadb4a6329962bd40adb295cff85f36d14068f2d1758c71a2ca0965bc17be0180000000000000c46de1961101376492cff60fd9ddb33432677dbe8f9bdcfbbd4d0f258ee907faa79ce1d92e47a8bf0386c448b9b7740cf496f308ce6f7c902b1a5e6a653c1c21ff51e1a39e7c9e75dcf80073e94fff69229679c39a9a951e7db90edca578f9980ddcbc2b1c1bc4d0250a90da413d8ae5561f", 0xc7}], 0x1) 4.295616775s ago: executing program 0 (id=246): r0 = socket(0x18, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x80146959, &(0x7f00000001c0)) setsockopt(r0, 0x1000000000029, 0x40, &(0x7f0000000100), 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000009c0)=[{0x40, 0x10, 0x9, 0x37}, {0x9e, 0x19, 0x0, 0x40000003}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) mprotect(&(0x7f00004e0000/0x2000)=nil, 0x2000, 0x2) select(0x40, &(0x7f0000000000)={0x99, 0x6, 0x7, 0xb, 0x8, 0x3d, 0x4000000000200, 0xffffffffffffffff}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f0000000080)='./file0\x00', 0x4000080000000000) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f00000000c0)={0x4e7815cc, 0x9, 0x2, 0xc, "bbc0a49a799d4a02f46684ff76c67a37b8893334", 0x1, 0x9}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3a, &(0x7f0000000280)={@broadcast, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x17, 0x2c, 0x65, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0x4, 0x3, 0x1, 0x6}]}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4, 0x0, 0x43}}}}}}) 4.084620455s ago: executing program 0 (id=250): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async, rerun: 32) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 32) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x6b) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x4, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0xfffffffd, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f4, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r1 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r1, &(0x7f0000000000), 0x10) (async) write(r1, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) select(0x40, &(0x7f0000000040)={0x80, 0x5, 0x4008, 0x1, 0x5, 0x1000000000094, 0x89ce, 0x40000000000}, 0x0, 0x0, 0x0) (async) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) ioctl$VNDIOCSET(r2, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) 4.083173038s ago: executing program 0 (id=252): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) kqueue() syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="1817f50000000001"]) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) (async) connect$unix(r1, &(0x7f0000000000), 0x10) setsockopt(r1, 0x6, 0x4, &(0x7f0000000040)="fb9f0f7d", 0x4) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`\x00', 0xffffffffffffffff, 0x1}) 2.443168394s ago: executing program 5 (id=282): ioctl$VNDIOCCLR(0xffffffffffffffff, 0x80384601, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x401, &(0x7f0000000080)='./file0\x00', 0x8}) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000340), 0x0) 2.429653007s ago: executing program 0 (id=287): nanosleep(&(0x7f00000000c0)={0xd37, 0x8}, 0xfffffffffffffffe) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x2b, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) close(r0) unveil(0x0, &(0x7f00000000c0)='r\x00') unveil(0x0, &(0x7f0000000300)='W\x00') sysctl$kern(&(0x7f0000000000)={0x1, 0x29}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0xb}, 0x2, &(0x7f0000000100)="974c0b8e49052ed865dd63ef5fa369ae1b6c74431df28a289263e3bc8ca3ff9b08bcf5a0b844c8fcbf3a58f8dd270df0d579d15dd81359e66a8359796d70ad71e7e7fb793c34e574789bf96744b8a30027e5addcb4d48e39f7d1d05773a76f1eec5dcf3027f869633a6a62cd77b10cffbcbb6b71e294d2", &(0x7f0000000080)=0x77, &(0x7f0000000180)="d5ebef419b03e3d7f5e30b9345d2a64f626f7aa229b25c315e01e1537731f4f50665c1ae643f8304faa31927bc1592ee4ab52ab93e045f593df6de5ec41103ef97dad171cc42c119681c89a55b78bf98b544db9cbf23aae6352413c5099e28bce4de3196728e7d8070cdaac058b35f946ff42ce85e4bd290a785439d894af338b666cca8", 0x84) 2.429085573s ago: executing program 5 (id=288): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000480)={0x2df57363, 0x1bc, 0xd, 0xfffffffd, "0a6400b72860147bccc7020000060000008700", 0x3, 0x9}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="a77fae3754946cc86437a371ca22895bb4e5482352ca4bb3ef52c13a62b8904668184965225c6de0bfd75b0b4160e4c61faca3e5e70ecb1ff36aa3bb5559986eeea14a3b4aac9b8040d717e60ef1d720b0cb779c434da9a6464ea2b25e4b8e533bf65ca7", 0x64}], 0x1) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x23) r3 = socket$inet6(0x18, 0x3, 0x0) getsockopt(r3, 0x29, 0x35, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x6, 0x1, 0xff, 0x80000004, 0x80000003, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x446, 0x8, 0xffffffff, 0x99}, {0xce1, 0x6, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x5, 0x7fff, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7fd, 0x20000b, 0x8, 0x5}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71715, 0xfffffffa, 0x1, 0x6}, {0xc, 0x7, 0x5, 0x4}, {0x0, 0x1, 0x1002, 0x30804}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000003c0)=[{{r1}, 0xfffffffffffffffd, 0x66, 0x80000000, 0x4, 0x7fffffffffffffff}, {{r4}, 0x3, 0x74, 0x2, 0x9, 0x6}, {{r1}, 0xfffffffffffffffb, 0xe7a8d8819204724, 0x80000000, 0x0, 0x4000000000000000}, {{r4}, 0xfffffffffffffff8, 0x41, 0x4, 0x5, 0x1ff}, {{r4}, 0xfffffffffffffff8, 0x88, 0x80000000, 0x3, 0xfffffffffffffff9}, {{r1}, 0xfffffffffffffffb, 0x29, 0x1, 0x5, 0xfffffffffffffffd}], 0x15, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r5, 0xc0284457, &(0x7f0000000000)={0xfffffffe, 0x5, 0x3, 0x1000, "080000400006000000010000000100ff2b0100", 0x4917, 0x8}) kevent(r5, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x7, 0x5}, {{}, 0xffffffffffffffff, 0x4f, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x8001, 0x8}, {{}, 0xfffffffffffffffc, 0x20, 0x4, 0xfffffffd, 0xc3d}, {{}, 0xffffffffffffffff, 0x37, 0xf0000000, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x57, 0x4, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x2, 0x100000002}, {{}, 0xfffffffffffffff8, 0x80, 0x1, 0x1f70, 0x5}], 0xb19, 0x0) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e", 0x0, 0x0, 0x0) r6 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000240)=0x2) close(r6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$inet(0x2, 0x1, 0x0) getsockopt(r7, 0x0, 0x1e, 0x0, 0x0) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x40000, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) getpeername(r6, &(0x7f0000000040)=@in, &(0x7f0000000080)=0xc) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) 2.332891246s ago: executing program 5 (id=294): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) bind$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs={0x1, 0x0, 0x3}, 0x8) r1 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) close(r1) 2.168961168s ago: executing program 5 (id=301): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0xfe, 0x0, 0xfffffbfe}, {0x2, 0x0, 0x0, 0x6}, {0x7f, 0x0, 0x0, 0xbc2}]}) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @broadcast, [{[{0x88a8, 0x6, 0x0, 0x1}], {0x8100, 0x4}}], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @rand_addr="00000000000000000000000100", @mcast2, {[], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x81, 0x0, 0x10b6, 0x9, 0x55}}}}}}) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async, rerun: 64) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) (async, rerun: 64) rename(&(0x7f0000000100)='./file0\x00', 0x0) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') (async) sysctl$kern(&(0x7f00000005c0)={0x1, 0x48}, 0x2, &(0x7f0000000600)="371dc444", &(0x7f0000000680)=0x4, &(0x7f00000006c0)="faff0004", 0x4) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0/file0/file0\x00', 0x0) (async) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000040)="8858cd06", 0x4) (async) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x100}], 0x1, 0x887e) 2.168368507s ago: executing program 6 (id=302): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40, 0x17c) r1 = socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt$sock_int(r2, 0xffff, 0x800, &(0x7f0000000040)=0x870, 0x4) setsockopt(r2, 0x0, 0x7, &(0x7f0000000080)='?