last executing test programs: 754.26635ms ago: executing program 4 (id=5): r0 = kqueue() setrlimit(0x3, &(0x7f0000000000)={0x100000, 0x100000}) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900403a0000000000000000000000000000000000fe"]) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r2, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r1, 0x0) kevent(r0, &(0x7f0000000080), 0x400, 0x0, 0x85, 0x0) close(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="835a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500b40000000000e4768c35fd0900000000000000c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) ioctl$TIOCSETA(r3, 0xc4504443, &(0x7f0000000740)={0x0, 0x800002, 0x0, 0x0, "01d04b0a0047c1d100", 0x0, 0x6}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000000)=0x8) sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000000280)=[{&(0x7f00000001c0)="e150cfe22abf7903f9007fd0a32fc1e3d52eda45ebb1981c0842763ebeb7c5a317f151095d2f1ce738708d2817b5533b4fd526f337257596fd02b05f7db6b12c5d7a90275ba64dd7dc03b60253878836d5077581143338c5ba879aa3eed10a1529453a895bc59ecef449eac30c3a55056a1b993b62ec9b22a64fe63facf0205317a1ae7ede747d2c9cc08f51754a4bc7a97a1ab22125f956dd9117414d8315be2a110fd33ba6a6da865268f82b2fd9e99af4", 0xb2}], 0x1, 0x0, 0x0, 0x1}, 0x17) writev(r4, &(0x7f00000002c0)=[{&(0x7f00000009c0)="cff5c05664db486cda974a82388ef359025250129bdb3b3b172b8359eb32d47209b2a02c3b86a29b75b43b0b03", 0x2d}], 0x1) 727.325573ms ago: executing program 1 (id=2): r0 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0x8, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x4000}, 0x100000000006, 0x85e, 0x0, 0x0, 0x80000000000000, 0xffffffff, 0x8000006, 0xfffffffffffffffd}) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) syz_emit_ethernet(0x1066, &(0x7f00000016c0)=ANY=[@ANYBLOB="ffffffffffffe04b1c561ac486dd6036e28210303b00fe8000000002000000000000000000aaff020000000000000000000000000001"]) 708.588295ms ago: executing program 5 (id=6): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2}, {0xb1, 0x10, 0x1, 0xff}, {0x6, 0x5, 0x83, 0x400f}]}) (async) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="258b300ad15115bb", 0x8}], 0x1, 0x0, 0x0, 0x4}, 0xe) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$net_inet_ip(&(0x7f00000027c0)={0x4, 0x11}, 0x4, 0x0, 0x0, &(0x7f0000002900), 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2}, {0xb1, 0x10, 0x1, 0xff}, {0x6, 0x5, 0x83, 0x400f}]}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="258b300a", 0x4}], 0x1, 0x0, 0x0, 0x4}, 0xe) (async) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="71f95f8053ee7649091d5dc2a0020000000008b098", &(0x7f0000000080)=0x15, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[]) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[]) 666.248082ms ago: executing program 5 (id=9): r0 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x10, 0x6) fcntl$dupfd(r0, 0xa, r1) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@local, @random="d0e99f3ded1b", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0xa, 0xab, 0xff, @rand_addr="78042000000014000001000000086500", @mcast2, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0xff, '\x00', @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}) 665.683602ms ago: executing program 6 (id=7): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) (async) msgsnd(r0, 0x0, 0x401, 0x0) (async, rerun: 64) msgrcv(r0, &(0x7f0000000000)={0x0, ""/19}, 0x1b, 0x1, 0x1000) (async, rerun: 64) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd31929648160000000000000000", 0x14) sendmsg$unix(r1, &(0x7f0000000480)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000003c0)=[@rights={0x10}], 0x10, 0x1}, 0x404) (async, rerun: 32) msgctl$IPC_RMID(r0, 0x0) (async, rerun: 32) sysctl$net_pipex(&(0x7f0000000080)={0x4, 0x23, 0x1}, 0x3, &(0x7f00000000c0), 0x0, &(0x7f0000000200)="c9f999fe192f474aee4edabe967847c3ab46e886808842c451822e0ad2864a81fc99594f5983931a8ea297cce1343aa0885dbe4b8cd2d29a7d37949d1b38704bc89b3df384cd1c278a825a71e0866bd588f089c84c63f518d43f94f96e", 0x5d) 659.264796ms ago: executing program 3 (id=4): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7859) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x48) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='#!u', 0x3}], 0x1) writev(r1, &(0x7f0000000280)=[{&(0x7f00000007c0)="19c402385e3e51d7b4653ea2f9104b14486f699e0143ce701d47399af0bf8a98ca0efec3e61472e1b206beb7a05b87369b3a0a26d36d8a4fb334d37eed93b4f3242010cff1b035fc84b9ce41b83da8d177cbf3d2bc91e7e5684bc1b2055cffba7bf5bc3ff0334de9a5e8a6a5114aa3b34c4548d24c0329b01eca3cb98ddc3367cd29f02aadcb78892c2a5a97a107c9d0bf7c82c3", 0x94}, {&(0x7f0000000880)="8b6094e50534318dacaefc2ee7c276d4c9fc67e917ddeac23924db9f0355232b234b2d9cf9e596e69ef342082d380e75f3d58c8f40e6d06bf7ddb7012872ad24a271d38a9b5cbae348fc8382728b0ef789e8296d4c38ef2b7fe1920e5d87a25f996a46874475211efe89b66b152adc1329d4d0fb9987040343b10996838d6b8e7ce5c97bd9a0e195ae0f1999701ed9550ecf91d667d932cb95d1cef173ffb6222763fd4c4e89fce53343773f0d440d1ea931612ec302e90def6560f554252f1dcb115bc41896af1cf3", 0xc9}], 0x2) r2 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f0000000080)={0x7fffffffffffffff, 0x8}, 0x10) r3 = accept$inet(r0, &(0x7f0000000240), &(0x7f0000000400)=0xc) r4 = socket$inet6(0x18, 0x4, 0x8) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="4d6ea1", 0x3}], 0x1) r6 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000440)={0x0, 0x0}, &(0x7f00000004c0)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xffffffffffffff05) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x6, r9, r10}, 0x4}) r11 = getppid() getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0}, 0xc) r13 = getgid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000540)={0x0}, 0xc) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0}, 0xc) r16 = getgid() r17 = openat$pf(0xffffffffffffff9c, &(0x7f00000005c0), 0x80, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000780)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8, &(0x7f0000000100)=[{&(0x7f0000000300)="4d400f6fd73894b94b925cf41dd510d4ad791f93e1276eb97b6dc8fa2be73afe12453958a945f002c0f61d08d9d355333d44ad3f00c114e192b35700ffb4aea6fd4e4ed1da9b1536b9f845353a27c0bfb4da0a82f594e7757695392e8f13cbe99dac28df97e9ba2629d079f8337791476d1c56436f50a4be615114861701c8a629f14ab20e8f1bd39e7af3b2bcf94e0165f03d0f422bde32f3753b7d23b2c911627ff9f967ee4425b71c4dbf32b09a82e8eabc0501fff023c88093a28025e465983b38bda438e10639f85fea4385308b695e6fd69cf878dc1cffda72f06970eb63d7ebab8a22ac8e6830ec0b926d7f17855fa4e4c95f", 0xf6}], 0x1, &(0x7f0000000640)=[@rights={0x18, 0xffff, 0x1, [r3, r1]}, @rights={0x20, 0xffff, 0x1, [r0, r4, r5]}, @rights={0x18, 0xffff, 0x1, [r1]}, @cred={0x20, 0xffff, 0x0, r6, r7, r10}, @cred={0x20, 0xffff, 