last executing test programs: 1.886695183s ago: executing program 3 (id=151): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="58d98b2e50372a4c07968a5f3a3e40de5820409a7cf3736cd35c245478a168aeed54ae7d89566c436d68ba6ed3ca24a52849dc0302106f0d3b5a3b7356ee019f099fdc514a3aabcb7f45cb0008adc7a7fe3b", 0x52}], 0x1) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = syz_open_pts() close(r0) syz_open_pts() r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x26, &(0x7f00000000c0), 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x8) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 684.419961ms ago: executing program 3 (id=167): setuid(0xee01) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x40, 0x6}, {0x3, 0x5, 0x0, 0x400007}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) open(&(0x7f0000000040)='./file0\x00', 0x102, 0x2) 632.460034ms ago: executing program 3 (id=170): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) (async) setsockopt(r0, 0x0, 0x66, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x385, 0x80000001, 0x81ac, 0x10002, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x1}, {0x1, 0x650, 0x0, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x80006, 0x7ff, 0x14, 0x8}, {0x6, 0x82, 0x5, 0x5}, {0x6e75, 0x8001, 0xd1b, 0x4}, {0x1cc, 0x10001, 0xd, 0x4}, {0x8, 0x9, 0x8, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x80000000, 0xfffffffa, 0x1, 0x6}, {0x6, 0x5, 0x5, 0x10000000}, {0x2000000, 0x1, 0xfff, 0x30004}]}) (async, rerun: 64) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) (rerun: 64) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) (async) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000000)={0x7c, 0x0, 0x0, 0x4, 0x0, 0x98, 0x7b}, 0x0, 0x0, 0x0) (async, rerun: 32) select(0x40, &(0x7f0000000000)={0xfffffffffffffffc}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async, rerun: 32) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (rerun: 32) mkdirat(r1, &(0x7f0000000240)='./file0\x00', 0x12) (async, rerun: 32) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x2, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x1}, {0x2, 0xdf, 0xf}, {0x0, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80cf}, {0x24, 0x800, 0x85, 0x5}, {0x0, 0x40009, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000000, 0x8, 0x7}, {0x4, 0x80000000, 0x800000, 0xa66}, {0x401, 0x106, 0x9, 0x40}, {0x200003, 0xee2, 0x2, 0x6f5fc48b}, {0x81, 0x101, 0x3, 0x5}, {0x9be2, 0x8001, 0x6, 0x69}]}) (async, rerun: 32) poll(&(0x7f0000000000), 0x35, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) socket(0x18, 0x1, 0x0) (async) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) (async, rerun: 32) syz_open_pts() (rerun: 32) 632.262802ms ago: executing program 0 (id=171): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) sysctl$kern(0x0, 0x0, &(0x7f0000000000)="71f91e", 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x6, 0x7, 0x7, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x9, 0x0, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x1}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0x1, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x7fff, 0x82, 0x1, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1d0, 0x10001, 0xc, 0x975e617}, {0x7ff, 0x9, 0x8, 0x2}, {0xb8c, 0x4, 0x6, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6}, {0x0, 0x1, 0x4, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) chdir(&(0x7f0000000000)='./file0\x00') r1 = socket(0x2, 0x1, 0x0) setsockopt(r1, 0x6, 0x8, 0x0, 0x0) 632.037606ms ago: executing program 7 (id=172): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) accept$unix(r0, &(0x7f0000000100)=@file={0x0, ""/89}, &(0x7f0000000000)=0x5b) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x18, 0x6, 0x9}, 0x4, &(0x7f0000000540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) 570.252301ms ago: executing program 3 (id=174): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000000)='.\x00', r1, r2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r2}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 569.95665ms ago: executing program 7 (id=175): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000a80)=ANY=[@ANYRESOCT], 0x401, 0x0) msgsnd(r0, 0x0, 0x401, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) flock(r1, 0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x6) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71100}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0xfffffffd, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x3, 0x6, 0x3, 0x99}, {0xce1, 0xfff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x6, 0x5, 0x81}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0x10001, 0x5, 0x3}, {0x7ff, 0x9, 0x5, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x2, 0x7, 0x5, 0x80000000}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0xff, 0xc9, 0x8}, {0x48, 0x9, 0x3, 0xe76}, {0x6, 0x0, 0x0, 0xb0}]}) write(r3, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) syz_emit_ethernet(0x1000e, &(0x7f00000003c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xff14, 0x0, 0x2000, 0xfc}}}}}) r4 = msgget$private(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x0, 0x30, 0x4040}, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x9, 0xb}) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="ffffff00", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x28, 0x2, 0x0, 0x0, 0x6, 0x0, @broadcast}, @tcp={{0x0, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20}}}}}}) msgctl$IPC_RMID(r0, 0x0) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="fcc0c16ed514ada81b7a11ec001e02289914c3a0f4fc490314e7a4ccf2b99c4108c4662fc7111979d45861317414b7d19dae97230ed9f727415d7dbb0ca52331a1b88c27b300"/85, 0x55) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0x80206916, &(0x7f00000001c0)) msgctl$IPC_RMID(r0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f0000001700)="80", &(0x7f0000000140)=0x1, &(0x7f0000000100)="994a31cd0cf43cdb715ed14102340100000000000000f54f7e4e42cf8929783fa95bc223d80d438047a9564782593b9aad2fdd39", 0x34) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300100000000000bc4fac92d1340e92c2806a0ac4a594f001a8b21333557012878bf4fb9ad31f9aba6f08268e65eade0b46efd42cfe75448ec5fc76bf0ba652702e2626d54c448117933e4131f8"], 0x4e, 0x0) 526.218991ms ago: executing program 4 (id=177): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x1a, &(0x7f0000000000)=',\x00\x00', 0x3) syz_emit_ethernet(0x36, &(0x7f0000000200)={@random="8b4f69c83b01", @remote, [], {@ipv6={0x86dd, {0x1, 0x6, "3a0080", 0x0, 0x3b, 