\x00\x00\x00', 0x4) r3 = dup2(r2, r1) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x90, 0xdc4, 0x564, 0x9cea, 0x0, 0x8000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r1, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) r5 = socket(0x2, 0x400000000002, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1002, &(0x7f0000000140)=0x7, 0x4) setsockopt(r5, 0x0, 0x7, &(0x7f0000000080)='?', 0x1) dup2(r5, r4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r4, &(0x7f0000000000), 0x10) r6 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r6, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x1}, 0x8) write(r6, 0x0, 0x0) r7 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x3}, 0x8) write(r7, 0x0, 0x0) recvmsg(r3, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r0, 0x20000000) truncate(&(0x7f0000000080)='./file0\x00', 0x61c5) 2.162395191s ago: executing program 0 (id=303): r0 = syz_open_pts() syz_open_pts() (async, rerun: 32) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000180)=0x100) (async, rerun: 32) syz_emit_ethernet(0x68, &(0x7f0000000600)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x32, 0x2c, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x8195be89f66cea81}, @hopopts={0x89}, @routing={0x33, 0x0, 0x0, 0x2}], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x7, '\x00', @local={0xfe, 0x80, '\x00', 0x0}, [{0x19}]}}}}}}) 2.066115531s ago: executing program 0 (id=305): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x29}, 0x2, &(0x7f0000000140)="77983ff1dbb77f39ef02fe13294b62fb4651a3844ff667bafcd6596f9b52a23125de4259dec789fbd94be39b3eddfbbbe937778dacf720d718a85b4e99e25d1f111f189a7226411220fe0fa7bd810a9036eef50915387fa3f13fd9475f473d4d", &(0x7f0000000240)=0x60, &(0x7f0000000280), 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000000c0)=0x9) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) unveil(0x0, &(0x7f00000003c0)='c\x00') 2.064659617s ago: executing program 6 (id=306): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0xc028698d, &(0x7f0000000100)) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000000)=0x5) 1.933990209s ago: executing program 6 (id=312): r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x3, 0x2, 0x100000000, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x100], [0x2b, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x62, 0x7b98, 0x1fd, 0x10000000, 0xb41], [0x100000001, 0x2, 0x40000000, 0x0, 0xb, 0x11003, 0xffffffff00000000], [0x100, 0x1ffff7fffff, 0x7ffffffffffffffc, 0x10000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x5, 0x7d02}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0xcf, 0x8}, {0x0, 0x80, 0x9, 0x2000000000000000}, {}, {0x0, 0xfc, 0x0, 0x8}], {0x0, 0x6, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x2}}}) r3 = kqueue() (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000280), 0x0) (async) kevent(r3, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00') (async) execve(&(0x7f0000000040)='./file0/file1\x00', 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x101, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r5, 0x0) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r6, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) fcntl$getown(r6, 0x5) ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f0000000340)=0x9) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) ioctl$WSKBDIO_BELL(r4, 0x20005701) 1.86297981s ago: executing program 6 (id=315): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) fchmod(r0, 0x80) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x84, 0x1b}, 0x7297, 0x3d0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x4}) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x800000018, 0x1, 0x0) listen(r0, 0x101) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r2, &(0x7f0000000180)=@abs={0x682eb13985c518e6, 0x7}, 0x8) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) close(r0) symlink(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file1\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x410, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x8}) pread(r4, &(0x7f00000000c0)="af083c5feaa2b062d9a046608df7311560f0cb8e1fda13f9258afd14ffdbaa6b381224f88c5d648332dbf262686a872c7b5bc53978bedfe8364d0909fb2a0d02f2a72450bde0764c70e43a0f9b3b7805b49ae787f366d09f25e63a996078afc03e5b9ee2d5a2af766d96f5f30c1bcd993abeaa879f60f4c7033ceefbf530969382bbaad79ab04c057ebed089d274943b1d4e", 0x92, 0x100) 1.834625648s ago: executing program 7 (id=319): sysctl$vm(&(0x7f00000002c0)={0x2, 0xc}, 0x2, 0x0, 0x0, &(0x7f0000000440), 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, 0xffffffffffffffff, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00000dc000/0x12000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7ffffffffffffbfb}, {&(0x7f00000a3000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7f9}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f00003d5000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffff9}, {&(0x7f0000125000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xc8}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x9}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0x8}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000148000/0x1000)=nil, &(0x7f00001ae000/0x3000)=nil, 0x1000039f7}, {&(0x7f00002f5000/0x1000)=nil, &(0x7f000048d000/0x2000)=nil, 0xffd}], './file0\x00', 0xfffffffa}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = semget(0x2, 0x4, 0x61) semop(r0, &(0x7f0000000000)=[{0x0, 0x4, 0x1000}, {0x2, 0x1, 0x1000}, {0x4, 0xd62}], 0x3) r1 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r1, 0x8020699f, &(0x7f00000001c0)) 1.774216429s ago: executing program 7 (id=322): open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x9, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x9, 0x2000000000000004}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x218, &(0x7f00000001c0)={@random="7309ff6931ed", @empty, [], {@ipv6={0x86dd, {0x2, 0x6, "c1e50b", 0x1e2, 0x0, 0x75, @loopback, @loopback, {[@routing={0x2e, 0x2, 0x0, 0x6, 0x0, [@rand_addr="f8c9fa5eb22755459dec68f1381ed579"]}, @fragment={0x3b, 0x0, 0x68, 0x1, 0x0, 0x0, 0x64}, @routing={0x3c, 0x6, 0x0, 0x2, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="3a9a8bfedce58817e03e287ad82e0b29", @loopback]}, @hopopts={0x2e}], @icmpv6=@ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x4, "bbbfa06c149c33a2c5147a45ed12050114995590ccf0a3385b4d14e31e7676e0"}, {0x1, 0xd, "ea398f940a448ddeb88c84d18136d3cec0bb94db57aa0ed3e501006ac8c4ba561b5b8b75ef54c267ed1503fe2e257bb1a7c9710ef1baee3be216bdfe587a7470c53b0504bf9dc4163c5c90c4e59227e8ace2988783121f401595e72319e1e561a1b224aec9af2366a0"}, {0x1, 0x7, "c9327ffe5dd469580d27588c4463b7bfaaf13f9b0397fb0b63f84022c5d1386786807ff9425c04653be49c70fb366cdcfd60c66f45ace1aa9426dd"}, {0x1, 0xf, "4f3db0f6c0c84e00bc864f1d47d13f8332994bca72578e61a3251592723523c6605060456ce890c59e6b4e193129003c627b51c81b64fe0283f8ddd5287e7744835111eb8f2831b9f059e73db7309c9360f091f11fe7967966f6740a9383b84cc2ff9be52cb346e787179ed7b1109aa50e366b8bf84688a83f02"}, {0x4, 0x6, "9ee7e2c96ca60179f8ec0aabee0b55c1f4440e7e01b748663c5bab33c18fd5c72772f9cf392179788039f1675ad239a5aabc"}]}}}}}}) (async) syz_emit_ethernet(0x218, &(0x7f00000001c0)={@random="7309ff6931ed", @empty, [], {@ipv6={0x86dd, {0x2, 0x6, "c1e50b", 0x1e2, 0x0, 0x75, @loopback, @loopback, {[@routing={0x2e, 0x2, 0x0, 0x6, 0x0, [@rand_addr="f8c9fa5eb22755459dec68f1381ed579"]}, @fragment={0x3b, 0x0, 0x68, 0x1, 0x0, 0x0, 0x64}, @routing={0x3c, 0x6, 0x0, 0x2, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="3a9a8bfedce58817e03e287ad82e0b29", @loopback]}, @hopopts={0x2e}], @icmpv6=@ndisc_rs={0x85, 0x0, 0x0, '\x00', [{0x3, 0x4, "bbbfa06c149c33a2c5147a45ed12050114995590ccf0a3385b4d14e31e7676e0"}, {0x1, 0xd, "ea398f940a448ddeb88c84d18136d3cec0bb94db57aa0ed3e501006ac8c4ba561b5b8b75ef54c267ed1503fe2e257bb1a7c9710ef1baee3be216bdfe587a7470c53b0504bf9dc4163c5c90c4e59227e8ace2988783121f401595e72319e1e561a1b224aec9af2366a0"}, {0x1, 0x7, "c9327ffe5dd469580d27588c4463b7bfaaf13f9b0397fb0b63f84022c5d1386786807ff9425c04653be49c70fb366cdcfd60c66f45ace1aa9426dd"}, {0x1, 