0x0, r11, r12, r13}, @cred={0x20, 0xffff, 0x0, r14, r15, r16}, @rights={0x30, 0xffff, 0x1, [r0, r1, r2, r0, r2, r2, r2, r0]}, @rights={0x20, 0xffff, 0x1, [r2, r17, r0]}, @rights={0x38, 0xffff, 0x1, [r0, r0, r0, r2, r0, r18, r2, r1, r2]}], 0x138, 0x2}, 0x8) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 584.357584ms ago: executing program 1 (id=10): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x205b92) open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000140), &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000001480)="b1000504600000000000000007000000331c13fecea1051afef9ed061db71efb7ae320b37b673039d2d236073705ae04be38164991f7b85143222b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000008abfba090008efffffffff070000000000000003682ce371a300803712051eadb71d89e0", 0xb1, 0x402, 0x0, 0x0) getpgid(0xffffffffffffffff) r3 = socket(0x2, 0x3, 0x0) r4 = dup(r1) r5 = dup2(r4, r3) connect$unix(r3, &(0x7f0000000000), 0x10) sendto(r5, &(0x7f00000000c0)="e7920273c94c3c52", 0x8, 0x0, 0x0, 0x0) 582.644455ms ago: executing program 6 (id=11): socket(0x2, 0x3, 0x0) (async) r0 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) (async) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r1 = dup2(r0, r0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="0588b4d7b66a8735e55567e4d257b962ce4cf1fbded009723ac76b8fccfd8d7d6b36744338db513ada7c28ce8f815ae11636b12891cfa8071523aba82886f62e1b69ca05d64aa6c1cfda8272acac8aa48c8275b3539ecbaa4bc7b11cfb530f492ed073f8f80fa1c8a428b1e478b1c6b77edfacf9cbdf44aae012368d5814ceb0c52b07aad1dbac3004d889a367e7e5142c05009d9f34541d57ace1f6333272568a49e780173a65ca9803359a82b28fa962dc6ce3799f791d690513a1392d00"/205, 0xcd}], 0x1) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="0588b4d7b66a8735e55567e4d257b962ce4cf1fbded009723ac76b8fccfd8d7d6b36744338db513ada7c28ce8f815ae11636b12891cfa8071523aba82886f62e1b69ca05d64aa6c1cfda8272acac8aa48c8275b3539ecbaa4bc7b11cfb530f492ed073f8f80fa1c8a428b1e478b1c6b77edfacf9cbdf44aae012368d5814ceb0c52b07aad1dbac3004d889a367e7e5142c05009d9f34541d57ace1f6333272568a49e780173a65ca9803359a82b28fa962dc6ce3799f791d690513a1392d00"/205, 0xcd}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000180)={0x1, 0x50}, 0x4000000000000004, &(0x7f0000000140)="7957d802f2fcf4a0cdba2ac06f4191e525", &(0x7f00000000c0)=0x11, &(0x7f00000001c0)="1855988ce35b449de3ad8fd2dc005c017e49c2d9b1a3fb7b1eb3f337fcc99bbb43c53ad592b8d0086d984f0785555e927ad9109c21d20886fdd18b47618356c3f34256bb75f5e05732e94124bd0ba6dca01d8b2572e057bbb63b85d66b19019efb7890c815a24629beaa6f15581b82781ab3c48c80197c1bff4326942fdd5ab4fc7e20f59bb7b187d5", 0x40) connect$unix(r0, &(0x7f0000000000), 0x10) write(r0, &(0x7f0000000080)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0xffea) 580.976903ms ago: executing program 6 (id=12): r0 = socket(0x2, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4) dup2(r1, r0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x14, &(0x7f00000001c0)="02000000", 0x4) bind(r0, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r3, &(0x7f0000000000), 0x10) sendmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xb, 0x0}, 0x401) 565.480762ms ago: executing program 5 (id=13): mknod(0x0, 0x2000, 0x40000802) setsockopt(0xffffffffffffffff, 0x1000000000029, 0xa, 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x27}], 0x1, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x9, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xb1, 0x10, 0xe4, 0x3}, {0x20, 0xd, 0x2, 0x4}, {0x6, 0xa, 0x83, 0x880}]}) openat$bpf(0xffffffffffffff9c, 0x0, 0x10, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000140), 0x3197bf01e1fdc83b, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f00000002c0)={&(0x7f0000000200)='./file0/file0\x00', 0x9, &(0x7f0000000240)='./file0/file0\x00', 0xe}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r3, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'}) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff}) r4 = kqueue() kevent(r4, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r4, 0x0, 0x0, 0x0, 0x2, 0x0) syz_emit_ethernet(0xe, &(0x7f00000002c0)=ANY=[]) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f00000000c0)) 543.439273ms ago: executing program 3 (id=15): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) r1 = dup(r0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000100)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) syz_emit_ethernet(0x68, &(0x7f0000000000)=ANY=[]) syz_extract_tcp_res(0x0, 0x47, 0xfee) (async) syz_extract_tcp_res(0x0, 0x47, 0xfee) ioctl$FIONREAD(r1, 0x4004667f, 0x0) (async) ioctl$FIONREAD(r1, 0x4004667f, 0x0) 525.816366ms ago: executing program 3 (id=16): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xb0, 0x10, 0xe4, 0x10000f}, {0x28, 0xd, 0x2, 0x4}, {0x6, 0xa, 0x83, 0x880}]}) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="00e0ad50b58a8002bc5a91000000004b8e5f84cf879e39bdccb4b0c381ddd81537db7b77e9a5dba7e6d6f4ac23ca3fe6db3575ec597ae9b205000000000000008d04befb22b2c337", &(0x7f0000000080)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ff011f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102009078"]) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"]) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020090"]) (async) syz_emit_ethernet(0x66, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0x1, &(0x7f0000000000)="01fee8bb", 0x4) (async) sendto$unix(r2, &(0x7f0000000100)="b1000504600000000000210007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673039d2d236073705ae04be38164991f7b85143222b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000008abfba090008efffffffffff3512b132ae037503682ce371a300803712051eadb71d89e0", 0xb1, 0x8, 0x0, 0x0) (async) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80047476, &(0x7f0000000040)={0x2}) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) (async) write(r0, &(0x7f0000000480)='\x00'/14, 0xe) 453.081437ms ago: executing program 1 (id=19): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{}, {0x2}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0xb4, 0x5, 0x102}, {0xc, 0x89, 0x0, 0xa}, {0x16, 0x2, 0xa, 0x48a6}]}) seteuid(0xffffffffffffffff) setreuid(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[]) setitimer(0x2, 0xffffffffffffffff, 0x0) r1 = syz_open_pts() close(r1) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r2 = socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r3, 0x0, 0x6, &(0x7f0000000340)="15337ac0", 0x4) setsockopt$sock_int(r2, 0xffff, 0x40, &(0x7f00000002c0)=0x405, 0x3) poll(&(0x7f0000000200)=[{r1, 0x20}, {r0}, {r0, 0x100}, {r2, 0x1}, {r0, 0x20}, {r0, 0x8}], 0x6, 0x1) sysctl$kern(&(0x7f00000001c0)={0x1, 0x33}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x1c, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[{}, {0x2}]}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0xb4, 