last executing test programs: 10.359399925s ago: executing program 2 (id=56): truncate(&(0x7f0000000080)='./file0\x00', 0x80000000000007ff) open(&(0x7f0000000240)='./file0\x00', 0xf5d9d7bd29053ad2, 0x0) r0 = socket(0x2, 0x1, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x80}], 0x7, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_emit_ethernet(0x0, 0x0) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) truncate(&(0x7f0000000000)='./file0\x00', 0xfffffffffffff800) syz_emit_ethernet(0xd0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea07009a2c00fe8000000000000000000000000000aaff02000000000000000000000000000132000000000000004e224e21000890787c823dc543a16289f11967e95ff44fd630bf03d06b24bdc05546207ad9bc70969fa7b999b814800bc54931399816d4f7b467d9e44817edc906151e911b3ab5c2c24842a810a1f9d08d82af61d3f86a87224db75037cc95412faccf11545737cd1009491fda50aaa083ab172f8d8916b009853f580958fcd61d4104af64003b7c463bca6704ab798b08ad"]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f0000000000)=0x401) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x8001) 9.425149631s ago: executing program 2 (id=56): truncate(&(0x7f0000000080)='./file0\x00', 0x80000000000007ff) open(&(0x7f0000000240)='./file0\x00', 0xf5d9d7bd29053ad2, 0x0) r0 = socket(0x2, 0x1, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x80}], 0x7, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_emit_ethernet(0x0, 0x0) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) truncate(&(0x7f0000000000)='./file0\x00', 0xfffffffffffff800) syz_emit_ethernet(0xd0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea07009a2c00fe8000000000000000000000000000aaff02000000000000000000000000000132000000000000004e224e21000890787c823dc543a16289f11967e95ff44fd630bf03d06b24bdc05546207ad9bc70969fa7b999b814800bc54931399816d4f7b467d9e44817edc906151e911b3ab5c2c24842a810a1f9d08d82af61d3f86a87224db75037cc95412faccf11545737cd1009491fda50aaa083ab172f8d8916b009853f580958fcd61d4104af64003b7c463bca6704ab798b08ad"]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f0000000000)=0x401) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x8001) 7.962536402s ago: executing program 2 (id=56): truncate(&(0x7f0000000080)='./file0\x00', 0x80000000000007ff) open(&(0x7f0000000240)='./file0\x00', 0xf5d9d7bd29053ad2, 0x0) r0 = socket(0x2, 0x1, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x80}], 0x7, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_emit_ethernet(0x0, 0x0) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) truncate(&(0x7f0000000000)='./file0\x00', 0xfffffffffffff800) syz_emit_ethernet(0xd0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea07009a2c00fe8000000000000000000000000000aaff02000000000000000000000000000132000000000000004e224e21000890787c823dc543a16289f11967e95ff44fd630bf03d06b24bdc05546207ad9bc70969fa7b999b814800bc54931399816d4f7b467d9e44817edc906151e911b3ab5c2c24842a810a1f9d08d82af61d3f86a87224db75037cc95412faccf11545737cd1009491fda50aaa083ab172f8d8916b009853f580958fcd61d4104af64003b7c463bca6704ab798b08ad"]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f0000000000)=0x401) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x8001) 6.759146616s ago: executing program 4 (id=207): setreuid(0x0, 0xee01) r0 = socket(0x1, 0x1, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x100, 0x20) r1 = socket(0x18, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0xc, r1) r3 = socket$inet6(0x18, 0x3, 0x93) sendto$inet6(r3, &(0x7f0000000180)="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", 0x98d, 0x40a, 0x0, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pread(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7) sysctl$ddb(0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000bc0)="1b59ee8ff29d5b67afa54cdf586d6a6dce6e01b7a7df0b955d894103edfeead2bc2109", 0x23) ioctl$TIOCSETA(r4, 0xcd604404, &(0x7f0000000080)={0x1, 0x402, 0x1, 0x2b, "2000030100010000000000000068a95a010400", 0x6, 0x2}) setsockopt$sock_int(r2, 0xffff, 0x10, &(0x7f0000000040)=0x103, 0x4) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x3, 0x4, 0x1, 0x5, "01dee98d0000000000f9ff00000000002000", 0x40, 0x4f5}) sysctl$kern(&(0x7f0000000040)={0x1, 0x2d}, 0x2, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_pts() syz_open_pts() syz_open_pts() lseek(r5, 0x2, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f00000000c0)={0x6, 0x1c}, 0x2, 0x0, 0x0, &(0x7f0000000000), 0x0) fstat(r0, 0xffffffffffffffff) 6.684829353s ago: executing program 4 (id=210): chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xffffffffffffffff) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) r0 = open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb6) mkdir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x1005, "ff14e7130b1e586ca6294000", 0x40, 0x5}) (async, rerun: 32) writev(r1, &(0x7f0000001440)=[{&(0x7f0000000000)="05dda0809fb2b2e274d94261364a383dbd9359d4db0e1e3f011e2ba463251c88ee01ec862c85e74df01c5153973f74cb1b1558e19fd03c51719187cb99ee4144667a74e9", 0x44}, {&(0x7f0000000080)="b37a132e26113163c0361b143b8a176f8a3930a4aee007fcf0aae8be44c6fbbbf3c338277e662fc4578a475c8afef734328201750fa1fe5e1a41634684967312bec015d7c107ebd14c4023df9cb3426076c2ee5265229f7524756f96d2e8ec0e5d0cc2c2992b1315c84a944e29cb5caec7f7688f8feb5ebeb195edb272257338a2fe018f1ac0621cbf049d8329dbde918bc2d1d151682c6d8fed60e834e19c556bd54e", 0xa3}, {&(0x7f0000000380)="85c8b62ca7321f78265a12ac3269c7998f5b5566a394ff2f01c603c596b34450be31460781f79a2d8c7f2755e2d5960c18a871ae0c61fbd0888f85026054c3eb21549728befe", 0x46}], 0x3) (async, rerun: 32) syz_open_pts() (async) ioctl$TIOCSTAT(r1, 0x20007465) (async) syz_emit_ethernet(0x63, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x55, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @icmp=@generic={0x3, 0x9, 0x0, "3ab2662d2f66009ef777964fc661de1bb7a853ba602234c5ec945e090f3423def1435320b2dc0023fffb2f673b56358c4ab67e4ac3f49cdd056c051bcc"}}}}}) (async) sendmmsg(r0, &(0x7f0000000700)={{&(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x14, "867b23973b054f18a64e540bfd03d0ae", 0x3}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="838d83f06bf4482afd5aa7d1dea37ae3db0482e9ede9d6eb025ede028f54594b7a764872ac7cd3ef891d6cfca469ff34e1c4c1732126abc5d481a87e88f869de2d0547aba69cf8eb53dfb5fa0715f79dbd897a0061f9c5c38d50cc95acc24e6eaba0dae856bd75e284f6ad9600fcca2ff6ea2e4b9b9e70129bd45e25862b00fb0a4a60abdd71889a00a40fb4ff74023cb1ee979b31aed161e48d9420193d9981cded11ccd8444adb67c3360c18468ee905fef3a6030e429993a7a9028fdfd93edb694808cf075b7a2a09884c4fc2810de6809eab7781d11219ac1fcd0ee476ea12a0540391a09e2b9739e17475ea11ddbb", 0xf1}], 0x1, &(0x7f0000000480)=[{0x2c, 0xffff, 0x6c, "d750089ba51a4655c295ed14be291ad9627a2ac8b2811e0fde9458c2a0f1d9d1"}, {0x24, 0x1, 0x200, "0e0479449cde39547fbd39bc51afd71ad1772793eb"}, {0x34, 0xffff, 0x13885a8d, "2730e10cb17157deb896c32ca6bf0420331dfe755bc1c59b67b4ad64c0b7f8e25c7791f953"}, {0x14, 0xffff, 0x9, "b7388caf844f2a"}, {0xd4, 0x1, 0xffff, "1bcf4aa140b88c56c86e8ca71980d1e4eb29aa48b7f3dab30e85aac75330ed5e374074524a96d435da5155eb53bffab3cc8a0d3254d95d80d1642c57297fd69c5165270c5b6c343d0528b53c7cc92153c7746fce5d402a78507b643a1dc4a93c1bb1fcfae7054310fd910bd357ad615a7898d93f4a7cd18025f212db98c3449ccf1c6d0d022c598e8089d3834277430f6044956806a7bf380899ce9b5372490f3c36dde085de19205e62e80db3991d8396c618a5eec5bf37754713202190cee13f8d378f16"}, {0x24, 0xffff, 0x9, "abbd64fd1d659f09b5f06bfd85627f030f22815e48ab9b"}, {0xe4, 0x1, 0x8, "eeda6bff8637b1f0b9f66294ca07ec1a5070f7715093e56cb957019c7b3e4247cb627af03e39a4df357d6894bd111e8f6d652a0c427db76803db1a568aa29f99ff1228ca10c078592c88e755e81deff19efad5a9d0c5ebf9542f8ab382297ae0e6b210057ee30634e115ddb4b17f06d2425f10a17c2ea10e06e59c7e77b645772a2d7ed43e31e1aad4339d2319e59667596b3fdc4d8c166527cef4a2ba7201200517243c145da7849808d62346c3852a8ffeef0dead7bad9e52866dc7fca5d5caf90396e812309b15a3fd75ef7c577d85b0b7d5eb7fb81"}], 0x274}}, 0x38, 0x4) (async) r2 = msgget$private(0x0, 0x8) msgrcv(r2, &(0x7f0000000740)={0x0, ""/220}, 0xe4, 0x0, 0x1400) 6.462043692s ago: executing program 2 (id=56): truncate(&(0x7f0000000080)='./file0\x00', 0x80000000000007ff) open(&(0x7f0000000240)='./file0\x00', 0xf5d9d7bd29053ad2, 0x0) r0 = socket(0x2, 0x1, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x80}], 0x7, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_emit_ethernet(0x0, 0x0) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) truncate(&(0x7f0000000000)='./file0\x00', 0xfffffffffffff800) syz_emit_ethernet(0xd0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea07009a2c00fe8000000000000000000000000000aaff02000000000000000000000000000132000000000000004e224e21000890787c823dc543a16289f11967e95ff44fd630bf03d06b24bdc05546207ad9bc70969fa7b999b814800bc54931399816d4f7b467d9e44817edc906151e911b3ab5c2c24842a810a1f9d08d82af61d3f86a87224db75037cc95412faccf11545737cd1009491fda50aaa083ab172f8d8916b009853f580958fcd61d4104af64003b7c463bca6704ab798b08ad"]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f0000000000)=0x401) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x8001) 