0xf, "4f3db0f6c0c84e00bc864f1d47d13f8332994bca72578e61a3251592723523c6605060456ce890c59e6b4e193129003c627b51c81b64fe0283f8ddd5287e7744835111eb8f2831b9f059e73db7309c9360f091f11fe7967966f6740a9383b84cc2ff9be52cb346e787179ed7b1109aa50e366b8bf84688a83f02"}, {0x4, 0x6, "9ee7e2c96ca60179f8ec0aabee0b55c1f4440e7e01b748663c5bab33c18fd5c72772f9cf392179788039f1675ad239a5aabc"}]}}}}}}) poll(&(0x7f0000000000), 0x0, 0x0) (async) poll(&(0x7f0000000000), 0x0, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000000c0)=0xdb1) (async) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000000c0)=0xdb1) socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000000)) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xd27d43220c7d18f, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, &(0x7f0000000100), 0x0, 0x0, 0x0) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2842, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) select(0x40, &(0x7f0000000100)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x4, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) (async) kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) 1.656643182s ago: executing program 2 (id=327): writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)="b2696b8f60eaa367565d989b3f694f09dd5a2cce1362081f9d270668f68bc13d6ab31097", 0x24}, {&(0x7f00000003c0)="6905392ab8168a873e1cf1b12d5afbbcb7da79c36fe86fd05c17e0f876aba1246479190effcc4d7f71a70e02117ce492b858c6c8e7534e57bcfd0ba9015a4a52afb9d959c2562054e2bf0023528659eead6baa4a393403836c3da467e3015ee6fb4f65fa8f2148ece458d4ef4893e58e15b3868969357e73d0d0a6b99bcf228b78360b83fd350b104f0b7bc7fe09ff70038624e8259ac6c37c7ca98419dc32c640bb6120ed5b9a8a15ef06948a3300b8ed58ac51d9fbb0052a7d9926d9e037dd994c", 0xc2}, {&(0x7f0000000280)="5efaa7d74453317559bacedde017df469916bc0000e5117a2ce4cd8a7deb08ee84416cea39ec5aa0ef8d0b0c963142dd3b9c6a190765f1d74494a7129605c325dbb2f82fc60f6ce3163576722958db5b67cb4ead0647ea94654aa72500cfb3bb0859b57282a3a14fa382af9d4297ee8adacb175455bdc905aad195ab406ae079d93d0bca08a0aa2dadc8c227eb5d4fa420bbcb7e1177", 0x96}], 0x4) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x10000, 0x0) ioctl$TIOCSETA(r0, 0xcd504406, &(0x7f0000000040)={0x0, 0xfffffffd, 0x1000, 0x0, "97a2224faf891c15ebb178926cc9795a6b47c1d1", 0x1000000}) ioctl$TIOCSETA(r0, 0xcd504406, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b9", 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r2, 0x0) ioctl$TIOCFLUSH(r1, 0xc0107004, &(0x7f0000000080)=0x7f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x2, 0x0) close(r4) r5 = socket(0x2, 0x3, 0xfe) setsockopt$sock_int(r5, 0xffff, 0x1000, &(0x7f0000000000)=0x4, 0x4) bind(r5, &(0x7f0000000000), 0x10) connect$unix(r4, &(0x7f0000000000), 0x10) writev(r4, &(0x7f0000000100)=[{0x0}], 0x1) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') open$dir(&(0x7f0000000040)='./file1\x00', 0x8000, 0x150) 1.656143452s ago: executing program 2 (id=328): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r2 = socket(0x18, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000140)="9725db874b5776d5676fed1ea73f98a0c434268a8320db3eab6b66f85fc6c3e3784eea0d000000f442060b0f73d3d47237f91da5d2059c1266e040db88846420792a1aba3070fb930a29ddebb11cfe86730eec721e0af6bcf4d00a107421406cd3f2d2d584ca988b787135219952d8f7402de7b9291c788fea559f86c9da5ffed0c9559630", 0x85}], 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) ioctl$FIONREAD(r2, 0x8020697a, &(0x7f00000001c0)) (async, rerun: 64) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) r3 = socket(0x2, 0x4001, 0x0) r4 = dup(r3) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) (async, rerun: 64) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb40, {[0xfffffbfffffffffb, 0x3, 0x2, 0x100000000, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x62, 0x7b98, 0x1fc, 0x10000000, 0x0, 0x200], [0x100000001, 0x0, 0x40000000, 0x0, 0xb, 0x11003], [0x2, 0x1ffffffffff, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x5, 0x7d02}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0xcf, 0x8}, {0x2, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0x10000, 0x0, 0x8}], {0x0, 0x6, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x2}}}) (rerun: 64) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x138, 0x0, 0x5, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x101, 0x2000000000000004}, 0x0, 0x0, 0x0) (async, rerun: 32) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async, rerun: 32) r7 = socket$inet(0x2, 0x1, 0x0) (async, rerun: 64) munmap(&(0x7f0000491000/0x4000)=nil, 0x4000) (async, rerun: 64) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async) ioctl$BIOCSRSIG(r1, 0x80044272, 0x0) (async) ioctl$FIONREAD(r7, 0x80206979, &(0x7f0000000100)) 1.527413776s ago: executing program 4 (id=329): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) (async) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r1 = socket(0x1, 0x2, 0x0) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async) open(&(0x7f0000000340)='./file1\x00', 0x200, 0x33) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) rename(&(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1002, &(0x7f0000000240)={0x8, 0x2e185a2d}) (async) mkdir(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa) (async) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) sysctl$net_inet6_ip6(&(0x7f0000000140)={0x4, 0x18, 0x29, 0x32}, 0x4, 0x0, 0x0, &(0x7f0000001140)='\x00\x00\x00\x00', 0x4) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0x68) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0x100) (async) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 1.525165475s ago: executing program 4 (id=331): ioctl$VMM_IOC_RUN(0xffffffffffffffff, 0xc0205602, &(0x7f00000001c0)={0x0, 0xdc2, 0x6, 0x101, 0x0, 0xff, 0x3}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)) r1 = socket(0x18, 0x3, 0x0) getsockopt(r1, 0x29, 0x3b, 0x0, 0x0) 1.524695722s ago: executing program 7 (id=332): r0 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) (async) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000000c0)="553a628baa36cc5d6886703731", 0xd}], 0x1) r2 = syz_open_pts() ioctl$TIOCNXCL(r2, 0x2000740e) (async) execve(0x0, 0x0, 0x0) 1.461195833s ago: executing program 4 (id=334): seteuid(0xffffffffffffffff) r0 = getuid() chown(&(0x7f0000000040)='./file0\x00', r0, 0xffffffffffffffff) seteuid(r0) r1 = kqueue() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x1, 0x2, 0x0) socket$inet6(0x18, 0x3, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r3 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0x80206919, &(0x7f00000001c0)) r4 = socket(0x800000018, 0x1, 0x0) setuid(0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0x22, 0x4) open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r6 = getppid() r7 = syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xfffffffd, 0xffef9ff6, 0x6, "4b06a6bcff0300dba800000000000800", 0x0, 0xf}) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000300)="e7c4a4d86cb242843ec2cbd63a9e170a73cef2a623e23e5eda0501c23699e258b514174ca57079fff349534637a55fadb4a6329962bd40adb295cff85f36d14068f2d1758c71a2ca0965bc17be0180000000000000c46de1961101376492cff60fd9ddb33432677dbe8f9bdcfbbd4d0f258ee907faa79ce1d92e47a8bf0386c448b9b7740cf496f308ce6f7c902b1a5e6a653c1c21ff51e1a39e7c9e75dcf80073e94fff69229679c39a9a951e7db90edca578f9980ddcbc2b1c1bc4d0250a90da413d8ae5561f5d7622e6e695a14d5e04e8ca3ea3", 0xd5}], 0x1) syz_open_pts() ioctl$TIOCFLUSH(r7, 0x80047410, &(0x7f0000000080)=0x2) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0x0, r6, 0x0, 0x16ef97e0, 0x0, 0x400000002, 0x4}) ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r8 = fcntl$getown(r5, 0x5) seteuid(0x0) ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, r8) 1.457473063s ago: executing program 2 (id=335): r0 = open(0x0, 0x10, 0x100) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) connect(r0, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {}, {}, {0x0, 0x10000}, {0x2}, {0x1, 0xffffffff}, {}, {}, {0x0, 0x1ff}, {0x1}, {0x0, 0x1000}, {0x3, 0x4}, {}, {0x2, 0x3}, {0x3, 0x100}, {}, {0x0, 0x7ff}, {0x5}, {0x0, 0x4}, {0x3}, {0x0, 0x400}, {}, {0x2}, {0x0, 0xfffffffd}, {}, {0x3}, {}, {0x1, 0xe}, {0x1}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91", 