0x5, 0x102}, {0xc, 0x89, 0x0, 0xa}, {0x16, 0x2, 0xa, 0x48a6}]}) (async) seteuid(0xffffffffffffffff) (async) setreuid(0x0, 0xffffffffffffffff) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[]) (async) setitimer(0x2, 0xffffffffffffffff, 0x0) (async) syz_open_pts() (async) close(r1) (async) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket$inet(0x2, 0x8003, 0x0) (async) setsockopt(r3, 0x0, 0x6, &(0x7f0000000340)="15337ac0", 0x4) (async) setsockopt$sock_int(r2, 0xffff, 0x40, &(0x7f00000002c0)=0x405, 0x3) (async) poll(&(0x7f0000000200)=[{r1, 0x20}, {r0}, {r0, 0x100}, {r2, 0x1}, {r0, 0x20}, {r0, 0x8}], 0x6, 0x1) (async) sysctl$kern(&(0x7f00000001c0)={0x1, 0x33}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x1c, 0x0, 0x0) (async) 452.400298ms ago: executing program 6 (id=20): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) r0 = socket(0x800000018, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x40b) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) fcntl$getown(r1, 0x5) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) (async) socket(0x800000018, 0x2, 0x0) (async) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x40b) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) fcntl$getown(r1, 0x5) (async) 449.383821ms ago: executing program 3 (id=23): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xe) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x10000000, 0x7, 0x2, 0x71000}, {0x7, 0x8, 0x9, 0xfffffff9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x9d38, 0x8800, 0x2}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14, 0xb}, {0x2, 0x82, 0x4, 0x9}, {0x4, 0x8101, 0x1000d1b, 0x1ff}, {0x1e0, 0x10001, 0x7ff, 0x3}, {0x7ff, 0x9, 0x9, 0x5}, {0xb8c, 0xc3b, 0x3, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6}, {0xfffffffd, 0x9, 0x4, 0x30005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) open$dir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x80, 0x20) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) rename(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 447.336495ms ago: executing program 6 (id=25): r0 = socket$inet(0x2, 0x3, 0x2) r1 = accept$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000080)={0x6, 0x9}, 0x10) (async) setsockopt$sock_int(r0, 0xffff, 0x80, &(0x7f00000000c0)=0x4, 0x4) (async) setsockopt(r1, 0x3, 0x9, &(0x7f0000000100)="a141017709e35a486efbc162515544ed3fbefb7677d94278233119", 0x1b) r2 = socket$unix(0x1, 0x5, 0x0) getsockname$unix(r2, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000200)={0x7, 0x9, 0xffffffff, 0x9, 0x8, 0x8, 0x1, 0x10, [{0x5, 0x0, 0x0, 0x2}, {0xfffffffe, 0x8747, 0x5, 0x5}, {0x80000000, 0x2, 0x0, 0x3}, {0x3, 0x0, 0x7, 0xffffffff}, {0xe, 0x6, 0x9, 0xffff}, {0x5, 0x4, 0xa1cd, 0x4}, {0x5, 0x8, 0x0, 0x18a1}, {0x80000000, 0x4, 0x3, 0x8}, {0x3, 0x18000000, 0x3ff, 0x77}, {0x0, 0x7932, 0x81, 0x7}, {0x3, 0x1, 0xfffffffc, 0x5}, {0xfffffbff, 0x3ff, 0x3, 0x1}, {0x6, 0x8, 0x5}, {0x9, 0xfffffffa, 0xffffdbe5, 0x1}, {0x9, 0x5, 0xd, 0x26b}, {0x6, 0x5, 0x6, 0x9}]}) r4 = dup2(r2, r0) ioctl$WSKBDIO_COMPLEXBELL(r4, 0x80105702, &(0x7f0000000340)={0x2, 0x4, 0x0, 0x1000}) (async) ioctl$WSKBDIO_GETENCODINGS(r3, 0xc0105715, &(0x7f0000000380)={0x4, [0x0, 0x0, 0x0, 0x0]}) (async) close(r2) (async) r5 = socket$inet(0x2, 0x4, 0x2) connect$inet(r5, &(0x7f00000003c0)={0x2, 0x2}, 0xc) (async) getpeername$inet(r0, &(0x7f0000000400), &(0x7f0000000440)=0xc) (async) r6 = socket(0x2, 0x8000, 0x64) (async) r7 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000480), 0x8000, 0x0) poll(&(0x7f00000004c0)=[{r0, 0x2}, {r1, 0x10}, {r2, 0x100}, {r6, 0x4}, {r7, 0x4}], 0x5, 0x1) (async) ioctl$WSKBDIO_GETBACKLIGHT(r3, 0x400c5711, &(0x7f0000000500)) (async) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) accept$inet(r8, &(0x7f0000000580), &(0x7f00000005c0)=0xc) (async) flock(r7, 0x0) kqueue() (async) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0x69, &(0x7f0000000600)={{0x18, 0x1, 0x0, 0x19c59270}, {0x18, 0x1, 0x0, 0x7}, 0x4, [0x4, 0xa, 0x9, 0x0, 0x364, 0x1, 0x66a, 0x9]}, 0x3c) ioctl$VNDIOCSET(r8, 0xc0384600, &(0x7f00000006c0)={&(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)='./file0\x00', 0x8}) (async) getpeername$inet(r3, &(0x7f0000000700), &(0x7f0000000740)=0xc) (async) r9 = accept$inet(r0, &(0x7f0000000780), &(0x7f00000007c0)=0xc) close(r9) (async) recvfrom$inet6(r3, &(0x7f0000000800)=""/45, 0x2d, 0x802, &(0x7f0000000840)={0x18, 0x3, 0x8}, 0xc) 446.778989ms ago: executing program 1 (id=26): execve(0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x1, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0xd4e688a67930cd) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0xff, 0xf, 0x9, 0x8}]}) (async, rerun: 64) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0xff9, 0x100) (rerun: 64) syz_emit_ethernet(0x1af, &(0x7f00000002c0)={@broadcast, @broadcast, [{[{0x88a8, 0x5}], {0x8100, 0x4, 0x0, 0x7}}], {@ipv4={0x800, {{0x20, 0x4, 0x0, 0x5, 0x199, 0x65, 0x2a, 0x0, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x82, 0x5, "d68fac"}, @rr={0x7, 0xf, 0x6, [@broadcast, @broadcast, @local={0xac, 0x14, 0x0}]}, @timestamp={0x44, 0x1c, 0x1, 0x1, 0x9, [{[@loopback], 0x7ff}, {[@remote={0xac, 0x14, 0x0}], 0x3}, {[@broadcast], 0x7}]}, @noop, @timestamp={0x44, 0x38, 0x6, 0x3, 0x9, [{[@multicast1]}, {[], 0x1}, {[], 0x3}, {[@local={0xac, 0x14, 0x0}], 0xee}, {[@rand_addr=0x9], 0xff}, {[@rand_addr=0x10000], 0x6}, {[], 0x9}, {[@rand_addr=0x6], 0x40}]}]}}, @tcp={{0x2, 0x3, r0, r2, 0x1, 0x0, 0x7, 0x1, 0x0, 0x0, 0xfffc, {[@sack={0x5, 0x6, [0x7f]}]}}, {"9096255995c84216cd08426e8f1409c208c38025e93010e4d81660579d7135b2798fb6fb208a9850a52399213d90096bb2bb3b72aa977307d70033b03b9ec907feab8a337a0433d2694526958204d441b840f66837de514013105e73abfbf48a3858a2dcac420f5fe0ca944618785346886da1b05321848874b5b7832bcd315758cedd9d82f2cff7237cb953b9f40f35a4c316e77dbd2d7aebe1cc48ce9e3cc8f8078d548539e28419971fb2ab1079254d7bbf84d700aadab37329d31d7ef4834bd6a17a99952e6082ede6b761cba75ac715bac956ba28984bc4500f412fafb591b7542241ecce226690cdc5cbe2005f19bf00"/253}}}}}}) 395.415772ms ago: executing program 0 (id=29): sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x28}, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0) 394.828511ms ago: executing program 6 (id=30): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000380)={0x7ffffffb, 0x3, 0xffffdf7f, 0xffffff8d, "182628040200c2a6d2e00e0000008a0400", 0x0, 0x1ffff}) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r1 = syz_open_pts() close(r1) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r2 = syz_open_pts() close(r2) (async) r3 = syz_open_pts() ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000100)={0x600978d, 0xfffffff7, 0xfffffff8, 