last executing test programs: 2.56241742s ago: executing program 7 (id=82): openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = getpid() ktrace(0x0, 0x4, 0x908, r0) getitimer(0x2, 0xffffffffffffffff) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) nanosleep(0x0, 0xfffffffffffffffe) execve(0x0, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0xffffffffffffffff}, {0x0, 0x8000000000}}, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) socket(0x1, 0x2, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000440)=[{{}, 0xfffffffffffffffe, 0x9, 0x0, 0x3, 0x6}], 0x6, &(0x7f00000001c0), 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r2, 0x8020699f, &(0x7f00000001c0)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x0, 0x4}, {0x7, 0x0, 0x40, 0x20000}, {0x3, 0x0, 0x0, 0x400004}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 2.56153314s ago: executing program 7 (id=84): r0 = socket(0x18, 0x1, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x810, r1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x4) r2 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r2, 0x0, 0x16, 0x0, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040)={0x700}, &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) r3 = socket(0x2, 0x3, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) truncate(&(0x7f00000000c0)='./file0\x00', 0x1) select(0x40, &(0x7f0000000100)={0xffffffff7fffffff, 0x1, 0x8, 0xb3f, 0x9e0, 0x100000000, 0x5380000000000000, 0xc23}, &(0x7f0000000140)={0xd, 0x400, 0x8000000000, 0x0, 0x4, 0x7, 0x5, 0x1}, &(0x7f00000001c0)={0x7, 0x2, 0x2, 0xfffffffffffffffd, 0x63, 0x7fff, 0x2, 0x7aa}, &(0x7f0000000200)={0x8d6e000000000000, 0x8}) setsockopt(r0, 0x1000000029, 0x2f, 0x0, 0x0) 2.534373256s ago: executing program 7 (id=85): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async, rerun: 64) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000300000005}) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x8}], 0x2, 0xa5) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) (async, rerun: 64) fchmodat(r1, &(0x7f00000000c0)='./bus\x00', 0x1, 0x6) (async) chroot(&(0x7f0000000040)='./file0\x00') (async, rerun: 64) pwrite(r0, &(0x7f0000000300)="1bfbce76c217a552e0a04a55fe7166ca24a3c4bec50405ff17bfaf049dac58211aa845512a751d2669cc30eaff2987065fe98a497b1aacd8115231f948849bbb576d966ed19884830a3dec2d1b1801885f16809aa24aec3865218aec9d2b97b7ccfa656215eb3beae75ef972d8739b4076008e599ee0c2a2bb01061deafa672da630400e5b2480e268e9b51cc8d9fdf39fc1ec3471d16277cc3804148d5e58c340988e728330fb637cb513cc8710e78dfa0e1d7bdf121d9b6c0a3cb65811e51867f8ce1b6287c5da269d2ea9ad586adeb45a36b6c5000115a4830418482d849713348fa203546b1e1f6af2a5b437efeb6f38", 0xf2, 0x7c) (async, rerun: 64) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) sendto$unix(r2, &(0x7f0000000080), 0x0, 0x3, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r3 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) ioctl$TIOCEXCL(r3, 0x2000740d) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000200)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a52ad7f46003", 0x23}], 0x1) (async, rerun: 32) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 64) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{0x7, 0xd, 0x3, 0x5}, {0x24, 0xde, 0x9, 0x409}, {0x41ae, 0x2, 0x6, 0x41000083}]}) (async, rerun: 64) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket(0x18, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000040)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20, 0x2}, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async, rerun: 64) execve(0x0, 0x0, 0x0) (rerun: 64) 2.496720589s ago: executing program 7 (id=89): symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x5a3, 0x0, 0x1, 0x444}, {0x5, 0x0, 0xa, 0xfffffffc}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa17f7193403c6ab5, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000540)="4cf2168f5168653b8478c2a04dbd66c6e2ec62005911", 0x16}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71", &(0x7f0000000080)=0x15, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r1, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.36932432s ago: executing program 6 (id=93): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) setrlimit(0x7, &(0x7f0000000980)={0xd60d, 0x300000000}) (async, rerun: 64) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0xdc, 0x4, 0x407}, {0x40, 0x6, 0x4, 0xe}, {0x1ae, 0x0, 0x3, 0x9}]}) (async, rerun: 64) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) 2.368481447s ago: executing program 6 (id=94): r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000006c0)=0x9) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x25, 0x10, 0xb, 0x1}, {0xb1, 0x10, 0x2, 0xffff}]}) (async) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="7e520092485d0180d973d336b82d129550aa0c95b1685bb0688dafb3738b7b7ba3e30df7a53541dfb30d44c6d16fb11ee815d727a266", 0x36}], 0x1, 0x14e) sysctl$kern(0x0, 0x0, &(0x7f0000000840)="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", &(0x7f0000000080)=0x4d, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="c5ea33001aace440f62e18562095cdc7008068be003fb9f7c1615513b5390c076b163afd54f0a0b2", 0x28}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f61e5671ac0058bc5ab2501ddc0000000000000021c37a82dcb9c2645e0f7ed6ae5cddea13491b9f18cff62b37426fccb8bc86fbfe4ac2406402ae76b34300", &(0x7f0000000080)=0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) pledge(&(0x7f0000000000)='tty V\xef\x86\xce3|#\xcb\x13\x12\xe0\r\x9c\xe6\x98\x0f\x01\xc2\xe7\xb9E\xc3\x1d\x96\xdbY\x91\x0e\x17\x95 \x01\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kG\x00\x00\x00\x00\x00@\x00\x01\x00\x00\xeb\x91vr)\\\x9el\x03(r\xd4\x9a\x0f\f\xdb<\xb4B\x95\x15\xb6\r', 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x3, 0x0, 0x0, &(0x7f00000001c0), 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async) write(r2, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) write(r1, &(0x7f0000000600)="d8564b0bf1ff0795548af920179f", 0xe) syz_emit_ethernet(0x60, &(0x7f0000000040)={@broadcast, @local, [], {@ipv4={0x800, {{0x7, 0x4, 0x1, 0x1e, 0x52, 0x68, 0x6, 0x1, 0x61, 0x0, @loopback, @multicast1, {[@noop, @ssrr={0x89, 0x7, 0x7, [@rand_addr=0x97]}]}}, @udp={{0x1, 0x1, 0x8}, {"ae0c615690dd21636eb181ebb31727df57e363d5e023dd155d939cd23ed5e095d299dacaebd2c7f9236191cbf6e6"}}}}}}) (async) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x5, &(0x7f0000000500), 0x0, 0x0, 0x0) 2.368253729s ago: executing program 7 (id=95): sysctl$kern(&(0x7f0000000040)={0x1, 0x1}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, @icmp=@timestamp_reply}}}}) 2.367961915s ago: executing program 6 (id=96): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd60090000002006000300000000ff07000000000000c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='[B']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x2, 0x54) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) fcntl$dupfd(r0, 0xa, r1) setsockopt(r1, 0x6, 0x4, &(0x7f00000000c0)="865c0b8fbffe1a6c6e194efa30dc33dd27", 0x5) socket(0x20, 0x5, 0x8) 2.294918705s ago: executing program 7 (id=97): r0 = syz_open_pts() open$dir(&(0x7f0000000280)='.