0x0, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x9011, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, 0x0, 0x100, 0xa4) close(0xffffffffffffffff) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0x1a0) ioctl$VNDIOCSET(r1, 0x81946467, &(0x7f0000000040)={0x0, 0x4, 0x0}) open(0x0, 0x10, 0x100) (async) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) connect(r0, 0x0, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x7}, {}, {}, {0x0, 0x10000}, {0x2}, {0x1, 0xffffffff}, {}, {}, {0x0, 0x1ff}, {0x1}, {0x0, 0x1000}, {0x3, 0x4}, {}, {0x2, 0x3}, {0x3, 0x100}, {}, {0x0, 0x7ff}, {0x5}, {0x0, 0x4}, {0x3}, {0x0, 0x400}, {}, {0x2}, {0x0, 0xfffffffd}, {}, {0x3}, {}, {0x1, 0xe}, {0x1}]}) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91", 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x9011, 0xffffffffffffffff, 0x0) (async) openat(0xffffffffffffffff, 0x0, 0x100, 0xa4) (async) close(0xffffffffffffffff) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) open(&(0x7f0000000000)='./bus\x00', 0x1, 0x1a0) (async) ioctl$VNDIOCSET(r1, 0x81946467, &(0x7f0000000040)={0x0, 0x4, 0x0}) (async) 1.454280866s ago: executing program 7 (id=338): semget(0x2, 0x1, 0x281) msgctl$IPC_SET(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = syz_open_pts() r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffffe, 0x0, 0xf0000000, 0x6, 0x9}], 0x96, &(0x7f0000000400), 0xfffb4161, 0x0) ioctl$TIOCSETA(r1, 0xcd504404, &(0x7f0000000580)={0x20000b, 0x2, 0x1, 0x2f, "cd00fd00", 0x40048003, 0x6}) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r3, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0xfd, 0x6}, {0x2, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x40003}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x6, 0x7}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000300)="a2352f75fcb72f258152ea33ef03ebcc5800003af552cbab917ccff1f2414742000078cff1fbb7c6", &(0x7f0000000000)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[]) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xb5b, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x40, 0x20000}, {0x103, 0x0, 0x0, 0x10001}]}) setuid(0xee01) ktrace(0x0, 0x5, 0x128, 0x0) clock_getres(0x0, &(0x7f00000000c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x4f, 0x0, 0x37) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x2000000000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r5, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x63}}, 0x10, 0x0, 0x0) 1.451637562s ago: executing program 2 (id=339): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x5) sysctl$vm_swapencrypt(&(0x7f0000001340)={0x2, 0x5, 0x2a8b36b5f143d17a}, 0x3, 0x0, 0x0, 0x0, 0x0) setuid(0xffffffffffffffff) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f0000000080)) ioctl$FIONREAD(r0, 0x80206918, &(0x7f0000000100)) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f0000000040)}, {&(0x7f0000000200)=""/87, 0x57}], 0x3) 1.369063986s ago: executing program 7 (id=340): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x7f}, {0x4, 0x7fe, 0x8007, 0x7}, {0x401, 0x3, 0x2808, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x0, 0xfff, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x408, 0x0, 0x0) sysctl$kern(&(0x7f0000000300)={0x1, 0x2d}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1001, 0x8018, 0x2000007, 0x101, 0xf9, 0x81b0, 0x10201, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0xa, 0x9, 0x6, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x4}, {0x4, 0x800, 0x8003, 0x87}, {0x8, 0x3, 0x2800, 0x7}, {0xc, 0x650, 0x3, 0x199}, {0xce0, 0x4, 0x1, 0x6d}, {0x3, 0x803, 0x14, 0x800008}, {0x2, 0x80000000, 0x5, 0x5}, {0x20006a75, 0x8001, 0x1, 0x4}, {0x1cc, 0x10001, 0xb}, {0x8, 0x9, 0x610, 0x2}, {0xb94, 0x7, 0x2, 0x1}, {0x29a71717, 0xfffffffa, 0x2001, 0x7}, {0x9, 0x5, 0x5}, {0x0, 0x1, 0xf, 0x10000}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VNDIOCSET(r2, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f00000000c0)=0x1000) select(0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$inet(0x2, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt(r4, 0x0, 0x23, 0xffffffffffffffff, &(0x7f0000000040)) (async) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) 1.368018203s ago: executing program 6 (id=341): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x2, r0) symlink(0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x820751a, "090e4de6d30aa692318c7e0002e9ffffff00", 0x9e0, 0x4000000}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0x537, 0x7fff, 0xea8f, 0xffffff88, "186d28106308001100530400000000098000", 0x4, 0x20002}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) unveil(0x0, &(0x7f0000000000)='x\x00') close(r1) fchmod(r1, 0x2) close(r1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) write(r3, &(0x7f0000000480)="1b943f6a74883c15ce5796bc66f21ac426086fbc5a9f281052781c7e07c806745d1cbf68bb6c476b0d25fc9d511da3c7d8d93b15f9c3d200738965c517e385f254419da73f0c41bf59a6302c19eb6efa94ac66d7b0f895f92eef19f3c3c3796e461e34210c42e50f69aefc9f8c31fe06b9be5b2c1b8ff13f6501f77dd99a9e4e3fbf31393c4f1d", 0x87) r4 = socket(0x2, 0x2, 0x0) write(r4, &(0x7f0000000200)="020cdd575e507ae7d246f2c6d8214cc9af40a0761cafdaaf16151d48436286f7702ea3ef1569ecbca4f54f66b5d3485725d2763115c65ae2ff33f8f359752c3a776601aa8b4fa610d3a18e1c5bc3b52242703c29f5002fc647c0cbd7b2c48cefc7f415a10ef952a1dee9d9d3405760f42423d297a542876f71c7784ff5c14bcf89679a2f2fe92b98b39083143d71c3f79ee244190ebfed17766ce8756b1398044c249879d0d0da65e97d054e52fff6bd9cbe42ee63b0602a5a710b936a4dbad125e177538aaf6cab769e6d6782997bcfa7c4f5", 0xd3) openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x1d0, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f0000000300)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc0, 0x3, 0x0, 0x7ff, 0xffff0002, 0x0, 0x1, 0x2, 0x2004007, 0xff}) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) 1.352835387s ago: executing program 4 (id=342): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x9, 0x9, 0x20006}, {0x4, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x800001}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[]) msgsnd(r0, 0x0, 0x401, 0x0) r2 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0884450, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f00000000c0)={0x10, 0x437c0000000000, [{&(0x7f0000659000/0x2000)=nil, &(0x7f000017c000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7d}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3}, {&(0x7f00003ff000/0xc00000)=nil, &(0x7f00001ac000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f000024d000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x80000000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xc}, {&(0x7f0000008000/0x3000)=nil, &(0x7f000074b000/0x1000)=nil, 0x11}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f44000/0x3000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f0000257000/0x1000)=nil, &(0x7f0000a6b000/0x1000)=nil, 0x12b}, {&(0x7f000057c000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x92f}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x4}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff7}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000566000/0x3000)=nil, &(0x7f0000001000/0x800000)=nil, 0x6}], './file0\x00', 0xfffffffe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$TIOCSETA(r3, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) msgrcv(r0, 0x0, 0x0, 0x1, 0x1000) msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="01"], 0x8, 0x800) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r4, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt(r4, 0x0, 0x69, 0x0, 0x0) unlinkat(r3, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) msgctl$IPC_RMID(r0, 0x0) 1.35114189s ago: executing program 1 (id=343): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) (async) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="5bcad694936da07097df82bb6ef861c67422c6c01d2505d474194e22a74cbf1ca1548c8532ca323aa1217b3957c835c39ab29eea95fbc3192e750527b9b6e56ec61857e23a7fd0a79f7c71b9b1bfb624ecce1e1d865bbf275c08f4b4d05cc8e7ea27a6de7f0369448a64c841bab89a1fb1b53a2ff4863924fa3d3765e9bfac0dcf4ddd6459c454bfbda94844", 0x8c}, {&(0x7f0000000040)="3b58369a7b93bce41622325e443e9ac79f053b97eacb3362bbb333d0517d351895bbdf843c01feebd5874359f9d39f77c651660a29c6cc01225dec4cb9", 