0x82a19f, "bb081aab003721f7a09ba0a8282ae7591d00", 0x2, 0x1}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) (async) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f00000000c0)={0x5, 0xd828, 0x7, 0xffffff7e, "afbe90b865aa97aa86f1163e4ce6a000a23d29e1", 0x8002, 0x6}) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x409788, 0x10001, 0xfffffc03, 0xfc83, "bb08000100f167d910508bc49d7323000000007e", 0x20}) (async) socket(0x18, 0x1, 0x0) (async) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000280)={0x10, 0x4, [{&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x9}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0xd}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, 0x3}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3ff}, {&(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x400}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff5000/0xb000)=nil, 0xfff}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x200}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x9fc0}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x3}, {&(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x8000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x6}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}], './file0/file0/../file0\x00'}) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) 394.592898ms ago: executing program 0 (id=31): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x7fffffff, 0xc0000000, 0x18e62, 0xffffffc8, "ffeb0900870000000000000000001900", 0x402, 0x4f5}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="258b300ad15115bb14aa764dce743f74b3f3e834648795710d8b999eeff9b9908c038f39cc28", 0x26}], 0x1, 0x0, 0x0, 0x4}, 0xe) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000024c0)={@random="533ed089f74d", @random="be18f0edadcd", [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x29, 0x28, 0x65, 0x9, 0x1, 0x2e, 0x0, @empty, @broadcast}, @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x68}], 0x1, 0x0) 311.4454ms ago: executing program 0 (id=34): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) munmap(&(0x7f0000fea000/0x13000)=nil, 0x13000) fchdir(0xffffffffffffff9c) r1 = open$dir(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2012, r1, 0x9f) syz_emit_ethernet(0x110, &(0x7f0000000300)={@broadcast, @random="6b5ecd41dd6a", [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x4, 0x102, 0x64, 0x3ffc, 0x8, 0xf0, 0x0, @local={0xac, 0x14, 0x0}, @multicast1, {[@timestamp={0x44, 0x8, 0xa5, 0x3, 0x4, [{[], 0x2}]}]}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x579f}, {"2faf3dbff21c917bfb60e02315f361572fa4a6c845336e8752b584d87b03805083bd37089c45b0c10d46d5a325d521b7f22af8ef100b705f4abf475d2ebe13c5023128e9228b07c010165dec230b5c0b13335afb534dfa8e2bf6878f988c58b362c6bb50697d5c661be42e834da7cbffde9d712db2e7ae11678161eb2934928a136cb4c7621cc8620a601f03f673f2b4e71fc7c1fa114ce4e94706600724e5ad73cbbb3a73dc282db2118aca04cdd0fd1b7d02203a0c73ec96cfdb0adb8b3816b424b1eb1989323df29711cba2ff39ad6022"}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) mquery(&(0x7f00008a7000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x5) fcntl$setstatus(0xffffffffffffff9c, 0x4, 0x80) socket$inet(0x2, 0x4000, 0x4f) 310.664471ms ago: executing program 2 (id=36): sysctl$net_inet_ip(0x0, 0x101, 0x0, 0x0, &(0x7f0000000240)="e3a103a21dd53eb7c3b41410008000000000000047ecc80c003410b070a4d1ee6fbc168ec405170659bc83d69b22c48ee2a1ea78dfe9cd9688e28db0f293fa7938f108fdac22a172243d4b4fe2860432614c87c328c741ab7e0098ccd4be8813fea1da9262479056e356b5bafe9ec9f13ea17afda1e95c90b6def6a10e2e7ba1434d2fd992cc29c57cce1b40b32ec100"/158, 0x13) sysctl$net_inet_ip(&(0x7f00000001c0)={0x4, 0x2, 0x0, 0x23}, 0x4, &(0x7f0000000300)="20565634678de4aee245883dab11fa2b89a13fb6e70d1b820a0259f09b065649899569083e3c5515bdd3631bb1d0bf3d42ca448e4014f38c69d290febc7fc8a7d91b57da3a4a3991a765769daf3e0c2551ca89d27ca15f2439c6022e930c0de8497b549cc58580b5822efaeea16a9c0683a436d7e056cf379ea365519f803bdbda6cb6326a2d7ce7ed9cb870113cb4b17117a8487006bf051c83a1077a25332571936984611a2e9d887d47d920f55ed6f99314d1017f58f11c7c4e9aeaf15450a1dd98b7413f14f796", &(0x7f0000000400)=0xc9, &(0x7f0000000440)="435b13ba63e1985f9dc46e7aa2be0df1e842aede53facce67b60d9cc6830e0992a42245ec2807dce6bc2540b871e91b2599e628c1a81053ca2d03e7c7c092ffab5851ae8dd4fb217f55b3594552259d11f5fc83aa84f47692c9cf4e31a8a90e30d9fcd9d0c6baeda4497276b4f4163faf9eef405c2ca464565068786e20a8206ba2bea494b409526892dbf96d9c7c2257366d466fc498a6a48761eac4cc4a308266e5578a05eaa527f831f7f730b2753be05", 0xb2) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a52ad7f460032b34b77e382526b1572da73c6d53", 0x31}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x4, 0x6, 0xff, 0x7}, {0x0, 0x5, 0x3, 0x1}, {0xe7, 0x6, 0xd, 0x4}]}) r1 = socket(0x18, 0x2, 0x0) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20}, 0x4) ioctl$TIOCSTOP(0xffffffffffffffff, 0x2000746f) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000180)={{0x18, 0x3, 0x2, 0x5}, {0x18, 0x3, 0x6, 0x9}, 0xce26, [0x2, 0x0, 0x9, 0x0, 0x0, 0x6, 0x6ede, 0x1]}, 0x3c) 309.619535ms ago: executing program 3 (id=37): syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x6, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x3, 0x0, 0xfffd}}}}}}) 279.15423ms ago: executing program 2 (id=39): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x78c, 0x8b, 0x2, 0x4}, {0x2, 0x10, 0x0, 0x2}, {0x6, 0xa, 0x5, 0x400f}]}) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="b119080066ec90c59927d1c4e5744e3c13882390", &(0x7f0000000080)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r0, &(0x7f0000000480)='\x00'/14, 0xe) 278.629536ms ago: executing program 3 (id=40): r0 = socket$inet(0x2, 0x3, 0x9) getsockopt(r0, 0x0, 0x8, 0x0, 0x0) (async, rerun: 32) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) (rerun: 32) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xffffffff, "1a1116f043000000000000fffffffffff700"}) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) (async) lseek(r0, 0x8000, 0x2) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x1003, &(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0xa) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async, rerun: 64) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) (rerun: 64) syz_emit_ethernet(0x351, &(0x7f0000000500)={@random="69c57eedc847", @remote, [], {@ipv6={0x86dd, {0x9, 0x6, "24d16a", 0x31b, 0x88, 0x7f, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1, {[@hopopts={0x32, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0xfffff801}]}, @dstopts={0x3, 0x3c, '\x00', [@generic={0x3, 0xfb, "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"}, @generic={0x0, 0x1, 'C'}, @enc_lim={0x4, 0x1, 0xe1}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x9, 