last executing test programs: 4.89782947s ago: executing program 7 (id=52): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f000009e000/0x2000)=nil, 0x2000, 0x2, 0x4010, r0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000180)={0x0, 0x7fff}) r2 = socket(0x18, 0xc003, 0x3a) setsockopt(r2, 0x10, 0x6b, &(0x7f0000000040), 0x1d) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x0, 0x10, 0xc, 0xb}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f0000000280)={{0x1c, 0x18, 0x2, 0x5, "2dd1833c000000000000dd00", 0x6}, {0x1c, 0x18, 0x1, 0x3, "2af7f39bcf7d663ffe51357f866900", 0xd}, 0x1, [0x6, 0xb9c, 0xffffffff, 0x9, 0x8, 0x2, 0x8, 0x2]}, 0x5c) ioctl$DIOCXBEGIN(r1, 0xc0104451, &(0x7f0000000040)={0x1, 0x408, &(0x7f0000001340)=[{0x1, './file0/file0\x00', 0xa2}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) unveil(0x0, 0x0) unveil(&(0x7f0000000200)='./file0/file0/..\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DIOCXCOMMIT(r1, 0xc0104452, &(0x7f0000000040)={0x0, 0x3, 0x0}) r3 = socket(0x18, 0x1, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) setsockopt(r3, 0x1000000029, 0x36, &(0x7f0000000200), 0x0) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(r4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x71f}}) ioctl$DIOCXBEGIN(r4, 0xc0104451, &(0x7f00000037c0)={0xc, 0x80, &(0x7f0000003800)=[{0x0, './file0/file0\x00', 0x11e}, {0x1, './file0\x00', 0x10000}, {0x1, './file0\x00', 0x1000}, {0x0, './file0\x00', 0x41}, {0x1, './file0\x00', 0x9}, {0x0, './file0\x00', 0x8}, {0x1, './file0/file0\x00', 0xd}, {0x0, './file0/file0\x00', 0x8}, {0x0, './file0/file0\x00', 0x4}, {0x1, './file0/file0/..\x00', 0x8b41}, {0x1, './file0/file0\x00', 0x1}, {0x0, './file1\x00', 0x7}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2d, &(0x7f0000000000)="ebffcbff13b9cea2d79d4e7130489648", 0x10) sendto(r5, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x8, "0000fe00000001700024000000000010", 0xffffffc0}, 0x1c) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) setuid(0xee01) 4.822000498s ago: executing program 7 (id=60): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x23, 0x6, 0x1, 0x7, "01de00000000000000f9ff00000000002000", 0x1003, 0x8934}) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x60) chroot(&(0x7f0000000200)='./file0/file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) 4.745685915s ago: executing program 7 (id=69): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000000)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x800007, "ff01fe00000000000000000000000001", 0x3}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0xe) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f00000002c0)="03000000", 0x4) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffc8a, 0x0, 0x0) (async) setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r3 = socket(0x2, 0x2, 0x0) (async) select(0x40, &(0x7f0000000180)={0x8aa, 0x5, 0x2, 0xec, 0x800, 0x181b, 0x7, 0x10000000001}, 0x0, 0x0, 0x0) (async) r4 = kqueue() (async) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r5, 0xc0105715, &(0x7f0000001540)={0x4b, &(0x7f0000000180)}) (async) kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) (async) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) (async) r6 = open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x0, 0xfffffffffffffffd, 0x27ffffffffffffff, 0x181c, 0xc, 0x401}, 0x0, 0x0, 0x0) (async) ioctl$FIONBIO(r6, 0x82907003, &(0x7f0000000140)=0x1) (async) connect$unix(r3, &(0x7f0000000000), 0x10) (async) sysctl$hw(&(0x7f0000000100)={0x6, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0) socketpair(0x6, 0x8000, 0x3, 0x0) (async) bind$unix(r0, &(0x7f0000000040)=@file={0x0, 0x0, './file0\x00'}, 0xa) (async) bind$unix(r0, &(0x7f0000000140)=@abs={0x7, 0x0, 0x0, 0x1}, 0x8) 4.65262518s ago: executing program 7 (id=72): r0 = socket(0x18, 0x1, 0x0) (async) select(0x40, &(0x7f0000000140)={0x6, 0x803, 0xc5, 0x2, 0x100000000, 0x1, 0x7ffffffffffffffb, 0x5}, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x18, 0x3, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1022, 0x0, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0xffffffff, "fe8234022c23bdd0e86bc2a6b5ae30dd", 0x3}, 0x1c) (async) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x2, 0x9, "7d05e3a307e83de31447ce9db275eb76", 0xffffffff}, 0x1c) 3.809456681s ago: executing program 7 (id=100): select(0x40, &(0x7f0000000180)={0xffffffff, 0x8, 0xffffffffffffffff, 0xfffffffffffffff9, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xffffffa6, 0x80000000, 0xd, 0x0, 0x4, 0x1000d86, 0x40, 0x2, 0x1, 0x100002000640}) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r1 = open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0xd4, 0xa, 0xffffffff, 0x9c, 0x10, [{0x2, 0x7, 0x0, 0x7ff}, {0x6, 0x5, 0xffb, 0x4}, {0x10000005, 0xf87, 0x0, 0x6a}, {0xefe, 0x800, 0xe, 0xffffff}, {0x9, 0x7, 0x9, 0x8}, {0x6, 0x1, 0x0, 0x800009c}, {0x409, 0xffffffff, 0x20081003, 0xfffeffff}, {0x1f, 0x100007fe, 0xffff, 0x8}, {0x2, 0x81, 0x1, 0xf}, {0x6, 0x8001, 0x1, 0x800000b}, {0x4, 0xfffb, 0x3}, {0x1, 0x40, 0x3, 0x4}, {0xe0, 0x4, 0x5, 0x3}, {0xffff0354, 0xfffffffa, 0x8001, 0x100006}, {0x0, 0x6, 0x4, 0x1ffffffd}, {0x0, 0x2, 0x0, 0xc3}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x0, 0xfffffffffffffffd, 0x27ffffffffffffff, 0x181c, 0xc, 0x401}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r2, &(0x7f0000000000), 0x10) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) r3 = socket$inet(0x18, 0x3, 0x0) getsockopt$sock_timeval(r3, 0xffff, 0x1006, &(0x7f0000000000), &(0x7f0000000080)=0xfffffcb3) 3.523842892s ago: executing program 4 (id=107): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x4, 0x7, 0xb3, 0x7fffffff}, {0x2, 0x0, 0x2f, 0x4}, {0x6, 0x2, 0x1, 0x9b}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000412000/0x2000)=nil) kill(0xffffffffffffffff, 0x6) openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xf011, r2, 0x0) ftruncate(r2, 0x79c8) pwritev(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000480)="4990f878f91b702d4cf8f9145ee071c896a0f5b1b5bac23faf12d40f73393f7e5b1d9ea0b64b6bcb0d718555a5e5d86fd2c6613480398f0ce026b32ff25dd22fc14594a724d4ca44556e6efc9cf0b97c88e7213bd0def6dd5354b97975ff138cd181c2b19cfa5317d6", 0x69}], 0x2, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) write(0xffffffffffffffff, &(0x7f0000000b80)="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", 0x482) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) select(0x40, &(0x7f0000000180)={0x1, 0x44809ea0, 0xfffffffffffffffb, 0x8004, 0x9, 0x1000000000210, 0x7993ca90, 0x3}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x81, 0x1, 0x9, 0x400000000000181c, 0x2, 0x6}, 0x0, 0x0, 0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x109, 0x190, 0x3fd, 0x0, 0x100000}, 0x4, 0x9, 0x0, 0x0, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0x7, 0x6, 0x0, "fc686b010000000000000047bd1305d65c61963c", 0x7}) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) gettimeofday(&(0x7f0000000300), &(0x7f0000000540)) sysctl$kern(&(0x7f00000001c0)={0x1, 0x32}, 0x2, &(0x7f0000000200)="8f9c65cbb10136b1d3422bf34e5fb890b6984041fc74581c2265e9cb7a282b74bfdd4cd7137efbfdbebcd14fbe87339fa28f377e6d", &(0x7f0000000240)=0x35, &(0x7f0000000280)="e0a4a41e8f88b78a242b8aa05cc95efa8a0f323d8822196f0ec4b60199504423c9f92143d93606b532b4225dd2562df097b87508c8e4d0c2c43023913020a796abd15f5a945abfbe3cc17df471c43be0", 0x50) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_open_pts() fcntl$lock(r3, 0x8, &(0x7f0000000040)={0x3, 0x0, 0x7fffffffffffffff, 0x10002ffffffff}) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000340)="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", 0xb1, 0x402, 0x0, 0x4e) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x1}, 0x3, 0x0, 0x0, &(0x7f0000001180)=',', 0x1) shmget$private(0x0, 0x4000, 0x104, &(0x7f0000ffc000/0x4000)=nil) 