0x3d}, {&(0x7f0000000200)="5c4b2fe29f71dba30120debbc5e892b6564bc144a3c8b24c20a73ab97a681f46b0e85e7f260ec510b6fd05a6ca55ad93656a0ac2fa6aca4faeb230e814fc7b7ed7f35d325781fe5b8a02958e42fb3fbd728e9a", 0x53}, {&(0x7f0000000280)="a5b6de876286af7e384a0822321805b44950f6e0edf2988774f0509c187e451115b72775c930d483c06df8176dd567511a55f724072d79150d7f7b6e3ab9f2772250da51995190c00db3ab132c9c40a6d47cce494b0a28b8c8ef73b246d0268684205050059ee46ddd24e4204355123f12966b0e6a3cbbef17975e3e308596f4be24427048a15c947c2e8dc638151e9cf1b85f762da1493d40531f888ff2a456a50d48e947fb60c18e", 0xa9}, {&(0x7f0000000580)="54e6138e31839a51015f8b1052ec25737d464f8a008e5ad25f8b992049b5d2422170d2d91a81aa5f6c8c306b2c611c88344eaadc34f9e93c1e32ba9968f86d1a1843447f937483f45a740e3ae143b7126738901237eefb08e9f20315360eb74dc0052ba18039494c27d21d8e01f3b90184f88d277a096d1ce5c167b2d696979d5b34209a9e9beaf2a703d1f6fefac4c039142bb326501991d6a5180f11d099a9e43fe0ab2e07bfa16af034ca3fde5b4b8f9d56f2668ba0ba186a28ab1fc43dd0ba3a85f6e34c073a77ab7d", 0xcb}, {&(0x7f00000004c0)="686f840c96cdf8acb655cd164aa13df5fcb702854a539e066867b47dee49c66542d14fe9f1ba5539bcddaa7ce18dd0c67afcfe50e9e790117f494ab736e108000000f1a35e29b3bf1b175d04504a156005531cf9747d877ac44c5812e7e305233bc7b2053a5d417f377190a70cf430ed6f376a4f797a172f14ad91c83d0503f3f98ae58fc3dd03ff690087004e214f81972aa2438cb83f1d2019ec", 0x9b}, {&(0x7f0000001580)="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", 0x19e}], 0x7) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (rerun: 32) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6608816a00180630fe8000000000000000000000000000bbf68000000000000000000000000000aa4e234e20", @ANYRES32, @ANYRES32=r2, @ANYBLOB]) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6383) (async) syz_emit_ethernet(0x138, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x5011, r1, 0x5) 1.251663376s ago: executing program 5 (id=344): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x1, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x4, 0x40000000, 0x0, 0xfffffffffffffffb, 0x8001, 0x7], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffe, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x6, 0xffff1c9e}, {0x29, 0x6, 0xb0, 0x2}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2840, 0x0) setsockopt(r0, 0xc, 0x8, &(0x7f0000000580)="2e4be7bb5fb9e4bd0851a90f04adfd63c23cf777191411490e3f0d81d8acd634d4d8cf2a4e7ae349d8285d44d32bb9b14a5d50725729691bd618260488d1f9cd8febd3821c2c8f5d4ce8086e70c87b9d0f716713e2f6b08697fbc31d43c9294958872b0557a54dae0a23aeba29ef50af91d233d7f49dad04cf9367d86ee3d7637f0df1e0feeb5523e6981fd1383880fe30", 0x91) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000040)={0x20000b, 0x1, 0x1, 0x2, "cd0000008000000000000000001500", 0x40048003, 0x6}) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000340)={0x2000, 0x0, {[0x5, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x9, 0xffffffffffffffa8, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0x4, 0x7b98, 0x9, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffe], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x405, 0x2}, {0x0, 0x0, 0xfffffffe, 0x81}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {0x6b7}, {0x0, 0x965, 0x0, 0x8}], {0x2000, 0x6, 0x5}, {0x29, 0x6, 0xb0, 0x2}}}) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0xe4a, 0x0, 0x8000, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b0000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x7}, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r3, 0xc4504445, &(0x7f0000000740)={0x8, 0xffff, 0x0, 0x20000023, "0400000000800000ebb178d952d6d31962fff0d1", 0x5, 0x2}) ioctl$TIOCGETD(r3, 0x4004741a, &(0x7f0000000000)) ioctl$SPKRTUNE(r1, 0x20005302, &(0x7f0000000040)={0xa2e5, 0x401}) execve(0x0, 0x0, 0x0) 1.251159963s ago: executing program 4 (id=345): setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="ebffff132f", 0x5) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) getpeername(r0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x7, 0x9, 0x0, 0x4}, {0x2c, 0xfd, 0x9}, {0x6, 0x80, 0x8}]}) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000004640), 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) socket(0x0, 0x8000, 0xff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x3, 0x0) setuid(0xee01) r3 = kqueue() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) kevent(r3, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0x8020697f, &(0x7f00000001c0)) connect$unix(r2, &(0x7f0000000000), 0x10) r6 = dup(r2) setsockopt$inet_opts(r6, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x18}, 0x4, 0x0, 0x0, 0x0, 0x0) r7 = dup(r6) sendmsg$unix(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 1.25073361s ago: executing program 4 (id=346): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2f, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4a) open(&(0x7f0000000080)='./file0\x00', 0x0, 0xa0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000200)={0x0, [{0x0, 0xfff}, {0x2, 0x6}, {0x0, 0x1}, {0x2, 0x7}, {}, {0x3}, {0x0, 0x10000}, {0x2}, {0x1, 0x2}, {0x0, 0xfffffffd}, {}, {0x0, 0x1ff}, {0x2, 0x8}, {0x0, 0x1000}, {0x2, 0x8000}, {}, {0x1, 0x2}, {0x2, 0x100}, {0x0, 0x7}, {0x0, 0x7ff}, {0x5}, {0x0, 0x4}, {0x3}, {0x0, 0x1000400}, {0x0, 0x5}, {0x3, 0x3}, {0x0, 0xfffffffd}, {}, {0x3, 0x170b67fe}, {}, {0x1, 0xd}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3b, 0x0, 0x37) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x4, 0x346a}}) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) r2 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b7", 0x23}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20, 0x2}, 0x4) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) setsockopt(r1, 0x10, 0xd, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) r5 = socket(0x18, 0x2, 0x0) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000000), &(0x7f0000000080)=0xc) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f00000000c0)={0x0, 0x401, 0x5, 0xa, "97a2e900", 0x8, 0x8}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) shutdown(r4, 0x1) 1.249943357s ago: executing program 1 (id=347): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000616000/0x3000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f000066a000/0x3000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x6}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0x2}, {&(0x7f000013f000/0x2000)=nil, &(0x7f000064d000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000069b000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x80000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f000069e000/0x2000)=nil}, {&(0x7f0000617000/0x2000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00'}) r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x101) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f0000000040)) syz_emit_ethernet(0x102, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd680d0d6f00ccf90900000000000000000000000000000000000000000000000000000000000001"]) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000180)="7f", 0x1}], 0x1) recvmmsg(r1, &(0x7f0000000400)={&(0x7f00000003c0)={&(0x7f0000000080)=@in6, 0xc, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, &(0x7f0000000340)=""/75, 0x4b}, 0x40}, 0x10, 0x1046, 0x0) 140.932939ms ago: executing program 1 (id=348): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400400000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x3, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d06}, {0xfffc, 0x4, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x3, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xdb78}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x100}, {0xa201d90e6a17be06}, {0x2}, {0x2, 0xffffffff}, {0x3, 0x4}, {0x0, 0xfffffffc}, {0x0, 0x3ffffd}, {0x0, 0x7}, {0x3}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0xfffffffd}, {0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x1}, {0x2, 0x7f}, {0x2, 0x7}, {0x0, 0xfffffff7}, {0x3}, {}, {0x0, 0x1c}, {0x1, 0xfffffffd}, {0x0, 0x9}, {0x2}, {0x2, 0x8}, {0x1}, {0x0, 0xfffffffe}, {0x1, 0x8}, {0x1, 0x3}]}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000080)=@in6={0x18, 