\x00', 0x10000, 0x20) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000180)="029b0c154f270dc5324f8cdbeb45974f3463c33a5e0d9341932bdd103dbc76f2094a75b0d06e650c8e7585932b553ff0cb12a96af1e5355503d2f42b76ef69ef7e93899fcb5365b8bf8aaab48aaa58da5e5c49938e82be48afc89aaccb26eeb6afaa4b709198c3ed64243b0d6174f36f1c11cb4331d988ecdc3fab1aa725a6c9ec28db05e8e3ab68b935b636a072db5a97e5e2e80d49eb607d29587b24853492953badabdaa503588a6c6f92adbd754ab9c3294fce76cc59882f557e03b4ffc5", 0xc0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) rmdir(&(0x7f0000000080)='./file0\x00') readv(r0, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x1, 0x88, 0xfbfffffe, 0x0, "d76c1f46000000ef1f0160fbff2000404b00"}) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000000)={0xfffffff9, 0x5, 0xc, 0xbb, "0067b400000000006a00000000000000000200", 0x7fffff7f, 0xc}) 2.294653421s ago: executing program 6 (id=98): setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x8a38, 0x0, "07160a009cef01098b748200"}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="1b4657f9295821b47ce5", 0xa}, {&(0x7f0000000480)="37a010c54c13d5c4b55470a8428b20b44441c4ce4e260813cbd4ae10d920f28c222f2672310d28903062cca59d86cbd223552c977cb87386a406bf9b70d1079cdc0c5fa2db5fc1299a179e5994cb588e1b397b46cf59409d3e8e2f03ed74b75e3f59d29a6276b644f2aec468e3f89de3a2c7a5302d68d9ab9fb8ad2ff23a06b65b309725cec02ff3182c5502151e5b54a6c126ba6e670bd27de6a54931be675fce77ccb709c2bfcb7ef809ec9208a9285b752b0eefaf1eff4512f31ba78bd98c374400d7d5c877603307e8980d2c537c34f1b19aa540676a847de9e8", 0xdc}], 0x2) r2 = dup2(r1, r0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000300)={0x25f, 0x9, 0x1, 0x7fd, "2c21a7000000004ea80873ca9e5fd700", 0x6, 0x2}) poll(&(0x7f0000000000)=[{r2, 0x40}], 0x1, 0x0) 2.257644372s ago: executing program 6 (id=101): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="9725db874b5776d5676fed1ea73f98a0c434268a8320db3eab6b66f85fc6c3e3784eea0a60bdf4f4428f0b0f73d3d47237f91da5d2059c1266e040db88848df71ab56420822a1aba3070fb930a29ddebb11cfe86730eec721e0af6bcf4d00a107421406cd3f2d2d584822e5a2dca988b787135219952d8f7402de7b9291c788fea559f86c9ffda5f03d0c9559630", 0x8e}], 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001480)={&(0x7f0000001440)={&(0x7f0000000240)=@in6, 0xc, &(0x7f0000001340)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000001280)=""/77, 0x4d}, {&(0x7f0000001540)=""/39, 0x27}], 0x4, &(0x7f0000001380)=""/181, 0xb5}, 0x54b8}, 0x10, 0x40, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chroot(&(0x7f00000000c0)='./file0\x00') sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x2000, 0x0, 0x37) socket(0x18, 0x2, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000001300), 0x100, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000001580)={'tap', 0x0}) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001500), 0x400, 0x0) ioctl$FIONREAD(r2, 0x8020697a, &(0x7f00000014c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x58}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x10) 2.077321499s ago: executing program 6 (id=104): r0 = syz_open_pts() writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="5bea5a070f051ed891fce5a786f09d5a218e116f5afa7861222109437a0e8b66d259be3709fc60393eb8b367f3322c4ca081e9cb3a5e24d30638a15c57ddd8ae4d2f8f305ace9d8586876485c5446893737bd1a5edaab922b8466592e0afc04cf0c129d778524753c8caa395c17b0ee1319283", 0x73}, {&(0x7f0000000100)="6393", 0x2}, {&(0x7f0000000140)="af2b374c43c1c1708b399a4e6588500add51d9c99c1da5309b9643d77ec3a06724064cbeac9985b00e0117ff", 0x2c}, {&(0x7f0000000180)="c2dd66b128f9a77b0b06c779b80a48c4a99b866ebe271ea2a49d8349dbf057c58ebc", 0x22}, {&(0x7f00000001c0)="46ea578800dab3994e09fa6b57fe", 0xe}, {&(0x7f0000000200)="0dbea44ee74c2b4b2f0339dd140d09fd224bff9485cff7b615b18b37d8540eed3adcf02b12817c62fd64f983e90e6a34c203d6c2219949fe77818094", 0x3c}, {&(0x7f0000000280)="7fd9e3581058a8f441a838156da79b87b0007221834599f0f0e6399fae2f2789378369c0e8e679bf43ed33783fecd4221b170651fd889d147ffc8d5c06408b2c504022a34d99175960fa5d26a424f7b507daaa31de6c6a611aba8f2c83", 0x5d}, {0x0}, {&(0x7f0000000600)="1dbe5a26076aebe2e23a28afa0c0294d3f9a985438e46c84f200fae053266dcd458fedea3c4232da948585c101d774f85a6dc07f40c16c80f257c16c33747ef422eff0d86eee5a0da0817ed64d725423603aee0faf5f38f5c2721c0b42f2c15cd6fdb08da48f2073309b28dc0e939c715c48f54c9d75ee646d9a86b41b1890e6ae7223a2636c998dd23659f4b4831f335f40d96287", 0x95}], 0x9) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x3, 0x3effc}) r1 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x3402) sysctl$net_inet_tcp(&(0x7f0000000140)={0x4, 0x2, 0x6, 0x14}, 0x4, 0x0, 0x0, &(0x7f0000000100)="c07da572", 0x4) open$dir(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7) 1.648644696s ago: executing program 3 (id=132): mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x3) sendto$unix(r0, &(0x7f0000000280)="b1000501600000001600000007000000045c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236a3f20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e40500000000000000000900000000000000", 0xb1, 0x4, 0x0, 0x0) r1 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x20, &(0x7f0000000340)=0x6, 0xffffffeb) select(0x0, 0x0, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) getsockname$unix(r1, 0x0, &(0x7f0000000180)) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)=""/183, 0x82}], 0x1) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) r5 = fcntl$dupfd(r3, 0xa, 0xffffffffffffffff) r6 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xee4bce5bb233ab95) poll(&(0x7f0000000080)=[{r6, 0x27}], 0x1, 0x0) setuid(0xffffffffffffffff) r7 = shmget$private(0x0, 0x1000, 0x59, &(0x7f0000ffe000/0x1000)=nil) shmctl$IPC_STAT(r7, 0x2, 0x0) close(r6) r8 = dup2(r5, r0) linkat(r3, &(0x7f00000000c0)='./file0\x00', r8, &(0x7f00000001c0)='./file0/file0\x00', 0x4) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x10005, 0x0}) open(&(0x7f0000000040)='./file0\x00', 0x21c, 0x4) execve(0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x102) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') ioctl$WSMOUSEIO_GETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000080)={&(0x7f0000000180)=[{0x8, 