5.379605724s ago: executing program 1 (id=222): mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r0 = open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {0x2, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0xaa19}, {0x2}, {0x3, 0xffffffff}, {0x2}, {0x2, 0x4}, {0x0, 0x8000}, {0x0, 0x3}, {}, {0x0, 0x6}, {0x2, 0x4}, {0x2, 0x40000001}, {0x3}, {0x0, 0xffffffff}, {0x0, 0x7ff}, {0x1, 0x5}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {}, {0x1, 0x7}, {0x2}, {0x0, 0xfffffffd}, {0x2, 0xa}, {0x2, 0x100004}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x6384) r2 = open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) socket(0x18, 0x1, 0x0) r3 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ktrace(&(0x7f0000000040)='./file1\x00', 0x2, 0x2, 0x0) mknodat(r3, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x3402) open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) pread(r0, &(0x7f0000000340)="18d4385d", 0xfffffffffffffe0e, 0xff) open$dir(&(0x7f0000000440)='./file0\x00', 0x40000, 0x4) setreuid(0x0, 0xee01) ioctl$DIOCGETRULE(r2, 0xcd604407, &(0x7f0000000840)={0x6f, 0x7ff, 0x4, './file0\x00', './bus\x00', 0x0, "d94845fa7bcdffaecd1e0449df1236182f63fe12ed730f58a263004ce7ee228638af8b6471a1b639b8431eef3e5354ea26d40602f828cf64a0851034ae544d58885bc3d1d91395354945756353d702a6f9fbbfe5ee077d6a6a02a48f9282f360b2bae190e2eaf42daa7aa36a62097910823617cf3a80ec2da82c1af95b33544ce214c5fd8cae182ec94fe360cdb54537c419cca3596b0fe5817e8292de92b4712336c2d84f5ba831ee5b5d8315349b3a93365b912fe7f6d028891ae2db479d58032fd2d6e049c542c7c0c92848f8d209e9af6e07fa28e695372d4235a4f8b8e42d3f63af133857452ac6329d9494e31f9292697e1d9c052048e27c463c6b334f4377bb207bbd514ed97fdebba8ba4164ae6fe3b8eda2a80ee795cb562a776f851af102e050d36c759c2e5e77c4dd9f1cb0c2702a92df7fc9c20b85a365e06611361a519e96ea987be9a39e384d1e8abd5724a213786ff791f3797f0b8deb2be4f2ad948f69d7dd76b1bec93eaa76c592c1ed6d103a03931e4cea840c7dd81414e8cd14bcfd2b0526463d1127e90429aa1b1eed960caf91c2db4489fee20e26fc5b1c845d36be744d09fe7c6449bc0b2e8fec130a1f8b471febb6a8fc5cf864fe024f7db68710000daed237bb55bfa513280a9140af5caccb2b72cbe36878665906fb61db0b3388bcde93f4c3259966c296f333eea6700e029b8884ca3509ad036aa15d07cf59100f8550fedd82cd2819c63a3b028613442149b43993fb4b8b086a24f1b4507dddb1c2712b410f81f6f3e227d8993bc723acb90f1b156a08526f0e5c675f37618f256092cdb4ae9ddf0cbb780a41b046bf8daea7f839c59d1d63059d1e1ee0781dc5aff8c35e1ec4045a48f1bf8103782f7fdab10ab12ccdfcfe424d51dfb1f03d4b626bdac360d2c23ae8efcf0ce4cc90a6ac5671bf7c365cb105def0c6a9a2e4da0851a7dcd5e4b51ff81b027365b428de4fae8e0ee73d1dbde9707df5f514b9f1998e210a05d609e7341a1fb737743da839c9cb93efaa0c8828ee081deec78a751a0fd39899adb02b73d29ebb471a190a3b6125d255d90b89f959cc83494ea2fc5ef90b99ffd1444039c6338ceec52a3899a032da2520262c4998101b4b4c560ce213dc818bce5574b7d82becdc361214df05a6d03ac865243346d7ecd1930c4e72ebacb0aa4e28e40277db84fc3d82d808ddd9091fe2ec2383769885fe0194980c8c63a0f40602cbd2e9560cc18887055a7a4fedd68e491e4b4ad110546feeccae3829ce8ecceaacc0b277e3bf31baff56e70f40a4c7e3f9553a8d66f77c48794a4b8ebfde06f4b3d5a8f26836a133d854875d35c800c9a7cd8caa6b4a422ada9c19ec3984add0dfab5781b8f9883206dc1e9b9ee319eaf2b449d61ce23d9a84e64bf1b598185427a6168414cc808a66baa40db5a7bfaa0b47f730d579bb682209b7c56f8f60089a760c64ec0f906d8db306f5689264cf478fb77cba9deed3d90bd15b8899cb344f37dad9c077f817827fadf744faf2275b7019b4371f65f3f0a7d3c8cb6aa08bfc1767347e5cdf96a8d6f7b6e2b957529286607eaade0c4d072807bb5cd748fcb35dbf781f994323de4c451f5fec7f0f6df0c49da6899e3a4a7686bc5e6fcd822c4624e30dd7781ba7dcca4d94d7e13cf8092812af454f571b92249bbedd84d39e715f7c3dacb609f6204284545dfb69fa51f4c7d2e15466e2d117e67bf9cd5a12988c0dade47ac2048ba7ca180681ab122cfc3733a836d49472b7e1fb71a654d3e18456bbe872e446da580b6decf4ca5a0696dd2eb6b15b92b86280e39a5cdea2264a6a958aa29ab8d097c6acacac1ef20bf4025900c982071cd411fa3e9c4c0461ae6eb42eda970da3d7654a32a6535c3d3ff7c887026e3191524690f2aa1d9b"}) sysctl$kern(&(0x7f0000000180)={0x1, 0x5a}, 0x2, &(0x7f0000000240)="2ca1fcceda86ef29a7ddf1db1cc277d179adf850983be5767a3b271744d211de8ccd3f9d048aabfd521fb314af969b72f227db0e38c7ac51e1975c4e01c29fe13ee6f866448cfa7778f5b0fa2a8ac09e2d6ede138852418475a113bc4cf47d9794f26fac8402182819703570ff9b474fa796e4fbbe303a96299854e24cb398d083e8d6f84653c7991be4429f613ab22fa921a82a1f400a6913750b9bd84adda42df1", &(0x7f0000000300)=0xa2, &(0x7f0000000380)="e50cf0a8f555ce3bd9d10f23e3aaad7b3a1a814170b724576a919364083d237dfde1b6de787a1ec9dd48463ceb77bac84c9ed9e33062c8bc475af5e11917deaaaea072e35d76d007616ed87b6305e9aa0a1940306d87fc11b26d043860d6485bc680eff46d09b2c6f48af65dd5aa565dbe98987418204a0fca9e513c730a64071c613c91bde677f7c347669787d0fbdbbab43fa3d0", 0x95) kill(0xffffffffffffffff, 0x13) 3.891798293s ago: executing program 2 (id=56): truncate(&(0x7f0000000080)='./file0\x00', 0x80000000000007ff) open(&(0x7f0000000240)='./file0\x00', 0xf5d9d7bd29053ad2, 0x0) r0 = socket(0x2, 0x1, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x80}], 0x7, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_emit_ethernet(0x0, 0x0) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) truncate(&(0x7f0000000000)='./file0\x00', 0xfffffffffffff800) syz_emit_ethernet(0xd0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea07009a2c00fe8000000000000000000000000000aaff02000000000000000000000000000132000000000000004e224e21000890787c823dc543a16289f11967e95ff44fd630bf03d06b24bdc05546207ad9bc70969fa7b999b814800bc54931399816d4f7b467d9e44817edc906151e911b3ab5c2c24842a810a1f9d08d82af61d3f86a87224db75037cc95412faccf11545737cd1009491fda50aaa083ab172f8d8916b009853f580958fcd61d4104af64003b7c463bca6704ab798b08ad"]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f0000000000)=0x401) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x8001) 2.690506556s ago: executing program 1 (id=240): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) open$dir(0x0, 0x0, 0x2) socket(0x2, 0x8002, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r2, &(0x7f0000000000), 0x10) sendto(r2, 0x0, 0x0, 0x203, 0x0, 0x0) r3 = dup2(r0, r0) fsync(r3) r4 = socket(0x2, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000800000000000000a30000000200", 0x47}, 0x1c) connect$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4d) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) accept(r5, &(0x7f0000000340)=@un=@file={0x0, 0x0, ""/513}, &(0x7f0000000580)=0x203) 2.628440054s ago: executing program 1 (id=246): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x9, 0x9, 0x7, 0x6b, "d902dab47be07e41158ad223749e39cd7dab8d34", 0xe8, 0x1}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1) r1 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, 0x0, 0x0, 0x0) closefrom(r2) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0xff) 2.515313141s ago: executing program 6 (id=248): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mknod$loop(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) open$dir(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x10e) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r2 = kqueue() kevent(r2, 0x0, 0x8, 0x0, 0x3f5, &(0x7f0000000000)={0x5, 0x49713a75}) socket(0x18, 0x2, 0x4) r3 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r3, 0x6, 0xa, &(0x7f0000000340)="15337ac0", 0x4) r4 = socket$inet(0x2, 0x3, 0x40) sendto$inet(r4, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x100007) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) open$dir(0x0, 0x80, 0x4a) select(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) unveil(0x0, &(0x7f0000000200)='r\x00') ioctl$BIOCSETIF(r1, 0x8020426c, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000380)="624455ee462bd13bfe7560bd59840fcb79fe11ed00fa2e3c420aa26c4c41a52ad39f4649ec12a448234ec2d83f0ea4d994dd1107b14e8d561788f8c9bf3bd2762229401f7ffe7e61bf67021cff7ed0e695c6c53b5c5350392e2e853ac2", 0x5d}], 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000b80)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x4}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00005dd000/0x3000)=nil, 0xc}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x40000000000007}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x100000001}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000abf000/0x3000)=nil, 0x1ff}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x44, 0x0, 0x0, 0x2, 0x9501, 0xffffb6e0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffe, 0xffffff49, 0x9, 0x8000009, 0x0, 0x0, 0x6, 0xffc, 0x0, 0x4, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3, 