0x1, 0x0, 0x1ff}, 0xc) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0xffffffb3, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x4b}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000340)={'tap', 0x0}) r2 = kqueue() ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0xfb5b, 0x6d, 0x4, 0xa, "01000000100000000000000000000800", 0x93ba, 0xae}) r3 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0xc02069a5, &(0x7f00000001c0)) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffde7) socket(0x10, 0x3, 0x0) kevent(r2, &(0x7f0000000000), 0x29f, 0x0, 0x8001, 0x0) 140.114532ms ago: executing program 1 (id=349): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x800007ff, 0x7ff, 0x10003, 0x220049a, "084880fa87f4ffbcda0988d11554e90d6602ff07", 0xe6, 0xffffffbf}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000009c0)="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", 0x43b}], 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x4, 0x3, 0xb6f5, 0xa, '\x00', 0xfd, 0x4c554fdc}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffde7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="73dd6000000000003a01a58a758b54842246bbee0382b00e351e8b31253c4709d5ea5af4ff020000000000000000000000000001"]) 67.342905ms ago: executing program 2 (id=350): r0 = socket(0x800000018, 0x2, 0x0) setuid(0xffffffffffffffff) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x29, 0xe, &(0x7f0000000000)="02000000", 0x4) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000002c40)={0x101, 0x6, 0xc0000000, 0xe8, "779aeb1c35d303785e68c61f06b011696d31377f", 0xfffffffb, 0x2}) dup2(r1, r0) listen(r0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) unveil(0x0, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x0, [{&(0x7f0000445000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000547000/0x1000)=nil, &(0x7f00002b6000/0x3000)=nil}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000fee000/0x3000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f00005fe000/0x12000)=nil, 0x4}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f00000d1000/0x3000)=nil, 0x1ff}, {&(0x7f0000400000/0xc00000)=nil, &(0x7f000075b000/0x3000)=nil}, {&(0x7f0000762000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2}, {&(0x7f0000e88000/0x2000)=nil, &(0x7f0000f8b000/0x2000)=nil, 0x9}, {&(0x7f0000760000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil}, {&(0x7f00000e2000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0xb2bc}, {&(0x7f00007c2000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil, 0x4}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000034000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f0000bf7000/0x3000)=nil, &(0x7f000075c000/0x3000)=nil, 0x100000001}, {&(0x7f00006f1000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil}], './file0\x00'}) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060396372"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') r3 = syz_open_pts() execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000001c0)='^!}/~{:$&-,/-K\x00', &(0x7f0000000200)='\xb4-[&&\xd7{\xfb\x00'], &(0x7f0000000500)=[&(0x7f0000000280)='r\x00', &(0x7f00000004c0)=']\'#\x06\x00']) close(0xffffffffffffffff) close(r3) syz_open_pts() ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000000)=0x8) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000080)="cff5c05664da486cda974a82388ef359025250129bdb3b8c172b8359eb32d4103cbb3b553a30352e3b0b2e4247b103", 0x2f}], 0x1) unveil(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0/file1\x00', 0x75) chroot(&(0x7f0000000100)='./file0/file1\x00') r4 = open$dir(&(0x7f0000000000)='./file0/file1\x00', 0x100, 0x81) mknodat(r4, &(0x7f0000000040)='./file0/file1\x00', 0x2, 0x4) 65.387569ms ago: executing program 2 (id=351): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xee01) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f0000000040)) truncate(&(0x7f0000000080)='./file0\x00', 0x7ffffffffff) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) fchown(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb08004600002c0006907800040004ff7f0000010101014e234e2300000000bf5c489b88253d4f8d7a672c3c50b9257a27fbd877e302f68a40d3a5e87f223bc3e51f778fc7ace8733876e2f35a1c4bf316f93d040000cdf84d67553a4742bf485ae2fd30dc0ea9aeb11c71ea790a41e1beb0d55e30fbece6391701deb5686d0e758778ca87bbdf5478fe4877a4eab5c802de1f07338fb1de", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"]) 64.640051ms ago: executing program 5 (id=352): r0 = semget(0x2, 0x2, 0x0) semctl$GETNCNT(r0, 0x2, 0x3, &(0x7f0000000000)=""/101) r1 = semget(0x1, 0x3, 0x10) semctl$GETPID(r1, 0x3, 0x4, &(0x7f0000000080)=""/4096) semctl$GETPID(r1, 0x4, 0x4, &(0x7f0000001080)=""/19) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) semctl$GETZCNT(r0, 0x1, 0x7, &(0x7f00000010c0)=""/119) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000001140), 0x8, 0x0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000001180)={0x10, 0xaeb8, 0xffffff01, 0xfffffffa, "aacc68a45728003b1be0eab4c1fdf69985481cc5", 0xff, 0x8}) semctl$GETZCNT(r1, 0x1, 0x7, &(0x7f00000011c0)=""/17) mknod(&(0x7f0000001200)='./file0\x00', 0x10, 0x8) r3 = msgget$private(0x0, 0x8) msgrcv(r3, &(0x7f0000001240)={0x0, ""/31}, 0x27, 0x2, 0x800) semctl$GETPID(r1, 0x2, 0x4, &(0x7f0000001280)=""/221) ioctl$VMM_IOC_RESETCPU(r2, 0x82405605, &(0x7f0000001380)={0x8000, 0x3, {[0x7, 0x39f, 0x7, 0xffffffff, 0xf, 0x93, 0x4, 0x2, 0x8000000000000000, 0x3, 0xaf4, 0x5, 0x1, 0xffffffff, 0x9, 0x2, 0x48e4980d0000, 0x4], [0x10, 0x7, 0x1ff, 0x800, 0x5, 0x8, 0x6, 0x4, 0x9, 0x1], [0x9, 0x7, 0x2, 0x40000000, 0x6, 0x0, 0x9], [0xc5, 0x8, 0x4, 0x8000, 0xfff, 0x3], [{0x1, 0x3ff, 0x6, 0x1}, {0x1, 0x5, 0x7, 0x2}, {0x90, 0xfff, 0x1, 0x3}, {0x3a6, 0x6, 0x2, 0x7}, {0x0, 0xfffffffa, 0x1, 0x8}, {0x55cd, 0x8, 0x1, 0x10000}, {0x1, 0x10, 0xf, 0x572}, {0x10, 0x5e0, 0xfd, 0x7fffffff}], {0x5, 0x3, 0x40000000, 0x9e67}, {0x3, 0x9, 0x1, 0x8}}}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000015c0), 0x10000, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000001600)={'tap', 0x0}) r5 = semget(0x3, 0x1, 0x2c9) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0xc) r8 = getegid() chown(&(0x7f0000001640)='./file0\x00', r6, r8) setgid(r7) pipe2(&(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$KDENABIO(r9, 0x20004b3c) semctl$SETALL(r5, 0x0, 0x9, &(0x7f0000001700)=[0x3, 0x0]) semctl$GETNCNT(r1, 0x1, 0x3, &(0x7f0000001740)=""/108) open$dir(&(0x7f00000017c0)='./file0\x00', 0x18002, 0x38) semctl$SETALL(r5, 0x0, 0x9, &(0x7f0000001800)=[0x1, 0x1eea, 0x7ff, 0x2, 0x2, 0x3]) ioctl$VNDIOCGET(r9, 0xc4104603, &(0x7f0000001840)={'./file0\x00', 0x6, 0xe8a}) semctl$GETZCNT(r5, 0x3, 0x7, &(0x7f0000001c80)=""/4096) 1.562169ms ago: executing program 1 (id=353): open(&(0x7f0000000240)='./file0\x00', 0x18289, 0x154) (async) acct(&(0x7f0000000080)='./file0\x00') (async) acct(&(0x7f0000000080)='./file0\x00') (async) mprotect(&(0x7f000051e000/0x4000)=nil, 0x4000, 0x5) (async) r0 = socket(0x18, 0x3, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r1 = socket(0x18, 0x1, 0x0) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) setuid(0xee01) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005016000000416000000070000000020000010c18125d7f96ecfc73fd38c23781fd6c61a27ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000020000000000000000000000000000000000000001f00000000000800", 0xb1, 0x3a3ae0e0de5f5dda, 0x0, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84, 0x8d, 0xae, 0x80000004}, {0x16, 0xf9, 0x5, 0xfffffffa}]}) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000300)="a2352f75fcb72f258152ea33ef03ebcc5800003a", &(0x7f0000000000)=0x14, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000001880)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000040)="7e05935b0bdc", &(0x7f0000000000)=0x6, 0x0, 0x0) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000007c0)=ANY=[]) (async) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x30, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r3, 0x80105728, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x0, 0x7048}], 0x1}) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async) ioctl$FIONREAD(r0, 