0x9}], 0x1}) 1.494523888s ago: executing program 3 (id=143): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$VT_RELDISP(r0, 0x20007604, &(0x7f0000000080)=0x2) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) 1.288752081s ago: executing program 4 (id=146): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfe, 0x3fc}, 0x2, 0x10028, 0x0, 0x0, 0x8, 0xa, 0x9a, 0x8000000000000e65}) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x8) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000100)={0x9789, 0x453, 0xfffffff8, 0x80a19f, "081aa9003721fcb06e74f6527939001d00000008", 0x0, 0x4}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) sendto$inet(r0, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x2, 0x2}, 0xc) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) chflagsat(r3, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x2) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x1, 0x3, 0x8}], 0x0, 0x0, 0x7, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) getrlimit(0x5, &(0x7f0000000240)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x81, 0x5, 0x1, 0xfffdf4b2}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="9725db874b5776d5676fed1ea73f98a0c434268a8320db3eab6b66f85fc6c3e3784eea0a60bdf4f4428f0b0f73d3d47237f91da5d2059ce040db88848df71ab56420822a1aba3070b11cfe86730eec721e0af6bcf4d00a107421406cd3f2d2d584822e5a2dca988b787135219952d8e7402de7b9291c788fea559f86c9ffda5f03d0", 0x82}], 0x1, 0x0, 0x0, 0x4}, 0x400) r4 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r4, 0x8020697a, &(0x7f00000001c0)) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e771a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000200)={0x100, 0x10000, 0x125, 0xb, "0d6ff3ab19f0d0c8068e58b948e09d458b787e53", 0x3}) 1.287708891s ago: executing program 3 (id=147): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xe5, 0x0, 0x5, 0x0, "0100dd2d018000008000005e00", 0x2}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x29a, 0x0, 0x0, 0x0, 0x4f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10, 0x2a) ioctl$VNDIOCSET(r0, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c09000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d0800000000eeff4e204e22", @ANYRES8, @ANYRES32=0x41424344, @ANYRES16=r0]) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000040)="2c6a84dc", 0x4}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) 1.224965205s ago: executing program 3 (id=153): ioctl$BIOCGRSIG(0xffffffffffffff9c, 0x40044273, &(0x7f0000000100)) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) r1 = syz_open_pts() rename(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0\x00') sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0xe}, 0x3, 0x0, 0x0, 0x0, 0x0) close(r1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = syz_open_pts() sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000080)={0x2df57365, 0x10003fff, 0x5, 0x2, "00030003be0a00817dd8910bb864d3c3a3f4d3c9", 0x29}) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000001c0)={0x4, 0x9, 0x5, 0x43, "441e7ce74ccb885a24ed8bb9905921fa968b3f99", 0xc, 0xfffff22b}) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000000080), 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000580)="a8ad007bf523acca3c8ac7acfbe046436d9f3ddf9e65c01f137d7a4885c1eac9ed3ded0feea307aca106bfeea06f093716fa34b4325e2fd03640f8dc23d595083fdcdec09cc0944828875e3b8136b560476f90c2b7a965e1fd6a7b2a8fc07c7c83e7c13e05a12bbb56fdccfdc2dc78578fb1574d6ecd9d9139e4", 0x7a}], 0x1) socket$unix(0x1, 0x5, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{r0, 0x120}, {r0, 0x1}], 0x2, 0x2) 833.253015ms ago: executing program 3 (id=161): setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x8a38, 0x0, "07160a009cef01098b748200"}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="1b4657f9295821b47ce5", 0xa}], 0x1) r2 = dup2(r1, r0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000300)={0x25f, 0x9, 0x1, 0x7fd, "2c21a7000000004ea80873ca9e5fd700", 0x6, 0x2}) poll(&(0x7f0000000000)=[{r2, 0x40}], 0x1, 0x0) 812.853536ms ago: executing program 2 (id=163): sysctl$kern(&(0x7f00000000c0)={0x1, 0x14}, 0x2, &(0x7f0000000100)="4ba7841143", &(0x7f0000000040)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000100)={0x1, 0x3}, 0x2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000000)="e5ffff0a000000ff45", 0x9) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0x3}, 0x2, &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000000)="e5ffff0a000000ff45", 0x9) 758.835141ms ago: executing program 2 (id=167): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}], 0x0, 0x0, 0x7, 0x0) (async) r1 = kqueue() kevent(r1, 0x0, 0x0, &(0x7f0000000080)=[{{r1}, 0xffffffffffffffff, 0x5, 0x80000002, 0x9, 0xd}], 0x80000ff, 0x0) (async) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 757.059287ms ago: executing program 3 (id=168): sysctl$net_inet_udp(&(0x7f0000000240)={0x4, 0x2, 0x11, 0x5}, 0x4, 0x0, 0x0, &(0x7f0000000300), 0x0) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x81, 0x4, 0x1, 0x2806, 0x81}]}) r1 = getpid() fcntl$setown(r0, 0x6, r1) fcntl$setflags(r0, 0x2, 0x2f6ba52584d9798b) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x12) close(r4) select(0x40, &(0x7f0000000280)={0x9, 0x7c, 0x3, 0x80, 0x8000, 0x5, 0x101, 0x8}, &(0x7f00000002c0)={0x80000001, 0xac1, 0x3, 0xfffffffffffffff9, 0x3, 0x5, 0x9, 0x6811}, &(0x7f0000000300)={0xff, 0x8000000000000000, 0xfff, 0x7, 0x2, 0x911, 0x5, 0x3}, &(0x7f0000000340)={0xff1, 0xfffffffffffffff9}) r5 = openat$tty(0xffffffffffffff9c, 0x0, 0x20, 0x0) r6 = dup2(r5, 0xffffffffffffff9c) linkat(r2, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) faccessat(r4, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r7 = socket(0x11, 0x3, 0x0) sendto$unix(r7, &(0x7f0000000000)="b100051300000000000000dd03000000000013fecea10500fe3c9df96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c7d0c032bfa896443a42118000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000480)={0x8, 0x4, 0x5, 0x7, 0x7, 0x1, 0xff, 0x800}, &(0x7f00000004c0)={0x6, 0x7, 0x4, 0x9, 0x2, 0x5, 0x2, 0xfff}, &(0x7f0000000500)={0x7, 0x3, 0x2d6fcff7, 0x4, 0xa, 0x7fff, 0x1ff00, 0xe}, 0x0) readlinkat(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=""/129, 0x81) ioctl$TIOCSETAF(r6, 0x802c7416, &(0x7f0000000580)={0x5, 0xffff, 0x8, 0x6, "439cf6dfd3d06248381e5b4b4ed19db8a404f6d6", 0x7ff, 0x8}) setrlimit(0x3, 0x0) r8 = open(0x0, 0x40, 0x140) readlinkat(r8, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000740)={0xcc0, 0xa91, 0x5, 0xffff, "30b70c6597f07a9e74ebacdf41f4467530547cef", 