0xb, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}}}}}) 525.649541ms ago: executing program 4 (id=178): r0 = socket(0x2, 0x1, 0x0) r1 = dup(r0) rename(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$TIOCSETA(r2, 0xc4504448, &(0x7f0000000740)={0x6, 0x4, 0x0, 0x0, "6374224ff1c14649ebb1789280c9795a6b47c1d1"}) listen(r1, 0x0) r3 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) dup2(r3, r0) accept(r1, 0x0, 0x0) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000400)='mN', 0x2}], 0x1) socket$inet(0x2, 0x4001, 0x0) shutdown(r0, 0x0) execve(0x0, 0x0, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f00000000c0)={0x7ff, 0x10001}, 0x6) 437.747007ms ago: executing program 3 (id=179): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x2060, 0xcd5331e3) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 437.45603ms ago: executing program 3 (id=180): setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x40009, 0x802, 0x6, 0x8000000000000003, 0x40003, 0x1000000000090, 0x4c, 0x2}, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = getuid() select(0x40, &(0x7f0000000180)={0x4e, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x6}, 0x0, 0x0, 0x0) r3 = kqueue() sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x9, 0x0, 0x0, 0x0, 0xfffffe0c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x18, 0x3, 0x6) kevent(0xffffffffffffffff, 0x0, 0xfffffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffffc, 0x29, 0x0, 0x0, 0x10005}, {{}, 0xfffffffffffffffe, 0xc4, 0x20000000, 0x7, 0x46ad}, {{r3}, 0x7ffffffffffffffc, 0x49, 0xf0000000, 0x1, 0x8}, {{r3}, 0xfffffffffffffffe, 0x20, 0x20, 0x80000000, 0xc3d}, {{}, 0xfffffffffffffff8, 0x0, 0x40000000, 0x5bea, 0x3f}, {{}, 0xfffffffffffffffd, 0x6, 0x4, 0xff, 0x10000}, {{}, 0xfffffffffffffffd, 0x60, 0x10, 0x2, 0xe}, {{r4}, 0x0, 0x38, 0x8, 0x100, 0xfffffffffffffffb}], 0xff, 0x0) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af7e54a8341f3be673a174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876ac2126614dcd00fdfe76f1ace1f77da0c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e", 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) setreuid(0xee00, r2) r6 = getuid() setreuid(r2, r6) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r7, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="0002000004", 0x2a}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0xfba, 0x9bc9, 0xfffffffe, 0xffffffdd, "090000000003000061000100", 0x461b, 0x1}) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000480)=""/131, 0x83}], 0x1) 436.785265ms ago: executing program 1 (id=181): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x4, 0x1, 0x10001}, {0x5c, 0x0, 0x82, 0xfffffffc}, {0x6, 0x0, 0x0, 0x422}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000d860a82060dec3e59be543bfcb44937703c616f7e2205117c9cbd7c500c9faa6162575f669cd141f88", &(0x7f0000000080)=0x2c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000001480)="d856a33ad5eb2fe7898abf7a4b0b", 0xe) syz_emit_ethernet(0x1000e, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x4, @broadcast}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0xb, 0x300, {0x5, 0x4, 0x1, 0x2, 0x2, 0x68, 0x1, 0xed, 0x11, 0x61a, @broadcast}}}}}}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000040)=0xc) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$FIOASYNC(r3, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000100)={0x80978a, 0x20fff, 0xfffffff8, 0x80a19f, "bf08000100f11c5dcadb8aa174ff00", 0x1, 0x2}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01", 0x13}], 0x1) r4 = socket(0x800000018, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) 435.088333ms ago: executing program 0 (id=183): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x200000000000000, 0x9f9e}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x400f}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="c5eabfedf9e2011c5dc17154e0ec16c8c7d3335c92715c9933a32ab20d8e87b6a6f18ff1c7d1dc2f08937fb5272ea44c7b59e2bb0825b35429ca5b36ca450ada8b7ce37e", 0x44}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000d860a82060dec3e59be543bfcb44937703c616f7e2205117c9cbd7c500c9faa6162575f669cd141f8876362901a9217bd76d64b9dcc030bcbb2f60fc489f6f9594f65180c22f72783580065136f9ec63c3", &(0x7f0000000080)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r2, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) unveil(0x0, &(0x7f0000000000)='r\x00') openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000300)={0x0, 0x1}, 0x10, 0x0, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) close(r1) 434.834318ms ago: executing program 1 (id=184): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000b, 0x0, 0x0) r0 = socket(0x18, 0x2, 0x0) r1 = shmget$private(0x0, 0x2000, 0x501, &(0x7f00003e4000/0x2000)=nil) setgid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socketpair$unix(0x1, 0x5, 0x0, 0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000200)={{0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x12a, 0x744}, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x80, 0x6, 0xa0fe10d}) setgroups(0x0, 0x0) getsockopt(r0, 0xf715, 0x0, &(0x7f00000000c0)=""/85, &(0x7f0000000140)=0x55) setuid(0xffffffffffffffff) shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x3000) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x400f}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="000000d860a82060dec3e59be543bfcb449377b7f1a3f91203c616f7e2205117c9cbd7c500c9faa6162575f669cd141f8876362901a9217bd76d64b9dcc030bcbb2f60fc489f6f9594f65180c22f72783580065136f9ec63c3f789c5f6ef723974", &(0x7f0000000080)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, 0xc) socket(0x2, 0x4, 0xa) setuid(r3) syz_emit_ethernet(0x138, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x29a969d7, 0x80000001) 362.441591ms ago: executing program 0 (id=186): socket(0x6, 0x4000, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[]) 360.798169ms ago: executing program 0 (id=188): semctl$SETALL(0x0, 0x0, 0x9, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x8aa0, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) r0 = syz_open_pts() mkdir(&(0x7f0000000180)='./file0\x00', 0x14) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) rename(&(0x7f00000002c0)='./file0/file0/..