0x80206997, &(0x7f0000000100)) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00140630fe8000000000000000000000000000bbfe80004000"]) (async) r4 = socket(0x2, 0x2, 0x0) (async) socket(0x10, 0x2, 0x6b) connect$unix(r4, &(0x7f0000000000)=@file={0x1}, 0x2) 1.149059ms ago: executing program 7 (id=354): pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/91, 0x76}, {&(0x7f0000000340)=""/214}], 0x1000000000000204) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00', 0x1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x3}, {}, {0x3}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {0x2}, {}, {0x0, 0x5}, {0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2, 0xd}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) fcntl$setstatus(r2, 0x4, 0xc0) (async) close(r2) (async) dup2(r2, r0) (async) execve(0x0, 0x0, 0x0) 379.972µs ago: executing program 6 (id=355): syz_emit_ethernet(0x36, &(0x7f0000000140)={@random="fb00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x0, 0x356f50c2b8ab1033, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}}}}}) setitimer(0x0, &(0x7f0000000280)={{0xffffffff}, {0xffffffff}}, 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_emit_ethernet(0x406, &(0x7f00000002c0)={@random="165235b2fbda", @remote, [], {@ipv6={0x86dd, {0x5, 0x6, "515985", 0x3d0, 0x29, 0x7, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7}, {[@fragment={0x8, 0x0, 0x5, 0x0, 0x0, 0x6, 0x66}, @fragment={0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x65}, @hopopts={0x32, 0x15, '\x00', [@jumbo={0xc2, 0x4, 0x563f}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x4, 0x14, "725c72c405dcf1483eb84aa70efaab95bd681f7a"}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x8, 0x65, "eb81bc0e154de0a1ed0d5b7c7982f76e741c2b1ca92c60686cf81901ff729a62ef20f8c606938ec9f1b8c8686a179ddabee2a8df3e9bc89bc57cf060382c2da1ca3420b8a0ee404e23f06b73ad7960e542e4c875b9af3e3a930657a690c711f353f932f8d3"}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @dstopts={0x29, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}, @routing={0x1, 0xe, 0x0, 0x4, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @empty, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback, @local={0xfe, 0x80, '\x00', 0x0}, @loopback]}, @dstopts={0x37, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x3a9}, @ra={0x5, 0x2, 0x6}, @generic={0x5, 0x39, "e03b582c199bdd0bb99b235c268744eeb6573f5bd3aacfaf914955977bb201b8df8f5234ba92d31d8c602e460e1b9cb7e0a5233e9a392a2fda"}, @enc_lim={0x4, 0x1, 0x2}, @generic={0x1, 0xa2, "c76615f9cf9cbef7be109caa91cc9737e47540139ce46e7d9a177fdf5036d309ec2d7ad9798a71f41a7ca2b79d9b3329b1c57dcd7c888a950e6cc0db68e35c6d39a6931aab5a58aaa757fc0b6e857fba3cb6a8cbf4a66e178507d7ff9b4cb6808f9852886cfadb9ac7813ed219fd8667617688eeac6b2733645b08aa52f5ba0828223cebf5f0cc7bbb281dc9ca77e2fa452e51af087ade8d2e164ed79fb9907d7aaf"}]}, @routing={0x3c, 0x8, 0x0, 0x4, 0x0, [@mcast1, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr="a42f32ce6151d93b82511928071da91f"]}, @dstopts={0x44, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x7}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0xf38}]}, @hopopts={0x1d, 0x1f, '\x00', [@generic={0x0, 0xe1, "6cb0672c31682458a3e5229edac62b2de5264b2847c7921968019008d75503c229b5eaf3902c04e3ac5aa75ff822fc174c149a1967f1523f142520f68e9114140f603805a20dbc85c730988fb9027d44875e725045af635d53d7d32e7ece1afe86eb6a3cf8c4be18d5485b24e183508193ba2a9dbab4fcb4cd634892e1833d45b36076875a3d8f823a3419eb2dc473c1f0d079ead1027b86bd8c91f7ac8955f6f818ac2f65e7f29d48c8027e9a89fc51009ed26143255b7b544da91de784e5a5c80ab2bfef75bbcfeb539600a011892e657584b648c9a60c57a70e3609bba71602"}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x401}, @enc_lim={0x4, 0x1, 0x10}, @ra={0x5, 0x2, 0xe}]}], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x7, @rand_addr="3e7769f327d7e53ae7529e617d23d7ba"}}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) r2 = socket$unix(0x1, 0x2, 0x0) shutdown(r1, 0x2) sendmsg$unix(r2, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000280)={0x0, 0x7f}) 0s ago: executing program 1 (id=356): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x9, 0x9, 0x20006}, {0x4, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x800001}]}) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[]) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x20, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x28, 0x82, 0xf1, 0x2}, {0x48, 0x81, 0x1, 0x11}, {0x400e, 0xb1, 0x4b, 0xb}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 uvn_flush: obj=0xfffffd805b54c508, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! witness: lock order reversal: 1st 0xffff800010fcbc88 sbufsnd (&so->so_snd.sb_lock) 2nd 0xfffffd8063779b48 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff833f0cbb -> 0xffffffff833676f0 is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 soreceive+0x27d #3 fifo_read+0x117 #4 VOP_READ+0x101 #5 vn_rdwr+0x15b #6 vndsetcred+0xa1 #7 vndioctl+0xdfb #8 VOP_IOCTL+0xac #9 vn_ioctl+0xf8 #10 sys_ioctl+0x674 #11 syscall+0xbd4 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 sosplice+0x312 #3 sys_setsockopt+0x2ba #4 syscall+0xbd4 #5 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd8063779b48,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd8063779b30,1) at rw_do_enter_write+0xba rrw_enter(fffffd8063779b30,1) at rrw_enter+0xc6 VOP_LOCK(fffffd805bd32bf0,2001) at VOP_LOCK+0xa3 vn_lock(fffffd805bd32bf0,2001) at vn_lock+0xa4 vfs_lookup(ffff80002ebdb130) at vfs_lookup+0x11c namei(ffff80002ebdb130) at namei+0x7ca unp_connect(ffff800010fcbaa0,fffffd806fe7ff00,ffff800034fe4d18) at unp_connect+0x29d uipc_dgram_send(ffff800010fcbaa0,fffffd806cc0bc00,fffffd806fe7ff00,0) at uipc_dgram_send+0x163 sosend(ffff800010fcbaa0,fffffd806fe7ff00,ffff80002ebdb3b8,0,0,e) at sosend+0x804 sendit(ffff800034fe4d18,6,ffff80002ebdb538,e,ffff80002ebdb5f0) at sendit+0x5a5 sys_sendmsg(ffff800034fe4d18,ffff80002ebdb6a0,ffff80002ebdb5f0) at sys_sendmsg+0x246 syscall(ffff80002ebdb6a0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x37efe0d75e0, count: -15 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80002ebdadb0 rbx 0 rdx 0xffff8000014715c0 rcx 0xffff800034fe4d18 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80002ebdac90 r9 0x8080808080808080 r10 0xf6d5fc65717328eb r11 0x4709807a3af6914 r12 0xfffffd8003f2c680 r13 0xfffffd8004714ac0 r14 0x3 r15 0xffffffff834049f1 substchar+0xa39c rip 0xffffffff81027c95 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002ebdada0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=126923 pid=54208 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800034fe4550,0xffffffff839ef390 process=0xffff80002a3ce698 user=0xffff80002ebd6000, vmspace=0xfffffd806a6f6020 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 54208 205532 58332 0 2 0 syz-executor *54208 126923 58332 0 7 0x4000000 syz-executor 48874 416032 82265 0 2 0 syz-executor 48874 230089 82265 0 3 0x4000080 fsleep syz-executor 51912 358077 32669 60929 2 0x10 syz-executor 51912 312261 32669 60929 3 0x4000010 biowait syz-executor 51912 511724 32669 60929 3 0x4000010 inode syz-executor 81697 165745 0 0 3 0x14200 acct acct 68393 196148 46007 0 7 0x2 syz-executor 58332 518863 46007 0 3 0x82 nanoslp syz-executor 82265 15386 46007 0 3 0x82 nanoslp syz-executor 11032 421293 46007 0 3 0x82 nanoslp syz-executor 18790 207629 46007 0 3 0x82 wait syz-executor 32669 486766 46007 0 3 0x82 nanoslp syz-executor 41469 430358 46007 0 2 0x2 syz-executor 30821 25523 46007 0 3 0x82 nanoslp syz-executor 46007 454119 77785 0 3 0x82 kqread syz-executor 77785 315594 3143 0 3 0x10008a sigsusp ksh 3143 459868 29782 0 3 0x98 kqread sshd-session 29782 201936 88291 0 3 0x92 kqread sshd-session 2703 17202 1 0 3 0x100083 ttyopn getty 88291 91278 1 0 3 0x88 kqread sshd 54623 153387 91406 74 3 0x1100092 bpf pflogd 91406 195529 1 0 3 0x80 sbwait pflogd 51385 29209 51106 73 3 0x1100090 kqread syslogd 51106 375660 1 0 3 0x100082 sbwait syslogd 45141 56480 1 0 3 0x100080 kqread resolvd 38938 195535 64282 77 3 0x100092 kqread dhcpleased 39479 263524 64282 77 3 0x100092 kqread dhcpleased 64282 71413 1 0 3 0x80 kqread dhcpleased 21344 444234 0 0 3 0x14200 bored smr 95432 222306 0 0 2 0x14200 zerothread 86018 7181 0 0 3 0x14200 aiodoned aiodoned 