0xc}) recvmmsg(r3, &(0x7f0000001c00)={&(0x7f0000001bc0)={&(0x7f0000000380)=@in6, 0xc, &(0x7f0000001a80)=[{&(0x7f00000005c0)=""/246, 0xf6}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/95, 0x5f}, {&(0x7f00000006c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/11, 0xb}, {&(0x7f0000000980)=""/127, 0x7f}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/24, 0x18}, {&(0x7f0000001a40)=""/14, 0xe}], 0x9, &(0x7f0000001b40)=""/89, 0x59}, 0x1}, 0x10, 0x1, &(0x7f0000001c40)={0x7, 0x40}) recvfrom(r8, &(0x7f0000000780)=""/25, 0x19, 0x40, &(0x7f00000007c0)=@in={0x2, 0x0}, 0xc) nanosleep(&(0x7f0000000800)={0x5, 0x1}, &(0x7f0000000840)) select(0x40, &(0x7f0000000880)={0x9, 0x8, 0x5, 0x7, 0x4, 0x1, 0x49, 0x8}, &(0x7f00000008c0)={0x5, 0x8, 0x7, 0x7fff, 0x44, 0x9, 0x50, 0x5}, &(0x7f0000000900)={0x23, 0x5, 0xd, 0x5, 0x4, 0x8000000000000001, 0x3, 0x3}, &(0x7f0000000940)={0x0, 0xc3f3}) 630.566372ms ago: executing program 2 (id=170): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0) 629.496153ms ago: executing program 5 (id=172): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x2000, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x1000c) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000040)) 629.281609ms ago: executing program 2 (id=173): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) dup2(r0, r1) connect$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) 500.85896ms ago: executing program 4 (id=175): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, ""/38}, &(0x7f0000000040)=0x28) getsockopt(r0, 0x103, 0x6, &(0x7f0000000100)=""/4080, &(0x7f0000000080)=0xff0) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffff000000000000000000000000ffff"]) r1 = socket(0x800000018, 0x3, 0x1) dup2(0xffffffffffffffff, r0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x2, 0x0, 0x16}, 0x4, 0x0, 0x0, &(0x7f0000000240), 0x0) 497.740768ms ago: executing program 2 (id=176): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f0000000000)) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0xf900000000000002, 0x2, 0x4}) sysctl$kern(&(0x7f00000001c0)={0x1, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x1b0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setuid(0xee01) socket$inet(0x2, 0x3, 0x102) setgroups(0x0, 0x0) setgroups(0x0, 0x0) fchmod(0xffffffffffffffff, 0xf3) setuid(0xffffffffffffffff) r2 = getuid() chown(&(0x7f0000000180)='./file0\x00', r2, 0xffffffffffffffff) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="c75d2268be003fb903000008", 0xc}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000a40)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000000b40)="88000000", 0x4) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r0, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) 497.129637ms ago: executing program 1 (id=177): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x40, &(0x7f0000000980)="01000000", 0x4) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000200)={'./file0\x00', 0x1f5c, 0xffff5a6a, 0xffff, 0x0, 0x7, 0x3afe47b9, 0x0, 0x1, 0x1, 0xfd, 0xffffffffffff7120}) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa"]) kevent(0xffffffffffffffff, 0x0, 0x56, 0x0, 0x5ffd, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x0, 0x4, 0x0, 0x80}, {0x3, 0x0, 0x0, 0x49}, {0x3, 0x0, 0x0, 0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1934, 0x0, 0x94e88e483d20a485) sysctl$net_pipex(&(0x7f0000000040)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) dup(r3) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) select(0x40, &(0x7f0000000040)={0xfd}, 0x0, 0x0, 0x0) execve(0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) fcntl$getflags(r0, 0x3) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000740)={0x9, 0x1, 0x819, 0x2, "00000009022000", 0x8000006, 0xfffd}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000280)=[{0x7, 0xe, 0x3, 0x5}, {0xfc01, 0xde, 0x8, 0x409}, {0x41ae, 0x2, 0x6, 0x41000083}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) ioctl$WSMOUSEIO_GETPARAMS(r3, 0x80105727, &(0x7f0000000280)={&(0x7f00000001c0)=[{0x42, 0x6}, {0x8d, 0x1ff}, {0x8e, 0x10}, {0x25, 0x4}, {0x21, 0x2}], 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0xdc1d800780e51763}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d17248cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xffffffffffffff7f, &(0x7f0000001c00)="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", 0x3) ktrace(0x0, 0x1, 0x40000846, 0x0) pread(r0, &(0x7f0000000040)="bd2b80f857ff4d14d17c51e53fe7ea08725409543583d1fe8ea680e66e0e400762446ab7cd4d5f1fccf8b8865650d749a86925e9fcdb470dbb946b2aacbeb4829dd00bc020f846165771c011f2ee6a7b151ac3b475e49470f8c3403a722a9a3ace9efceb94cad10b8487d57f943960f92e4a477a0ba25501540ccfd111d5de40a2c374141ece256577c6c3c8f38fcf3a58de80a537ddb58b99f67f189048b5286dc29c32b96cea9bffb9fe970dea98f67017cd717c7cc7d1403c351f055d172aef1d809dcd820a0b980b3be64f43d0669d", 0xd1, 0x1) 496.838756ms ago: executing program 0 (id=178): setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000002c0)=0x8) unveil(0x0, 0x0) ioctl$BIOCSFILDROP(0xffffffffffffffff, 0x80044279, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, 0x0) r3 = socket$inet6(0x18, 0x3, 0x0) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000040)=0xfffffff9) getsockopt$sock_int(r3, 0xffff, 0x1021, &(0x7f0000001ac0), &(0x7f0000000580)=0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)="7e746376ecb3f4b7c3b9648dde9d8c13de18b9e215c4a9cac7034ab89ebf86868d83590bbbc0d90ba99e59ac2ac3a2812db4a42c910ec132c100ff7f737c911d105ade6f74489113b68abf53fec3be6aeb96d1dd0b41272e9a67087a7fbcf181a77e72520b7622324acd62aee319cf3e29c7534ed4beb03e67ea890203", 0x7d}], 0x1) 418.235618ms ago: executing program 5 (id=179): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x2a) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x200, 0x2, 0x0, 0x3}, {0x0, 0x3, 0x8, 0x6}, {0x3, 0x10, 0x0, 0x9}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$FIONREAD(r1, 0x80047476, &(0x7f0000000300)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = socket(0x18, 0x2, 0x0) r3 = socket(0x18, 0x2, 0x0) r4 = dup2(r2, r3) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000700)={0xd, 0x401, 0x1, 0x9, 0xfffff977, 0x3, 0x200, 0x10, [{0x3, 0x5, 0x2, 0x5}, {0xb, 0xfffffff8, 0x4b0, 0x1}, {0x7ff, 0x7f, 0x5}, {0x1f3, 0x2, 0xa, 0x6}, {0x8, 0xb, 0x3, 0x9}, {0x101, 0x8, 0x2}, {0x5, 0x1, 0x0, 0x1}, {0x3, 0x3ff, 0x6, 0x1d}, {0x8, 0x5, 0x4b, 0x6}, {0x4, 0x0, 0xe7, 0x6}, {0x10000, 0x6, 0xe, 0xb2}, {0xd7, 0xffff, 0x0, 0xc}, {0x3, 0x7fff, 0x7}, {0x8, 0x0, 0x2, 0x1}, {0x6, 0x1, 0x7fff, 0x401}, {0x0, 0x6, 0x5, 