\x00', &(0x7f0000000280)='./file0\x00') r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f0000000080)={&(0x7f0000000140)=[{0x84, 0x1}], 0x1}) ioctl$WSMOUSEIO_GETPARAMS(r2, 0x80105727, &(0x7f0000000080)={&(0x7f0000000180)=[{0x8, 0x9}], 0x1}) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0) fcntl$lock(r0, 0x8, &(0x7f00000000c0)={0x0, 0x1, 0x7ffffffffffffffb, 0x1000100000004}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8) r3 = msgget$private(0x0, 0x0) msgsnd(r3, 0x0, 0x401, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) 359.801885ms ago: executing program 6 (id=189): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000b80)="e8a2a59e84c78fea43", 0x9}], 0x1) ioctl$TIOCSETA(r0, 0xc4504443, &(0x7f0000000740)={0x2, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x3, 0x6}) 357.816042ms ago: executing program 6 (id=190): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x63) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x810, r1, 0x40000) dup2(r0, r0) socket$unix(0x1, 0x1, 0x0) 322.379429ms ago: executing program 0 (id=191): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x8000, 0x40, 0x1, 0x800440}, {0x7, 0xf4, 0x0, 0xb38f}, {0x6, 0x0, 0x0, 0x48a8}]}) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000200)='\x00', &(0x7f0000000080)=0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r1, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x0, 0x4, 0x10, 0x7, "55a096d23f3df80f4256e1c61271637ddf7ea02c", 0x9, 0xffff}) 316.988472ms ago: executing program 4 (id=193): select(0x40, &(0x7f0000000180)={0x3205, 0x44809e9a, 0x7fffffffffffffff, 0xe, 0x2000000000000000, 0x181c, 0xdc, 0xa}, 0x0, 0x0, 0x0) close(0xffffffffffffffff) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/185, 0xb9}], 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r1, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x1}], 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r1, 0x0) pwrite(r1, &(0x7f0000001080)="02", 0x1, 0x6) execve(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) close(r3) 316.806278ms ago: executing program 1 (id=194): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000680)={0x3, 0x0, 0x100006, 0x100000003}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1024, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0x2) ktrace(0x0, 0x1, 0x40000800, r3) fcntl$lock(r1, 0x8, &(0x7f00000008c0)={0x2, 0x1, 0x2008000001000, 0x2ffffffff}) 292.276763ms ago: executing program 0 (id=195): ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000000)=0x200) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f0000000080)=0x9) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f00000000c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TIOCEXCL(r1, 0x2000740d) ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000140)={0xfffffff9, [{0x3, 0x9}, {0x1, 0x6}, {0x3, 0x9}, {0x3, 0x2}, {0x3, 0x5}, {0x1, 0x6}, {0x3, 0xb}, {0x1, 0x6}, {0x2, 0x4}, {0x3, 0xfff}, {0x3}, {0x3, 0x4}, {0x3, 0x4}, {0x3, 0x1ff}, {0x3, 0x1}, {0x2, 0xfffffbff}, {0x2, 0xfffffffc}, {0x3, 0x1}, {0x2, 0xd}, {0x1}, {0x2, 0xecb1}, {0x3, 0x7}, {0x1, 0x8}, {0x2, 0x9}, {0x1, 0x2}, {0x2, 0x856}, {0x1, 0x5}, {0x3, 0x3}, {0x3, 0x7}, {0x2, 0x272}, {0x3, 0x10001}, {0x3, 0x6}]}) r2 = socket$inet(0x2, 0x5, 0xf9) r3 = fcntl$dupfd(r2, 0x0, r0) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x8, 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000002c0)={0x2, 0x0, 0x10000, 0xb, "ab3d7a05f0aaa1227bb6eb589def34f3ad1e2643", 0x1, 0x3}) r4 = openat$klog(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) chflagsat(r3, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) minherit(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$TIOCSDTR(r3, 0x20007479) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x4, 0xf, 0x2b, 0x400}, {0xd, 0x5, 0x7b, 0x9}, {0x3a, 0xb, 0xd, 0x10001}]}) sendto$unix(r3, &(0x7f0000000400)='\a', 0x1, 0x5, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0xa) ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000480)=0x5) preadv(r1, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/251, 0xfb}, {&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f0000000680)=""/126, 0x7e}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/112, 0x70}, {&(0x7f0000001780)=""/139, 0x8b}], 0x6, 0x5c) r5 = syz_open_pts() ioctl$TIOCSPGRP(r5, 0x40047477, &(0x7f00000018c0)) r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000001900), 0x400, 0x0) ioctl$TIOCSTOP(r6, 0x2000746f) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000001980)={&(0x7f0000001940)='./file0\x00', r0}) ioctl$WSDISPLAYIO_GETSCREENTYPE(r3, 0xc028575d, &(0x7f00000019c0)={0x3, 0x9, './file0\x00', 0x81, 0x2, 0x4, 0x3}) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r1, 0x800c5709, &(0x7f0000001a00)={0xfffffffe, 0x800, 0xb5}) poll(&(0x7f0000001a40)=[{r6, 0x40}, {r4, 0x40}, {r5, 0x100}, {r0, 0x8}, {r6, 0x2}], 0x5, 0x200) r7 = dup(r6) fchmod(r7, 0x40) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000001b40)={&(0x7f0000001ac0)='./file0\x00', 0xa, &(0x7f0000001b00)='./file0\x00', 0x8}) 291.859377ms ago: executing program 1 (id=196): socket(0x11, 0x1, 0x6) pledge(0x0, &(0x7f0000002840)='tty \x00 \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x03\x00\x00\x00H\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15+\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0/\x80vI\x94\x0f6>]\x84a\xf7\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8\t\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00') mmap(&(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffffe, 0x0, 0x10, 0xffffffffffffffff, 0x2) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000000080)={0x1, 0x2}) (async) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f0000000080)={0x1, 0x2}) dup(0xffffffffffffffff) (async) r0 = dup(0xffffffffffffffff) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f0000000100)) pread(r0, &(0x7f00000000c0)="69c4a504afb20e1d56d5e4bec16cb0bd7fdf2d40c4c77dd1ef23227efe9498ae", 0x20, 0x80) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f00000009c0)={'./file0\x00', 0x28, 0x6, 0x0, 0x1, 0x1, 0xc, 0xfff, 0x0, 0x2, 0x3, 0x3}) (async) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f00000009c0)={'./file0\x00', 0x28, 0x6, 0x0, 0x1, 0x1, 0xc, 0xfff, 0x0, 0x2, 0x3, 0x3}) socketpair$unix(0x1, 0x5, 0x0, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x1000) (async) shmat(0xffffffffffffffff, &(0x7f0000ff9000/0x4000)=nil, 0x1000) socket(0x1, 0x1, 0x0) (async) r1 = socket(0x1, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284459, 0x0) ioctl$FIONREAD(r1, 0x80206916, &(0x7f00000001c0)) pledge(&(0x7f0000000280)='tty \x00 \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x03\x00\x00\x00H\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15+\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0/\x80vI\x94\x0f6>]\x84a\xf7\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8\t\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00', &(0x7f0000000540)='tty \x00 \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x03\x00\x00\x00H\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15+\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0/\x80vI\x94\x0f6>]\x84a\xf7\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8\t\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00') ioctl$LIOCSFD(0xffffffffffffff9c, 0x80046c7f, &(0x7f0000000140)=r1) socket$inet(0x2, 0x2, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000800)="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", 0xfd) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000980)={&(0x7f0000000900)='./file0\x00', 0x8, &(0x7f0000000940)='./file0\x00', 0x8}) ioctl$WSKBDIO_GETENCODINGS(r4, 0xc0105715, &(0x7f0000000080)={0x2, [0x0, 0x0]}) (async) ioctl$WSKBDIO_GETENCODINGS(r4, 0xc0105715, &(0x7f0000000080)={0x2, [0x0, 0x0]}) close(r3) (async) close(r3) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) sendto$unix(r1, &(0x7f0000000180)="b1000501600000000000000007000000330700000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000000361b1257aea8c500002002fbff0c2300008abfba0900000008e371a3f8343712051eadb71d89e000040781e4b2feff000000", 0xb1, 0x0, 0x0, 0x0) 291.432046ms ago: executing program 6 (id=197): r0 = open(&(0x7f0000000280)='./file0\x00', 0x8aa0, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) setsockopt(0xffffffffffffffff, 0x29, 0x6c, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xb8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = kqueue() r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x8000, 0x40, 0x1, 0x800440}, {0x7, 0xf4, 0x0, 0xb38f}, {0x6, 0x0, 0x0, 0x48a8}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5eabfedf9e2011c5dc171b20d8e87b6a6f18ff125020000005cff8eeb936fde488b85ed7806aeea228f76137cec0e2daf896b42f3", 0x35}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="000000d860a82060dec3bfcb4c9a9ba9cd23fe8d1a3ea684ad44937703c616f7e2205117bc333f0010636e7211e6e65f422ecbc7c50048c669c9faa6162575f669cd14217bd76db9dce0bd7a82eeaff81421882c155cb6223d94786811e61ea950791b7f43f0e79b8f897002885b19335ab64902", &(0x7f0000000080)=0x74, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r3, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) kevent(r2, &(0x7f0000000080)=[{{r0}, 0x0, 0x8, 0x1, 0x7fffffffffffffff, 0x6}], 0xe4a, 0x0, 0xa9fa, 0x0) 202.623231ms ago: executing program 1 (id=200): mkdir(&(0x7f0000000080)='./file0\x00', 0x60) setreuid(0xee00, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000280)=@file={0x1, './file1\x00'}, 0xa) r1 = getuid() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x400f}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5eabfed810000005dc17154e0ec16c8c7d3335c", 0x14}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471", &(0x7f0000000080)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r2, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSKBDIO_COMPLEXBELL(r3, 0x80105702, &(0x7f0000000240)={0xfffffffd, 0x0, 0x3, 0x20}) pipe(&(0x7f0000000000)) chown(&(0x7f0000000180)='./file0\x00', r1, 0xffffffffffffffff) r4 = getuid() setreuid(0x0, r4) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f00000001c0)='.\x00', 0x0) 202.304764ms ago: executing program 7 (id=201): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc02069b6, &(0x7f00000001c0)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x400f}]}) sysctl$kern(0x0, 0x53, &(0x7f0000000b00)="0000f977e6ce72bb5c88f985c743bfcb4493770300000000000000", &(0x7f0000000080)=0x5c, 0x0, 0x3c) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETA(r2, 0xc1584460, &(0x7f00000000c0)={0x2, 0xffff0691, 0x4, 0x0, "d1ca143e00", 0x7}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000004c0), 0x8, 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000400)={0x1, &(0x7f0000000340)=[{0xfff9, 0x9b, 0x1, 0x31}]}) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[]) 158.405164ms ago: executing program 7 (id=202): r0 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x4000011e, r0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3d}, 0x53b7, 0x8000000000000007, 0x0, r0, 0x2, 0x101000000, 0x10000000000007}) r1 = socket(0x18, 0x2, 0x0) close(r1) r2 = dup2(r1, r1) r3 = getuid() fchownat(r2, &(0x7f0000000000)='./file0\x00', r3, 0xffffffffffffffff, 0x0) r4 = socket(0x800000018, 0x1, 0x0) bind$unix(r4, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x2}, 0x3fffffffffffff7a, 0x0, 0x0, &(0x7f00000001c0)="33b5b976", 0x4) 157.811027ms ago: executing program 5 (id=203): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x7c, 0x2, 0x0, 0xb38f}, {0x6, 0x0, 0x0, 0x48a6}]}) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="c5eabfedf9e2011c5dc17154e0ec16c8c7d3335c92715c9c33a32ab20d8e87b6a6f19ff12da6cae4705cff8e9c94046204f60e6be14cb46176e5dd821d47f67927f8c25282524737ba7dc93f69d2c751ffe5232ba00f430e9d0dff9fef9d2b6c1bee4ab37b20e382c0b5185b57c77adc2400"/126, 0x7e}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000580)="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", &(0x7f0000000080)=0x25, 0x0, 0xb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r0, &(0x7f0000000140)="bbaba7a589bc19b0f94ae4188a84", 0xe) 155.039769ms ago: executing program 1 (id=204): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x3ff, 0x80000001, 0xfffd, 0x10, [{0x0, 0x5, 0x4, 0xa28}, {0xc60, 0xb, 0x8, 0xfffffff9}, {0x800007, 0xf86, 0x0, 0x9}, {0x80000000, 0x800, 0x8007, 0x1}, {0x401, 0x200726, 0x1002803, 0x17}, {0x2, 0x86, 0x3, 0xb4}, {0xce1, 0xffffffff, 0x4f9, 0x2d}, {0x2, 0x803, 0x17, 0x408}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1c6, 0x10001, 0x2, 0x3}, {0x7ff, 0xa, 0x8, 0x9}, {0xb8c, 0x4, 0x8, 0x2c4}, {0x29a7171a, 0xfffffffa, 0x1, 0x6}, {0x2, 0x7, 0xfffffff9}, {0x0, 0x1, 0x1002, 0x9}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) close(r2) r3 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FIONBIO(r2, 0x80487008, &(0x7f0000000140)=0x1) execve(0x0, 0x0, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000d860a82060dec3e59be543bfcb44937703c616f7e2205117c9cbd7c500c9faa6162575f669cd141f8876", &(0x7f0000000080)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6d9efb", 0x8, 0x67, 0x0, @rand_addr="00000000010000000000000afffffffe", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x2, 0x3, 0x8}}}}}}}) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x17}, 0x4, &(0x7f0000000100)="7ba9a99b", &(0x7f0000000b00)=0x4, 0x0, 0x0) 154.72903ms ago: executing program 4 (id=205): setitimer(0x2, &(0x7f00000000c0)={{0xffffffff}, {0x277a, 