0xd9, "f03ad0811eb9c4bfee0ae3b7f4d833ebcff6c1fabab84eb182c57caee3a51ea487c10f14c11a3bb08aeab1130c0c0c314059f3c9b0561aeec80611aaef27ad9e699014d0f1c6044175f04fe4bd603fdfe73cae2f53872ca2a6fa154679ebb8cf11215167e1105124272e1d9b1b6acfa4162ee67e2ee9bd2b17c221bf9a79fd1833886ecf4032bbe257f4637179ba6deca678bb06a16884361f8a96b0628592a3cbf73efecc6a1158067aea9ccc893f8c48901a353f63bc92e5615fbbabaa63e9241e68780f92b0f5bc2330a38d2b647f0ab1a1dcb36ddaa631"}]}, @hopopts={0x6, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0xfffff92c}, @enc_lim={0x4, 0x1, 0x5}]}, @routing={0x3b, 0xa, 0x0, 0xc6, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @loopback, @mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}]}, @routing={0x32, 0xa, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @rand_addr="95c0b3c3cf7927357957a90558031f24", @loopback]}], @generic="6be5023bdda98ec52cee993eb87fb05c7c5474077483ed1bae9ebd14a7cf0835e4eb7e64585f37fbba11d09b2d6a2c12e9a4afb4b4873e515b0ec64ee203e3591e5d1d8fac6e60647e235c"}}}}}) (async) syz_emit_ethernet(0xc4, &(0x7f0000000040)={@local, @empty, [{[{0x88a8, 0x7, 0x0, 0x3}], {0x8100, 0x7, 0x1, 0x4}}], {@ipv6={0x86dd, {0x8, 0x6, 'd&x', 0x86, 0x2c, 0x6, @empty, @mcast2, {[@dstopts={0x50}], @icmpv6=@echo_reply={0x81, 0x0, 0x0, 0x4, 0x2004, "062fb01d5c2388cb963e3a8d20a1cd475f047f5b49cfb4ea21581535aca382bc8116002dbec9194a2613570815cba08f6f66c5890e3c9e82349473f3676338abde29e1e4162adb58b5d156d64773eab371cf7f289bc0eb68641b96027b36ec0ba7081f5ad3cac30cb35ab04728d58c199a3fc5e11a0e"}}}}}}) (async) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) 252.959994ms ago: executing program 7 (id=42): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) clock_getres(0x4, &(0x7f00000000c0)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) select(0x40, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000080)={0x3, 0x0, 0x7, 0x0, 0x18ae, 0x9, 0x0, 0x43}, &(0x7f0000000100)={0x0, 0x7}) 251.994455ms ago: executing program 2 (id=43): mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) (async, rerun: 32) ioctl$FIONREAD(0xffffffffffffffff, 0xc0286988, &(0x7f00000001c0)) (rerun: 32) r0 = socket(0x2, 0x3, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) (async) setsockopt(r0, 0x0, 0x2, &(0x7f00000000c0)="63e1303d", 0x4) (async, rerun: 32) write(r0, &(0x7f0000000040)="f92a9bd30000007a000027a03440ee884d9e7a3e", 0x14) (rerun: 32) listen(r0, 0x3) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x2, 0xb0, 0x5, 0x2}, {0xc0, 0x85, 0xf, 0xa}, {0x16, 0xb, 0x14, 0x86}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) 154.674407ms ago: executing program 7 (id=44): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x800000000, 0x5}}) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt(r0, 0x1000000029, 0x3f, &(0x7f0000000040)="6700d6e5", 0x4) writev(r0, &(0x7f0000000300)=[{0x0}], 0x1000000000000296) (async) writev(r0, &(0x7f0000000300)=[{0x0}], 0x1000000000000296) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 133.599832ms ago: executing program 2 (id=45): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x7e1b21b5f00cb051, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0x9, 0x2, 0x2}, {0x6, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="258b300ad15115bb14aa764dce743f74b3f3e834648795710d8b999eeff9b9908c038f39cc280d2419642fcafc0c2ddda412bf8e685e77961fef21c7", 0x3c}], 0x1, 0x0, 0x0, 0x4}, 0xe) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="533ed089f74dbe18f0edadcd080045a6002800650009012e907800000000ffffffff4e224e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="510200008e78ffffe2a46e5f2d54d9d1d7f33f92a5e2724289f66a9b94ec037a05c8217a203f18606d17f7d16c8b3960aab8e93d3de9b56b9190cac4c15d24b73b7ffcf6f953ae9a9835c41ee6dd16d28f58aa275511ab01d16a45f0531eb0802a7582954fecb89ccc1b9371687425b353463dd1d60775f575b2fdc4176d73d7c429331eb2792a0fce3568b3e61cb7ba7026a2c556215f7a1983c8a7be2d0682508414cdef8b1b621d5dd3fa8acd413e934618245013b91e582437fb4e6e1fb7dcb4b8afd7c4044ba33ef558cd906746993ccba876ab70dc24fb62ec958d5dcb4ef83751270bdc4b7805a67b1b693b"]) (async) geteuid() 133.062403ms ago: executing program 2 (id=46): kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x80, 0x40000000, 0x4, 0x8}, {{}, 0xfffffffffffffffb, 0xf, 0x2, 0xfff, 0x6}, {{}, 0xfffffffffffffffb, 0x42, 0x4, 0x45, 0xfffffffffffffffa}, {{}, 0xfffffffffffffffa, 0x40, 0xfffff, 0x8}, {{}, 0xfffffffffffffffe, 0x0, 0x1, 0xffffffffffffffff, 0x5}], 0xb, 0x0, 0x400, 0x0) r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, 0x0, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x22, 0x411}, 0x4, 0x10003, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x9, 0x100000000e63}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 131.811104ms ago: executing program 7 (id=47): open(&(0x7f0000000080)='./file0\x00', 0x70e, 0x292) r0 = open(&(0x7f0000001600)='./file0\x00', 0x40, 0x161) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x5) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000100)=0x7) readv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/103, 0x67}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000000)) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x5012, 0xffffffffffffffff, 0x6) 131.381954ms ago: executing program 0 (id=48): open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x41) (async) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0xb4, &(0x7f0000000500)={@local, @remote, [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x0, 0xa6, 0x66, 0x5, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @udp={{0x3, 0x1, 0x8}, {"b35b266ddc3d1acf62cec6296b7c2e619da21229c18d9d57552234fc95d4a0caec544cc07c33cf519a499d99b37eb1645331bc1b64353b9013d247b736116683be7841ea5020b7438cb8053305b6897c80769477869b5d901562aca82fe3886d58467687cdf64b0a287db6e7306118f53d647df0bdb387d492b9575c343c6b09d47c2688000fc1708006"}}}}}}) (async) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="7a51f332ffde0009b449612bb2f53973dde288362aa0978a22183ff46cac1ed8bd2b983df8a3675e32639b56f3362e3fd5c4f20023c5129478a301604e03c46b9861a1e86c75e636dadafd9a428694cec8c9a49d6904732d6d1602696ab73736a62f632c4bd2122f370cdca29fc58e13fab26b18bb3d85172fc84499cd020f3d95eb13c0feb0eb5355b87df9a6fa33bf08b228aec068d1b2a1076841f9b13e9ff5cae73be6640c563c27f1c99709f01bc42af708fdf0e25a6b9e793243d7b226e4d7b3d1e9041ae0b91c7b36b1b71bd044f3af58637ed4a4b3098c18e73ec73203b8886e2cb744f6ab00735708f8e52e8a7e4e6aba63d6fdd94e94677b4c637edd40b3bfcd395c573b58fc717c028434a2f74f866841645c3ab582d31dc2e29686ee417b8733d019d981ca851b4e54492d197b3505956265ec4cae1e60f7350b63c1040da3dc00142d506196c1c91e35eb2ab22e9c7e463718a142aaef2d4a0d00dec698232361c84c4100be49c8933d5340e2048836a7a51ee8c073738c7a1ee5cb111172d628ddd84c1436667262021c8f944b1e93fd325c30bed02370869817f3075981476100276217f4892b0b940759e6ba220ac428458aec5eff2267e62b54851ab2