0x1}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x7ff) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000000029, 0xb, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) close(r6) sysctl$kern(&(0x7f00000000c0)={0x1, 0x9}, 0x2, &(0x7f0000000040)="718f1e34", &(0x7f0000000100)=0x4, 0x0, 0x0) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) getdents(r5, &(0x7f0000000180)=""/161, 0xa1) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x8, 0x100, {0xff, 0xffffffffffffffb7}}) sysctl$hw(&(0x7f0000000000)={0x4, 0x18}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$kern(&(0x7f0000000000)={0x3}, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffedf) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000340)="3d25bec0fd462215ae2c4583f4075e23f8e55b4ea690d79fb6cddd5453bc6387a871c7c8f6bb5a456d5fc240f3b3975ae8796b36044a871ad1b816e80fe856268cf363c19210e0c749558cc3fd07b9c7d82def268dbb43d837de1a573a395e3bcd4431aafb1dc3e7b3fbfb07eba3a7ac0503a30373d66eb48e9809a77d82c0ecd57925452c063fd4554022c0b9287f6e8262be6add8b3bd0774d78350233f4f49c81a1ed729bcaa96e4f63164859634799d2419d967c36b19041bf74e7893205ae4d315b9f161de05cdcc435c50a9f7f30b4013b73fef2f8a20fd5ec1ff1a6fad2c27b59d7339d2e5d77d255dda3", 0xee}], 0x1) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x87, 0x7f, 0x9, 0x444}, {0x64, 0x5, 0x0, 0x7}, {0x6, 0x0, 0x3, 0x404}]}) syz_emit_ethernet(0x22, &(0x7f00000003c0)=ANY=[]) 417.94366ms ago: executing program 4 (id=180): setuid(0xffffffffffffffff) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5) r0 = socket$inet(0x2, 0x3, 0x4) mkdir(0x0, 0x0) chmod(0x0, 0x23f) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x802069c1, &(0x7f0000000100)) r3 = socket(0x11, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) syz_emit_ethernet(0x4e, &(0x7f0000000440)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x18, 0x2c, 0x0, @empty, @rand_addr="0000000000000811001a003f00000005", {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x7f, '\x00', @rand_addr="4f2c9ddbe4674fee4d77c16b59b84916"}}}}}}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0x7ff, 0x401, 0xffff, 0x200499, "084880fa870000bdda0988d11554e90d6602ff07", 0xe6, 0x3}) writev(r4, &(0x7f0000000240), 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1002, &(0x7f00000000c0)=0x80, 0x4) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000280)={0x0}, 0x10, 0x0, 0x0) r5 = dup(r0) setsockopt$inet_opts(r5, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4) 416.728563ms ago: executing program 0 (id=181): syz_emit_ethernet(0xd2, &(0x7f0000000100)={@random="7c4f77edef55", @broadcast, [], {@ipv4={0x800, {{0x12, 0x4, 0x0, 0x7, 0xc4, 0x66, 0x8, 0x1, 0x11, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2, {[@end, @rr={0x7, 0x13, 0x4, [@remote={0xac, 0x14, 0x0}, @rand_addr=0x2, @empty, @loopback]}, @ra={0x94, 0x6, 0x5}, @lsrr={0x83, 0x17, 0x5, [@local={0xac, 0x14, 0x0}, @broadcast, @multicast2, @rand_addr=0x1, @multicast1]}]}}, @generic="ddfebcc1df71bdab652a108442327e9e6abdae02df1f1890f30ffde960c75100c1ee386abc32b490debe4651745077c32e44f7a2ef5cf666f2292c4a3c3461cb295caf0a699def0b446d48e2888cf127d47340727303c41385842a4ebb09bbc68746083974d40766cdf3fd8d12ee9d32877deef1e5893215fe0bba7b"}}}}) (async) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)="06747bd25ebe299862bee75904ea8734c8", 0x11}], 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8020699d, &(0x7f00000001c0)) (async, rerun: 32) sysctl$net_inet_udp(&(0x7f0000000080)={0x4, 0x2, 0x11, 0x6}, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0x0) (rerun: 32) 415.468245ms ago: executing program 1 (id=182): syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd600000f6e613fc29a00ae0fffffffe00000800001a623b0000000502000000000000004e234e21000890780000006fb524e304197cf0e79d93312d00"/83]) 322.080115ms ago: executing program 1 (id=183): msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5) (async) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x39, 0x10}], 0x0, 0x0, 0x0, 0x0) (async) r0 = kqueue() (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0xb1, 0x11, 0xe4, 0xfffffffe}, {0x1, 0x6, 0x4, 0x2}]}) kevent(r0, 0x0, 0xfffffffd, &(0x7f0000000100)=[{{r0}, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0xad}], 0x5, 0x0) (async) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000600)={'tap', 0x0}) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) pread(r4, &(0x7f0000000080)="6cbb", 0x2, 0x750bca2f) (async) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) setitimer(0x1, &(0x7f0000000180)={{0x9, 0x8}, {0x7, 0x401}}, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000001180)={0x3, &(0x7f00000001c0)=[{0x84, 0x7c, 0x0, 0xfbff}, {0x48, 0x4, 0x0, 0x1000}, {0x6}]}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[]) (async) r5 = dup(r2) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f00000005c0)={0x3, &(0x7f0000000580)=[{0x1, 0x2, 0xca, 0x4}, {0x3, 0x41, 0xfd, 0x5}, {0x806, 0xb8, 0x9, 0xe78}]}) (async) syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[]) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000040)='./file0\x00', 0xc82, 0x5c) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r6 = syz_open_pts() ioctl$FIOASYNC(r6, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x40047477, &(0x7f0000000240)) (async) shmdt(0x0) 321.906292ms ago: executing program 0 (id=184): openat$speaker(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f00000000c0)=0xd4, 0x3) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="26b3f9ad353509210a966b68f617db6e35dd0895c8b4986d158c019607dd09000000000000001151fe2c21acdadc6401a9ea0341e464e5c1f8251f2b17ac589c4d9546a8e8aae496a60200000000000000a6f87c4419a91dc3daad5bc8f3e741ce4959e291c4545fa3bd80b080c3592edce7d64a0aad26860649b3b8df6844dcde163265abac35eb118078daff466423339ca119833bce8540218a834d110bd9525f4e", 0xa3}, {&(0x7f0000000040)="ee9a8a51e55ee9933b1d46ad98b774d9163ab954051118367dbee6b45107cd650b87522e4421a6cbe1a086558bd0a46c28fb9b493616e676947ec15a629df30c87ce0cc80b1eee58546c1b38290b1725b8f49fcd244a96557a4e73cc966d33b0b0fb18", 0x63}, {&(0x7f00000001c0)="135c34eeafe893455977a8eca4d1b4447fa79c", 0x13}], 0x3) 321.483463ms ago: executing program 4 (id=185): setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x8a38, 0x0, "07160a009cef01098b748200"}) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="1b4657f9295821b47ce5", 0xa}, {0x0}], 0x2) r2 = dup2(r1, r0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000300)={0x25f, 0x9, 0x1, 0x7fd, "2c21a7000000004ea80873ca9e5fd700", 0x6, 0x2}) poll(&(0x7f0000000000)=[{r2, 0x40}], 0x1, 0x0) 320.963081ms ago: executing program 1 (id=186): open$dir(&(0x7f0000000000)='./file0\x00', 