1.968669428s ago: executing program 7 (id=116): mknod(&(0x7f0000000040)='./bus\x00', 0x3a0914c44f7b202d, 0x40000504) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r1) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000180)={'./bus\x00', 0x40, 0x7f, 0x6, 0x0, 0x800, 0x3, 0x80, 0x1, 0x1, 0x7, 0xf}) sendto$inet(r0, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000780), 0x800, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10004) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x20000) poll(&(0x7f0000000080)=[{r5, 0x8}, {r4, 0x20}, {r3, 0x40}, {r4}, {r3, 0x80}], 0x5, 0x6) closefrom(r3) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffff9c, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0]}) r7 = syz_open_pts() ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f0000000340)={0x5, 0x7ffffffc, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x44, 0x3effd}) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCFLUSH(r7, 0x80047410, &(0x7f0000000780)=0x7) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000140)={r6, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BIOCSRSIG(r2, 0x80044272, &(0x7f00000007c0)=0xfffffffc) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x126) 1.930427456s ago: executing program 4 (id=123): unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='r\x00') r0 = socket$inet(0x18, 0x3, 0x102) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DIOCKILLSTATES(r1, 0x174450c0, 0x0) r2 = socket(0x1e, 0x3, 0x0) sendto$inet(r2, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x10, 0x2, 0x2, 0xeb9}, 0x10) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x1000000b, "000000000000000000f2ffffff000001", 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="6788020000003a9affc6692902f0f5215ddd612d008e59adfe84410a9591426ee03ec5950b5a9fad", 0x28}], 0x1, 0x0}, 0x402) r3 = socket$inet(0x2, 0x3, 0x102) sendto$inet(r3, &(0x7f00000000c0)="050000000445a4feaa806c88e16e99758ff08feb58", 0x15, 0xa, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "99cea6", 0x8, 0x3a, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x200, 0x81}}}}}}) sync() 1.878597529s ago: executing program 3 (id=126): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff00"}) r0 = syz_open_pts() ioctl$TIOCDRAIN(r0, 0x40047463) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) shmget(0x1, 0x3000, 0x210, &(0x7f00003ae000/0x3000)=nil) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x7, 0x7, 0xbbf, 0x1], 0x4, 0x4, 0x0, 0xffffffffffffffff}) lseek(r1, 0x5, 0x1) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x9, 0xe96d, 0x3, 0x826, "a26399a9aa969c7aada6e4ca5e73a06df7b1d8e3", 0xff7, 0x2}) 1.748057092s ago: executing program 3 (id=130): r0 = msgget$private(0x0, 0xa8) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file2\x00') r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getpeername(r1, &(0x7f0000000200)=@in6, &(0x7f0000000340)=0x1c) msgsnd(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="0100"], 0x104, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x6}, 0x0, 0x0, 0x7, 0xf, 0xdd, 0x0, 0x0, 0x5, 0x0, 0xe69a, 0x0, 0x8001}) shmdt(0x0) unveil(0x0, &(0x7f0000000080)='w\x00') sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) msgget$private(0x0, 0xa8) (async) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) msgrcv(r0, 0x0, 0x0, 0x3, 0x2000) (async) mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file2\x00') (async) dup2(0xffffffffffffff9c, 0xffffffffffffffff) (async) getpeername(r1, &(0x7f0000000200)=@in6, &(0x7f0000000340)=0x1c) (async) msgsnd(r0, &(0x7f0000001800)=ANY=[@ANYBLOB="0100"], 0x104, 0x0) (async) msgctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8, 0x6}, 0x0, 0x0, 0x7, 0xf, 0xdd, 0x0, 0x0, 0x5, 0x0, 0xe69a, 0x0, 0x8001}) (async) shmdt(0x0) (async) unveil(0x0, &(0x7f0000000080)='w\x00') (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) 1.745150502s ago: executing program 4 (id=132): r0 = socket$inet(0x18, 0x3, 0x102) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, '\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00\b\x00', 0x101}, 0x1c, 0x0, 0x0, 0x0}, 0x402) 1.730216136s ago: executing program 6 (id=133): r0 = socket(0x18, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x3, "fe8006000000000000000847a52000ff", 0x5}, 0x1c) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000340)="b10005010000009f05003f0107000000211c13fecea79c5dfaf66e8d0300000000000000fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32618210000720fd38bdb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f834371205050052fbe03f49b11b7aaeb70000fca65361ba84913f0100000000000006000000", 0xb1, 0x408, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@remote, @random="d69e56a00846", [], {@ipv4={0x800, {{0x5, 0x4, 0x1, 0x2, 0x1c, 0x67, 0x0, 0xf2, 0x29, 0x0, @rand_addr=0x2, @multicast1}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x6, 0x3}}}}}) 1.666805161s ago: executing program 3 (id=135): select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) syz_open_pts() setsid() ioctl$WSMOUSEIO_SRES(0xffffffffffffffff, 0x80045721, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x3, 0x101, 0x5, 0x1, 0xa82c, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0x80000000}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x4, 0x4, 0x80000000, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x2, 0x6b6e}, {0x2000d, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x10000, 0xa}, {0xfffffc04, 0x80000004, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38bffd, 0x7}, {0x80000cb, 0x2, 0xc, 0x8}, {0x2000dd, 0x9, 0x15, 0x400}, {0x1000a, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x24, 0x7}, {0x5, 0xd655, 0x3, 0x2}]}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x3}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x4}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00005dd000/0x3000)=nil, 0xc}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x40000000000007}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000462000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xc}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000abf000/0x3000)=nil, 0x1ff}], './file0\x00', 0x8, 0x0, 0x4000000, 0x6, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x44, 0x0, 0x0, 0x2, 0x94fd, 0xffffb6e0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0xfffffffe, 0xffffff49, 0x9, 0x8000009, 0xfffffffd, 0x0, 0x106, 0xffc, 0x0, 0x4, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3, 0x0, 0x3, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x80, 0x86, 0x3, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x70000, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0xfffff800, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdf7fffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x644f, 0x0, 0x0, 0x7a1, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3, 0x0, 0x0, 0x5, 0x9a4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x100, 0x0, 0x3435, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0xffffffff, 0x398, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x5]}) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) bind$unix(r1, &(0x7f00000010c0)=@file={0xa, 0x1, './file0\x00'}, 0xa) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$DIOCGETSYNFLWATS(r2, 0xc0084463, &(0x7f0000000040)) ioctl$TIOCSETA(r2, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6, 0x2}) 576.872158ms ago: executing program 4 (id=141): sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x308}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) open(&(0x7f0000000140)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) ktrace(0x0, 0x4, 0xd27d43220c7ff9d, 0x0) sendmmsg(r0, &(0x7f00000003c0)={{0x0, 0x100000, 0x0, 0x0, 0x0, 0x454}, 0x4008}, 0x38, 0x0) 532.172351ms ago: executing program 4 (id=145): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f0000000080)={@v6=@loopback, @v4=@remote={0xac, 0x14, 0x0}, @v4, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x4, 0x2, 0x7, 0x1, 0x9, 0x6, 0x18, 0x6, 0x3}) ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f00000020c0)={{'./file0\x00', './file0\x00', 0x42, 0xe}, &(0x7f00000007c0)=[{'./file0\x00', './file0\x00', 0x0, 0x6}, {'./file0\x00', './file0\x00', 0x14}, {'./file0\x00', './file0\x00', 0x2, 0x4}, {'./file0\x00', './file0\x00', 0x12, 0x9}, {'./file0/../file0\x00', './file0\x00', 0x1, 0x84}, {'./file0\x00', './file0\x00', 0x29, 0x16}], 0x7, 0x6, 0x2a0a, 0x0, 0x6, 0x80000001, 0x32, 0x3}) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DIOCRGETADDRS(r1, 0xc4504446, &(0x7f0000000340)={{'./file0\x00', './file0\x00', 0x10, 0x4}, &(0x7f0000000100)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7f, 0x0, 0x2, 0x0, 0x4, 0xa5, 0xe}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xf7e1, 0x40, 0x36, 0x1, 0x7f, 0x9, 0x9}], 0x9, 0x2, 0xb, 0x3, 0x7f8, 0x3, 0x20, 0x9}) 447.412716ms ago: executing program 1 (id=148): r0 = syz_open_pts() syz_open_pts() syz_open_pts() fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x2, 0x1, 0x300, 0x10000100000001}) sysctl$ddb(&(0x7f0000000000)={0x9, 0x2}, 0x2, &(0x7f0000000080)="34967ba6a7061f", &(0x7f0000000100)=0x7, &(0x7f00000000c0)="000000dc", 0x4) 447.063962ms ago: executing program 6 (id=149): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) chflags(&(0x7f0000000100)='./file1\x00', 0x0) mknod(&(0x7f0000000140)='./bus\x00', 0x6000, 0x6d4) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) setuid(0xffffffffffffffff) r0 = getuid() chown(&(0x7f0000000040)='./file0\x00', r0, 0xffffffffffffffff) open(&(0x7f0000000080)='./bus\x00', 0x8, 0x15) 429.520301ms ago: executing program 3 (id=152): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x40000928, 0x0) utimensat(r0, 0x0, &(0x7f0000000100)={{0xfffffffffffffffe, 0xfdffffffffffffff}, {0x2, 0x1}}, 0x0) 428.923607ms ago: executing program 1 (id=153): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000002d00)) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$FIONREAD(r1, 0xc0206923, &(0x7f00000001c0)) (async) r2 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) (async) syz_emit_ethernet(0x243f, &(0x7f0000000580)={@broadcast, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "919cd3", 0x2409, 0x8, 0x6, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, [{0x1, 0x12, "d70fb4d439248bca8a36a3f24aa37b112f99110b6b83f99d5114b3bcff1da7e0fb8b90fd1c9d17301141bdb1b825342acbc59d52386187828bfa3885919c66d6ceb6ec47e0f3e974acd1c47f8c7a3b7dea015924c84513981416ee2d2023d3206292ba6d70e42b65317ea816c898af05f47afb2a4fb7348b239d706d8ccf07818ebad016902486cf970e835d372765ab7466"}, {0x2, 0x18, "801bd678a5eaedac8c88a46d164ccdd7fb2665d44010f697d0e14d7471d35a0000ca49d2ddf17ebf8879aff21aecd71be0d395fc3776960a6089cc6b040c3e636899c5fee5e1bbc5fe7a19f7bf82b8faf936c4cfedd4985239e195f31a6f7b65f407dc90d379dc2460207e64958f800e23567a756d745a8ade5cb0e3ef097d34e257f708bb163e70d676507732cf679ee2f93068af6584ccfa32512f309545853c66d9b909766a89421f644e08659959e1a870bfa48a4baa9c39cd89c300c6acae763229c5"}, {0x5, 0x200, "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"}, {0x0, 0x19, "14864de209a40ab0064576e2d8ae4ac19f1cb423d0926a24caaaa8b44420a1747b5becd1dcf7eb9fd577f3b1985d4a72febdba45aac3e38463ee2e96d76328dc0164ba96ddc177b8de1c17ed4027a8e29b2ad4bcd524a73d7868893dacb72742d0eb974f47fb20a8f5d4e7b9a79d1c9eb6f8f7f5159a375e4696cb74181cf7c18d4ea60638f6ae80179e406a855f938b9315994da63d529c023ab4d0c3358ae05f2b4bab6574bbcb137fad9dbdf7f39cfd127292615c167087704ba137f95b4c424f3892632f835c3326f9f0"}, {0x5, 0x11, "faa73bb57e3419641ef4a01c580b528c9521fdce4a2522926a5a5b0cb2a034a1f26eb628af7c148910b9d6dc6c350989f56167aff131aa67ad02e44cb4bc7f72b90755c56abf2893607a9ed474accb8ca24b23d6df3b04a7564695df3d2d46ee5c2179f371f35dfdbe2ab8b96f6ce1071c351b7db29c5e2f56ed591ee6af1d8d5974ea932076335740b9d4"}, {0x1, 0x7, "d42d5dfff53fd59bf32f355fab07d9493af28e5735bf6722bd6d2c170d205bba253a145e194c68976b6e19922f65564a0ebab94bcd0a61"}, {0x1, 0x17, "9e79315d76857f8dd15b9cf04a2df89ae9073fd078f11a65c4a2e0199c6af54e4b4eef3bee3bf30314681505cb7dfeb99896bd64b3747bc11d41ad0358cb3d3a85e546bcf38c858a8e4562254f9833d18fc6d79741565c4c5dd25938606b6391c3db8c9ed1c232d562ffa8391d86b9a76e82ee50a273d5366e702e8c8fbbeec00b18547fd0dab89f392c85ff064ae25eee3c47215b308a055e33dd08ef76986d7283e1b60138941711db4461cc5c5c3ce2fb928ea2b3"}, {0x19, 0x1c, "c91feafb366b6f6319f44327bcaa3a18681e6e05a8646d08669881c9a0e78ae013d1aadb07f4aa2631dd2e2cacb219ba1bb89f16cadba064e81e98c1077bfe6fce96f694931fec27cf32722aea214fb3e579cb56e0723506811dc3f7f55b9848a8726fc986815786cb98990f39ab5c87b7b809ac47424404d5269a3999e0dc2d21c33f8b073e9cf55a62f593605eab3362eb57d1501e33edf9462887c54316255bda7992fdda723c0cfc226fcb0b701630540860a4356eedfbe832b945ada1df3279d3fbf6a714528026d0095c68604503bf30d04b06c090344e0fd1045721"}, {0x19, 0x1ec, "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"}]}}}}}}) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 381.974934ms ago: executing program 3 (id=156): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) madvise(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000000)={{0x0, 0x0, &(0x7f0000000240)=[{0x0, 0xfffffffffffffde2}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000480)=""/244, 0xf2}], 0x5, 0x0}, 0x4}, 0x38, 0x3042, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000002740)="abf734f14a4819137aa3fb4fede70914bb67340f459d8806085867fde6f3eceea7d85b9e4b487e5ea752729d4421276fe97a8f07a77efc742151f530da628321", &(0x7f0000000100)=0x40, 0x0, 0x0) open(0x0, 0x10686, 0x8) socket$inet6(0x18, 0x1, 0x6) r2 = socket$inet6(0x18, 0x1, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e500edff", 0x4) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x12, "00000000000000000000000000008000", 0x7}, 0x1c) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x24}, 0x4, &(0x7f0000000100), 0x0, 0x0, 0x0) r3 = socket$inet6(0x18, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) 380.753382ms ago: executing program 3 (id=158): sysctl$hw(&(0x7f00000000c0)={0x6, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x15}, 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) setuid(0xee01) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) fcntl$lock(r0, 0x9, 0xfffffffffffffffe) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) writev(0xffffffffffffffff, &(0x7f0000002c40)=[{&(0x7f0000000240)="193c0d416c43719334", 0x9}], 0x1) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) r2 = msgget(0x0, 0x3cd) msgrcv(r2, 0x0, 0x0, 0x3, 0x0) r3 = msgget(0x0, 0x50) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x2401}, 0x400, 0x200042000010000, 0xfffffffffffffffc, 0x10, 0x201000001, 0x80000000000010c, 0x4, 0x8, 0x0, 0x3b0}) 371.669385ms ago: executing program 4 (id=159): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000d40), 0x8, 0x800) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r1}) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYRESOCT]) execve(0x0, 0x0, 0x0) 317.217615ms ago: executing program 6 (id=161): select(0x40, &(0x7f0000000000)={0xc6a, 0xfffffffffffffffd, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffffffff, 0x859, 0xb0, 0x2}, 0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x48, 0x1, 0x0, 0x6}, {0x80, 0x1, 0x8, 0x9}, {0x6, 0xfb, 0xe4, 0x4000800}]}) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) 238.438389ms ago: executing program 6 (id=165): getrlimit(0x1, &(0x7f0000001080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x2, &(0x7f0000000240)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec37082", &(0x7f0000000000)=0xfe1e, 0x0, 0xfffffffffffffd7b) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) futimes(r0, &(0x7f0000000080)=[{0x80, 0x9}, {0x100000001, 