0x0, 0x3, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xffffffff, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x2, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59e01a04, 0x0, 0x0, 0x7a1, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xd, 0x0, 0x8, 0xa, 0x2, 0x0, 0x3, 0x0, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x80, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb2, 0x0, 0x0, 0x0, 0x1, 0x398, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff]}) r6 = kqueue() kevent(r6, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$TIOCSETA(r7, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6, 0x2}) fcntl$setflags(r0, 0x2, 0x1) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x1, 0x0) 2.250115199s ago: executing program 7 (id=251): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x4, 0x9, 0x6dca8653, 0x160350a, "04f00400000030bd1b8e5899ff127009c8dd00", 0x7fffffff, 0x45}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="b7a64d57bac90e4a8e26c1282437bc232729f708cb574e9b229afc8abe93b8d13532370a72227e25c48dcbc055230a3ef7d1aa7f8718d374fe00"/71, 0x47}], 0x1) 2.242634838s ago: executing program 7 (id=253): r0 = socket$inet6(0x18, 0x3, 0x10) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() read(r2, &(0x7f00000001c0)=""/86, 0x56) writev(r1, &(0x7f00000005c0)=[{&(0x7f00000009c0)="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", 0x115}], 0x1) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00'}) select(0x40, &(0x7f0000000000)={0x78, 0x23f0, 0x8, 0xffffffff80000000, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x8, 0x7e}, &(0x7f0000000040)={0x5, 0x100000000, 0x859d, 0x5, 0x7f, 0x7fffffff, 0x1, 0x1}, &(0x7f0000000080)={0x4, 0x7fffffffffffffff, 0x6, 0xc21a, 0x7fffffff, 0x1, 0x0, 0x5}, &(0x7f0000000b00)={0x5, 0x1ff}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) getsockopt(r0, 0x1007fff, 0xfffffffd, 0x0, 0x0) 1.987301381s ago: executing program 6 (id=255): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0xfffffffe, 0xace7, 0x8, 0xfffffffc, "655b26833adb80b1d953da76195e6a0ac331e6ef", 0x3, 0x80}) ioctl$TIOCSTAT(r0, 0x20007465) r1 = socket(0x11, 0x10000000000003, 0x0) sendto$unix(r1, &(0x7f00000000c0)="b10005030000040005000000070000003300080000a11800fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be3816499104000000882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257afa8c500002002fbfe0c2300008abfba3500000008e371a3f8343712051eeab71d1889e000"/177, 0xb1, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec370", &(0x7f0000000080)=0x1b, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus/file0\x00', 0xc000, 0x7) ktrace(&(0x7f00000000c0)='./bus\x00', 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, &(0x7f0000000040)={0x0, 0xb058640ac1a0edd5, 0xffffffffffffffff, 0x0, 0x4}) ioctl$WSDISPLAYIO_GMODE(r2, 0x4004574b, &(0x7f00000001c0)) 1.957895483s ago: executing program 0 (id=256): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000340)={0x1000, 0x0, {[0xfffffbeffffffff7, 0x0, 0x4787, 0x1002, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2eff, 0x0, 0x3, 0xfffffffffffbfffd, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0x0, 0x80000001, 0x8000000000000000, 0x100000000, 0x5, 0x7b98, 0x6, 0x0, 0x80000001, 0x4], [0x5ad8, 0x27f, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x9, 0xfffffffffffffffe, 0x6], [{0x4, 0x104, 0xffffffff, 0x7d06}, {0xfffc, 0x2, 0x9, 0x10}, {0x0, 0x0, 0xfffffffe, 0x48}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x7}, {0x0, 0x2106, 0x40040, 0x2000000000000000}, {0xf054, 0x0, 0x6, 0x1}, {0x8, 0x1, 0x0, 0x2}], {0x8002, 0x6, 0x8}, {0x21, 0x6, 0x100000b0, 0x1}}}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) sysctl$hw(&(0x7f00000000c0)={0x6, 0x19}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0xc0785101, &(0x7f0000000400)={'tap', 0x0}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$DIOCCHANGERULE(r1, 0xcd60441a, &(0x7f0000000580)={0x80, 0x7913, 0x0, './bus\x00', './bus\x00', 0x0, "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"}) 1.953103433s ago: executing program 6 (id=257): r0 = semget(0x0, 0x1, 0x281) bind(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) setresgid(0x0, 0x0, 0x0) (async, rerun: 64) semctl$IPC_SET(r0, 0x0, 0x1, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) setuid(0xffffffffffffffff) (async) semctl$GETVAL(r0, 0x2, 0x5, 0x0) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x1, "fe80000400000000414a0f47a500fdff", 0x8}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) r1 = socket(0x18, 0x3, 0x80) (async) r2 = socket$inet6(0x18, 0x1, 0x6) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x11, "8d54a0ab132a9cb69a7a695fd6d888b0", 0x6}, 0x1c) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, '\x00', 0xffffffc0}, 0x1c) 1.952714226s ago: executing program 7 (id=258): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000b40)={0x5, &(0x7f0000000000)=[{0x0, 0xff, 0x1, 0x6}, {0x35, 0x80, 0x2, 0x6}, {0xfffe, 0xc, 0xf1, 0x6}, {0x9, 0xfd, 0x9, 0xc00009}, {0x7f, 0xfc, 0x7, 0x4000800}]}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="b905b9f7ff00", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x3, 0x3, 0x8}}}}}}) 1.805765904s ago: executing program 5 (id=262): socketpair(0x1, 0x4000, 0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LIOCSFD(0xffffffffffffff9c, 0x80046c7f, &(0x7f0000000200)=r0) ioctl$WSMOUSEIO_GTYPE(0xffffffffffffff9c, 0x40045720, &(0x7f0000000000)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x47}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffeb0) sysctl$kern(&(0x7f0000000040)={0x1, 0x40}, 0x2, &(0x7f0000000080)="8b0e1be1da19846556df4ae9e40d2cb48982222a263abfc175b3e291", &(0x7f0000000100)=0x1c, &(0x7f0000000140)="328d", 0x2) r1 = syz_open_pts() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCDRAIN(r1, 0x2000745e) ioctl$TIOCGWINSZ(r1, 0x40087468, &(0x7f0000000180)) 1.805264397s ago: executing program 7 (id=263): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x3, 0x80, 0x40, 0x7}, {0x1ff, 0x7, 0x7, 0x8001}, {0x7, 0x6, 0x1, 0x200}]}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x812, r0, 0x2) ioctl$PCIOCWRITE(r0, 0xc0107003, &(0x7f00000000c0)={{0xf, 0x44, 0x6}, 0x3, 0x80, 0x3}) (async) closefrom(r0) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mquery(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}) r3 = kqueue() (async) r4 = getpgid(0xffffffffffffffff) fcntl$lock(r3, 0x7, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0x8, r4}) (async) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000001200)={0x0, 0x1000, &(0x7f0000000200)=""/4096}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000001240)={r5}) getsockname(r2, &(0x7f0000001280)=@un=@file={0x0, 0x0, ""/248}, &(0x7f0000001380)=0xfa) (async) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f00000013c0)) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001440)={&(0x7f0000001400)=[0xfc, 0x800], 0x2, 0x4}) (async) fcntl$lock(r0, 0x9, &(0x7f0000001480)={0x2, 0x2, 0x4, 0x6, r4}) (async) fcntl$getown(r1, 0x5) (async) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f00000014c0)={0x2, 0x5, 0x9, 0x3, 0x4, 0x2}) (async) lseek(r3, 0x7f, 0x2) (async) setsockopt(r1, 0x8, 0x3, &(0x7f0000001500)="9decc37deebd8dd06cbfc8fbdba952f112caf28c0197ab165de63197", 0x1c) (async) mquery(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x0, r3, 0x1) (async) socket(0x6, 0x5, 0x1) (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mknod(&(0x7f0000001540)='./file0\x00', 0xc000, 0x7fffffff) getpeername$inet6(r0, &(0x7f0000001580), &(0x7f00000015c0)=0x1c) (async) unveil(&(0x7f0000001600)='./file0\x00', &(0x7f0000001640)='x\x00') (async) fcntl$lock(r0, 0x9, &(0x7f0000001680)={0x1, 0x2, 0x6, 0x1000, r4}) (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f00000016c0)=0x42f405d2) 1.805054654s ago: executing program 0 (id=264): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) r0 = socket(0x18, 0x1, 0x0) shutdown(r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_pts() (async) r1 = syz_open_pts() fcntl$lock(r1, 0x8, &(0x7f00000001c0)={0x1, 0x0, 0x200000000000001c, 0x1000003fd}) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x1, 0x3, 0x40000000000000, 0x1000300000000}) syz_open_pts() syz_open_pts() connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) 1.702107681s ago: executing program 6 (id=265): r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000340)={0x1000, 0x0, {[0xfffffbeffffffff7, 0x0, 0x4787, 0x1002, 0x20000008001, 0x3, 0x6, 0xffffffffffffffff, 0xf0cd, 0x2f00, 0x2, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0xffffffffffffffa8, 0x82, 0xce5], [0x0, 0x7f, 0x8000000000000000, 0x4000000, 0x5, 0x26520a6a, 0x6, 0x0, 