0x20, 0x10a) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$WSDISPLAYIO_DELFONT(r0, 0x8058574f, &(0x7f0000000080)={'./file0\x00', 0x6, 0x4, 0x5, 0x0, 0x9, 0x6, 0x5, 0x0, 0x1, 0x2, 0x4}) ioctl$WSDISPLAYIO_SVIDEO(r0, 0x80045745, &(0x7f0000000100)=0x1) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) chroot(&(0x7f0000000180)='./file0\x00') ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f00000001c0)={0x9, 0x7, 0xffffffff}) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0xc) sendmmsg(r2, &(0x7f0000000740)={&(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)="b32abb4a73092a3886b5b252b5d4570ff3ac33bad2acb44fc9d0bf56b417debe07e0bc7daa496967b6e233fdbb11ade81e18b86968f5b2363e2cc97eda379ae52a3208d0d64abf424ac82cd9faaf5ca2f36536d9ffc1af57b11631cd33c167ee7bbb7f10befc6f9c3b224c9fbc153fc42de755f762b3690572", 0x79}, {&(0x7f0000000300)="964b5cc371f341688d359814240145f09da41024f739cda91f69e67bea4fb345a2e2020a3d80b3da3add3d46047df714004a3dd2458ca60f62285b4ff85a934a8ddf880533b068d995dcd18224b1b5b5c718c50c1a3b6b622f0fe8f0256eb714e50d2689c9913176cd64370a66352f3a58b075a58ceaffa011f994006cd57534217ba7bf96d0c10a5b08dc9d25eaf6b959563f31475c83e944a6ead7e7991aa2e4693a7b853072", 0xa7}, {&(0x7f00000003c0)="68e19108f769f558fcdac8b02f39b05b27ebcf9c688b090b6dcdc863c09b5b5e7282516dae4a48208d00", 0x2a}, {&(0x7f0000000400)="ed844da16cbd34a5d3ed7c53d43ad3ba11667ccef99a9c0d83556e88eca53da68405baf1559df94d8564ce2d7306c03be8eca99797721dfa0dd5375ea1eae68fe30c211feb5387b44c0ce1384b9ee1e1768b286ad70c5f102003be0c7080b47291ef976867dc385d8362af", 0x6b}, {&(0x7f0000000480)="22d1e5c5c3b8c1ae21ae23be83fd75530fb6ed03b0a4e657cb40b97c55a51fd3ab1dd315e0d181012a4126660bce9becd118b86389509011a2", 0x39}, {&(0x7f00000004c0)="c25df085cb9a521bdb65ecea4a9059c652ad975a2e1dd9676dff16357772ed162654a57437768a9ccbfa1c8818c8aa41e98b91d83cfca26112", 0x39}, {&(0x7f0000000500)="6f86789242b06406b2c840ddbddb1eed8387e2b37d5c44cbd427551b793ea1ea2e3fbd60569a402a0ce8dff7ae8528216f875ba7458b47816d8e8cbd1acb97c95af3c19b332d8fcc62bb50cd6e21a737d0f6089712b64b8bbe29a3dd9fe0d5c33b9bd544701c89d3f2b7652dcb6469b48061aefb68832bb1d4bae0383a7f1cee3d2d43e26bad882b00c5308e5e33a48a29d81999a17305c28e1934982ec82a9438c9446e1a476e68947744229cc5c9e79cbbde5e8c", 0xb5}, {&(0x7f00000005c0)="a0543c3cfc5bbcd0b46fe40969150b1ba0ac5396a1d0550d08b78f247695a27c2bdbfc7b772a5d477d951d384f58e148c208b3b639f024c7eb2c3905dc336fe1df99a59984bc208b402caeb8677255230ab3c906991d7d8be5", 0x59}], 0x8, &(0x7f00000006c0)}, 0x6}, 0x10, 0x0) ioctl$WSKBDIO_GETKEYREPEAT(r1, 0x400c5708, &(0x7f0000000780)) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f00000007c0)) r3 = syz_open_pts() ioctl$TIOCDRAIN(r3, 0x2000745e) r4 = dup2(r2, r3) ioctl$WSKBDIO_SETENCODING(r4, 0x80045710, &(0x7f0000000840)) unlinkat(r4, &(0x7f0000000880)='./file0\x00', 0x0) r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000008c0), 0x80, 0x0) ioctl$TIOCSTART(r5, 0x2000746e) sendto$unix(r4, &(0x7f0000000900)="38219e5a534e2a4f3dbdff6be5215c06331ab8fbc182b16a5852c5d184cbeb7fb3d19dd7af3ce7c61579c5fd7606de2fc53b478f459f7ccdbc3155f7788465418819509ce9c8bf97d8177e3a17df65a6d4681be1d473a316da95c08e319beaff08ad8e6b8c193efc51cec44e11a0c03339d97ff6a054a135c4abf0feaf0c645a1f47ef08a4a98fabfb061afeb3af866b06bd4acd6792b986035f263bc3175357292e2019bfe3a186f76d08e9586eb69e5ea79284bc7efb0af29722326646f05d0d4bdaffceffbf6845fb18133892f8", 0xcf, 0x8, 0x0, 0x0) execve(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000b80)=[&(0x7f0000000a40)='^#%@\'\x00', &(0x7f0000000a80)='/dev/wskbd\x00', &(0x7f0000000ac0)='/dev/wskbd\x00', &(0x7f0000000b00)='-!(,%\x00', &(0x7f0000000b40)='}\x00'], &(0x7f0000000d80)=[&(0x7f0000000bc0)='\x00', &(0x7f0000000c00)='\x00', &(0x7f0000000c40)='\x00', &(0x7f0000000c80)=':\'+}&\x00', &(0x7f0000000cc0)='/dev/ttyCcfg\x00', &(0x7f0000000d00)='/dev/wskbd\x00', &(0x7f0000000d40)='/dev/ttyCcfg\x00']) ioctl$TIOCSFLAGS(r5, 0x8004745c, &(0x7f0000000dc0)=0x2) ioctl$WSKBDIO_SETENCODING(r4, 0x80045710, &(0x7f0000000e00)=0x9) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000e40), 0x40, 0x0) ioctl$WSKBDIO_GETMODE(r6, 0x40045714, &(0x7f0000000e80)) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000ec0)={0x9, 0x1, 0x200, 0x2e, 0x5, 0xfffffffd, 0xb, 0x10, [{0xfffffff7, 0x3, 0x1, 0x310}, {0x3, 0x4, 0x4, 0x101}, {0xfffffffe, 0x9, 0xffffffff, 0x81}, {0x9, 0x4, 0xffff, 0x8c98}, {0x5, 0xffffdb8f, 0x0, 0x1}, {0x6, 0x7238, 0x1, 0x2}, {0x3ff, 0x4, 0xa, 0x3}, {0x5, 0x7, 0xcf, 0xeb756e6}, {0x80000000, 0x1000, 0xc, 0x80000000}, {0x8, 0x7, 0x5, 0x3747}, {0x0, 0x73, 0x4a5a, 0x28c22060}, {0xfca, 0x3, 0x4, 0x3}, {0xfffffff9, 0x73ff, 0x3, 0xa}, {0xe, 0x2afc, 0x1, 0x200}, {0xe3f, 0x2, 0x80, 0x401}, {0x8, 0x5, 0xe, 0xffffffff}]}) pipe2(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) ioctl$FIOGETOWN(r7, 0x4004667b, &(0x7f0000001040)) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f0000001080)) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000001140)={&(0x7f00000010c0)='./file0\x00', 0x7ff, &(0x7f0000001100)='./file0\x00', 0x8}) kqueue() 320.675466ms ago: executing program 0 (id=187): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000040)=0x5, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) connect$unix(r1, &(0x7f0000000000), 0x10) (async, rerun: 64) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x2a24, 0xc, 0xa, 0x6}]}) (async, rerun: 64) r2 = socket(0x1, 0x2, 0x0) r3 = socket(0x18, 0x3, 0x0) setsockopt(r3, 0x1000000029, 0x25, &(0x7f0000000000)="5ab7776a", 0x4) (async) setsockopt$sock_int(r3, 0xffff, 0x1002, &(0x7f0000000180)=0x6, 0x4) (async) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/4, 0x4}, 0x42) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f0000000100)) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x101, &(0x7f0000000180), 0x6, 0x0) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0x8020697f, &(0x7f00000001c0)) pwrite(0xffffffffffffffff, &(0x7f0000000080)="4f8e8bca7c5076cbbcba046bea103ccb80ecd9b7a7c70364c9ffa85239eb11766937405afd4c03a074c1256c0cd63e0e2376d39174c3134950a1414d6cc18ed8deb1601537951212953e0100ab5c8d6d9d2b9c720cb3d7525361b8269fcebba0cd2f42", 0xfffffffffffffcf1, 0x1) 279.24917ms ago: executing program 5 (id=188): sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f00000000c0)="189f55e254de92eb70e0eee573c852df3f848311234f6c33c59bcc49471caf660d4cb8d2388f032078e892f62dcee55cf981469eff2762c98c88c6ec659f37e5e739a87a6f14ffaffc8e7986e68f0b76947fcb3c7cc374848fc6ecc5d3cbc73343ae40c81cb8616bff068e1fd37080436df33d833f", &(0x7f0000000140)=0x75, &(0x7f0000000180)="6d709bc71996f6a26e60b3a5ed174852646a787788eaeb099d1d66bd3ea8eecec9c088b4581ebae7850d39488abeec2ec75b6f35f10b0bc6ca52e5bf93c08d4835abe16003f1574a84a6670ea709689195a2f2525f3bb31294780fd515c79d35e12f6e6c96d14d28e5c0f991a16fe804ba9270067690916049b1dc5e41c5e6ceca438b4c4570b928f382b02d43e4869220c5d37d017f4c23", 