89252 475007 0 0 3 0x14200 syncer update 10430 74016 0 0 3 0x14200 cleaner cleaner 45341 302991 0 0 3 0x14200 reaper reaper 32930 379789 0 0 3 0x14200 pgdaemon pagedaemon 66806 322213 0 0 3 0x14200 bored viomb 30327 196221 0 0 3 0x40014200 acpi0 acpi0 53384 377148 0 0 3 0x40014200 idle1 72409 159706 0 0 3 0x14200 bored softnet1 45660 252193 0 0 2 0x14200 softnet0 11115 472433 0 0 3 0x14200 bored systqmp 48961 357721 0 0 3 0x14200 bored systq 57243 193242 0 0 3 0x14200 tmoslp softclockmp 64882 412499 0 0 3 0x40014200 tmoslp softclock 86160 52013 0 0 3 0x40014200 idle0 1 185451 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 54208 (syz-executor) thread 0xffff800034fe4d18 (126923) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8389d228) #0 witness_lock+0x5f1 #1 unp_connect+0x28c #2 uipc_dgram_send+0x163 #3 sosend+0x804 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff800010fcbc88) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 sosend+0x2e9 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 51912 (syz-executor) thread 0xffff80003c423a18 (312261) exclusive rrwlock inode r = 0 (0xfffffd806e996ca8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 51912 (syz-executor) thread 0xffff80003c4234e8 (511724) exclusive rrwlock inode r = 0 (0xfffffd8063779208) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 sys_truncate+0x84 #8 syscall+0xb17 #9 Xsyscall+0x128 Process 68393 (syz-executor) thread 0xffff8000fffee018 (196148) exclusive rrwlock inode r = 0 (0xfffffd806e996b80) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c908200) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 Process 41469 (syz-executor) thread 0xffff8000ffffc538 (430358) exclusive rrwlock inode r = 0 (0xfffffd8063779d98) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806fdf6c60) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10213 11167K 11304K 166960K 11930 0 pcb 17 14K 16K 166960K 144 0 rtable 194 8K 9K 166960K 426 0 pf 35 17K 21K 166960K 105 0 ifaddr 33 5K 8K 166960K 75 0 ifgroup 51 2K 2K 166960K 118 0 sysctl 3 1K 9K 166960K 10 0 counters 66 36K 37K 166960K 142 0 ioctlops 0 0K 8K 166960K 1591 0 iov 0 0K 16K 166960K 27 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1425 90K 90K 166960K 1828 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 18 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 244K 166960K 512 0 sigio 0 0K 0K 166960K 3 0 proc 72 115K 163K 166960K 573 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 53 0 in_multi 65 4K 7K 166960K 126 0 ether_multi 1 0K 0K 166960K 6 0 mrt 2 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 424 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 237 143K 161K 166960K 6398 0 UVM aobj 10 4K 4K 166960K 10 0 pinsyscall 41 82K 106K 166960K 1615 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 26 0 NDP 11 0K 2K 166960K 49 0 temp 78 8660K 8728K 166960K 14011 0 kqueue 13 20K 32K 166960K 122 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 58 0 55 1 0 1 1 0 8 0 rtentry 176 122 0 44 6 0 6 6 0 8 0 unpcb 144 216 0 194 1 0 1 1 0 8 0 syncache 336 4 0 4 2 2 0 1 0 8 0 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 736 197 0 192 8 1 7 7 0 8 6 arp 136 18 0 6 1 0 1 1 0 8 0 inpcb 328 557 0 546 7 0 7 7 0 8 5 nd6 152 26 0 9 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 29 0 29 1 0 1 1 0 8 1 pppxif 1504 6 0 6 1 0 1 1 0 8 1 pffrag 232 6 0 0 1 0 1 1 0 482 0 pffrnode 88 6 0 0 1 0 1 1 0 8 0 pffrent 40 6 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 3 0 1 1 0 1 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pfstitem 24 47 0 1 1 0 1 1 0 8 0 pfstkey 128 47 0 1 2 0 2 2 0 8 0 pfstate 384 47 0 1 5 0 5 5 0 8 0 pfrule 1344 22 0 16 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 511 0 193 31 2 29 31 0 8 5 art_table 40 513 0 193 5 0 5 5 0 8 0 art_node 32 120 0 50 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 1 1 0 1 1 0 8 0 semapl 112 15 0 5 1 0 1 1 0 8 0 shmpl 112 7 0 0 1 0 1 1 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 2353 0 850 96 0 96 96 0 8 0 ffsino 296 2353 0 850 117 0 117 117 0 8 0 nchpl 144 3028 0 1332 64 0 64 64 0 8 0 rtmask 32 3 0 3 2 1 1 1 0 8 1 vnodes 216 2670 0 0 149 0 149 149 0 8 0 namei 1024 10677 0 10673 2 1 1 2 0 8 0 percpumem 16 86 0 38 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 0 1 0 1 1 0 8 0 kstatmem 264 70 0 44 3 0 3 3 0 8 0 scsiplug 72 2 0 2 2 1 1 1 0 8 1 scxspl 216 15127 0 15126 9 8 1 8 1 8 0 plimitpl 152 156 0 138 1 0 1 1 0 8 0 sigapl 424 797 0 750 7 1 6 7 0 8 0 knotepl 120 321 0 0 10 0 10 10 0 8 0 kqueuepl 224 179 0 170 3 1 2 2 0 8 1 pipepl 344 153 0 126 3 0 3 3 0 8 0 fdescpl 528 779 0 749 3 0 3 3 0 8 0 filepl 160 4660 0 4434 16 0 16 16 0 8 5 lockfpl 104 204 0 202 1 0 1 1 0 8 0 lockfspl 48 63 0 61 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 845 0 830 1 0 1 1 0 8 0 zombiepl 144 753 0 750 1 0 1 1 0 8 0 processpl 1232 797 0 750 5 1 4 5 0 8 0 procpl 664 1452 0 1401 6 0 6 6 0 8 0 sosppl 176 3 0 3 1 0 1 1 0 8 1 sockpl 752 837 0 801 11 0 11 11 0 8 7 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 128 0 0 16 0 16 16 0 8 0 mcl2k 2048 28 0 0 4 0 4 4 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 168 0 0 11 0 11 11 0 8 0 bufpl 280 5843 0 133 408 0 408 408 0 8 0 anonpl 32 8638 0 0 70 0 70 70 0 246 0 amapchunkpl 152 19837 0 19368 28 1 27 27 0 158 6 amappl16 200 2830 0 2783 21 8 13 19 0 8 8 amappl15 192 22 0 22 1 1 0 1 0 8 0 amappl14 184 19 0 19 1 1 0 1 0 8 0 amappl13 176 434 0 433 1 0 1 1 0 8 0 amappl12 168 1138 0 1097 3 0 3 3 0 8 0 amappl11 160 102 0 102 1 1 0 1 0 8 0 amappl10 152 49 0 35 1 0 1 1 0 8 0 amappl9 144 249 0 249 1 1 0 1 0 8 0 amappl8 136 33 0 31 1 0 1 1 0 8 0 amappl7 128 79 0 78 1 0 1 1 0 8 0 amappl6 120 276 0 262 1 0 1 1 0 8 0 amappl5 112 95 0 85 1 0 1 1 0 8 0 amappl4 104 420 0 389 1 0 1 1 0 8 0 amappl3 96 3416 0 3328 4 1 3 3 0 8 0 amappl2 88 892 0 817 2 0 2 2 0 8 0 amappl1 80 10689 0 10097 14 0 14 14 0 8 0 amappl 88 5602 0 5441 5 0 5 5 0 92 0 uvmvnodes 80 2670 0 0 55 0 55 55 0 8 0 dma4096 4096 2 0 2 2 1 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 9 0 0 1 0 1 1 0 8 0 uaddrrnd 24 779 0 749 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 779 0 749 1 0 1 1 0 8 0 vmmpekpl 168 8100 0 8061 3 0 3 3 0 8 0 vmmpepl 168 56774 0 54884 104 0 104 104 0 357 10 vmsppl 488 778 0 749 5 0 5 5 0 8 1 rwobjpl 80 20900 0 17286 75 0 75 75 0 8 0 pdppl 4096 1566 0 1498 100 28 72 88 0 8 4 pvpl 32 15478 0 0 126 1 125 125 0 265 0 pmappl 256 778 0 749 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 286 0 37 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83877ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf __mp_acquire_count(ffffffff8389d020,1) at __mp_acquire_count+0x58 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 biowait(fffffd806c543030) at biowait+0xc6 bwrite(fffffd806c543030) at bwrite+0x2e7 VOP_BWRITE(fffffd806c543030) at VOP_BWRITE+0x60 ufs_direnter(fffffd806c624a60,fffffd805b6277c0,ffff80002a3ca300,ffff80002a3ca630,fffffd805ba13588) at ufs_direnter+0x7ac ufs_mkdir(ffff80002a3ca4a0) at ufs_mkdir+0x5d5 VOP_MKDIR(fffffd806c624a60,ffff80002a3ca600,ffff80002a3ca630,ffff80002a3ca530) at VOP_MKDIR+0x101 domkdirat(ffff8000fffee018,ffffff9c,781137735020,1ff) at domkdirat+0x179 syscall(ffff80002a3ca7b0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7811377350c0, count: -15 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd8063779b48,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd8063779b30,1) at rw_do_enter_write+0xba rrw_enter(fffffd8063779b30,1) at rrw_enter+0xc6 VOP_LOCK(fffffd805bd32bf0,2001) at VOP_LOCK+0xa3 vn_lock(fffffd805bd32bf0,2001) at vn_lock+0xa4 vfs_lookup(ffff80002ebdb130) at vfs_lookup+0x11c namei(ffff80002ebdb130) at namei+0x7ca unp_connect(ffff800010fcbaa0,fffffd806fe7ff00,ffff800034fe4d18) at unp_connect+0x29d uipc_dgram_send(ffff800010fcbaa0,fffffd806cc0bc00,fffffd806fe7ff00,0) at uipc_dgram_send+0x163 sosend(ffff800010fcbaa0,fffffd806fe7ff00,ffff80002ebdb3b8,0,0,e) at sosend+0x804 sendit(ffff800034fe4d18,6,ffff80002ebdb538,e,ffff80002ebdb5f0) at sendit+0x5a5 sys_sendmsg(ffff800034fe4d18,ffff80002ebdb6a0,ffff80002ebdb5f0) at sys_sendmsg+0x246 syscall(ffff80002ebdb6a0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x37efe0d75e0, count: -15