0x0, 0x4], [0x5ad8, 0xad41, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff, 0x6, 0x2], [0x0, 0x3, 0xfffffffffffffffa, 0x6, 0x2, 0x6], [{0x0, 0x4, 0xffffffff, 0x7d06}, {0xa, 0x2, 0x5, 0x100000000}, {0x0, 0x0, 0xfffffffa, 0x48}, {0x3, 0x1, 0x3, 0xffffffffffffffff}, {0x0, 0xfffffffe, 0x0, 0x1}, {0x0, 0x2106, 0x40040, 0x2000000000000000}, {0xf054, 0x0, 0x1, 0x800}, {0x4, 0x8000001, 0x0, 0xfff}], {0x8002, 0x6, 0x8}, {0x4, 0x101, 0x1, 0x2}}}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0xc0785101, &(0x7f0000000400)={'tap', 0x0}) 1.697503661s ago: executing program 3 (id=266): getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) (async) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) fchown(0xffffffffffffff9c, r0, r1) (async) setrlimit(0x0, &(0x7f0000000240)={0x5, 0x1fd}) (async) setuid(0x0) (async) sync() 1.686894962s ago: executing program 5 (id=267): r0 = openat$dri(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x2000641e) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffff9c, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x2000000000000, 0x8000000000002}}) r1 = socket(0x18, 0x2, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000140)={0x4, &(0x7f0000000000)=[{0x2, 0xff, 0x1, 0xd}, {0x3, 0x4, 0xef, 0x6}, {0x87, 0xfd, 0x7, 0x9}, {0x9b1e, 0xf6, 0x80, 0x4200800}]}) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) setsockopt(r1, 0x2c, 0x2, &(0x7f0000000040)="03ffe3e6", 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(r5, 0x0, 0x0) setresgid(0x0, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x2, &(0x7f0000000080)="bd", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) r6 = socket(0x18, 0x2, 0x0) r7 = getpgid(r4) getpgid(r7) setsockopt(r6, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4) setsockopt(r6, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) r8 = socket$inet(0x2, 0x2, 0x8) setsockopt(r8, 0x0, 0x20, &(0x7f0000000240), 0x0) 1.476208731s ago: executing program 3 (id=268): mknod(&(0x7f0000000000)='./file0\x00', 0x8000, 0x7) sysctl$hw(&(0x7f00000006c0)={0x6, 0xe}, 0x2, &(0x7f00000008c0)="13cb4849dddb95", &(0x7f0000000700)=0x7, &(0x7f0000000740), 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) 1.475896277s ago: executing program 2 (id=56): truncate(&(0x7f0000000080)='./file0\x00', 0x80000000000007ff) open(&(0x7f0000000240)='./file0\x00', 0xf5d9d7bd29053ad2, 0x0) r0 = socket(0x2, 0x1, 0x0) poll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x10}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x80}], 0x7, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000100)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_emit_ethernet(0x0, 0x0) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f00000001c0)) truncate(&(0x7f0000000000)='./file0\x00', 0xfffffffffffff800) syz_emit_ethernet(0xd0, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea07009a2c00fe8000000000000000000000000000aaff02000000000000000000000000000132000000000000004e224e21000890787c823dc543a16289f11967e95ff44fd630bf03d06b24bdc05546207ad9bc70969fa7b999b814800bc54931399816d4f7b467d9e44817edc906151e911b3ab5c2c24842a810a1f9d08d82af61d3f86a87224db75037cc95412faccf11545737cd1009491fda50aaa083ab172f8d8916b009853f580958fcd61d4104af64003b7c463bca6704ab798b08ad"]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f0000000000)=0x401) syz_extract_tcp_res(&(0x7f0000000040), 0x2, 0x8001) 1.475829045s ago: executing program 3 (id=269): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000002b40), 0x40, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r1, &(0x7f00000030c0)={&(0x7f0000002e80)=@file={0x80, 0xbf921e85b9ddf0a5, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000003080)=[@rights={0x10, 0xffff, 0x1, [r0]}], 0x10, 0x8}, 0x6) (async) open$dir(&(0x7f00000000c0)='.\x02/file0\x00', 0x10, 0x1f6) 1.475046591s ago: executing program 1 (id=270): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="415fd77e1c92", @broadcast, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @broadcast, @broadcast, @remote={0xac, 0x14, 0x0}}}}}) r0 = socket$inet(0x2, 0x3, 0xfc) pledge(0x0, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="415fd77e1c92", @broadcast, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @broadcast, @broadcast, @remote={0xac, 0x14, 0x0}}}}}) (async) socket$inet(0x2, 0x3, 0xfc) (async) pledge(0x0, 0x0) (async) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) (async) 391.170362ms ago: executing program 0 (id=271): r0 = socket(0x2, 0x3, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r2, 0xc0104451, &(0x7f0000000040)={0x2, 0x408, &(0x7f0000000700)=[{0x0, './file0\x00', 0x2}, {0x1, './file0\x00', 0xfffffffd}]}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$DIOCXCOMMIT(r1, 0xc0104452, &(0x7f0000000040)={0x0, 0x40a, 0x0}) (async, rerun: 64) shutdown(r0, 0x2) (rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) (async, rerun: 32) setgid(0xffffffffffffffff) (async, rerun: 32) setgroups(0x0, 0x0) (async, rerun: 32) setresuid(0xee00, 0xee00, 0x0) (rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000001c0)=@file={0x5, 0x1, './file0\x00'}, 0xa) (async, rerun: 64) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000040)=0x10000400, 0x4) (async, rerun: 64) setrlimit(0x8, 0x0) (async) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f00000006c0)={0x6, &(0x7f0000000080)=[{0x81, 0x5, 0x4, 0x8}, {0x87, 0x6, 0xcb, 0xd8}, {0x9, 0x9, 0xfe, 0x401}, {0x32, 0x5, 0x80, 0x6}, {0x75, 0xdd, 0x5, 0x1}, {0x3, 0x0, 0xc, 0x3096b9af}]}) (async) r6 = socket(0x6, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r6, 0xc1126939, &(0x7f00000001c0)) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000002340), 0x20, 0x0) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000600)={0x2, &(0x7f00000005c0)=[{0x2, 0xf, 0x6, 0x8}, {0xfff2, 0x4, 0x6, 0x7}]}) (async, rerun: 32) r8 = socket(0x11, 0x3, 0x4) (rerun: 32) accept$inet(r8, &(0x7f0000000040), &(0x7f0000000580)=0x10) (async) sendto$unix(r8, 0x0, 0x0, 0x408, &(0x7f00000002c0)=@abs={0xfb, 0x1, 0x0, 0x1}, 0x8) (async) r9 = socket(0x2, 0x2, 0x0) sendmsg$unix(r9, &(0x7f0000000340)={&(0x7f0000000000)=@file={0x9, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYRES32=0xffffffffffffff9c, @ANYRES32=0xffffffffffffff9c, @ANYRES32], 0x1c, 0x9}, 0x40c) (async) ioctl$DIOCRADDADDRS(r7, 0xc4504443, &(0x7f0000000100)={{'./file0\x00', './file0\x00', 0x0, 0x7f}, 0x0, 0x34, 0x0, 0x4, 0x5, 0x7fe, 0xc, 0x2, 0x1}) 390.574939ms ago: executing program 1 (id=272): ioctl$DIOCRGETTSTATS(0xffffffffffffffff, 0xc4504440, &(0x7f0000000700)={{'\x00', './file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x28, 0x7}, 0x0, 0x4d2, 0x0, 0x5, 0xb60, 0x14000, 0x400, 0x0, 0x8f}) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x308}, 0xc) r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x4f1, 0xa, 0x9, 0x6468, "331898948236dc216cf42b9787a54510c3ebc3f8", 0x2f, 0x1000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg(r1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x454}, 0x4008}, 0x38, 0x0) syz_emit_ethernet(0x7bf, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = semget(0x0, 0x1, 0x281) setuid(0xffffffffffffffff) semctl$GETNCNT(r2, 0x3, 0x3, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@random="8f6f77ede655", @local, [], {@ipv4={0x800, {{0xc, 0x4, 0x2, 0x0, 0x44, 0x64, 0x7348, 0x2, 0x89, 0x0, @local={0xac, 0x14, 0x0}, @rand_addr=0x4000000, {[@ra={0x94, 0x4, 0x9}, @ssrr={0x89, 0x7, 0xfe, [@multicast1]}, @ssrr={0x89, 0xf, 0x1, [@empty, @multicast2, @broadcast]}]}}, @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x0, 0x7ff, 0x0, 0x6}}}}}}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0xd}, 0x4, &(0x7f0000000080), &(0x7f0000000000), 0x0, 0x0) 342.238771ms ago: executing program 3 (id=273): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000002340), 0x20, 0x0) mquery(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x2, 0x0, r0, 0x2) getresuid(0x0, 0x0, &(0x7f00000000c0)) 340.486601ms ago: executing program 4 (id=274): r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x7) close(r0) execve(0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./file2/file0\x00', 0x35e) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0xfc, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={0x0, r1, 0x1}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d420000000000000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r2, 0xc4504449, &(0x7f0000000740)={0x9, 0x4001, 0x101, 0x11, "390122420000004000", 0x6, 0x10}) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') 338.656059ms ago: executing program 5 (id=275): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x9) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x0, 