0x3}]) munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000) getrlimit(0x1, &(0x7f0000001080)) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3f}, 0x2, &(0x7f0000000240)="71f90200000000000000af6fb1fa62498e5f84cf71b59c7afec37082", &(0x7f0000000000)=0xfe1e, 0x0, 0xfffffffffffffd7b) (async) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) (async) futimes(r0, &(0x7f0000000080)=[{0x80, 0x9}, {0x100000001, 0x3}]) (async) munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000) (async) 234.392035ms ago: executing program 1 (id=166): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x1, 0x5, 0xffffffffffffffff}) syz_emit_ethernet(0x11d, &(0x7f0000000140)={@local, @broadcast, [], {@ipv6={0x86dd, {0x6, 0x6, "ec694d", 0xe7, 0xff, 0x5, @empty, @rand_addr="ea1d38adf09138375e9fd7e3a9eb9c46", {[@routing={0x8, 0xe, 0x0, 0x9, 0x0, [@empty, @loopback, @rand_addr="705a8a0f48fbda6d1b8742367cd953dd", @empty, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @remote={0xfe, 0x80, '\x00', 0x0}]}, @routing={0x1, 0x8, 0x0, 0xf, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback]}, @fragment={0x88, 0x0, 0x4, 0x0, 0x0, 0x13, 0x67}, @fragment={0x58, 0x0, 0x6, 0x1, 0x0, 0xa, 0x64}, @fragment={0x2c, 0x0, 0xfb, 0x1, 0x0, 0x8, 0x68}], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0xf001, 0x77d6, "5f62119ca084b6"}}}}}}) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffefc, 0xffffffffffffffff}) r1 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000040)=0x1ffff, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r1, &(0x7f0000000000), 0x10) ioctl$WSDISPLAYIO_SETSCREEN(r0, 0x80045756, &(0x7f0000000040)=0x2) r2 = msgget(0x1, 0x389) msgctl$IPC_RMID(r2, 0x0) 232.074212ms ago: executing program 6 (id=167): chmod(&(0x7f0000000180)='./file1\x00', 0x32) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r0) setgid(0xffffffffffffffff) (async) mkdir(&(0x7f00000000c0)='./file1\x00', 0x80) (async) setgroups(0x0, 0x0) (async) setuid(0xffffffffffffffff) (async) unveil(&(0x7f0000000000)='./file1\x00', &(0x7f0000000300)='c\x00') (async) syz_emit_ethernet(0x1000e, 0x0) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xb, 0x4, 0x2, 0xfffffff1}, {0x7, 0x7}, {0x6, 0x4, 0x2, 0xfffffffd}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 32) r1 = socket(0x1, 0x1, 0x0) (rerun: 32) ioctl$FIONREAD(r1, 0x8020691f, &(0x7f00000001c0)) (async) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') 222.875212ms ago: executing program 5 (id=168): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (rerun: 32) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/104, 0x17}, {&(0x7f0000000140)=""/187, 0xbd}, {&(0x7f0000000340)=""/171, 0xfffffffffffffe11}, {&(0x7f0000000000)=""/18, 0x12}], 0x121a, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x5, &(0x7f0000001800)=[{0x4, 0xdf, 0x0, 0x9}, {0x35, 0x0, 0x2, 0x5}, {0x2, 0x9, 0x7, 0x6}, {0x4, 0x5, 0xb, 0x9}, {0xbb5e, 0x2, 0xf6, 0x40007fe}]}) (async) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[]) r2 = syz_open_pts() ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000200)=0xfffffffc) 216.058435ms ago: executing program 6 (id=169): select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) syz_open_pts() setsid() ioctl$WSMOUSEIO_SRES(0xffffffffffffffff, 0x80045721, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x3, 0x101, 0x5, 0x1, 0xa82c, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0x80000000}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x4, 0x4, 0x80000000, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x2, 0x6b6e}, {0x2000d, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x10000, 0xa}, {0xfffffc04, 0x80000004, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38bffd, 0x7}, {0x80000cb, 0x2, 0xc, 0x8}, {0x2000dd, 0x9, 0x15, 0x400}, {0x1000a, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x24, 0x7}, {0x5, 0xd655, 0x3, 0x2}]}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x3}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x4}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00005dd000/0x3000)=nil, 0xc}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x40000000000007}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000462000/0x3000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xc}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000abf000/0x3000)=nil, 0x1ff}], './file0\x00', 0x8, 0x0, 0x4000000, 0x6, [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x44, 0x0, 0x0, 0x2, 0x94fd, 0xffffb6e0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0xfffffffe, 0xffffff49, 0x9, 0x8000009, 0xfffffffd, 0x0, 0x106, 0xffc, 0x0, 0x4, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3, 0x0, 0x3, 0x0, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x80, 0x86, 0x3, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x70000, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0xfffff800, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdf7fffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x644f, 0x0, 0x0, 0x7a1, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3, 0x0, 0x0, 0x5, 0x9a4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x100, 0x0, 0x3435, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0xffffffff, 0x398, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x5]}) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) bind$unix(r1, &(0x7f00000010c0)=@file={0xa, 0x1, './file0\x00'}, 0xa) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$DIOCGETSYNFLWATS(r2, 0xc0084463, &(0x7f0000000040)) ioctl$TIOCSETA(r2, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6, 0x2}) 201.637261ms ago: executing program 1 (id=173): r0 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0xd6) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f00000004c0)={0x2, 0x5, {[0xfffffffffffffff9, 0x3, 0x7, 0x0, 0x400, 0x3, 0x1, 0x9, 0x3, 0x9, 0x4, 0x3ff, 0x1, 0x2, 0x7, 0x7ff, 0x5, 0xda], [0x6, 0x5, 0x0, 0x1, 0x8, 0x3, 0xef36, 0x2, 0x115, 0x2], [0x2, 0xa2ac, 0x8, 0x86, 0x7ff, 0x10, 0x2], [0x101, 0x80, 0x7, 0x2, 0xfffffffffffffff3, 0xd4a1], [{0x5, 0x3, 0x7f, 0xffffffffffffffff}, {0x0, 0x800, 0x1, 0x8}, {0xe7, 0x7, 0x7, 0x2}, {0x7, 0xb0, 0x2}, {0xc, 0x4, 0x0, 0xc}, {0x0, 0x1, 0x4, 0x80000000}, {0x1, 0x5, 0x3, 0x5}, {0x0, 0xfffffff0, 0x3, 0xb}], {0x8, 0x6, 0x9, 0x3}, {0xfff9, 0x7, 0xfffff8cd, 0x1}}}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)='#!', 0x2}, {&(0x7f0000000000)="8d6bb85551ec8430877ae32fe9bbe42cc8f2147a3eba8e1969f0435119cf4c071c8aee7ef2921be5d7d4796c5566c95989acb3d185587234186e96b8fde9ffac51de05a87b8b893e2abd154dd886eafbe03881d25b7b13b4c32227fc9e5a86a06f59f701322b3a109a13436e", 0x6c}], 0x2) execve(&(0x7f0000000100)='\x00', 0x0, 0x0) mkfifoat(r0, &(0x7f0000000080)='./file0\x00', 0x30) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r3, 0x20007461) ioctl$TIOCSCTTY(r3, 0x20007461) ioctl$WSMOUSEIO_SRES(r2, 0x80045721, &(0x7f0000000080)=0x5) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x3, 0x101, 0x5, 0x1, 0xa82c, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0x80000000}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffe}, {0x4, 0x4, 0x80000000, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x2, 0x6b6e}, {0x2000d, 0x3, 0xfdf0, 0x9}, {0x0, 0x7, 0x10000, 0xa}, {0xfffffc04, 0x80000004, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38bffd, 0x7}, {0x80000cb, 0x2, 0xc, 0x8}, {0x2000dd, 0x9, 0x15, 0x400}, {0x1000a, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x24, 0x7}, {0x5, 0xd655, 0x1, 0x2}]}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x4}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xf}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f00005dd000/0x3000)=nil, 0xc}, {&(0x7f0000ff3000/0x1000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x40000000000007}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000102000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xc}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil, 