0x3}}, &(0x7f0000000100)) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x4, 0x17}, {0x3, 0xc0}}) 105.420487ms ago: executing program 5 (id=206): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x87e) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)='x\x00') ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x0, &(0x7f0000000080)}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) r1 = socket(0x18, 0x3, 0x3a) dup(r1) (async) dup(r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) ioctl$TIOCSTAT(r2, 0x20007465, 0x0) ioctl$VMM_IOC_READREGS(r2, 0xc028756b, &(0x7f0000000bc0)) open$dir(&(0x7f0000000180)='./file0\x00', 0x2, 0x224) (async) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x2, 0x224) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x9, 0x0, 0x0, 0x0, 0x0, 0x318, 0xd222}, 0x8, 0x3, 0xffffffffffffffff, 0x0, 0x80000000000000, 0xc, 0x40000009, 0x8}) fchown(r3, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) (async) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) unlink(&(0x7f0000000100)='./file0\x00') link(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)='./file0\x00') mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r4, 0x20000000) flock(0xffffffffffffffff, 0x3) (async) flock(0xffffffffffffffff, 0x3) close(r4) (async) close(r4) ioctl$FIONREAD(r3, 0xc0106978, &(0x7f0000000140)) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) 105.138907ms ago: executing program 7 (id=207): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r1 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x4000011e, r1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x9) semget(0x1, 0x4, 0x40) mknod(0x0, 0x2000, 0x1e5f) unlink(0x0) socket(0x18, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendsyslog(&(0x7f00000035c0)="dbb38370", 0x4, 0x10) r2 = socket(0x18, 0x3, 0x0) getsockopt(r2, 0x29, 0x31, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000002c0)={0x1, 0x41}, 0x2, &(0x7f0000000300)="e2e9541ee413c5e569ef3f99de5bfcce4761341e5704e74ca25ee2b809b3d36d8ff26b757862c0bc2a462401ed725055308c9fc369b1b8b11c5e49c1280a559ad04464833ac625df551a6d6512dbbc1bde7b5f520d166c410618c7b9e36f85e27154", &(0x7f0000000380)=0x62, &(0x7f00000003c0)="3dbc51fc032ea52fb01226c8c6199be10e5d9109600d1a63db65e7eac3b84570721304b6025a596b128d05defe0c0e722b91de7812c1b656c141909eef01a823c9b0408c274d11a1efd646e3", 0x4c) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0xc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb90, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005136000009f05", 0x9, 0x402, 0x0, 0x0) 104.66849ms ago: executing program 6 (id=208): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETA(r0, 0xc2084415, &(0x7f0000000000)={0x7, 0xffff0691, 0x4, 0x9, "97a2e900", 0x7}) 102.569758ms ago: executing program 4 (id=209): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000d860a82060dec3e59be543bfcb44937703c616f7e2205117c9cbd7c500c9faa6162575f669cd141f8876362901a9217bd76d64b9dcc030bcbb2f60fc48", &(0x7f0000000080)=0x40, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000001000000000000000000bbfe8000000000000000010000000000aa11000001"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6d9efb", 0x8, 0x67, 0x0, @rand_addr="00000000010000000000000afffffffe", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x2, 0x3, 0x8}}}}}}}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x385, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x0, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x4, 0x5}, {0x6e75, 0x8001, 0xd1b, 0x4}, {0x1cc, 0x10001, 0xd, 0x4}, {0xc, 0x9, 0x8, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x6, 0x5, 0x5, 0xd3f}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getppid() ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) socket(0x18, 0x3, 0x50) 75.339331ms ago: executing program 5 (id=210): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000000)={""/16, @ifru_index}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSFILDROP(r1, 0x80044279, &(0x7f00000000c0)=0x2) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[]) r2 = geteuid() setuid(r2) 74.918182ms ago: executing program 7 (id=211): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)="70bfd7084e25953c42980539410184f14294d68632d8d26900000000c53b1793f1ac085e7c773d9ec757a519c83b3d4566d3ae6ffc480ccadfd69a7533916b3e5a8604a6bebcc6b5d82003ba258a3ebba44287a1f5634fce286db6eb7c128921f017dd359aafa4f98f46d552fec971650015a5daa856ad196033e2188fe4a1bca55579877762ab3d4f7a921036d9d267575f36cc3d9694fe5e0d03f83d741cfb427403a478d1ea191a86e0a129f48862d7de4f5244286f66d4d73e", 0xbb}], 0x1) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)="50e34ab02bf32d6ef292ca9f55088273e990b60cc344c91a09fcda13d7787827005a4f12666fa74b8df3e1b3e9ac103adc841bf3f0857ccc330b24f87260572610568bc4db6ba99f81313ca09cc6c8cf0cbeecd3662ff76bb90a4a7be37c427e903b823810b04cb388e7c836dfe215239be1aa665049e796aafcbaf88584be960f321f90a406b3b9129e39a5eb992cc78d2f16dd6a55916d7c3d60d33314bce5f6565a2c340a969ebcc5ea07c1ef85e22b816039285b316e2e2e", 0xba}, {&(0x7f0000000140)='.V', 0x2}], 0x2) execve(0x0, 0x0, 0x0) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8d, "08ed95990000000000000000ffffffffffffffe6", 0x4000000, 0x20000}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x18, 0x6, 0x9}, 0x4, &(0x7f0000000540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) r4 = kqueue() kevent(r4, &(0x7f00000000c0)=[{{r3}, 0xffffffffffffffff, 0x434a6e215736647b, 0x2, 0x3b85, 0x8001}], 0xf, 0x0, 0xc14, 0x0) close(r3) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0x80206979, &(0x7f0000000000)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ioctl$WSDISPLAYIO_GVIDEO(0xffffffffffffffff, 0x40045744, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 74.502637ms ago: executing program 6 (id=212): sysctl$net_inet_gre(&(0x7f0000000000)={0x4, 0x2, 0x2f, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) setuid(0xffffffffffffffff) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x7}, {}, {}, {0x3}, {}, {}, {0x0, 0xaa59}, {}, {0x1, 0xffffffff}, {}, {0x2, 0x4}, {}, {}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0x2}, {0x0, 0x7ff}, {0x2}, {}, {0x3}, {}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2}, {0x0, 0xfffffffd}, {0x2, 0xa}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, &(0x7f0000000340)="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", &(0x7f0000000180)=0x128, 0x0, 0x0) r0 = kqueue() r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) kevent(r0, &(0x7f0000000000)=[{{r1}, 0xffffffffffffffff, 0xa1, 0x2, 0x7, 0x1}], 0x4, 0x0, 0x6, 