0x2, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x2f00, 0x0, 0x7, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x9, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x80000000, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x7, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d0a}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x5, 0x8}, {0x29, 0x6, 0xb0, 0x2}}}) r0 = kqueue() kevent(r0, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) 310.20521ms ago: executing program 6 (id=276): sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000040)="4d71bc77857c284db523d42f6ea8040688fee3fd6a2f4600"/33, 0xffffffb7) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) sysctl$net_inet_carp(&(0x7f00000004c0)={0x4, 0x2, 0x70, 0x1}, 0x4, &(0x7f0000000500)="94b7742c3a13d866f10bc0677acb4579a559cb26b1cd34ecd12ec6cfa21b5ad218ae05777dafeb056e0199cc1d27ff4cd4819afe847e892f84047363b0c87af6e5d31796078e03f6401c36e9468e985c94f5", &(0x7f0000000580)=0x52, &(0x7f00000005c0)="624af67e44c384b75979e602701dda9a106066c158cf33993b9052628b6c5838f5b911c5101830d8b3ef5cb1e000a92e5a618c911792af3b5195e9535fa4165b13ad2a85dc13a355c48320174c5c2f734dd063cda7982e4c8ca5c2dfd6d245f53c2fa61b4591971eef61b8d79bd8581bf51397edc926da6fd11482c77cff92d9baeb641e9f2b8f0f35ff122beaf726abf9665db7609ee809848a6fd816b4698cdc3460bb34de9f95250cc0", 0xab) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x1a}, 0x4, &(0x7f00000000c0)="51d69144c9288e687f2aadca7e5bb9f8f6cbbe69e97d55fb29ce46eb964738bed1ab5c0e62958d42cfee7b19b566229f8089acc245d9cc34f7a0cb0b2d7efd067a90e44f683f78697dd16171f33d98455df88114a2240fb0876d4a13455d1cace1a2868cba305ad7d6a3faa94a3863e8ef47aa37278d5371f671ac328b9c77b76888473bbf40cd3361eb2a8c2728bb46769ef61404ae1573548fbc144b0f6642", &(0x7f0000000180)=0xa0, &(0x7f00000001c0)="61e85591f786ccbca379026b5c365d5a7287f0f95780ad1ef7f5a112d56c57e3b157199d720ca26409f5fa5003f2fc669652dd56e4cfc7de83abd89aff252a0c3b26b8a26cb1ab7e5787e4c7011b2b11ddddf71e77c259688eeedb116c417efa08364eacce8bfca908480af680f5eaed7d9572809fd6f624664143429ddb5b5e1ea1c0bbcf5074ec0a1252a903b5213f16158de00b", 0x95) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r0, 0x1000000000029, 0xb, 0x0, 0x0) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0xc003, 0x3a) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x10000007, "fefffffffffffffb538d0100", 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="0000000000000000812696bae71bdc191dfcb2152a", 0x15}], 0x1, 0x0}, 0xa) ioctl$WSMOUSEIO_GETPARAMS(r1, 0x80105727, &(0x7f0000000040)={0x0}) sysctl$net_inet_tcp(&(0x7f0000000280)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f00000002c0)="89c842a1f61370505e709f593b8cd101fa23e3d74ecd900949b38cf7896b33189687f5bb85bd6907429adb9a087ca853edcaa556c0da06f4be8131c70ebfb72f4a1a15c3edd96786aa0530867030306db96b2a1ee1aef9a4040815b070a7c4a4cdc8c52194ee1386d745b9bf74fef4500dd38ba299cadddf5a7123ab8a5b93810c03b879d18ae16494dfc38d93b4679d9853fc085b492ded11d265f237bea34277d1efaa30b5f3a4a94a02fbaca0ad62a6dea5a77d7bd9664e5aff075e1277c55aecf269712046fac74158dffa48edfa4b9590af1bcbbf143ddc4d5809d4891cd9667cdde0b87d9389104459c39abd38", &(0x7f00000003c0)=0xf0, &(0x7f0000000400)="a2a014128729b3a6421f2ee46c1ae54175f2962cedce929c8c902a03b9f893275d114f10a13402e322641b398125d0ad56a98789ff1472f5e106c12f4164cee052ccf628d9eef6e9fd9e09eb22dc46be0c26fda57447", 0x56) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000480), 0x20, 0x0) 307.440015ms ago: executing program 7 (id=277): chmod(&(0x7f0000000040)='.\x00', 0x35e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x400, 0x0) fchdir(r0) r1 = shmget$private(0x0, 0x4000, 0x1a2, &(0x7f000010f000/0x4000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/212) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000017c0), 0x1, 0x0) writev(r2, &(0x7f00000040c0)=[{&(0x7f0000003b00)="cc", 0x1}, {&(0x7f0000003bc0)="1b", 0x1}], 0x2) setgid(0xffffffffffffffff) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x24, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x80) setgroups(0x0, 0x0) r4 = semget(0x0, 0x1, 0x281) semctl$SETVAL(r4, 0x0, 0x8, 0x0) semctl$GETALL(r4, 0x0, 0x6, &(0x7f00000001c0)=""/2) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000180)={0x3961, 0x0, 0x3, 0x8a54}, 0xc) setuid(0xffffffffffffffff) unveil(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='c\x00') unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r5, 0xffffffffffffffff) r6 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xfffffffffffffc9f) setresgid(0x0, r9, 0x0) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000780)={{0x0, 0x0, r8, r9, 0x8f, 0x9, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x6, 0x0, 0x0, 0x6, 0x0, 0x8}) fchownat(r0, &(0x7f0000000200)='./file0/file0\x00', r5, r9, 0x2) 223.505133ms ago: executing program 3 (id=278): fcntl$lock(0xffffffffffffffff, 0x9, 0x0) (async) r0 = semget(0x0, 0x1, 0x281) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x6) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x10005, 0x8) ioctl$TIOCSTAT(r1, 0x20007465) (async) semop(r0, &(0x7f0000000000)=[{0x0, 0xfff8, 0x1000}], 0x1) r2 = semget(0x0, 0x1, 0x281) semop(r2, &(0x7f00000000c0)=[{0x0, 0xb, 0x1800}], 0x1) (async) ioctl$FIONREAD(0xffffffffffffffff, 0x80146940, 0x0) 222.209898ms ago: executing program 4 (id=279): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000400)={'tap', 0x0}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x9, 0x9, 0x7, 0xffffff65, "d902090000007e4115080000009e39cd7dabcd3c", 0x1ff, 0xffffffff}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x48, 0x2e, 0x6, 0x7fc0}, {0x14, 0x9, 0x0, 0x10056}, {0x9b1e, 0x0, 0xf6, 0x40007fb}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 221.538986ms ago: executing program 0 (id=280): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) writev(r0, &(0x7f0000003b00)=[{&(0x7f0000000ac0)="e215fd43775c060e5c9a61b42627a959002f40e562e620ded73d99dfb3992ab71fdcbc6bdc4e22c72d6cb095019e1c1a77dfff1638a00399a558f36292c49fca8697640a619fb76cd5960b56f21f89ca5087bb1d41b8f012ef717608d2604e5b3f79122ee681d76f4c", 0x69}, {&(0x7f0000000800)="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"/434, 0x1b2}], 0x2) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') setrlimit(0x7, &(0x7f00000002c0)={0xf, 0x8}) execve(0x0, 0x0, 0x0) (async, rerun: 32) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) (async, rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0) mprotect(&(0x7f0000763000/0x1000)=nil, 0x1000, 0x0) 220.942801ms ago: executing program 5 (id=281): r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000)={0x7, 0xaeb2}, 0xd) (async) sysctl$hw(&(0x7f00000000c0)={0x6, 0x6}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00000dc000/0x12000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffffe}, {&(0x7f0000180000/0x2000)=nil, &(0x7f00003d6000/0x1000)=nil, 0x9}, {&(0x7f0000543000/0x4000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdfffffffffff7f9}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f00000e1000/0x3000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000411000/0x2000)=nil, &(0x7f00003d5000/0x4000)=nil, 0x4}, {&(0x7f00000db000/0x2000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000125000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xc8}, {&(0x7f00006ee000/0x3000)=nil, &(0x7f00000e8000/0x3000)=nil, 0xb}, {&(0x7f00000f3000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000508000/0x2000)=nil, 0x8}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000036000/0x2000)=nil, 0x6}], './file0\x00', 0xfffffffa, 0x0, 0x0, 0x0, [0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbdb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9b, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5c, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x4, 0x11, 0x0, @rand_addr=0x4, @broadcast}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0xe, 0x7f00, {0x5, 0x4, 0x1, 0x2, 0x2, 0x68, 0x1, 0xf1, 0x11, 0x63a, @broadcast}}}}}}) (async) ioctl$DIOCKILLSTATES(r1, 0x0, &(0x7f0000000ac0)={{0x7fff, 0xe2, 0x1}, 0x0, '\x00', 0x6, {@addrmask={@v6=@ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @v4=@multicast2, 0x0, 0x0, 0x16}, [], 0x6, 0x4, 0x7}, {@table={'./file0\x00', 0x0, 0x3, 0x2}, [0xbc89], 0x10, 0x3, 0x6}, './file0\x00', './file0\x00', 0x2, 0x4}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r2, 0x8020699f, &(0x7f00000001c0)) 145.528242ms ago: executing program 1 (id=282): openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCLOCK(r0, 0x20004276) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) write(r0, &(0x7f0000000000)="df7c", 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) syz_emit_ethernet(0xe, &(0x7f0000000080)=ANY=[]) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0xff, 