db774dce1aff1d7d78251352607dffcd8aec49e1a261de6bd66e1b5471dc9521c7eacc68246fdbce13cb0d414d71b029d8faa1f9aab14d0c10ebf717d2366a3a150dd1d1f5e028a2bd45d8e06c26e93b37f89554ea5171ee045d20dae1324f70a08af78138d0f9326914766bfabfe30651a654c00dcf2ed169db3bc037af78018471e26bc340a80490f1e30075d22097ad04407230c6b591c5029886de5db20d9c88fa8179cdf4a028a028f08915f039bbad84e08b366d6a67a15168eb7ddba7ef94da09b93eb4a9a1cc4fe3d8cb34d6856ba180d9ad62392bdefb64bd7800c004cad70d5aca0156b83e4e62bc91715df474cf1629cb81abc061b2c36a86318c3539fb34222c8c238e356198966c405737f2a71613b3cc1f8db6bafe65217cafb8de41015f9c07d99e9577ce7d209cfef3798cd3d065698d0cb2c1d728885714352f36c8ea744856fd2caf210eda335b1c6f78704a28230055e32ab0943e10ee5617b1b2cf2102290ad4a114893996ce44453d000d51b737fa9b182ff469ec9a4a4852543364d726b69865ba0fa169dcd8814b31ff2bbbf5680fce24b4359f59f30540996ea243b816f9a490d565c6f372f8c2b0034deab682bf261731049c2409d58705ab1051bbbeb1ce6ae32083700a558126b7d89facdfad3011e7e56f11d79a98f2e2706f2c5761c92516ec147f063be2794f05ba2ea1c63f2c2854b494bfbdc01017e7154a3ffeb4f2a66e0e6733db58e3f595a0199ead1b2da9a8df178015cbf42a491a3e8290d24a93b13f10aceb3a71c030c0775f37ad6a", 0x0, 0x0, 0x0) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001300), 0x4) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc1206949, &(0x7f00000001c0)) 122.745052ms ago: executing program 0 (id=49): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000080)=0xfffffffc) r1 = dup(r0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000100)) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[]) (async, rerun: 64) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2000, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x13) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x10, 0xffffffffffffffff, 0x7) (async, rerun: 32) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/118, 0x76}], 0x1, 0x8041) (async, rerun: 32) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000540)='./file0\x00') 122.075733ms ago: executing program 2 (id=50): open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000100)=0x9, 0x2) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setrlimit(0x1, &(0x7f0000000180)={0x200, 0x95f}) syz_emit_ethernet(0xe, &(0x7f00000007c0)={@broadcast, @random="5bfb388706c6", [], {@generic={0x806}}}) msgctl$IPC_SET(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ktrace(&(0x7f0000000040)='./file0/file0\x00', 0x2, 0x8, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write(r2, &(0x7f0000000100)="e8", 0xff25) select(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000300)={0xcea, 0x20010, 0x80000002, 0x1, 0x1, 0x3, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) 104.449578ms ago: executing program 4 (id=51): madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) (async) r0 = socket(0x11, 0x3, 0x0) sendmsg$unix(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@cred={0x20}], 0x20, 0x4}, 0x40e) 2.843082ms ago: executing program 7 (id=52): setgid(0xffffffffffffffff) r0 = getuid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r2}}) getgroups(0x4, &(0x7f0000000180)=[r2, r2, r2, r2]) r3 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r5 = fcntl$getown(0xffffffffffffffff, 0x5) open(&(0x7f0000000280)='./file0\x00', 0x80000000000206, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) r6 = getpgid(0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x2002, r6) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x8, r0, r2, r3, 0xffffffffffffffff, 0xa0, 0x1ff}, 0x1000, 0xfff, r4, r5, 0x7fffffffffffffff, 0x8, 0x1}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') 2.178083ms ago: executing program 0 (id=53): syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[]) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x8118, 0x0) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f0000000540)={'./file0\x00', 0x0, 0x7ff, 0x8}) r1 = syz_open_pts() ioctl$TIOCSBRK(r1, 0x2000747b) ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047410, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1f95d27d48731892, 0x0, 0x1}, 0x8) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000ac0)="b10005020000000000000000010184378ac0722911a82b0000331c13fecea10500fe1a6fc0c72fd3357ae30200004e30030000005f882b297be1aa0500000051e2f0ad3ebbc256699a1f119b672f0c032bfa896443a4210400000000000000c12b7c69e8bfa4512644f8dd21af194b99c42ecf0afd619d3558b65dc8159ef125efcd981d76848c8a6c5d3ff95b95ac49f41bb545316b7a543853d73b2b36069e46364528e69bf5cd93e612d582d3f93eb132595ec599dc179f800fecae", 0xbd, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x6) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) r4 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r5 = socket(0x18, 0x3, 0x0) r6 = socket(0x1, 0x2, 0x0) sendmmsg(r3, &(0x7f0000000180)={&(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0}, 0x80}, 0x10, 0x4) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r5, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000000980)="a3b57067fde81ca1db0d182288fbf1ba9b0500ffffffffffffff7f433f11e1a4e5f2f9f220ef2899c1cec5ebefeaedd7d7c3fbd27f0abdbc34fe42021588dc8ff44f4b76c76d41859d8519cab324a5b62fe9de", &(0x7f0000000040)=0x53, 0x0, 0x0) r7 = socket(0x18, 0x8000, 0x0) sendto$unix(r7, 0x0, 0x0, 0xe, 0x0, 0x0) readv(r7, &(0x7f00000002c0), 0x0) unveil(0x0, &(0x7f0000000080)='W\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x8000000000000001, 0x0, 0xffffffffffffffd, 0x1, 0x0, 0x80000000004, 0x8, 0x0, 0x7f, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9], [0x0, 0x400000, 0x0, 0x6, 0x0, 0x2000000, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [0xffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8], [{0x0, 0x1}, {0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x1000, 0x4, 0x80001}, {0x0, 0x0, 0xc8, 0x7fffffffffffffff}, {0x0, 0x5}, {0x4, 0x400000eb, 0x0, 0xffffffffffffffff}, {0x0, 0xc3, 0x0, 0x100000005}], {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x8}}}) r8 = kqueue() kevent(r8, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) kevent(r8, 0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0) syz_emit_ethernet(0x94, &(0x7f0000000380)=ANY=[@ANYBLOB="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"]) 1.256529ms ago: executing program 7 (id=54): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') unveil(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='r\x00') r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$TIOCMGET(r0, 0x4004746a, &(0x7f0000000140)) open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) 863.497µs ago: executing program 4 (id=55): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0xb1, 0x10, 0xe4, 0x10000f}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r1 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0x8) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x24, 