0x3ff8000000}, {&(0x7f0000693000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000abf000/0x3000)=nil, 0x1ff}], './file0\x00', 0x8, 0x0, 0x0, 0x0, [0x0, 0x20000000, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x1ff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x44, 0x0, 0x0, 0x2, 0x94fd, 0xffffb6e0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xae9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffe, 0xffffff49, 0x9, 0x8000009, 0xfffffffd, 0x0, 0x6, 0xffc, 0x0, 0x4, 0x0, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200, 0x3, 0x0, 0x3, 0x0, 0x400, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffff001, 0x80, 0x0, 0x0, 0x1000000, 0x0, 0x2, 0x0, 0x0, 0x70000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x7, 0xfffff800, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x2, 0xffffffff, 0x400000, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdf7fffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x644f, 0x400000, 0x0, 0x7a1, 0x6, 0x0, 0x80000000, 0x0, 0x58, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x3, 0x0, 0x0, 0x5, 0x800, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1000, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x9, 0x1, 0x0, 0x7, 0x100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, 0x0, 0x0, 0x0, 0xffffffff, 0x398, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x5]}) ioctl$TIOCGTSTAMP(r0, 0x4010745b, &(0x7f0000000ac0)) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffa4961, 0x0) bind$unix(r4, &(0x7f00000010c0)=@file={0xa, 0x1, './file0\x00'}, 0xa) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$DIOCGETSYNFLWATS(r5, 0xc0084463, &(0x7f0000000040)) ioctl$TIOCSETA(r5, 0xcd60441a, &(0x7f0000000080)={0x4, 0x2, 0x9, 0x14d, "2000030100010000000000000068a95a010400", 0x6, 0x2}) readv(r1, &(0x7f0000000700)=[{0x0}, {&(0x7f00000006c0)=""/4, 0x4}], 0x2) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r6, 0xcd604406, &(0x7f0000000040)={0x7ffb, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1dd00", 0x4, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r6, 0xcd604407, &(0x7f0000000040)={0xa, 0x2000000, 0x2, 0x800005, "2c0d000000024000a400000300", 0x4, 0x8}) 173.234593ms ago: executing program 0 (id=175): r0 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x40000928, 0x0) utimensat(r0, 0x0, &(0x7f0000000100)={{0xfffffffffffffffe, 0xfffffffffffffffd}, {0x2, 0x1}}, 0x0) 169.95424ms ago: executing program 2 (id=176): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x0, 0x2, 0x4}, {0x48, 0x89, 0xf7, 0x100}, {0x1b0e, 0xff, 0x3, 0x4000800}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(0xffffffffffffffff, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe) 117.23311ms ago: executing program 5 (id=177): r0 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) (async) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000010000000600", 0x62a4}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8, "00000000100000008b7cff2006aec162", 0x1001}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x1c, 0x18, 0x2, 0x9, "6a472249564f80dabce9651a15028957", 0xba2}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r1, 0x20007461) ktrace(0x0, 0x1, 0x4, 0x0) (async) ioctl$TIOCFLUSH(r1, 0x80047476, &(0x7f0000000080)=0xffff) 116.058436ms ago: executing program 2 (id=178): r0 = socket(0x11, 0x3, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0xff, 0x1, 0x9}, {0x30, 0xc9, 0x2, 0x8}, {0x9b1e, 0x22, 0xf, 0x40207ff}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6500000000000090000f60056930fb9b7bc65af1faf4a0500d36083c9c73a28ce81b05e503c1d00000000003605f24ce6ca4cb5a378e13d53bd6c74f3551505a7518b78cbfac9ad1ed658", &(0x7f0000000000)=0x4c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, '\x00', 0x8, 0x6, 0x30, @rand_addr="0000000000050002c50600", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x1, 0x0, 0x8}}}}}}}) sendto$unix(r0, &(0x7f0000000300)="b1000501000000050000000107000000331c13fecea70500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297be1aa050400ce9409000000bbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2325768abfba09a214cc8adfbfab11ce0000080ce37193f834370b0000eb376640c9f2746700"/177, 0xb1, 0x2, 0x0, 0x0) 115.72925ms ago: executing program 0 (id=179): r0 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) r2 = socket$inet(0x18, 0x3, 0x102) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0x7, "00000000000000000000000000000001", 0x102}, 0x1c, &(0x7f00000012c0)=[{&(0x7f00000002c0)="638802000400339a0142008751f2fbffffffffffffffd68e590009cf9323100084410a85919f2e04337b552b32106fb6b4d9a7845d3630516bb888e28be2db771a4c610b3b6423fd63042f5c5c707d3b32d81ac276bfb8d53ee73d1484a6a08f15485161a6e6436edee0e114fe687c7d00017c0b14935a4df54c3bd052d2731a0ca71d52766d8eb2202727d7b784fec87e959aaa823578cb28f08365b74854477aa35e4312a4f4b76ac0558d4ee4a5c9f08bd4719768eaf12d4ea886df465fea7704953f56c8d729e1f8dc461d494a6656b0895406569a5d9d5404fa79920cfd6cc65397281113cfaf0c9dd39edb9688c88aba04", 0xf4}, {&(0x7f0000000000)="4c0001", 0x3}, {&(0x7f0000000780)="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", 0x331}], 0x3, 0x0}, 0x2) readv(r0, &(0x7f0000000ac0)=[{&(0x7f0000000440)=""/237, 0xed}, {0x0}], 0x2) 112.954373ms ago: executing program 2 (id=180): open$dir(&(0x7f0000000040)='./file0\x00', 0x10200, 0x120) access(&(0x7f0000000200)='./file0\x00', 0x2) syz_emit_ethernet(0x81, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd66fd412c004b33042a818a724ac0f75111e18e2967fc6b8d060000000000000000000000000000bb0601000000000000050200090401177001d700000000000059f4"]) 112.37521ms ago: executing program 1 (id=181): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x1, 0x200023}) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000100)) 108.069364ms ago: executing program 0 (id=182): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$DIOCGETSTATES(r1, 0xc0104419, &(0x7f0000000700)={0x153, &(0x7f0000000400)=[{0x0, ""/16, [{[@v4, @v6=@mcast2]}, {[@v4=@broadcast, @v4=@broadcast]}], {}, {}, @v6=@mcast2}, {0x0, ""/16, [{[@v4=@multicast2, @v6=@mcast2]}, {[@v6=@loopback, @v6=@loopback]}], {}, {}, @v4=@remote}]}) syz_open_pts() writev(r0, &(0x7f00000007c0)=[{&(0x7f00000009c0)="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", 0x1c5}], 0x1) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x5c4a) open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x1, 0x40000020, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000000)=0x6) 106.933818ms ago: executing program 5 (id=183): semop(0xffffffffffffffff, &(0x7f0000000000)=[{0x1, 0x8, 0x1000}, {0x4, 0xbc0c, 0x400}, {0x4, 0x24a9, 0x800}, {0x2, 0x9c3, 0x1000}, {0x3, 0xfff4}, {0x4, 0x3, 0x3800}, {0x2, 0x6, 0x1800}, {0x2, 0xbb}, {0x3, 0x8000}], 0x9) (async) r0 = semget(0x1, 0x2, 0x300) semctl$SETVAL(r0, 0x3, 0x8, &(0x7f0000000040)=0x100) (async) r1 = getuid() setuid(r1) access(&(0x7f0000000080)='./file0\x00', 0x1) (async) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fchdir(r2) (async) semctl$GETVAL(r0, 0x4, 0x5, &(0x7f0000000100)=""/223) semctl$GETNCNT(r0, 0x2, 0x3, &(0x7f0000000200)=""/26) r3 = msgget$private(0x0, 0x410) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000240)) (async) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) (async) semop(r0, &(0x7f00000002c0)=[{0x0, 0xffc0, 0x800}, {0x2, 0x4, 0x1800}, {0x0, 0x2, 0x800}, {0x4, 0x3ff, 0x800}, {0x0, 0x2146, 0x1000}, {0x2, 0x40, 0x800}, {0x2, 0xb, 0x1800}, {0x3, 0x3, 0x1800}], 0x8) semctl$SETVAL(r0, 0x1, 0x8, &(0x7f0000000300)=0x1ff) (async) r5 = semget(0x1, 0x3, 0x400) semctl$GETALL(r5, 0x0, 0x6, &(0x7f0000000340)=""/7) (async) ioctl$DIOCSETLIMIT(r4, 0xc0084428, &(0x7f0000000380)={0x2}) (async) r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000003c0), 0x20000, 0x0) ioctl$DIOCRCLRTSTATS(r6, 0xc4504441, &(0x7f0000001080)={{'./file1\x00', './file0\x00', 