0x1, 0x9}, {0x30, 0xc9, 0x2, 0x8}, {0x9b1e, 0x22, 0xf, 0x40207ff}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6500000000000090000f60056930fb9b7bc65af1faf4a0500d36083c9c73a28ce81b05e503c1d00000000003605f24ce6ca4cb5a378e13d53bd6c74f3551505a7518b78cbfac9ad1ed65845", &(0x7f0000000000)=0x4d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd00000000000806300000000000050002c506000000000000fea100000000000000000000000000aa4e214e2000089078b845ee33051c6bc2d8616d23c62d2c9c05b43c2098a6a21db4cbdd050c0a8580f5a49aa18e536b25ab4f91db0a5bcfcbbdc5360842bc7ca6fbedc0c690e7f54839f9eba299975d1ec1f5b84434ffc1b81ec474972e017d002a26a7c5b22711c40ef00a77e3bf106f21c177a8eb64b0ca96bc936b9ec6ec6b524c31352cb62ed98eed207cc971a182e5ac508ada1bc6f807a693c1a1c6a15dfa6bf89f76b40340f9"]) pwritev(r4, &(0x7f0000000d00)=[{&(0x7f00000001c0)="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", 0x164}], 0x1, 0x4) execve(0x0, 0x0, 0x0) r6 = socket(0x2, 0x2, 0x0) connect$unix(r6, &(0x7f0000000000), 0x10) write(r3, 0x0, 0x0) 144.334545ms ago: executing program 3 (id=283): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) open(&(0x7f0000000380)='./file0\x00', 0x40000, 0x4ebfac6bbaf7929) r0 = semget$private(0x0, 0x4, 0x20) semctl$GETVAL(r0, 0x0, 0x5, &(0x7f0000000980)=""/179) semop(r0, &(0x7f0000000000)=[{0x3, 0x40}], 0x2aaaaaaaaaaaac58) semget$private(0x0, 0x2, 0x207) semop(r0, &(0x7f0000001bc0)=[{0x0, 0x3ff, 0x1000}, {0x0, 0x6, 0x1000}], 0x2) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000000)=""/209) open(&(0x7f0000000040)='./file0\x00', 0x1, 0xc9) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x5, 0x7ffffffd, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x44, 0x3effd}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000200)={0x80, 0x800, 0x800, 0x0, "cb962592b2baeed20a2296685b81de9f71e03bff", 0x8, 0x8}) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000780)=0x7) close(0xffffffffffffffff) setrlimit(0x8, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8, 0x3, 0xffff7e02, 0x4, "08ed9599000000094137f9534863ef7cf8ffffe6", 0x5, 0x10001}) r3 = socket$inet(0x2, 0x3, 0xfc) sendmsg(r3, &(0x7f0000000480)={&(0x7f0000000280)=@un=@abs={0x4, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x0, &(0x7f0000000440)}, 0x2) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xdafb}], 0x1) writev(r2, &(0x7f0000000600)=[{&(0x7f00000000c0)='I', 0x1}], 0x1) r4 = socket(0x2, 0x8002, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) closefrom(r5) socket$unix(0x1, 0x1, 0x0) r6 = socket(0x1, 0x8002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) closefrom(r7) 143.354289ms ago: executing program 4 (id=284): unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='c\x00') (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x32}, 0x2, &(0x7f0000000100)="71100000", &(0x7f0000000140)=0x4, 0x0, 0x0) (async) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 142.959509ms ago: executing program 7 (id=285): semget$private(0x0, 0x0, 0x140) r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x3, 0x0, 0x7, 0x1000300000080, 0xffffffffffffffff}) flock(r0, 0x1) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x2ff, 0x300000001}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mknod(&(0x7f0000000140)='./bus\x00', 0x6000, 0x6d4) open(&(0x7f0000000140)='./file0\x00', 0x200, 0x130) chmod(&(0x7f0000000000)='./file0\x00', 0x3de) setuid(0xee01) poll(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = open(&(0x7f0000000280)='./bus\x00', 0x8, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x5, &(0x7f0000000000)=[{0x3, 0x9, 0xf7, 0x7}, {0x27, 0x0, 0xfe, 0x4}, {0x2, 0xff, 0x1, 0x9}, {0x87, 0x69, 0x9, 0x9}, {0x9b3e, 0x1, 0x7, 0x10000}]}) syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[]) r3 = dup(0xffffffffffffffff) setuid(0xee01) ktrace(0x0, 0x5, 0x40000424, 0xffffffffffffffff) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x8010640d, &(0x7f0000000100)={0x1, 0x6}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x0, 0x4, 0xf6, 0x80000000}, {0xffff, 0x4, 0x0, 0x2}, {0x9, 0x9, 0x6}, {0x1, 0x7f, 0x3, 0x5}]}) 137.058715ms ago: executing program 6 (id=286): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2) r2 = kqueue() r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0) ioctl$DIOCRCLRTSTATS(r3, 0xc4504441, &(0x7f0000002100)={{'./file0\x00', './file0\x00', 0x20, 0xfd}, &(0x7f0000000200), 0x428, 0x8a, 0x9, 0x0, 0x9, 0x8, 0x12, 0x40000008}) r4 = dup2(r0, r1) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r5, 0xc0284457, &(0x7f0000000000)={0x0, 0x4, 0x9, 0x1405, "08040000000080000001000000f8ffffff00", 0x4917, 0x1000}) utimensat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x8, 0xfffffffffffffff9}, {0x61, 0x8}}, 0x0) kevent(r2, &(0x7f0000000240), 0x33b4dd72, 0x0, 0xffffffff, 0x0) 132.047849ms ago: executing program 4 (id=287): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x1ff, 0xfffffffc, {0x8, 0x10000100000004}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_open_pts() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x2cc1, "00000000000000e98a0400110600", 0xb}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x3, 0x80) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) socket(0x18, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[]) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f00000001c0), 0x0) setsockopt(r0, 0x1000000029, 0x9, &(0x7f0000000000), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100, 0x12a) openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) socket(0x2, 0x3, 0xd) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f0000361000/0x1000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000193000/0x1000)=nil, 0x80}, {&(0x7f000003a000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000445000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000445000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x9f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0xf4a, 0x28, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8660, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffb5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8273, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffff800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x918, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xfffffffe]}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501000000ae05003f01070000009b08000000000500fef96ecfc71ad3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297de1aa050400ce94e2f0ad3ebbc257e4411f139b672f335c22db83b9b52bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00000000258100"/177, 0xb1, 0xba3ad5e63614cc98, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) kevent(0xffffffffffffffff, 0x0, 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000080)={0x2, 0x2, 0x4, 0x2f, "2000030100010000000000201200", 0x6, 0x2}) 15.065148ms ago: executing program 0 (id=288): ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc, 0xc, 0x5, 0xde}, {0x80, 0xff, 0xd2, 0x6}, {0x2, 0xb, 0xa, 0x8009}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x6811, r1, 0x20000000) unlink(&(0x7f0000000080)='./file0\x00') r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x24, 0x0, 0x2, 0x4}, {0x40, 0x9, 0xf7, 0x6}, {0x9b1e, 0xff, 0xf4, 0x4000800}]}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000280)={0x0, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x8020699d, &(0x7f0000000100)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = semget$private(0x0, 0x4, 0x100) semop(r4, &(0x7f0000000200)=[{0x4, 0x7, 0x800}, {0x1, 0x2}, {0x3, 0xfff7, 0x800}, {0x0, 0x2, 0x800}], 0x4) setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0xa4) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r5 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500fe1e24463500000000000000000000000000000000cc05ed41a3ec9a5c3c0cdf19417708c0206dbfa2bacda97bc3fc23eed209444d156d7b63b95e9fddf15cf4f82615edde730218471b0349c9b1ca403c2882486856c95e15bf"]) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe) access(0x0, 0x1) 10.348819ms ago: executing program 5 (id=289): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="673bb5b8cc0c16ed08db75817fc8add3cec4ec48a2e92e98e17c03ce4801ef1d47e6abbbdabb26a5a12af0f460032b34b7", 0x31}], 0x1) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x0) (async) utimensat(r0, 0x0, &(0x7f0000000f40)={{0x4f86, 0x6}, {0xe, 0x4}}, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000000)={0x0, 0xe, 0x80, 0xa, "4116408aef99359f27db75686239cfd843599714", 0xc, 0x2}) r1 = socket(0x18, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000080)=@abs={0xd0, 0x1, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x20}, 0x0) 1.524235ms ago: executing program 0 (id=290): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000140)="b1000502000000000000000001010000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x404, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x6, 0x5, 0x0) ioctl$WSDISPLAYIO_SVIDEO(r2, 0x80045745, &(0x7f0000000240)) ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000180)={&(0x7f0000000140)=[{0x2, 0x9}, {0x3, 0xc2e0}, {0x46, 0x1}], 0x3}) poll(&(0x7f0000000ac0)=[{}], 0x1, 0x887e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0]) mknod(&(0x7f0000000040)='./file0\x00', 0x2, 0x6) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000347000/0x3000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00005c9000/0x2000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x1}, {&(0x7f0000b66000/0x4000)=nil, &(0x7f000088d000/0x2000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x6}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f00000c4000/0x10000)=nil, 0x200000000000}, {&(0x7f000000d000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f00004cc000/0x4000)=nil, &(0x7f0000661000/0x3000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x16}, {&(0x7f0000b11000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000038f000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100000003}, {&(0x7f0000322000/0x4000)=nil, 0x0, 0x9bbf}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000142000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f00004e9000/0x4000)=nil, 0x40000000000}], './file0\x00'}) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000080)={0xa2a5, 0x7fffffff}) execve(0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r4, 0x7) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) listen(r4, 0x3) syz_extract_tcp_res(&(0x7f0000000080), 0x7, 0x7) 0s ago: executing program 5 (id=291): openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r0 = kqueue() kevent(r0, 0x0, 0x9, 0x0, 0xd, 0xfffffffffffffffe) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000780)={0xc, 0x7fff, 0x81, 0x0, "6ead5e3dec0d06119ae7258f2d9d8e4e190baa25", 0xae7, 0x2}) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000bc0)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r4 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xff, {0x2, 0x1}}) ioctl$FIOSETOWN(0xffffffffffffffff, 0x8004667c, &(0x7f0000000040)=0xa202) r5 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r5, 0x20007461) r6 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TIOCSBRK(r6, 0x2000747b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x18, 0x5, 0x2) setsockopt(r7, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r8 = dup2(r1, r7) sendmmsg(r8, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x3, 0x7, "ff0100", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x2, 0x26, 0x9, 0x2}, {0x3d, 0x0, 0x1, 0xb3f}, {0xfffe, 0x7, 0xf4, 0x7}, {0x9b1e, 0xff, 0xf4, 0x4000800}]}) syz_emit_ethernet(0x15b, &(0x7f0000000040)=ANY=[]) ioctl$DIOCIGETIFACES(0xffffffffffffff9c, 0xc0284457, 0xffffffffffffffff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. pckbd_enable: command error in6_pcbnotify: Huh? Thought we never got called with mapped! pppx: unable to set addresses for pppx1, error=17 load: 0.90 not a controlling terminal witness: lock order reversal: 1st 0xffffffff8390ad98 pf_lock (pf_lock) 2nd 0xffffffff8391f740 netlock (netlock) lock order [1] pf_lock (pf_lock) -> [2] netlock (netlock) #0 rw_do_enter_write+0xba #1 uvn_io+0x54c #2 uvn_get+0x31d #3 uvm_fault_lower_io+0x2ce #4 uvm_fault_lower+0x28d #5 uvm_fault+0x274 #6 kpageflttrap+0x2f4 #7 kerntrap+0x19d #8 alltraps_kern_meltdown+0x7b #9 _copyin+0x5b #10 pfioctl+0x13ff #11 VOP_IOCTL+0xac #12 vn_ioctl+0xf8 #13 sys_ioctl+0x674 #14 syscall+0xbd4 #15 Xsyscall+0x128 lock order [2] netlock (netlock) -> [1] pf_lock (pf_lock) #0 rw_do_enter_write+0xba #1 pfi_attach_ifgroup+0x2a #2 if_addgroup+0x2f8 #3 if_attachsetup+0xcf #4 if_attach+0x6d #5 vio_attach+0x17f7 #6 config_attach+0x449 #7 virtio_pci_attach+0x52c #8 config_attach+0x449 #9 pci_probe_device+0x8e5 #10 pci_enumerate_bus+0x368 #11 config_attach+0x449 #12 acpipci_attach_bus+0x37a #13 acpipci_attach_busses+0x93 #14 mainbus_attach+0x304 #15 config_attach+0x449 #16 cpu_configure+0x47 #17 main+0x4c7 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff8391f740,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffffff8391f728,0) at rw_do_enter_write+0xba uvn_io(ffffef806c10cb00,ffff80003c3dfff8,1,202,0) at uvn_io+0x54c uvn_get(ffffef806c10cb00,0,ffff80003c3e00c8,ffff80003c3e00ac,0,1,ce6f8e4eb9156905,1) at uvn_get+0x31d uvm_fault_lower_io(ffff80003c3e02e0,ffff80003c3e0318,ffff80003c3e0160,ffff80003c3e0148) at uvm_fault_lower_io+0x2ce uvm_fault_lower(ffff80003c3e02e0,ffff80003c3e0318,ffff80003c3e0260) at uvm_fault_lower+0x28d uvm_fault(ffffef800ee89020,200000000000,0,1) at uvm_fault+0x274 kpageflttrap(ffff80003c3e0490,200000000200) at kpageflttrap+0x2f4 kerntrap(ffff80003c3e0490) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(24900,c4504441,ffff800000c5f800,1,ffff80003bbc74e8) at pfioctl+0x13ff VOP_IOCTL(ffffef80632cf630,c4504441,ffff800000c5f800,1,ffffef80097fd270,ffff80003bbc74e8) at VOP_IOCTL+0xac vn_ioctl(ffffef806c1b69a8,c4504441,ffff800000c5f800,ffff80003bbc74e8) at vn_ioctl+0xf8 sys_ioctl(ffff80003bbc74e8,ffff80003c3e1040,ffff80003c3e0f90) at sys_ioctl+0x674 syscall(ffff80003c3e1040) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc0cfeadbf70, count: -18 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003c3dfdb0 rbx 0 rdx 0xffff8000015fd240 rcx 0xffff80003bbc74e8 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003c3dfc90 r9 0x8080808080808080 r10 0x7e2cbee76ad1dfe6 r11 0x8586b6edb68be2 r12 0xffffef80040c82c0 r13 0xffffef80048b72c8 r14 0x3 r15 0xffffffff835257b9 substchar+0x5274 rip 0xffffffff827c2b95 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c3dfda0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=89368 pid=32690 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003bbc67f0,0xffff80003bbc6568 process=0xffff80003c466b78 user=0xffff80003c3dc000, vmspace=0xffffef800ee89020 estcpu=29, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 34781 320679 12169 0 2 0 syz-executor 34781 266846 12169 0 2 0x4000000 syz-executor 34781 264237 12169 0 3 0x4000000 smrbar syz-executor 94491 413983 18820 0 2 0 syz-executor 94491 310 18820 0 3 0x4000080 kqpoll syz-executor 93385 145824 46723 0 2 0 syz-executor 93385 75344 46723 0 3 0x4000080 fsleep syz-executor 93385 66651 46723 0 2 0x4000000 syz-executor 87907 444575 16050 60929 2 0x10 syz-executor 87907 43499 16050 60929 3 0x4000090 lockf syz-executor 87907 198042 16050 60929 3 0x4000090 fsleep syz-executor 32690 432134 34016 0 2 0 syz-executor *32690 89368 34016 0 7 0x4000000 syz-executor 73950 195664 31501 0 2 0 syz-executor 73950 195950 31501 0 3 0x4000080 fsleep syz-executor 73950 145294 31501 0 3 0x4000080 fsleep syz-executor 55832 360092 81266 0 2 0 syz-executor 55832 116894 81266 0 3 0x4000080 fsleep syz-executor 20473 505905 52203 0 7 0x100003 sh 52203 212335 68329 0 3 0x82 wait syz-executor 53260 307978 0 0 3 0x14200 acct acct 84602 371521 0 0 3 0x14280 nfsidl nfsio 5520 289053 0 0 3 0x14280 nfsidl nfsio 77967 227375 0 0 3 0x14280 nfsidl nfsio 1365 128761 0 0 3 0x14280 nfsidl nfsio 46300 317220 0 0 3 0x14280 nfsidl nfsio 7459 183775 0 0 3 0x14280 nfsidl nfsio 60238 38862 0 0 3 0x14280 nfsidl nfsio 60394 300592 0 0 3 0x14280 nfsidl nfsio 73407 53014 0 0 3 0x14280 nfsidl nfsio 42191 507777 0 0 3 0x14280 nfsidl nfsio 62049 53847 0 0 3 0x14280 nfsidl nfsio 76179 230505 0 0 3 0x14280 nfsidl nfsio 97518 392918 0 0 3 0x14280 nfsidl nfsio 15579 46335 0 0 3 0x14280 nfsidl nfsio 32253 90400 0 0 3 0x14280 nfsidl nfsio 56611 415882 0 0 3 0x14280 nfsidl nfsio 60091 518906 0 0 3 0x14280 nfsidl nfsio 85705 473490 0 0 3 0x14280 nfsidl nfsio 77073 217027 0 0 3 0x14280 nfsidl nfsio 73678 130349 0 0 3 0x14280 nfsidl nfsio 16050 214705 68329 0 3 0x82 nanoslp syz-executor 34016 26156 68329 0 3 0x82 nanoslp syz-executor 12169 286730 68329 0 3 0x82 nanoslp syz-executor 46723 28045 68329 0 3 0x82 nanoslp syz-executor 81266 518463 68329 0 3 0x82 nanoslp syz-executor 31501 269021 68329 0 3 0x82 nanoslp syz-executor 18820 516665 68329 0 3 0x82 nanoslp syz-executor 68329 34271 8989 0 3 0x82 kqread syz-executor 8989 292006 152 0 3 0x10008a sigsusp ksh 152 129170 17317 0 3 0x98 kqread sshd-session 17317 479959 52204 0 3 0x92 kqread sshd-session 57303 413131 1 0 3 0x100083 ttyopn getty 52204 79928 1 0 3 0x88 kqread sshd 24658 497355 71186 74 3 0x1100092 bpf pflogd 71186 515727 1 0 3 0x80 sbwait pflogd 33961 372558 98791 73 3 0x1100090 kqread syslogd 98791 39737 1 0 3 0x100082 sbwait syslogd 92632 258616 1 0 3 0x100080 kqread resolvd 8134 42093 61426 77 3 