0x0) close(r1) sysctl$vfs_ffs(&(0x7f0000000000)={0x4, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) 70.627684ms ago: executing program 5 (id=213): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="49e9931566a7e5b3c3d1dbb665a66ca51b4f7c9416a956f0b604e7546dace510e48738afb275d9a38c83d5697584cf4eecee8f07536d4011393956400b7ce5c4417b96705f2777e4c0a65fbd6e21606e92fc0b5633058ed765bb959edb96e4021708951a889e39ce7b38b85be95e34a3c1a9fd83aa2ba54945dab2c50a0a60cbecc4e2058bcbdc53c378ddae23bb815a1982a73d7383be61866e208479", 0x9d}, {&(0x7f0000000000)="8f32ba6c9877d84e25314a6510c76207ec88a6dd5583f6c5f2f0c2e3", 0x1c}, {&(0x7f0000000180)="184fe9860dca4195c32c1bae95ad1fcbaed0f4ed4132c8e1cb5a10f27be775081ee9238f95788346a32420bf6fc95581ae1c4b66d19724bf45b61aec99029320d41764b57a368e2f854229a62949b075a9aaa01c8351c322a039039390cdfc76e1d0b519afd26a7c5a763ff578757dda196193286e38f99df32790820872ba8aef5194348087cb5463ce297fa0aaa2", 0x8f}, {&(0x7f00000002c0)="54077cc66a4ed87a97add96889a3fbbd86eeb80b8d87597ae7ebe322707c3f8b026b5ad78b7346de97d1827093d3ddb92ab985b694ca9ffb3e5553ef6d8b6389a27f9d916ae38b7f13a42254125bfa19a69644d30485294ca48ddc56c1ba1505559f999a08d6880161e8638428ba7703824d29e6a780021ab9c21e6309f95bcfb7eeceaab18eb1d870f68bc0acc1b06e0179157784be0ae191dd1497c5974c25180f1a3e48658da23816d980bfd8b2a2cc27afb9b1a1096e79501a327f6bd1299797927b311335a75c88b69764c1e4", 0xcf}, {&(0x7f0000000480)="d5897170278219d91c83b0869b5c41dfb3c3353bfb5b8f0f6f01421cafbac327c8759aa29b6bd6ee7bb0d8f3487542a8ac6e50257d6fae1a5a8cf13f5e73636a6d23ab1d11aa554d137fd52fbf4b391a0561627d3d5d623b588f078160c7c3b21ecfb02f00c9b300460740e1bfcb48310cf3f7a503d8517f61d0d531ccde2012dec5094fa332dfd01343b581edf725fdca4962dbebe5e24369723bc3d21d9b702837d3d752c1babdd2c1b9cb7b210005f7548cf0c6ddcd7f", 0xb8}, {&(0x7f0000000540)="d5e61fb2bd799987045229b61f1a464207db32163fec9835e54579021556d54ce1267ee085a79117978abfec9d27a1e3c6c53b49a97c32af7694fa315d6734c198bbbbb0a562d310f5405156f135d6631291d99308eb9e6b3ccb377494c0918bce70bfecd7583709d85f1c1bfed9c582f138fa2194beed34e058b5576ff00ed0ad0bac2abcdf3b9ed667a615d8640a019aeafe90e6bb31464c56153de51b0ff6b6ff7465e9ec70debcf37c53dab0d66a20e2f4ef31ea186da456904cbc7301922f3353", 0xc3}], 0x6, 0x0) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x5, &(0x7f0000000280)=[{0x1d, 0x1, 0x0, 0xfffff4b2}, {0x25, 0x0, 0x2, 0x80000000}, {0x0, 0xfe, 0x30, 0x7}, {0x87, 0x8, 0xdd, 0x8}, {0x6, 0x4, 0x7, 0x800}]}) (async) write(r0, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 3.064556ms ago: executing program 5 (id=214): select(0x0, 0x0, 0x0, 0x0, &(0x7f0000001e80)={0xf, 0xc000000}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000f40)={0x0, [{0x2}, {0x0, 0x10000}, {0x0, 0x2}, {}, {0x0, 0xfffffffa}, {}, {0x2, 0x9}, {}, {0x0, 0x3678}, {0x2, 0xfffffffd}, {}, {0x0, 0xfffffffe}, {0x0, 0x6cb}, {0x1, 0x4}, {}, {0x2}, {0x0, 0x34a}, {}, {}, {}, {0x0, 0xfffffff9}, {}, {0x3}, {}, {0x3}, {}, {0x0, 0x7}, {0x1}, {0x3, 0x3}]}) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x138, &(0x7f0000000100)=[{{}, 0xfffffffffffffff9, 0x1d}], 0xffffffff, 0x0) kevent(r0, 0x0, 0x0, &(0x7f00000000c0), 0x6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r1, 0x0, 0x20, &(0x7f0000000340)="15337ac0", 0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) close(r2) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r2, 0xf5965de1884824eb}) close(r2) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f0000000000)) 759.764µs ago: executing program 6 (id=215): rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)='.\x00') fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x104) sysctl$hw(&(0x7f0000000100)={0x7, 0xf}, 0x2, &(0x7f0000000300)="0020a3db", &(0x7f00000001c0)=0x4, 0x0, 0x0) 554.46µs ago: executing program 4 (id=216): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x8000, 0x40, 0x1, 0x800440}, {0x7, 0xf4, 0x0, 0xb38f}, {0x6, 0x0, 0x0, 0x48a8}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5eabfedf9", 0x5}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="000000d860a82060dec3e59be543bfcb4c9a9ba9cd23fe8c1a3ea684", &(0x7f0000000080)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r1, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x8000, 0x40, 0x1, 0x800440}, {0x7, 0xf4, 0x0, 0xb38f}, {0x6, 0x0, 0x0, 0x48a8}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="c5eabfedf9e2011c5dc171b20d8e87b6a6f18ff125", 0x15}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="000000d860a82060dec3e59be543bfcb4c9a9ba9cd23fe8c1a3ea684ad44937703c616f7", &(0x7f0000000080)=0x24, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r0, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) 0s ago: executing program 5 (id=217): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x18, 0x3, 0x3a) r1 = dup(r0) setsockopt(r1, 0x1000000029, 0x1a, &(0x7f0000000000)=',\x00\x00\x00', 0x4) sendmmsg(r1, &(0x7f00000006c0)={&(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="43754cd3e70c5eb845d35d88855357f37223e2effdd6f8aed90f08527d335be593996c8ed3639846c76948c387c0a6e62d", 0x31}, {&(0x7f00000001c0)="6de3aa1d0108fae9a5aa8bd4649abd587b28a5a695d063a36cfec19041d3de98e8631981490ef3e4b8c00ef71ae562a92f0528431aaff5d4b82629faa5663d1ff6f8f062be8f0736f80ee004a4ee81f25801061c0ca1d27d2e78491dcb8d6da0fb76460732b9aaa0930d8c6d391f9cd918e1662da18da72d0349151c1560534b4e1cc068b6115c0e5031ab46249181904ddca33c8b50915292f5825b88195a52cfe04c3d668eb0c544adc4e3b67a19b2a5706ee38a815bc270f9d3073cca3bfc1283342b1911748bb525973d96618189974ec412da43174879c6", 0xda}], 0x2, &(0x7f0000000300)=[{0x98, 0x0, 0x80000000, "33d11e1f8ea7f70f1e4f3c72df756218037e3ea196d864c54f20f912336bc63f07651cb726adb143cf894e4bf11fcd754e2dd530db202d54b5baeb6e58b969662fd445151dcc28168e18e79a8c332e217fc52e1a91d8b4d505a5a5f34cd68638ef4fa1aefdd020fc01caa430b0e2c378688aaf034fcd82d137b76712d1b191631547d73f3e4f7e"}, {0x68, 0x1, 0x9, "f13d25b0bcff2b69e61264d1d71e6b2cf0ff4645f1d1c30562cc1b3b1fba471a9d7e0eaa9e67e5ac22c330146adcf6d00096ba5b0c1a6f0313e7b4c1dee768ee6725ec9f27e6f75abc647f4431cdd191f8e6bb97b5e9"}, {0x78, 0xffff, 0x6, "9b2928908387e55a93d175be53177a8c6e01f638b6536a812393777028fc88a443bd0daedc95f5b1cdafa4cedbb5b9e2da479531588e9ccd7f4e9d075501c1f941e27e918344cd4940991675bd7c2d444a5e19a528f3146114733041b542efba86c7b83900bb26ec"}, {0xc0, 0x1, 0x1, "c1b4fe6688399deb6c5d959a0ef89535ceecd7ab8de0ace8a638aacc6923f35e139d0c26fef9dd5efce23554fd61d7d719131de8669f589f9ac13a9cb3f165e9570b13652e31922a2d13c7abd69255eba4ac8311c8bbf5c58aab4355b255faa122fd2c90c0e6b23fcfd2e7e80a6e191e6148c9ad16e64a1b1a6e6c7e7a767bd55f0b3b00fed9c0ea050cec5ed01aa615fc1ceb003733fa900b21a7fc6c2713e14eb91214d5c1fdcf5dc550"}, {0x38, 