0x9, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0xc0285108, &(0x7f0000000040)={0x0, 0x9, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r2, &(0x7f00000003c0)=[{0x0}], 0x1, 0x8) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) 0s ago: executing program 7 (id=56): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x140) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x4}, 0x40a) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/7, 0x7}, 0x0) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. login: uvm_fault(0xfffffd806c24a3d8, 0x48, 0, 1) -> e kernel: page fault trap, code=0 Stopped at witness_checkorder+0xa9: movl 0x20(%r14),%r15d TID PID UID PRFLAGS PFLAGS CPU COMMAND 288580 64672 -1 0x10 0 0 syz-executor witness_checkorder(28,9,0) at witness_checkorder+0xa9 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff80000149a030,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001486000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80003c44a028) at dtclose+0x105 spec_close(ffff80003c42b2d0) at spec_close+0x45f VOP_CLOSE(fffffd80601011e0,81,fffffd80097fb270,ffff80003c44a028) at VOP_CLOSE+0x133 vn_closefile(fffffd805ff534e8,ffff80003c44a028) at vn_closefile+0x12b fdrop(fffffd805ff534e8,ffff80003c44a028) at fdrop+0x126 closef(fffffd805ff534e8,ffff80003c44a028) at closef+0x192 fdfree(ffff80003c44a028) at fdfree+0x116 exit1(ffff80003c44a028,b,0,1) at exit1+0x59c sys_exit(ffff80003c44a028,ffff80003c42b640,ffff80003c42b590) at sys_exit+0x1a syscall(ffff80003c42b640) at syscall+0xb08 end trace frame: 0xffff80003c42b6c0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806c24a3d8, 0x48, 0, 1) -> e ddb{1}> trace witness_checkorder(28,9,0) at witness_checkorder+0xa9 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff80000149a030,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001486000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80003c44a028) at dtclose+0x105 spec_close(ffff80003c42b2d0) at spec_close+0x45f VOP_CLOSE(fffffd80601011e0,81,fffffd80097fb270,ffff80003c44a028) at VOP_CLOSE+0x133 vn_closefile(fffffd805ff534e8,ffff80003c44a028) at vn_closefile+0x12b fdrop(fffffd805ff534e8,ffff80003c44a028) at fdrop+0x126 closef(fffffd805ff534e8,ffff80003c44a028) at closef+0x192 fdfree(ffff80003c44a028) at fdfree+0x116 exit1(ffff80003c44a028,b,0,1) at exit1+0x59c sys_exit(ffff80003c44a028,ffff80003c42b640,ffff80003c42b590) at sys_exit+0x1a syscall(ffff80003c42b640) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x716d031896b0, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c42b130 rbx 0 rdx 0 rcx 0xffff80003c44a028 rax 0xffff8000299ddff0 r8 0 r9 0 r10 0x1c6f815cdf27183b r11 0x55b3203436935364 r12 0 r13 0x1 r14 0x28 r15 0x3 rip 0xffffffff829f5699 witness_checkorder+0xa9 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c42b080 ss 0x10 witness_checkorder+0xa9: movl 0x20(%r14),%r15d ddb{1}> show proc PROC (syz-executor) tid=158225 pid=76947 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c44a028 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003c44bc58,0xffff80003a001220 process=0xffff80003bc1c9d0 user=0xffff80003c426000, vmspace=0xfffffd806c24a3d8 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 64672 288580 80100 -1 7 0x10 syz-executor 64672 252720 80100 -1 3 0x4000090 fsleep syz-executor 25433 263671 72278 0 3 0x80 nanoslp syz-executor 25433 330585 72278 0 3 0x4000080 kqread syz-executor 25433 170190 72278 0 3 0x4000080 fsleep syz-executor 67846 385842 32865 0 3 0x80 nanoslp syz-executor 67846 221834 32865 0 3 0x4000080 sbwait syz-executor 67846 317901 32865 0 3 0x4000080 fsleep syz-executor 52192 8857 99943 0 3 0x80 nanoslp syz-executor 52192 459522 99943 0 3 0x4000080 kqsel syz-executor 52192 476524 99943 0 3 0x4000080 fsleep syz-executor 428 374524 81558 0 3 0x80 nanoslp syz-executor 428 209117 81558 0 3 0x4000080 ttyout syz-executor 428 496281 81558 0 3 0x4000080 fsleep syz-executor 2168 157537 46324 0 3 0x80 nanoslp syz-executor 2168 497987 46324 0 3 0x4000080 pipewr syz-executor 2168 465786 46324 0 3 0x4000080 fsleep syz-executor 2168 306628 46324 0 3 0x4000080 fsleep syz-executor 37486 205558 96840 0 3 0x80 nanoslp syz-executor 37486 138228 96840 0 3 0x4000080 kqread syz-executor 37486 26191 96840 0 3 0x4000080 fsleep syz-executor 46308 299529 88153 0 3 0x82 nanoslp syz-executor 81558 160690 88153 0 3 0x82 nanoslp syz-executor 96840 146811 88153 0 3 0x82 nanoslp syz-executor 80100 518803 88153 0 3 0x82 nanoslp syz-executor 99943 170213 88153 0 3 0x82 nanoslp syz-executor 32865 382264 88153 0 3 0x82 nanoslp syz-executor 46324 83924 88153 0 3 0x82 nanoslp syz-executor 72278 91117 88153 0 3 0x82 nanoslp syz-executor 88153 141489 58692 0 3 0x82 kqread syz-executor 58692 332953 63996 0 3 0x10008a sigsusp ksh 63996 246499 38879 0 3 0x98 kqread sshd-session 38879 272617 44829 0 3 0x92 kqread sshd-session 3946 10159 1 0 3 0x100083 ttyin getty 44829 516087 1 0 3 0x88 kqread sshd 96431 291350 18787 74 3 0x1100092 bpf pflogd 18787 280469 1 0 3 0x80 sbwait pflogd 4395 366339 17837 73 3 0x1100090 kqread syslogd 17837 261070 1 0 3 0x100082 sbwait syslogd 9508 331543 1 0 3 0x100080 kqread resolvd 33375 243482 90087 77 3 0x100092 kqread dhcpleased 90341 282376 90087 77 3 0x100092 kqread dhcpleased 90087 325615 1 0 3 0x80 kqread dhcpleased 70100 308132 0 0 3 0x14200 bored smr 52885 510995 0 0 2 0x14200 zerothread 18872 364644 0 0 3 0x14200 aiodoned aiodoned 20838 420697 0 0 3 0x14200 syncer update 13836 283451 0 0 3 0x14200 cleaner cleaner 83339 492248 0 0 3 0x14200 reaper reaper 97580 169423 0 0 3 0x14200 pgdaemon pagedaemon 2154 281325 0 0 3 0x14200 bored viomb 21824 51153 0 0 3 0x40014200 acpi0 acpi0 65252 308882 0 0 3 0x40014200 idle1 88832 319923 0 0 3 0x14200 bored softnet3 28696 336390 0 0 3 0x14200 bored softnet2 87829 348317 0 0 3 0x14200 bored softnet1 46435 152442 0 0 3 0x14200 bored softnet0 10134 507096 0 0 3 0x14200 smrbar systqmp 99689 312822 0 0 3 0x14200 bored systq 70850 92932 0 0 3 0x14200 tmoslp softclockmp 9580 466091 0 0 3 0x40014200 tmoslp softclock 20289 247966 0 0 3 0x40014200 idle0 1 451892 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 64672 (syz-executor) thread 0xffff80003a001210 (288580) exclusive rwlock amaplk r = 0 (0xfffffd806fec4be8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 uvm_fault_check+0x5a9 #3 uvm_fault+0x106 #4 upageflttrap+0xa9 #5 usertrap+0x403 #6 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd806c24ae38) #0 witness_lock+0x5bb #1 rw_do_enter_read+0x36e #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4a #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x403 #7 recall_trap+0x8 Process 10134 (systqmp) thread 0xffff8000ffffe520 (507096) shared rwlock systqmp