0x100092 kqread dhcpleased 59639 96276 61426 77 3 0x100092 kqread dhcpleased 61426 180919 1 0 3 0x80 kqread dhcpleased 77731 242670 0 0 3 0x14200 bored smr 41698 369146 0 0 2 0x14200 zerothread 19632 218643 0 0 3 0x14200 aiodoned aiodoned 24090 164907 0 0 3 0x14200 syncer update 40785 50392 0 0 3 0x14200 cleaner cleaner 24524 14508 0 0 3 0x14200 reaper reaper 70175 365218 0 0 3 0x14200 pgdaemon pagedaemon 99401 69764 0 0 3 0x14200 bored viomb 45553 236649 0 0 3 0x40014200 acpi0 acpi0 15578 506299 0 0 3 0x40014200 idle1 6560 481444 0 0 3 0x14200 bored softnet1 69435 225575 0 0 2 0x14200 softnet0 62304 437468 0 0 3 0x14200 smrbar systqmp 78636 364387 0 0 3 0x14200 bored systq 67651 407732 0 0 3 0x14200 tmoslp softclockmp 6721 261579 0 0 3 0x40014200 tmoslp softclock 56895 138104 0 0 3 0x40014200 idle0 1 216609 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 34781 (syz-executor) thread 0xffff8000fffee548 (264237) exclusive rwlock clonelk r = 0 (0xffffffff8391f648) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 if_clone_destroy+0x93 #3 ifioctl+0x59d #4 sys_ioctl+0x674 #5 syscall+0xbd4 #6 Xsyscall+0x128 Process 32690 (syz-executor) thread 0xffff80003bbc74e8 (89368) exclusive rwlock pf_lock r = 0 (0xffffffff8390ad98) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 pfioctl+0x13ca #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x674 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock pfioctl_rw r = 0 (0xffffffff8390ae28) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 pfioctl+0x1d4 #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x674 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a3b000) #0 witness_lock+0x5f1 #1 vn_ioctl+0x4d #2 sys_ioctl+0x674 #3 syscall+0xbd4 #4 Xsyscall+0x128 Process 62304 (systqmp) thread 0xffff8000ffffe298 (437468) shared rwlock systqmp r = 0 (0xffffffff839ca8e8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11073 12102K 12479K 166960K 12588 0 pcb 18 12K 12K 166960K 84 0 rtable 196 11K 12K 166960K 672 0 pf 39 18K 24K 166960K 207 0 ifaddr 35 5K 7K 166960K 103 0 ifgroup 59 2K 2K 166960K 134 0 sysctl 3 1K 9K 166960K 8 0 counters 72 37K 38K 166960K 134 0 ioctlops 1 2K 4K 166960K 1578 0 iov 0 0K 16K 166960K 18 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1353 85K 85K 166960K 1776 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 8 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 27 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 244K 166960K 568 0 sigio 0 0K 0K 166960K 5 0 proc 72 115K 180K 166960K 801 0 subproc 72 4K 4K 166960K 153 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 48 0 in_multi 66 4K 7K 166960K 204 0 ether_multi 1 0K 0K 166960K 4 0 mrt 1 0K 0K 166960K 19 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 618 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 238 168K 185K 166960K 6385 0 UVM aobj 49 2K 2K 166960K 50 0 pinsyscall 43 86K 100K 166960K 1945 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 10 0 NDP 13 0K 2K 166960K 72 0 temp 44 9115K 9174K 166960K 23535 0 kqueue 13 20K 26K 166960K 74 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 194 0 190 3 2 1 3 0 8 0 rtentry 176 216 0 137 6 0 6 6 0 8 0 unpcb 144 177 0 160 1 0 1 1 0 8 0 syncache 336 7 0 7 2 1 1 1 0 8 1 tcpcb 736 73 0 69 1 0 1 1 0 8 0 arp 136 37 0 24 1 0 1 1 0 8 0 inpcb 328 345 0 336 2 0 2 2 0 8 1 nd6 152 54 0 38 2 0 2 2 0 8 1 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 17 0 9 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 20 0 20 1 0 1 1 0 8 1 pppxif 1576 2 0 2 1 1 0 1 0 8 0 pfstscr 40 8 0 4 1 0 1 1 0 8 0 pffrag 232 19 0 17 1 0 1 1 0 482 0 pffrnode 88 19 0 17 1 0 1 1 0 8 0 pffrent 40 36 0 34 1 0 1 1 0 8 0 pfosfp 40 1428 0 1428 5 4 1 5 0 8 1 pfosfpen 112 1428 0 1428 21 4 17 21 0 8 17 pfrktable 1344 3 0 3 1 1 0 1 0 8 0 pfstlim 224 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 14 0 2 1 0 1 1 0 8 0 pftag 88 5 0 2 1 0 1 1 0 8 0 pfstitem 24 73 0 4 1 0 1 1 0 8 0 pfstkey 128 81 0 12 3 0 3 3 0 8 0 pfstate 448 74 0 8 8 0 8 8 0 8 0 pfrule 1360 35 0 29 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 922 0 555 32 2 30 32 0 8 3 art_table 40 924 0 555 6 0 6 6 0 8 0 art_node 32 216 0 144 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 72 25 0 15 1 0 1 1 0 8 0 shmpl 112 47 0 1 2 0 2 2 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2125 0 636 94 0 94 94 0 8 0 ffsino 296 2125 0 636 115 0 115 115 0 8 0 nchpl 144 2743 0 998 65 0 65 65 0 8 0 rtmask 32 2 0 2 1 1 0 1 0 8 0 vnodes 216 2528 0 0 141 0 141 141 0 8 0 namei 1024 10127 0 10127 2 1 1 2 0 8 1 percpumem 16 82 0 31 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 1 1 1 0 1 0 8 0 kstatmem 264 83 0 52 3 0 3 3 0 8 0 scsiplug 72 4 0 4 1 0 1 1 0 8 1 scxspl 216 9745 0 9744 10 3 7 7 1 8 6 plimitpl 152 71 0 54 1 0 1 1 0 8 0 sigapl 424 879 0 810 9 0 9 9 0 8 1 knotepl 120 526 0 0 16 0 16 16 0 8 0 kqueuepl 224 115 0 102 1 0 1 1 0 8 0 pipepl 344 165 0 138 3 0 3 3 0 8 0 fdescpl 528 842 0 810 3 0 3 3 0 8 0 filepl 160 4320 0 4092 13 2 11 13 0 8 1 lockfpl 104 465 0 460 2 1 1 2 0 8 0 lockfspl 48 93 0 89 1 0 1 1 0 8 0 sessionpl 144 48 0 39 1 0 1 1 0 8 0 pgrppl 48 66 0 49 1 0 1 1 0 8 0 ucredpl 104 543 0 528 1 0 1 1 0 8 0 zombiepl 144 810 0 810 1 0 1 1 0 8 1 processpl 1232 879 0 810 6 0 6 6 0 8 0 procpl 664 1392 0 1312 9 1 8 8 0 8 1 sosppl 176 1 0 1 1 1 0 1 0 8 0 sockpl 752 734 0 704 11 5 6 11 0 8 3 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 114 0 0 15 1 14 15 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 38 0 0 5 0 5 5 0 8 0 mtagpl 96 5 0 0 1 0 1 1 0 8 0 mbufpl 256 554 0 0 35 0 35 35 0 8 0 bufpl 280 3359 0 107 233 0 233 233 0 8 0 anonpl 32 7565 0 0 61 0 61 61 0 246 0 amapchunkpl 152 19646 0 19138 27 1 26 27 0 158 6 amappl16 200 2475 0 2208 20 5 15 15 0 8 0 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 548 0 546 1 0 1 1 0 8 0 amappl13 176 152 0 140 1 0 1 1 0 8 0 amappl12 168 1131 0 1100 2 0 2 2 0 8 0 amappl11 160 7 0 6 1 0 1 1 0 8 0 amappl10 152 74 0 60 1 0 1 1 0 8 0 amappl9 144 284 0 284 1 1 0 1 0 8 0 amappl8 136 132 0 130 1 0 1 1 0 8 0 amappl7 128 170 0 156 1 0 1 1 0 8 0 amappl6 120 245 0 242 1 0 1 1 0 8 0 amappl5 112 115 0 104 1 0 1 1 0 8 0 amappl4 104 340 0 319 1 0 1 1 0 8 0 amappl3 96 3852 0 3734 4 0 4 4 0 8 1 amappl2 88 646 0 583 2 0 2 2 0 8 0 amappl1 80 13686 0 13081 19 2 17 17 0 8 3 amappl 88 5443 0 5278 4 0 4 4 0 92 0 uvmvnodes 80 106 0 0 3 0 3 3 0 8 0 dma65536 65536 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 255 0 255 3 2 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 49 0 1 1 0 1 1 0 8 0 uaddrrnd 24 842 0 810 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 842 0 810 1 0 1 1 0 8 0 vmmpekpl 168 8918 0 8872 3 0 3 3 0 8 0 vmmpepl 168 63613 0 61425 99 0 99 99 0 357 3 vmsppl 488 841 0 810 5 0 5 5 0 8 1 rwobjpl 80 21017 0 19680 29 1 28 28 0 8 0 pdppl 4096 1691 0 1620 105 34 71 83 0 8 0 pvpl 32 14096 0 0 115 1 114 114 0 265 0 pmappl 256 841 0 810 3 0 3 3 0 8 1 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 316 0 43 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff838f6ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a3a800) at __mp_lock+0x199 intr_handler(ffff80003c47d9f0,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff83a3a800) at __mp_lock+0x192 intr_handler(ffff80003c47db50,ffff8000002a3480) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff83a3a800) at __mp_lock+0x192 ktrsyscall(ffff80003bbc7250,2e,18,ffff80003c47de00) at ktrsyscall+0x2c7 syscall(ffff80003c47de00) at syscall+0x305 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x76be448dd060, count: -13 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff8391f740,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffffff8391f728,0) at rw_do_enter_write+0xba uvn_io(ffffef806c10cb00,ffff80003c3dfff8,1,202,0) at uvn_io+0x54c uvn_get(ffffef806c10cb00,0,ffff80003c3e00c8,ffff80003c3e00ac,0,1,ce6f8e4eb9156905,1) at uvn_get+0x31d uvm_fault_lower_io(ffff80003c3e02e0,ffff80003c3e0318,ffff80003c3e0160,ffff80003c3e0148) at uvm_fault_lower_io+0x2ce uvm_fault_lower(ffff80003c3e02e0,ffff80003c3e0318,ffff80003c3e0260) at uvm_fault_lower+0x28d uvm_fault(ffffef800ee89020,200000000000,0,1) at uvm_fault+0x274 kpageflttrap(ffff80003c3e0490,200000000200) at kpageflttrap+0x2f4 kerntrap(ffff80003c3e0490) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(24900,c4504441,ffff800000c5f800,1,ffff80003bbc74e8) at pfioctl+0x13ff VOP_IOCTL(ffffef80632cf630,c4504441,ffff800000c5f800,1,ffffef80097fd270,ffff80003bbc74e8) at VOP_IOCTL+0xac vn_ioctl(ffffef806c1b69a8,c4504441,ffff800000c5f800,ffff80003bbc74e8) at vn_ioctl+0xf8 sys_ioctl(ffff80003bbc74e8,ffff80003c3e1040,ffff80003c3e0f90) at sys_ioctl+0x674 syscall(ffff80003c3e1040) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc0cfeadbf70, count: -18