0xffff, 0x0, "4bcd61f90520ee403569277388c88e3b6620b13a262a9e26b3b6e183606c55a12001ab"}, {0xf0, 0xffff, 0x9, "130ddb1b0e5373598c06f5f474689587c53e22dd852e45c2543d75c0d8a6565f3010da7628f9a7360dad892a927c419918c3b5a932af1ed824d5a173144d5c7c9d1b7a172ef7d9c606201a96f9243934ca60dcb9e44bb6b54c9c84d2a6edf5e63c33767e86f32bcdf05c1c791f7f7b2fbfe86ad3d68676039aff9b263304e975cc7f12926026756d6ebcbd3c04fdf0f07ffdc8774ec51081634afe5246595db1c704ec3437fe62d3699cd46bb4a1861b0b666ae5ec25bbdd2b588bc11aed5aededaf059a0015cc2bdbef1709a5228bec21f8c0f7852de4c7a24776ab07ca2696"}], 0x360}, 0x8}, 0x10, 0x0) chroot(&(0x7f00000000c0)='./file0\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error panic: mtx 0xffffffff839a7b18: locking against myself Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *175446 12825 0 0 0 0 syz-executor 299402 43632 0 0 0 1 syz-executor db_enter() at db_enter+0x25 panic(ffffffff833e84e2) at panic+0x1e5 mtx_enter_try(ffffffff839a7b18) at mtx_enter_try+0x1bf mtx_enter(ffffffff839a7b18) at mtx_enter+0x60 uvm_pageclean(fffffd8007ffeac0) at uvm_pageclean+0x290 uvm_pagefree(fffffd8007ffeac0) at uvm_pagefree+0x26 uvn_get(fffffd8061759d10,0,ffff80002ebebe98,ffff80002ebebe7c,0,2,8865f2aeff97754a,2) at uvn_get+0x68b uvm_fault_lower_io(ffff80002ebec0b0,ffff80002ebec0e8,ffff80002ebebf30,ffff80002ebebf18) at uvm_fault_lower_io+0x2d1 uvm_fault_lower(ffff80002ebec0b0,ffff80002ebec0e8,ffff80002ebec030) at uvm_fault_lower+0x2bb uvm_fault(fffffd806b8e3b60,200000000000,0,2) at uvm_fault+0x278 upageflttrap(ffff80002ebec240,200000000140) at upageflttrap+0xa9 usertrap(ffff80002ebec240) at usertrap+0x2d8 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x73362fd29630, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: mtx 0xffffffff839a7b18: locking against myself ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff833e84e2) at panic+0x1e5 mtx_enter_try(ffffffff839a7b18) at mtx_enter_try+0x1bf mtx_enter(ffffffff839a7b18) at mtx_enter+0x60 uvm_pageclean(fffffd8007ffeac0) at uvm_pageclean+0x290 uvm_pagefree(fffffd8007ffeac0) at uvm_pagefree+0x26 uvn_get(fffffd8061759d10,0,ffff80002ebebe98,ffff80002ebebe7c,0,2,8865f2aeff97754a,2) at uvn_get+0x68b uvm_fault_lower_io(ffff80002ebec0b0,ffff80002ebec0e8,ffff80002ebebf30,ffff80002ebebf18) at uvm_fault_lower_io+0x2d1 uvm_fault_lower(ffff80002ebec0b0,ffff80002ebec0e8,ffff80002ebec030) at uvm_fault_lower+0x2bb uvm_fault(fffffd806b8e3b60,200000000000,0,2) at uvm_fault+0x278 upageflttrap(ffff80002ebec240,200000000140) at upageflttrap+0xa9 usertrap(ffff80002ebec240) at usertrap+0x2d8 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x73362fd29630, count: -13 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002ebebbe0 rbx 0xffffffff837eadcf cpu_info_full_primary+0x2dcf rdx 0 rcx 0xffff80003c41f800 rax 0xffffffff837e9ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x94c0ed93b2709b49 r11 0x1bb3fd6665909f7f r12 0xffffffff837eabd0 cpu_info_full_primary+0x2bd0 r13 0 r14 0 r15 0x1 rip 0xffffffff819d7c55 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002ebebbd0 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=175446 pid=12825 tcnt=3 stat=onproc flags process=0 proc=0 runpri=50, usrpri=50, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c420548,0xffff80003c420d50 process=0xffff8000ffff4018 user=0xffff80002ebe7000, vmspace=0xfffffd806b8e3b60 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND *12825 175446 18027 0 7 0 syz-executor 12825 40378 18027 0 3 0x4000000 biowait syz-executor 12825 421292 18027 0 3 0x4000000 uobjlk syz-executor 93015 464093 6718 0 2 0 syz-executor 93015 447891 6718 0 3 0x4000080 fsleep syz-executor 55694 26218 60942 0 2 0 syz-executor 55694 455119 60942 0 3 0x4000080 fsleep syz-executor 43632 299402 9408 0 7 0 syz-executor 43632 492533 9408 0 3 0x4000080 rest syz-executor 43632 186101 9408 0 3 0x4000080 rest syz-executor 79448 216453 44557 0 3 0x80 nanoslp syz-executor 79448 7870 44557 0 3 0x4000080 kqpoll syz-executor 79448 127359 44557 0 3 0x4000080 fsleep syz-executor 52356 206664 24864 0 3 0x90 nanoslp syz-executor 52356 431889 24864 0 3 0x4000090 kqsel syz-executor 52356 462977 24864 0 3 0x4000090 fsleep syz-executor 62976 103193 0 0 3 0x14200 bored sosplice 92842 314285 56167 0 3 0x100082 sbwait ndp 56167 412744 24513 0 3 0x10008a sigsusp sh 9408 421657 19043 0 3 0x82 nanoslp syz-executor 60942 410171 19043 0 3 0x82 nanoslp syz-executor 6718 7206 19043 0 3 0x82 nanoslp syz-executor 18027 115594 19043 0 3 0x82 nanoslp syz-executor 24864 318905 19043 0 3 0x82 nanoslp syz-executor 24513 75019 19043 0 3 0x82 wait syz-executor 83951 176872 19043 0 3 0x2 biowait syz-executor 44557 176031 19043 0 3 0x82 nanoslp syz-executor 19043 43108 22385 0 3 0x82 kqread syz-executor 22385 20457 70392 0 3 0x10008a sigsusp ksh 70392 284876 15662 0 3 0x98 kqread sshd-session 15662 366506 47349 0 3 0x92 kqread sshd-session 20561 379500 1 0 3 0x100083 ttyin getty 47349 445247 1 0 3 0x88 kqread sshd 30279 408783 75828 74 3 0x1100092 bpf pflogd 75828 375367 1 0 3 0x80 sbwait pflogd 55573 7799 25407 73 3 0x1100090 kqread syslogd 25407 186342 1 0 3 0x100082 sbwait syslogd 80982 25242 1 0 3 0x100080 kqread resolvd 34480 431772 91929 77 3 0x100092 kqread dhcpleased 44953 383651 91929 77 3 0x100092 kqread dhcpleased 91929 27041 1 0 3 0x80 kqread dhcpleased 68971 369193 0 0 3 0x14200 bored smr 27014 188 0 0 2 0x14200 zerothread 85027 284638 0 0 3 0x14200 aiodoned aiodoned 76360 210913 0 0 3 0x14200 syncer update 18931 173355 0 0 3 0x14200 cleaner cleaner 65611 269583 0 0 3 0x14200 reaper reaper 37992 434132 0 0 3 0x14200 pgdaemon pagedaemon 60241 443592 0 0 3 0x14200 bored viomb 75663 72507 0 0 3 0x40014200 acpi0 acpi0 93693 75936 0 0 3 0x40014200 idle1 66986 18022 0 0 3 0x14200 bored softnet3 57088 249478 0 0 3 0x14200 bored softnet2 87718 453010 0 0 3 0x14200 bored softnet1 4065 348414 0 0 3 0x14200 bored softnet0 67843 190967 0 0 3 0x14200 bored systqmp 51526 84119 0 0 3 0x14200 bored systq 35545 302943 0 0 3 0x14200 tmoslp softclockmp 68964 295883 0 0 3 0x40014200 tmoslp softclock 67489 482344 0 0 3 0x40014200 idle0 1 262360 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &uvm.pageqlock r = 0 (0xffffffff839a7b28) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 uvn_get+0x679 #4 uvm_fault_lower_io+0x2d1 #5 uvm_fault_lower+0x2bb #6 uvm_fault+0x278 #7 upageflttrap+0xa9 #8 usertrap+0x2d8 #9 recall_trap+0x8 Process 12825 (syz-executor) thread 0xffff80003c41f800 (175446) exclusive rwlock uobjlk r = 0 (0xfffffd805f881f60) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 