r = 0 (0xffffffff838b7788) #0 witness_lock+0x5bb #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10211 11128K 11373K 166960K 11407 0 pcb 19 14K 16K 166960K 106 0 rtable 225 6K 7K 166960K 368 0 pf 34 17K 18K 166960K 45 0 ifaddr 44 7K 7K 166960K 47 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 68 36K 36K 166960K 68 0 ioctlops 0 0K 4K 166960K 1492 0 iov 0 0K 12K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1348 85K 85K 166960K 1399 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 5 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 89K 166960K 188 0 sigio 0 0K 0K 166960K 1 0 proc 72 91K 140K 166960K 535 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 6 0 in_multi 99 7K 7K 166960K 104 0 ether_multi 1 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 377 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 257 168K 177K 166960K 3419 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 43 86K 102K 166960K 1296 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 39 0 NDP 28 2K 2K 166960K 28 0 temp 37 8670K 8738K 166960K 8183 0 kqueue 15 24K 26K 166960K 34 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 44 0 40 1 0 1 1 0 8 0 rtentry 176 116 0 12 6 0 6 6 0 8 0 unpcb 144 68 0 44 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 15 0 10 1 0 1 1 0 8 0 arp 128 20 0 0 1 0 1 1 0 8 0 inpcb 328 176 0 163 7 0 7 7 0 8 5 nd6 144 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 1 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 23 0 0 1 0 1 1 0 8 0 pfstkey 128 23 0 0 1 0 1 1 0 8 0 pfstate 384 23 0 0 3 0 3 3 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 487 0 41 31 0 31 31 0 8 1 art_table 40 488 0 41 5 0 5 5 0 8 0 art_node 32 116 0 12 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 1 1 0 1 1 0 8 1 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 112 3 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1637 0 122 95 0 95 95 0 8 0 ffsino 288 1637 0 122 109 0 109 109 0 8 0 nchpl 144 1896 0 204 63 0 63 63 0 8 0 uvmvnodes 80 1757 0 0 36 0 36 36 0 8 0 vnodes 216 1757 0 0 98 0 98 98 0 8 0 namei 1024 6020 0 6020 2 0 2 2 0 8 2 percpumem 16 49 0 0 1 0 1 1 0 8 0 kstatmem 264 26 0 0 2 0 2 2 0 8 0 scxspl 216 6233 0 6233 3 1 2 2 1 8 2 plimitpl 152 33 0 14 1 0 1 1 0 8 0 sigapl 424 495 0 445 7 0 7 7 0 8 1 knotepl 120 373 0 0 12 0 12 12 0 8 0 kqueuepl 224 39 0 24 1 0 1 1 0 8 0 pipepl 336 109 0 81 3 0 3 3 0 8 0 fdescpl 520 477 0 445 3 0 3 3 0 8 0 filepl 160 1915 0 1673 18 0 18 18 0 8 7 lockfpl 104 172 0 168 2 0 2 2 0 8 1 lockfspl 48 24 0 20 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 30 0 13 1 0 1 1 0 8 0 ucredpl 104 114 0 100 1 0 1 1 0 8 0 zombiepl 144 446 0 445 1 0 1 1 0 8 0 processpl 1240 495 0 445 5 0 5 5 0 8 0 procpl 656 588 0 524 6 0 6 6 0 8 0 sockpl 728 292 0 251 9 0 9 9 0 8 5 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 6 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 106 0 0 14 0 14 14 0 8 0 mcl2k 2048 28 0 0 4 0 4 4 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 135 0 0 9 0 9 9 0 8 0 bufpl 280 2519 0 123 172 0 172 172 0 8 0 anonpl 32 4008 0 0 33 0 33 33 0 246 0 amapchunkpl 152 9736 0 9183 22 0 22 22 0 158 0 amappl16 200 2044 0 2020 5 0 5 5 0 8 2 amappl15 192 4 0 4 1 0 1 1 0 8 1 amappl14 184 113 0 101 1 0 1 1 0 8 0 amappl13 176 5 0 5 1 0 1 1 0 8 1 amappl12 168 1134 0 1102 2 0 2 2 0 8 0 amappl11 160 57 0 43 1 0 1 1 0 8 0 amappl10 152 21 0 20 1 0 1 1 0 8 0 amappl9 144 256 0 255 1 0 1 1 0 8 0 amappl8 136 26 0 24 1 0 1 1 0 8 0 amappl7 128 108 0 96 1 0 1 1 0 8 0 amappl6 120 179 0 176 1 0 1 1 0 8 0 amappl5 112 124 0 115 1 0 1 1 0 8 0 amappl4 104 320 0 301 1 0 1 1 0 8 0 amappl3 96 1604 0 1479 4 0 4 4 0 8 0 amappl2 88 676 0 617 2 0 2 2 0 8 0 amappl1 80 8355 0 7753 15 1 14 15 0 8 1 amappl 88 2723 0 2538 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 477 0 445 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 477 0 445 1 0 1 1 0 8 0 vmmpekpl 168 5580 0 5543 2 0 2 2 0 8 0 vmmpepl 168 37033 0 35007 89 0 89 89 0 357 0 vmsppl 480 476 0 445 5 0 5 5 0 8 1 rwobjpl 72 14850 0 12146 50 0 50 50 0 8 0 pdppl 4096 961 0 890 101 18 83 83 0 8 12 pvpl 32 11153 0 0 90 0 90 90 0 265 0 pmappl 256 476 0 445 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 383 0 20 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8388bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839f6e28) at __mp_lock+0x190 uvm_fault(fffffd806c24ad38,56206fd9000,0,1) at uvm_fault+0x1ee upageflttrap(ffff80003c443390,56206fd9000) at upageflttrap+0xa9 usertrap(ffff80003c443390) at usertrap+0x403 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x78908c097ff0, count: 7 ddb{0}> trace x86_ipi_db(ffffffff8388bff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839f6e28) at __mp_lock+0x190 uvm_fault(fffffd806c24ad38,56206fd9000,0,1) at uvm_fault+0x1ee upageflttrap(ffff80003c443390,56206fd9000) at upageflttrap+0xa9 usertrap(ffff80003c443390) at usertrap+0x403 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x78908c097ff0, count: -8 ddb{0}> machine ddbcpu 1 Stopped at witness_checkorder+0xa9: movl 0x20(%r14),%r15d witness_checkorder(28,9,0) at witness_checkorder+0xa9 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff80000149a030,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001486000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80003c44a028) at dtclose+0x105 spec_close(ffff80003c42b2d0) at spec_close+0x45f VOP_CLOSE(fffffd80601011e0,81,fffffd80097fb270,ffff80003c44a028) at VOP_CLOSE+0x133 vn_closefile(fffffd805ff534e8,ffff80003c44a028) at vn_closefile+0x12b fdrop(fffffd805ff534e8,ffff80003c44a028) at fdrop+0x126 closef(fffffd805ff534e8,ffff80003c44a028) at closef+0x192 fdfree(ffff80003c44a028) at fdfree+0x116 exit1(ffff80003c44a028,b,0,1) at exit1+0x59c sys_exit(ffff80003c44a028,ffff80003c42b640,ffff80003c42b590) at sys_exit+0x1a syscall(ffff80003c42b640) at syscall+0xb08 end trace frame: 0xffff80003c42b6c0, count: 0 ddb{1}> trace witness_checkorder(28,9,0) at witness_checkorder+0xa9 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff80000149a030,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff800001486000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80003c44a028) at dtclose+0x105 spec_close(ffff80003c42b2d0) at spec_close+0x45f VOP_CLOSE(fffffd80601011e0,81,fffffd80097fb270,ffff80003c44a028) at VOP_CLOSE+0x133 vn_closefile(fffffd805ff534e8,ffff80003c44a028) at vn_closefile+0x12b fdrop(fffffd805ff534e8,ffff80003c44a028) at fdrop+0x126 closef(fffffd805ff534e8,ffff80003c44a028) at closef+0x192 fdfree(ffff80003c44a028) at fdfree+0x116 exit1(ffff80003c44a028,b,0,1) at exit1+0x59c sys_exit(ffff80003c44a028,ffff80003c42b640,ffff80003c42b590) at sys_exit+0x1a syscall(ffff80003c42b640) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x716d031896b0, count: -15