0x40, 0x1}, &(0x7f0000000400)=[{'./file0\x00', './file0\x00', 0x0, 0xf8}, {'./file0\x00', './file0\x00', 0x70, 0x81}, {'./file0\x00', './file0\x00', 0x51, 0x10}], 0x400, 0x3, 0x4, 0x1ff, 0xf, 0x7, 0x64, 0xdd1}) (async) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000001500), 0x8000, 0x0) ioctl$VNDIOCCLR(r7, 0x80384601, &(0x7f00000015c0)={&(0x7f0000001540)='./file1\x00', 0x9, &(0x7f0000001580)='./file0\x00', 0x8}) (async, rerun: 64) ioctl$DIOCGETSTATUS(r6, 0xc2084415, &(0x7f0000001600)) (async, rerun: 64) semget$private(0x0, 0x1, 0x262) semctl$SETVAL(r0, 0x2, 0x8, &(0x7f0000001840)=0x7) (async) semop(r0, &(0x7f0000001880)=[{0x2, 0x1, 0x1800}, {0x3, 0x6, 0x2800}, {0x3, 0x3, 0x800}, {0x1, 0x4}], 0x4) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000018c0)={0x1, 0x8, {[0x2, 0x9, 0x4, 0x15, 0xc84b, 0x10000, 0x84, 0x8, 0x1, 0x8, 0xd7ae, 0xd, 0x1, 0x7ff, 0x0, 0x7, 0x4, 0x1], [0x0, 0x10, 0x6b8, 0x5, 0xb53, 0x8, 0x4, 0x100000000, 0x2, 0xe], [0xf4, 0x8, 0x1000, 0x5, 0x15, 0x8], [0x8, 0x1000, 0x101, 0x3, 0x1, 0x6], [{0x9, 0x0, 0x5, 0xfffffffffffffff7}, {0x81, 0x3, 0xee, 0x7fffffffffffffff}, {0x7, 0x5, 0x0, 0xa20}, {0x3, 0x400, 0xfffffff8, 0x5}, {0x7, 0xfffffffe, 0x2, 0x8}, {0x1, 0x7d99594c, 0xff, 0x8000}, {0x8, 0x3, 0x4, 0x2}, {0xd9, 0x8, 0xfaa, 0x9}], {0x7ff, 0x5449, 0x40, 0x7}, {0x3, 0xffffff86, 0x4, 0x8}}}) (async) clock_getres(0x0, &(0x7f0000001b00)) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000001b40)=""/231) (async, rerun: 64) mkdirat(0xffffffffffffffff, &(0x7f0000001c80)='./file0\x00', 0x101) (rerun: 64) 97.732887ms ago: executing program 2 (id=184): r0 = socket(0x18, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x18, 0x2, 0x3, "fe800004006834000800bb3cfa00", 0x3}, 0x1c) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x41) mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000840)={0x2, './bus\x00'}) (async) recvfrom(r0, &(0x7f0000000180)=""/54, 0x36, 0x800, 0x0, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = socket(0x18, 0x3, 0x40) (async) setuid(0xee01) ioctl$FIONREAD(r4, 0x8020697f, &(0x7f0000000100)) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) socketpair(0x1, 0x2, 0x5, &(0x7f0000000740)={0xffffffffffffffff}) accept(r6, &(0x7f0000000780)=@in6, &(0x7f00000007c0)=0x1c) (async) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) truncate(&(0x7f0000000000)='./file0\x00', 0x2fffe) (async) getsockname(r0, &(0x7f0000000000)=@in, &(0x7f0000000040)=0x10) (async) execve(&(0x7f00000001c0)='./bus\x00', &(0x7f00000002c0)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)=']\x00', &(0x7f0000000280)='\x00'], &(0x7f00000004c0)=[&(0x7f0000000300)='\x04\x00', &(0x7f0000000340)='\x90.@@-(\\D\x00', &(0x7f0000000380)=']-@[%,@@\'][^\x00', &(0x7f00000003c0)='^&!+}4\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='*\x00', &(0x7f0000000480)='!.@\x00']) (async) getpeername(r0, &(0x7f00000000c0)=@in6, &(0x7f0000000140)=0x1c) (async) r7 = open(&(0x7f0000000880)='./bus\x00', 0x10105, 0x128) writev(r7, &(0x7f0000000700)=[{&(0x7f0000000500)="eb0ca2c231cbc3b65f459be6a927f6ce", 0x10}, {&(0x7f0000000540)="58e67baac23cceef1b", 0x9}, {&(0x7f0000000580)="69eeafc7e3cc19f50c75205fadfb936ac5f559c7f8a43eb06e37f3b583e5e6aea9479f3c2ebdfe3029923f29e09b93f069c7a947b590c74fa983032e9589dc12caf2e16d8dd2b6c411889b543d46ee416f5af4256ce3a83117c86ad698512167d085eebf370618697ad11d326bae485f86a0bb632865d5cbfc6f105450f8ea3fb8e9853ac65d5e60feb5a9230836277ab7d97eeb881cc8e1214120e1b4b74415ae774daaa87f5ebee7583b5a7b5134f7f64ce7e2c8a50b62498589257fb4c5c7bbaf8566257a39a1296487452c837bceeb9ab254de54fd2c2dfb97507d6b2bef42782af0df7fdefb48860e", 0xeb}, {&(0x7f0000000680)="ecfd99055e32b69f7b2ecc6c39f5ea55b653c157a551ef11d8d7928ea004d3c8a8a2452e0c902604f87be2180b7fbf15c368e0ba76f5a74260899733cf36b0d598354c05cc96fd39acb4176d0002f816a310c37e1b27538c3769571b3cad13c939350b4e3a0da4fbe2e590c07b768e5fbffc61d524f0943ff9", 0x79}], 0x4) (async) ppoll(0x0, 0x0, &(0x7f0000002d00)={0x6, 0x63376355}, 0x0) (async) ioctl$TIOCSETD(r7, 0x8004741b, &(0x7f0000000080)=0x9) fcntl$dupfd(r7, 0xa, r0) ioctl$DIOCOSFPFLUSH(r7, 0x2000444e) 96.707751ms ago: executing program 1 (id=185): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={0x10, 0xffff, 0x1, [r2]}, @cred={0x18}], 0x28, 0x4}, 0x2) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000240)={&(0x7f00000000c0)='./file0\x00', 0x1, &(0x7f00000001c0)='./file0\x00', 0x8}) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20001916, 0xffffffffffffffff) mkfifoat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x40) unveil(0x0, &(0x7f0000000200)='w\x00') 61.250532ms ago: executing program 5 (id=186): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000009c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x3, 0xc4, 0xa}, {0x40, 0xc9, 0xfe, 0x1}, {0x9b1e, 0x2, 0xf, 0x40207ff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f0000000000)={0x3, 0x8000}) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r1, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002940)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}, 0x38, 0xc) 55.110306ms ago: executing program 0 (id=187): r0 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) ftruncate(r1, 0x4000) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x2000003, 0xffffffff, 0x40, 0x8623, "0104012d29fb00070c000000098004005e00", 0x0, 0xc20100}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], 0x8, 0x1, 0xa, 0x2, 0x4c8, 0xfffffffb, 0x7fff, 0x8}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) setitimer(0x1, &(0x7f00000000c0)={{0x7f, 0x6}, {0x0, 0x3}}, &(0x7f0000000180)) mknod(&(0x7f0000000040)='./file0/file0\x00', 0x1ffa, 0x7fff) ioctl$AUDIO_GETPOS_ctl(0xffffffffffffffff, 0x40104123, &(0x7f00000000c0)) (async) getitimer(0x1, &(0x7f0000000140)) (async) r4 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffff, "0100dd2d018000000000005e00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r5 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0xffff, 0x1024, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001180)='\x00\x00\x00\x00', 0x4) (async) open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100) pwritev(r4, &(0x7f0000000500)=[{0x0}], 0x1, 0x8) (async) sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000200), 0x0) 53.159408ms ago: executing program 2 (id=188): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x7c, 0x8, 0xf7, 0x3f9}, {0x80, 0x7, 0x1, 0x5}, {0x9b1e, 0xd, 0xf4, 0x4000800}]}) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad900183a0163576cb8d2228fedd83537db962d9edefe8000000000000000000000000000aa820090780002470a00000000000000090000000000000001"]) socket$unix(0x1, 0x2, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000080)='c\x00') open(&(0x7f0000000000)='./file0\x00', 0x100, 0x40) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000280)=[{0x94, 0x11, 0x8, 0xcb}, {0xa06, 0x0, 0xf9, 0x8}]}) mknod(&(0x7f0000000100)='./file0/file0/..