uvn_io+0x667 #3 uvn_get+0x31d #4 uvm_fault_lower_io+0x2d1 #5 uvm_fault_lower+0x2bb #6 uvm_fault+0x278 #7 upageflttrap+0xa9 #8 usertrap+0x2d8 #9 recall_trap+0x8 exclusive mutex &uvm.pageqlock r = 0 (0xffffffff839a7b28) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 uvn_get+0x679 #4 uvm_fault_lower_io+0x2d1 #5 uvm_fault_lower+0x2bb #6 uvm_fault+0x278 #7 upageflttrap+0xa9 #8 usertrap+0x2d8 #9 recall_trap+0x8 Process 12825 (syz-executor) thread 0xffff80003c420d40 (40378) exclusive rrwlock inode r = 0 (0xfffffd806acc41c0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 sys_ftruncate+0x1c4 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 12825 (syz-executor) thread 0xffff80003c4207f0 (421292) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a09ad8) #0 witness_lock+0x5bb #1 syscall+0xae6 #2 Xsyscall+0x128 Process 83951 (syz-executor) thread 0xffff80002a28cd48 (176872) exclusive rrwlock inode r = 0 (0xfffffd806acc4880) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xb08 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806acc40a0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 cache_lookup+0x36e #7 ufs_lookup+0x21b #8 VOP_LOOKUP+0x6e #9 vfs_lookup+0x8fa #10 namei+0x7aa #11 dounlinkat+0xc1 #12 syscall+0xb08 #13 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10203 11102K 11445K 166960K 11757 0 pcb 18 12K 12K 166960K 60 0 rtable 195 5K 6K 166960K 369 0 pf 37 18K 21K 166960K 61 0 ifaddr 40 6K 7K 166960K 53 0 ifgroup 59 2K 2K 166960K 76 0 sysctl 3 1K 1K 166960K 3 0 counters 66 36K 36K 166960K 76 0 ioctlops 0 0K 4K 166960K 1508 0 iov 0 0K 8K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1412 89K 89K 166960K 1622 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 347 0 sigio 0 0K 0K 166960K 5 0 proc 72 91K 128K 166960K 556 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 20 0 in_multi 85 6K 7K 166960K 105 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 405 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 244 171K 180K 166960K 4813 0 UVM aobj 13 2K 2K 166960K 13 0 pinsyscall 44 88K 109K 166960K 1425 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 7 0 NDP 13 0K 2K 166960K 34 0 temp 42 8679K 8747K 166960K 6939 0 kqueue 14 22K 26K 166960K 68 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 42 0 38 1 0 1 1 0 8 0 rtentry 176 115 0 26 6 0 6 6 0 8 0 unpcb 144 130 0 113 1 0 1 1 0 8 0 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 808 55 0 51 1 0 1 1 0 8 0 arp 128 19 0 3 1 0 1 1 0 8 0 inpcb 384 226 0 218 2 0 2 2 0 8 0 nd6 144 25 0 3 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 2 0 2 1 0 1 1 0 8 1 pffrag 232 3 0 0 1 0 1 1 0 482 0 pffrnode 88 3 0 0 1 0 1 1 0 8 0 pffrent 40 3 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfstitem 24 33 0 0 1 0 1 1 0 8 0 pfstkey 128 33 0 0 2 0 2 2 0 8 0 pfstate 384 33 0 0 4 0 4 4 0 8 0 pfrule 1344 22 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 457 0 87 29 0 29 29 0 8 2 art_table 32 458 0 87 4 0 4 4 0 8 0 art_node 16 114 0 34 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 2 1 0 1 1 0 8 1 semapl 112 4 0 0 1 0 1 1 0 8 0 shmpl 112 10 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1941 0 432 95 0 95 95 0 8 0 ffsino 288 1941 0 432 109 0 109 109 0 8 0 nchpl 144 2427 0 739 63 0 63 63 0 8 0 uvmvnodes 80 2201 0 0 45 0 45 45 0 8 0 vnodes 216 2201 0 0 123 0 123 123 0 8 0 namei 1024 7810 0 7810 2 0 2 2 0 8 2 percpumem 16 53 0 5 1 0 1 1 0 8 0 kstatmem 264 36 0 10 2 0 2 2 0 8 0 scxspl 216 7742 0 7739 3 2 1 2 1 8 0 plimitpl 152 85 0 66 1 0 1 1 0 8 0 sigapl 424 646 0 595 8 1 7 7 0 8 0 futexpl 64 3375 0 3371 1 0 1 1 0 8 0 knotepl 120 311 0 0 10 0 10 10 0 8 0 kqueuepl 224 84 0 72 1 0 1 1 0 8 0 pipepl 336 189 0 162 6 0 6 6 0 8 3 fdescpl 520 627 0 595 3 0 3 3 0 8 0 filepl 160 2930 0 2707 13 0 13 13 0 8 2 lockfpl 104 56 0 53 1 0 1 1 0 8 0 lockfspl 48 27 0 24 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 31 0 14 1 0 1 1 0 8 0 ucredpl 104 362 0 348 1 0 1 1 0 8 0 zombiepl 144 595 0 595 1 0 1 1 0 8 1 processpl 1216 646 0 595 5 0 5 5 0 8 0 procpl 680 953 0 892 7 1 6 6 0 8 0 srpgc 96 2 0 2 1 0 1 1 0 8 1 sosppl 168 2 0 2 1 0 1 1 0 8 1 sockpl 728 403 0 374 5 0 5 5 0 8 1 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 115 0 0 15 0 15 15 0 8 0 mcl2k 2048 27 0 0 4 0 4 4 0 8 0 mtagpl 96 37 0 0 1 0 1 1 0 8 0 mbufpl 256 226 0 0 15 0 15 15 0 8 0 bufpl 280 3776 0 125 261 0 261 261 0 8 0 anonpl 32 7660 0 0 62 0 62 62 0 246 0 amapchunkpl 152 14931 0 14445 31 0 31 31 0 158 11 amappl16 200 2648 0 2624 18 8 10 15 0 8 7 amappl15 192 7 0 7 1 1 0 1 0 8 0 amappl14 184 112 0 99 1 0 1 1 0 8 0 amappl13 176 5 0 5 2 2 0 1 0 8 0 amappl12 168 1270 0 1237 4 1 3 3 0 8 0 amappl11 160 56 0 42 1 0 1 1 0 8 0 amappl10 152 7 0 7 1 1 0 1 0 8 0 amappl9 144 270 0 270 1 1 0 1 0 8 0 amappl8 136 24 0 22 1 0 1 1 0 8 0 amappl7 128 104 0 91 1 0 1 1 0 8 0 amappl6 120 177 0 173 1 0 1 1 0 8 0 amappl5 112 125 0 115 1 0 1 1 0 8 0 amappl4 104 312 0 291 1 0 1 1 0 8 0 amappl3 96 2623 0 2510 3 0 3 3 0 8 0 amappl2 88 630 0 566 2 0 2 2 0 8 0 amappl1 80 9061 0 8418 16 0 16 16 0 8 0 amappl 88 4098 0 3935 4 0 4 4 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 12 0 0 1 0 1 1 0 8 0 uaddrrnd 24 627 0 595 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 627 0 595 1 0 1 1 0 8 0 vmmpekpl 168 6804 0 6772 2 0 2 2 0 8 0 vmmpepl 168 46108 0 44095 101 0 101 101 0 357 9 vmsppl 480 626 0 595 5 0 5 5 0 8 0 rwobjpl 72 17335 0 14142 60 1 59 59 0 8 0 pdppl 4096 1262 0 1190 96 22 74 86 0 8 2 pvpl 32 14720 0 0 120 1 119 119 0 265 0 pmappl 256 626 0 595 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 393 0 26 11 0 11 11 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff833e84e2) at panic+0x1e5 mtx_enter_try(ffffffff839a7b18) at mtx_enter_try+0x1bf mtx_enter(ffffffff839a7b18) at mtx_enter+0x60 uvm_pageclean(fffffd8007ffeac0) at uvm_pageclean+0x290 uvm_pagefree(fffffd8007ffeac0) at uvm_pagefree+0x26 uvn_get(fffffd8061759d10,0,ffff80002ebebe98,ffff80002ebebe7c,0,2,8865f2aeff97754a,2) at uvn_get+0x68b uvm_fault_lower_io(ffff80002ebec0b0,ffff80002ebec0e8,ffff80002ebebf30,ffff80002ebebf18) at uvm_fault_lower_io+0x2d1 uvm_fault_lower(ffff80002ebec0b0,ffff80002ebec0e8,ffff80002ebec030) at uvm_fault_lower+0x2bb uvm_fault(fffffd806b8e3b60,200000000000,0,2) at uvm_fault+0x278 upageflttrap(ffff80002ebec240,200000000140) at upageflttrap+0xa9 usertrap(ffff80002ebec240) at usertrap+0x2d8 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x73362fd29630, count: -13 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x77e0886d6c80, count: 12 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x77e0886d6c80, count: -3