\x00', 0x10, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x1, 0x6, 0x0, @multicast2, @multicast1}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa7}}}}}}) 48.125624ms ago: executing program 5 (id=189): r0 = semget(0x0, 0x1, 0x281) semop(r0, 0x0, 0x0) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000080)) 8.252909ms ago: executing program 0 (id=190): setuid(0xee01) r0 = socket$inet(0x2, 0x3, 0x4) bind$inet(r0, &(0x7f0000000340)={0x10, 0x2, 0x0, 0xac1400ff}, 0x10) 7.346644ms ago: executing program 2 (id=191): r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) ioctl$TIOCNXCL(r0, 0x2000740e) ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f0000000040)={{0x321c, './file0\x00', [{[@v6=@mcast1, @v6=@mcast1], [0xf75, 0x800], 0x7, 0x18}, {[@v4=@multicast1, @v4=@broadcast], [0xb636, 0x2], 0xbba6, 0x14}], {{0x9, 0x1, 0x7, 0x5}, 0x1, 0x0, 0x41, 0x1, 0x0, 0x1, 0x1e}, {{0xf569, 0x8, 0xbd, 0x3}, 0x8001, 0x3, 0x0, 0x3, 0xe, 0x2, 0x8}, @v6=@ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, 0x7, 0xfb, 0x8, 0x4056, 0xe, [[0x6, 0xc0], [0x3, 0x4]], [[0x800, 0x7], [0x6, 0x7]], 0x0, [0x8, 0x6], 0x101, 0x18, 0x6, 0x3, 0x3, 0xe, 0x8, 0x2, 0x2, 0xd, 0x9, 0x1ff, "2ae3"}}) poll(&(0x7f0000000180)=[{r0, 0x8}, {r0, 0x2}, {r0, 0x8}, {r0, 0x100}, {r0, 0x20}], 0x5, 0x3) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0xc014575e, &(0x7f00000001c0)={0x9, './file0/file0\x00'}) r1 = open(&(0x7f0000000200)='./file0/file0\x00', 0x200, 0x80) ioctl$BIOCSFILDROP(r1, 0x80044279, &(0x7f0000000240)=0xd) ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f0000000280)=0x7fffffff) fstatat(r1, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300), 0x6) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TIOCMBIS(r2, 0x8004746c, &(0x7f00000003c0)=0x8) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f0000000400)={0x2, 0x8}) r3 = open(&(0x7f0000000440)='./file0/file0\x00', 0x800, 0xa6) r4 = open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) mkfifoat(r4, &(0x7f00000004c0)='./file0/file0\x00', 0x1) ioctl$WSMOUSEIO_GETPARAMS(r3, 0x80105727, &(0x7f0000000540)={&(0x7f0000000500)=[{0x4, 0xac}], 0x1}) setitimer(0x1, &(0x7f0000000580)={{0x8, 0x3}, {0x69c, 0x81}}, &(0x7f00000005c0)) r5 = openat$dri(0xffffffffffffff9c, &(0x7f0000000600)='/dev/dri/card0\x00', 0x0, 0x0) r6 = getsid(0xffffffffffffffff) fcntl$setown(r5, 0x6, r6) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f0000000640)={{0x1c, 0x18, 0x1, 0x6479, "69ac137acae78f5e9a9e14d71a1b5a13", 0x400}, {0x1c, 0x18, 0x1, 0xb9, "d4d710c203dfba1f886455dbae3b6fba", 0x8}, 0x2, [0x1, 0x10, 0xfffffffc, 0x1, 0x3, 0x8, 0x3, 0xc]}, 0x5c) ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000006c0)={0x14042118, 0x7, 0x9, 0x1, "54566501943692f947df2921061fa3f132d7777d", 0x2, 0x7}) ioctl$BIOCGRTIMEOUT(r2, 0x4010426e, &(0x7f0000000700)) r7 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000740), 0x10, 0x0) readv(r5, &(0x7f00000008c0)=[{&(0x7f0000000780)=""/96, 0x60}, {&(0x7f0000000800)=""/120, 0x78}, {&(0x7f0000000880)=""/19, 0x13}], 0x3) r8 = dup(r2) ioctl$BIOCSETIF(r8, 0x8020426c, &(0x7f0000000900)={'tap', 0x0}) fcntl$getown(r4, 0x5) r9 = accept$inet6(r2, &(0x7f0000000940), &(0x7f0000000980)=0x1c) poll(&(0x7f0000000a00)=[{r1, 0x8}, {r7, 0x40}, {r9, 0x1}, {r3, 0x4}, {0xffffffffffffffff, 0x100}], 0x5, 0x26e6) 6.689331ms ago: executing program 0 (id=192): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x50, 0x7, 0xb, 0x3}, {0x40, 0x4, 0x75, 0x8}, {0x9b1f, 0xff, 0x9, 0x7}]}) ppoll(&(0x7f0000001140)=[{0xffffffffffffffff, 0x40}], 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x5, 0x8) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0xfe, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x1, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0xa7}}}}}}) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000000c0)={0x0, r2, 0x3}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) setsockopt$inet_opts(r1, 0x0, 0x15, &(0x7f0000000000), 0x4) sendto$inet(r1, 0x0, 0x0, 0x408, &(0x7f0000000000)={0x10, 0x2, 0x2, 0xfffffffd}, 0x10) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r4 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7909) getpeername$inet(r4, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$AUDIO_GETPAR_ctl(r4, 0x40404124, &(0x7f0000000140)) lseek(r4, 0xffffff7ffffff001, 0x2) ioctl$DIOCRCLRADDRS(r3, 0xc4504442, &(0x7f00000002c0)={{'./file0\x00', './file0\x00', 0x0, 0x6}, 0x0, 0x0, 0x0, 0xe3f6, 0x2, 0x7, 0x2, 0x0, 0xff}) ioctl$DIOCXBEGIN(r3, 0xc0104451, &(0x7f00000025c0)={0x5, 0x5, &(0x7f0000001180)=[{0x1, './file0\x00', 0x4}, {0x0, './file0\x00', 0x9}, {0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7}, {0x1, './file0\x00', 0x9}, {0x0, './file0\x00', 0x4}]}) unveil(0x0, &(0x7f0000000300)='c\x00') syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[@ANYRES8=r0]) 0s ago: executing program 5 (id=193): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d3725864749b) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x60) chroot(&(0x7f0000000200)='./file0/file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. load: 0.38 cmd: getty 34112 [ttyin] 0.00u 0.01s 0% 323k Connection to 10.128.0.4 closed by remote host. ktrace write failed, errno 27, tracing stopped OpenBSD/amd64 (ci-openbsd-multicore-6.us-central1-b.c.syzkaller.internal) (tty00) login: witness: lock order reversal: 1st 0xffff800010fda3f0 sbufrcv (&so->so_rcv.sb_lock) 2nd 0xfffff0006c23e340 inode (&ip->i_lock) lock order [1] sbufrcv (&so->so_rcv.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff8343f980 -> 0xffffffff8348dc26 is missing lock order [2] inode (&ip->i_lock) -> [1] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 soreceive+0x27d #3 fifo_read+0x117 #4 VOP_READ+0x101 #5 vn_rdwr+0x15b #6 vndsetcred+0xa1 #7 vndioctl+0xdfc #8 VOP_IOCTL+0xac #9 vn_ioctl+0xf8 #10 sys_ioctl+0x674 #11 syscall+0xbd4 #12 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffff0006c23e340,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffff0006c23e328,1) at rw_do_enter_write+0xba rrw_enter(fffff0006c23e328,1) at rrw_enter+0xc6 VOP_LOCK(fffff000644879a8,2001) at VOP_LOCK+0xbd vn_lock(fffff000644879a8,2001) at vn_lock+0xa4 vfs_getcwd_common(fffff000644879a8,fffff000644878d0,0,0,200,0,77fbf6eefd16b262) at vfs_getcwd_common+0xd1 vn_isunder(fffff000644879a8,fffff000644878d0,ffff80002a212010) at vn_isunder+0x56 unp_externalize(fffff0006ac56f00,33,0) at unp_externalize+0x26f soreceive(ffff800010fda300,ffff80003bfaf768,ffff80003bfaf718,0,ffff80003bfaf750,ffff80003bfaf8dc,aee28109fd33cae8) at soreceive+0xc24 recvit(ffff80002a212010,1,ffff80003bfaf8b0,0,ffff80003bfaf960) at recvit+0x40b sys_recvmsg(ffff80002a212010,ffff80003bfafa10,ffff80003bfaf960) at sys_recvmsg+0x1bf syscall(ffff80003bfafa10) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x18726f72600, count: -14 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003bfaf1f0 rbx 0 rdx 0xffff8000015f7780 rcx 0xffff80002a212010 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003bfaf0d0 r9 0x8080808080808080 r10 0xece2ee51929c1ba6 r11 0x73d3fed2175df542 r12 0xfffff000040c2880 r13 0xfffff000048aaf88 r14 0x3 r15 0xffffffff83524398 substchar+0x5d01 rip 0xffffffff832e3685 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003bfaf1e0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=252076 pid=94552 tcnt=2 stat=onproc flags process=1000000 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800037f98d20,0xffffffff83aa1be0 process=0xffff80003bfa4020 user=0xffff80003bfaa000, vmspace=0xfffff0006a1e5208 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 94552 28888 41913 0 7 0x1000000 syz-executor *94552 252076 41913 0 7 0x5000000 syz-executor 66670 477026 84932 0 2 0 syz-executor 66670 428081 84932 0 3 0x4000080 kqpoll syz-executor 72252 84063 55248 0 2 0 syz-executor 3112 40957 99891 0 2 0 syz-executor 3112 406192 99891 0 3 0x4000080 sbwait syz-executor 3112 465244 99891 0 3 0x4000000 inode syz-executor 20242 231141 75637 0 3 0x80 nanoslp syz-executor 20242 491661 75637 0 3 0x4000080 kqsel syz-executor 20242 47974 75637 0 3 0x4000080 fsleep syz-executor 49540 233549 17113 0 3 0x80 nanoslp syz-executor 49540 202161 17113 0 3 0x4000080 fifor syz-executor 49540 490431 17113 0 3 0x4000080 fsleep syz-executor 76071 176424 75919 60929 3 0x90 nanoslp syz-executor 76071 11232 75919 60929 3 0x4000090 msgwait syz-executor 76071 223908 75919 60929 3 0x4000090 fsleep syz-executor 60954 434215 1 0 3 0x100083 ttyin getty 25261 51269 5325 0 3 0x82 nanoslp syz-executor 75637 398370 5325 0 3 0x82 nanoslp syz-executor 41913 433489 5325 0 3 0x82 nanoslp syz-executor 17113 206693 5325 0 3 0x82 nanoslp syz-executor 75919 267021 5325 0 3 0x82 nanoslp syz-executor 55248 123251 5325 0 3 0x82 nanoslp syz-executor 99891 98317 5325 0 3 0x82 nanoslp syz-executor 84932 122637 5325 0 3 0x82 nanoslp syz-executor 5325 44503 1 0 3 0x82 kqread syz-executor 18075 425135 0 0 3 0x14200 bored smr 25571 430653 0 0 2 0x14200 zerothread 94968 214720 0 0 3 0x14200 aiodoned aiodoned 39911 333642 0 0 3 0x14200 syncer update 50863 12815 0 0 3 0x14200 cleaner cleaner 82845 113851 0 0 3 0x14200 reaper reaper 2036 183412 0 0 3 0x14200 pgdaemon pagedaemon 46128 66680 0 0 3 0x14200 bored viomb 46008 178697 0 0 3 0x40014200 acpi0 acpi0 25613 217335 0 0 3 0x40014200 idle1 86342 248669 0 0 3 0x14200 bored softnet1 628 167278 0 0 2 0x14200 softnet0 94065 498439 0 0 3 0x14200 bored systqmp 45936 220463 0 0 3 0x14200 bored systq 51981 63857 0 0 3 0x14200 tmoslp softclockmp 90878 338894 0 0 3 0x40014200 tmoslp softclock 95726 117868 0 0 3 0x40014200 idle0 1 39659 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 94552 (syz-executor) thread 0xffff80002a212010 (252076) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83b138c0) #0 witness_lock+0x5f1 #1 unp_externalize+0x155 #2 soreceive+0xc24 #3 recvit+0x40b #4 sys_recvmsg+0x1bf #5 syscall+0xbd4 #6 Xsyscall+0x128 exclusive rwlock sbufrcv r = 0 (0xffff800010fda3f0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 soreceive+0x27d #4 recvit+0x40b #5 sys_recvmsg+0x1bf #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 3112 (syz-executor) thread 0xffff80002a2134d0 (406192) exclusive rrwlock inode r = 0 (0xfffff00069ef4440) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ufs_lookup+0x16bd #7 VOP_LOOKUP+0x6e #8 vfs_lookup+0x963 #9 namei+0x7c5 #10 vn_open+0x178 #11 vndioctl+0xc43 #12 VOP_IOCTL+0xac #13 vn_ioctl+0xf8 #14 sys_ioctl+0x674 #15 syscall+0xbd4 #16 Xsyscall+0x128 Process 3112 (syz-executor) thread 0xffff800037f98558 (465244) exclusive rrwlock inode r = 0 (0xfffff00069ef41f0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c5 #7 vn_open+0x178 #8 sys_ktrace+0x9a #9 syscall+0xb17 #10 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11061 12283K 12428K 166960K 12317 0 pcb 17 12K 12K 166960K 60 0 rtable 268 8K 9K 166960K 399 0 pf 38 18K 25K 166960K 128 0 ifaddr 45 8K 8K 166960K 49 0 ifgroup 55 2K 2K 166960K 59 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 82 0 ioctlops 0 0K 4K 166960K 1536 0 iov 0 0K 16K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1324 83K 83K 166960K 1525 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 11 0K 0K 166960K 19 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 65K 89K 166960K 323 0 sigio 0 0K 0K 166960K 1 0 proc 21 33K 164K 166960K 572 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 11 0 in_multi 103 7K 7K 166960K 105 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 11 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 397 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 140 82K 184K 166960K 4797 0 UVM aobj 14 2K 2K 166960K 14 0 pinsyscall 20 40K 103K 166960K 1493 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 12 0 NDP 12 0K 2K 166960K 30 0 temp 44 9120K 9190K 166960K 13222 0 kqueue 1 2K 26K 166960K 48 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 49 0 49 1 0 1 1 0 8 1 rtentry 176 121 0 1 6 0 6 6 0 8 0 unpcb 144 233 0 225 4 0 4 4 0 8 3 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpqe 32 1 0 1 1 0 1 1 0 8 1 tcpcb 736 48 0 46 1 0 1 1 0 8 0 arp 136 19 0 0 1 0 1 1 0 8 0 inpcb 328 211 0 206 2 0 2 2 0 8 1 nd6 152 28 0 0 2 0 2 2 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 6 0 6 1 0 1 1 0 8 1 pfstscr 40 1 0 1 1 0 1 1 0 8 1 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfanchor 1288 11 0 3 1 0 1 1 0 8 0 pftag 88 1 0 0 1 0 1 1 0 8 0 pfstitem 24 41 0 0 1 0 1 1 0 8 0 pfstkey 128 42 0 1 2 0 2 2 0 8 0 pfstate 448 42 0 1 5 0 5 5 0 8 0 pfrule 1360 32 0 26 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 493 0 0 31 0 31 31 0 8 0 art_table 40 495 0 0 5 0 5 5 0 8 0 art_node 32 121 0 13 1 0 1 1 0 8 0 sysvmsgpl 40 5 0 3 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 16 0 7 1 0 1 1 0 8 0 shmpl 112 11 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1885 0 410 93 0 93 93 0 8 0 ffsino 296 1885 0 410 114 0 114 114 0 8 0 nchpl 144 2374 0 666 64 0 64 64 0 8 0 rtmask 32 2 0 2 1 0 1 1 0 8 1 vnodes 216 2093 0 0 117 0 117 117 0 8 0 namei 1024 7347 0 7346 3 0 3 3 0 8 2 percpumem 16 56 0 6 1 0 1 1 0 8 0 kstatmem 264 31 0 4 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 10653 0 10653 10 2 8 8 1 8 8 plimitpl 152 43 0 33 1 0 1 1 0 8 0 sigapl 424 643 0 607 7 0 7 7 0 8 2 knotepl 120 287 0 0 9 0 9 9 0 8 0 kqueuepl 224 113 0 108 3 0 3 3 0 8 2 pipepl 344 135 0 108 3 0 3 3 0 8 0 fdescpl 528 627 0 607 3 0 3 3 0 8 0 filepl 160 2689 0 2520 12 0 12 12 0 8 3 lockfpl 104 91 0 90 1 0 1 1 0 8 0 lockfspl 48 43 0 42 1 0 1 1 0 8 0 sessionpl 144 40 0 36 1 0 1 1 0 8 0 pgrppl 48 48 0 36 1 0 1 1 0 8 0 ucredpl 104 268 0 263 1 0 1 1 0 8 0 zombiepl 144 608 0 607 1 0 1 1 0 8 0 processpl 1232 643 0 607 5 0 5 5 0 8 0 procpl 664 941 0 895 6 0 6 6 0 8 1 sockpl 752 497 0 484 10 0 10 10 0 8 8 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 4 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 8 0 0 1 0 1 1 0 8 0 mcl4k 4096 119 0 0 15 0 15 15 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 25 0 0 4 0 4 4 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 169 0 0 11 0 11 11 0 8 0 bufpl 272 5049 0 105 330 0 330 330 0 8 0 anonpl 32 7590 0 0 62 0 62 62 0 115 0 amapchunkpl 152 14463 0 14080 27 0 27 27 0 158 11 amappl16 200 2090 0 2066 15 4 11 14 0 8 8 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 428 0 428 1 0 1 1 0 8 1 amappl13 176 129 0 128 1 0 1 1 0 8 0 amappl12 168 884 0 865 2 0 2 2 0 8 0 amappl11 160 8 0 8 1 1 0 1 0 8 0 amappl10 152 66 0 66 1 0 1 1 0 8 1 amappl9 144 300 0 300 1 1 0 1 0 8 0 amappl8 136 119 0 119 1 0 1 1 0 8 1 amappl7 128 153 0 151 1 0 1 1 0 8 0 amappl6 120 155 0 154 1 0 1 1 0 8 0 amappl5 112 96 0 96 1 0 1 1 0 8 1 amappl4 104 296 0 293 1 0 1 1 0 8 0 amappl3 96 2710 0 2622 4 0 4 4 0 8 0 amappl2 88 559 0 551 2 0 2 2 0 8 0 amappl1 80 11527 0 11401 16 0 16 16 0 8 8 amappl 88 3966 0 3840 5 0 5 5 0 92 0 uvmvnodes 80 106 0 0 3 0 3 3 0 8 0 dma8192 8192 2 0 2 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 13 0 0 1 0 1 1 0 8 0 uaddrrnd 24 627 0 607 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 627 0 607 1 0 1 1 0 8 0 vmmpekpl 168 7123 0 7090 2 0 2 2 0 8 0 vmmpepl 168 49379 0 48476 97 0 97 97 0 357 51 vmsppl 488 626 0 607 5 0 5 5 0 8 0 rwobjpl 80 17039 0 16591 27 0 27 27 0 8 3 pdppl 4096 1261 0 1214 97 50 47 83 0 8 0 pvpl 32 15645 0 0 127 0 127 127 0 265 0 pmappl 256 626 0 607 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 608 0 53 17 0 17 17 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83907ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83b130c0) at __mp_lock+0x192 intr_handler(ffff80002a23db70,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff83b130c0) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x71729f64dcf0, count: -10 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffff0006c23e340,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffff0006c23e328,1) at rw_do_enter_write+0xba rrw_enter(fffff0006c23e328,1) at rrw_enter+0xc6 VOP_LOCK(fffff000644879a8,2001) at VOP_LOCK+0xbd vn_lock(fffff000644879a8,2001) at vn_lock+0xa4 vfs_getcwd_common(fffff000644879a8,fffff000644878d0,0,0,200,0,77fbf6eefd16b262) at vfs_getcwd_common+0xd1 vn_isunder(fffff000644879a8,fffff000644878d0,ffff80002a212010) at vn_isunder+0x56 unp_externalize(fffff0006ac56f00,33,0) at unp_externalize+0x26f soreceive(ffff800010fda300,ffff80003bfaf768,ffff80003bfaf718,0,ffff80003bfaf750,ffff80003bfaf8dc,aee28109fd33cae8) at soreceive+0xc24 recvit(ffff80002a212010,1,ffff80003bfaf8b0,0,ffff80003bfaf960) at recvit+0x40b sys_recvmsg(ffff80002a212010,ffff80003bfafa10,ffff80003bfaf960) at sys_recvmsg+0x1bf syscall(ffff80003bfafa10) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x18726f72600, count: -14 ddb{1}>