0x98) ioctl$VMM_IOC_INTR(0xffffffffffffffff, 0x800c5606, &(0x7f0000000000)={0x38, 0x9, 0xffb9}) socket$unix(0x1, 0x1, 0x0) shmget(0x0, 0x2000, 0x3f0, &(0x7f0000ffd000/0x2000)=nil) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x14}, 0x4, &(0x7f00000000c0)="189f55e254de92eb70e0eee573c852df3f848311234f6c33c59bcc49471caf660d4cb8d2388f032078e892f62dcee55cf981469eff2762c98c88c6ec659f37e5e739a87a6f14ffaffc8e7986e68f0b76947fcb3c7cc374848fc6ecc5d3cbc73343ae40c81cb8616bff068e1fd37080436df33d833f", &(0x7f0000000140)=0x75, &(0x7f0000000180)="6d709bc71996f6a26e60b3a5ed174852646a787788eaeb099d1d66bd3ea8eecec9c088b4581ebae7850d39488abeec2ec75b6f35f10b0bc6ca52e5bf93c08d4835abe16003f1574a84a6670ea709689195a2f2525f3bb31294780fd515c79d35e12f6e6c96d14d28e5c0f991a16fe804ba9270067690916049b1dc5e41c5e6ceca438b4c4570b928f382b02d43e4869220c5d37d017f4c23", 0x98) (async) ioctl$VMM_IOC_INTR(0xffffffffffffffff, 0x800c5606, &(0x7f0000000000)={0x38, 0x9, 0xffb9}) (async) socket$unix(0x1, 0x1, 0x0) (async) shmget(0x0, 0x2000, 0x3f0, &(0x7f0000ffd000/0x2000)=nil) (async) 278.429916ms ago: executing program 4 (id=189): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/239, 0xef}], 0x1, 0x0}, 0x40) writev(r1, &(0x7f0000000400)=[{&(0x7f00000003c0)="b1", 0x1}], 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xd0, 0x10, 0x2, 0x1}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x7f, 0x400f}]}) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="2237c0b74dab5d00461a000000f8ffffdf540f2e0bc130b6aaca1976364f66516556e18dd8d9cb2adc5a21aa462200249207a71f95cd2079758c8793c3159214ed3d39503b0bc4ba78b7867cdef8c2fc9a625d00", &(0x7f0000000080)=0x54, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x295, &(0x7f0000000500)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x4, 0x6, "9b19e6", 0x25f, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @remote={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x2c, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}, @fragment={0x3, 0x0, 0xe, 0x0, 0x0, 0x9, 0x64}, @fragment={0x33, 0x0, 0x34, 0x1, 0x0, 0x14, 0x65}, @hopopts={0x33, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x12000000}]}, @hopopts={0x8, 0x14, '\x00', [@generic={0x0, 0x2a, "00edbb29ff8e4eca1268edf9e055946d7438deafc4e0624f6235a42e09b8cedf142435e7a2bcc2911a19"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @ra, @generic={0x10, 0x67, "8eaba8cacdd3c72abb43e46e6bf3027e2ffb991f591bfe7eed15950b8702dda78235705ae4f5ae5cc359835ed51bce044390c30dfd2d8ce7659db7f9699de90ef6a1710d48d5b1687b5fa8b8b4f573efe9c11d61cb470250488362a4205e258f278bc6a629a07e"}]}, @routing={0x50, 0xe, 0x0, 0x1, 0x0, [@empty, @rand_addr="deb6fc5aa6b0f8f3bc3d23d55b7c23be", @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4, @mcast1]}, @fragment={0x3a, 0x0, 0x0, 0x0, 0x0, 0x3, 0x65}, @hopopts={0x1d, 0x10, '\x00', [@enc_lim={0x4, 0x1, 0x27}, @jumbo={0xc2, 0x4, 0xffffff15}, @pad1, @generic={0x6, 0x6f, "bacf35786c2d96766a110411bf18a217b5eb1fedd0b1b11f704e329b24c9150c5e4ade4c7e3fb4c89b664fbfa68feb897bd1cf1d6e375bfed1b98f31584652db769d85c1e4c78a0d470c54e96ac1471605816b9dd151cf523995f0d8ab942a1bb36c4a76eb6a08d4646eb0bf42f794"}, @ra={0x5, 0x2, 0x5}]}, @routing={0x6c, 0x8, 0x0, 0x2f, 0x0, [@rand_addr="5a82753434f049465f34842a826b764c", @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr="7be7326eaa47ffb2fdac9b70229bbe0b"]}], @generic="898199436b488474e5b028ad149c8c36c6aa0fe8dadc5760eb1949cf10263e84969c686f398d56"}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r1, &(0x7f0000000440)="c24f1ed0ee7501c96edee9cd791ddb5625b58ec0378b8d9031de53043e140fc303704fac6aaedd7670c313d01d816c8d93054adc24038b5a89745ab62ce57da45e613f4063ecb0aee97ac5275240ffc9a5e35d7d91752b42fe5abe5f49665782f726eee3a28f1962b521955cfa2140809e5681cc62a0140f45ea7aadf38dcfcff415715cdd7fc2adfad588d7617ea30dbc", 0xef) 191.598871ms ago: executing program 2 (id=190): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) dup2(r0, r0) (async) fcntl$getown(r0, 0x5) (async) syz_open_pts() (async) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005166000009f050000002010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc210200b100e4ff0000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba", 0x93, 0x2, 0x0, 0x0) (async) socket(0x18, 0x1, 0x0) (async) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getdents(r1, &(0x7f0000000e80)=""/4091, 0xffaa) getdents(r1, &(0x7f0000001e80)=""/4096, 0x1000) (async) r2 = semget(0x0, 0x1, 0x200) (async) ioctl$BIOCGFILDROP(r0, 0x40044278, &(0x7f0000000040)) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x5e07963dbfff, 0x2) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005136000009f05", 0x9, 0x402, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$net_inet6_ip6(&(0x7f00000000c0)={0x4, 0x18, 0x29, 0x33}, 0x4, 0x0, 0x0, 0x0, 0x0) semop(r2, &(0x7f0000000000)=[{0x0, 0x8f60, 0x1000}, {0x0, 0x3}, {0x0, 0x400, 0x800}, {0x1, 0x9, 0x1000}, {0x2, 0x4, 0x800}], 0x52) (async) semctl$IPC_RMID(r2, 0x0, 0x0) (async) r3 = semget(0x1, 0x4, 0x1a) semctl$GETVAL(r3, 0x40bfdfe817006c7, 0x5, &(0x7f0000000080)=""/35) (async) openat$bpf(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) (async) pipe2(0x0, 0x10000) (async) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) select(0x40, &(0x7f0000000280)={0xff, 0x12bd8a5d}, 0x0, 0x0, 0x0) 187.496832ms ago: executing program 1 (id=191): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="8907040000", 0x5) (async, rerun: 32) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x2, 0x0}, 0x10) (async, rerun: 32) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x6, &(0x7f00000000c0)=[{0x5, 0x6, 0x5, 0x1}, {0x8, 0x40, 0x6}, {0x1, 0x7, 0x2, 0x7}, {0x2, 0x3, 0x0, 0x6}, {0x3, 0xc, 0x2, 0x1}, {0x1, 0x4, 0xfd, 0x5}]}) (async, rerun: 32) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async, rerun: 32) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0xa, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async, rerun: 64) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) (rerun: 64) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000340)="c5eaf9e200006d753c1d446524fb663b89fff11dc17154fe4cbf9bc7f3335c92715c0d8e87b6a6f18ef195a0a0c31e377282429cadb4a48d2d63fe3639725fc5fa9326ce811e924d295f7b1968447ca4a8427f9f8bb0c5eca4fa501249b8ac56", 0x60}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="000000d860a82060dec3e59be543bfcb4493770300b5aee6b8f9a2e7f76682e05e9be469e7022a4f", &(0x7f0000000080)=0x28, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (rerun: 64) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r4, &(0x7f0000000600)="d8564b0bf1ff0795548af9200400", 0xe) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000280)=[{0x4, 0x8c, 0x4d, 0x2}, {0x4, 0x3, 0x4, 0x2}, {0x6, 0x3d, 0x7, 0x401}]}) (async) ioctl$BIOCVERSION(r2, 0x40044271, &(0x7f0000000040)) (async) r5 = dup(r2) ioctl$DIOCMAP(r5, 0xc0106477, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r1, 0x3}) write(r2, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r6 = socket(0x2, 0x1, 0x0) bind(r6, &(0x7f0000000000), 0x10) 187.001541ms ago: executing program 0 (id=192): mknod(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xffffffff) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) sysctl$hw(&(0x7f0000000000)={0x6, 0x1}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 14.869494ms ago: executing program 4 (id=193): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x200}, 0x0, 0x3, 0x1}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r0 = socket(0x800000018, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x20, 0x20) execve(0x0, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) 12.262914ms ago: executing program 5 (id=194): sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005136000009f05", 0x9, 0x402, 0x0, 0x0) mknod(&(0x7f0000000500)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000001100)='./file0\x00') open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x34) kevent(0xffffffffffffffff, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffff8, 0x1, 0x2, 0xfffffffffffffffa, 0x7db}], 0x6, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet6_ip6(&(0x7f00000000c0)={0x4, 0x18, 0x29, 0x33}, 0x4, 0x0, 0x0, 0x0, 0x0) 4.22025ms ago: executing program 1 (id=195): r0 = syz_open_pts() writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f00000002c0)=0x5) execve(0x0, 0x0, 0x0) 2.301894ms ago: executing program 5 (id=196): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x810, r0, 0x8) setsockopt(r0, 0xa, 0x9, &(0x7f0000000040)="ce29ad3e87143a9a6c7db683d9117ebb87ab1839f532f594d40b2fb23c07113ada5ea35e954819c12b98af4b4aa1421014fdd29a9277e6952a16b0701010f4fcafeab1d11f539b8843d34d344d7a8eb287929dfcf2875a96eb1b6316c6bb13026bd133cfba61425eb7ae3ee6b4f090b343fcf503125f30ae", 0x78) ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f00000000c0)=0x6) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) fcntl$setown(r0, 0x6, r1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x2, &(0x7f0000000180)=[{0xd, 0x3, 0xff, 0xf4}, {0x12, 0x3, 0xca, 0x3}]}) fchdir(r0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000240)='.M^\x00', &(0x7f0000000280)='/dev/pf\x00'], &(0x7f00000003c0)=[&(0x7f0000000300)='!&(\x00', &(0x7f0000000340)='/dev/pf\x00', &(0x7f0000000380)='*}{\x00']) openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) ioctl$BIOCGBLEN(r0, 0x40044266, &(0x7f0000000440)) write(r0, &(0x7f0000000480)="a5c0f2281ea7fb8713f3500a47d8a7c0c600f2bf1e4e8beda03791f97a1c5a21a335f7f9f018c60a26bd16faa745cd75796ad362aec13c083c7cdbca75e3f881f1c02b9d999deed4ecd7258dcb69e510d9ed1448f2b00742ffac5ec222b115b482de44af2886230e59f6e1d55f669167daac4bf0f44079ceb1443ea909f060e4858a49760867b44024167efc8383cb60148c397132a928b20a4bacb9b794535f05ff017fa093c815286c940d4514c5f0b528a97c83c2702464158514be6d0400b3d91da06739257ffa4c7a8740f6436b4d9cd3143a22542c526b5e2c09010a3b45ab", 0xe2) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000580), 0x4) recvmsg(r0, &(0x7f0000002880)={&(0x7f00000005c0)=@un=@abs, 0x8, &(0x7f0000001800)=[{&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/12, 0xc}, {&(0x7f0000001640)=""/49, 0x31}, {&(0x7f0000001680)=""/187, 0xbb}, {&(0x7f0000001740)=""/174, 0xae}], 0x5, &(0x7f0000001880)=""/4096, 0x1000}, 0x800) syz_extract_tcp_res(&(0x7f00000028c0)={0x41424344, 0x41424344}, 0x4, 0x81) syz_extract_tcp_res(&(0x7f0000002900)={0x41424344}, 0x72e, 0x4) syz_emit_ethernet(0x36f, &(0x7f0000002940)={@remote, @random="b864452a3542", [], {@ipv6={0x86dd, {0x1, 0x6, "e82076", 0x339, 0x16, 0x0, @loopback, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x2c, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @generic={0xb7, 0x2b, "65f2ee54a424350dbf2a163571e7a965b40ff9c67fa7c70c6bad36c604a0db7b489c5105890ad38673f4d1"}, @pad1, @ra, @generic={0x0, 0x24, "a80e5d0be965bf23860adbd56ddb84515610d1c0385f3ea6001245067c749a4dbc3d3019"}]}, @dstopts={0x8d, 0xa, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0xbb25}, @generic={0x8, 0x47, "11f15b6ea5844905cc5370f790edae16843ba0a221842ea78584645ae2c69fc32bd7faf4eef6281d0319251beccabf345c945eaec8f988ddc2e929f4923adb5d8604e45da280a4"}]}, @routing={0x62, 0xa, 0x0, 0x7, 0x0, [@ipv4={'\x00', '\xff\xff', @loopback}, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @loopback, @mcast1]}, @dstopts={0x3, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x8001}, @ra={0x5, 0x2, 0x2}, @pad1, @ra={0x5, 0x2, 0x7}]}, @hopopts={0x2f, 0x18, '\x00', [@ra={0x5, 0x2, 0x7}, @generic={0xa, 0xb0, "03884677aba9fd22cd3b733aeaa277dfc05d99819d4824f21467b44333da0929ecd107d180bdfe1a4101caba045b90e9de4838e63126cac719524c023a46f5424b92fbe739091b82739fc33b185caafd13456a1fd7c9af898083b7afdba653f0d1f7defad0ac60fcf0a20dc4273827cd23a35a60b0f7ae27fc3a9bd7f267f56e69e1d984b5fdf1afc95e59400a5ba9ada1d1feeb9ad9090b11c8ab0e2e104a55706e775125edd4fa79088a51919594db"}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x55}, @enc_lim={0x4, 0x1, 0x1}]}, @fragment={0x37, 0x0, 0x44, 0x0, 0x0, 0x2, 0x66}, @dstopts={0xff, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x35}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x3, 0x4, 0x0, 0x9, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="2d8a8920136d5312d0a4d079fa5437b5"]}], @tcp={{0x1, 0x3, r2, r3, 0x0, 0x0, 0x8, 0x8, 0xffde, 0x0, 0x4, {[@timestamp={0x8, 0xa, 0x1, 0x5}]}}, {"0429287ac4e1b1c1937798e054e9e3366c8383fb7ee23103bd782433741b990f3655280e80a1536602432ba711f34054eb05298f6e4e37c749d899c42444d0c34400895071a8396cd7f687b187905ec2d97707be8f30b04990cba102bc5e5d213948fc64cd90886dea3cc0fee0ef5161d265c444f3303de36f8f70e4f0dcc7ee2f4afe436560487c177c5ec509f82fb12a6ac95b978078cc4eb778cec5288536e065ddeebfa282b2ee71501ff8685ac0b2a73875251f713153"}}}}}}}) r4 = socket$inet6(0x18, 0x5, 0x77) recvfrom$inet6(r4, &(0x7f0000002cc0)=""/120, 0x78, 0x2, &(0x7f0000002d40)={0x18, 0x2, 0x5, 0x6}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f0000002d80)={0xbc7e, 0x0, 0x5d, 0xfe76, 0x2}, 0xc) syz_extract_tcp_res$synack(&(0x7f0000002dc0), 0x1, 0x0) sysctl$kern(&(0x7f0000002e00)={0x1, 0x32}, 0x2, &(0x7f0000002e40)="b1d4a6e250ae854eb5833ec2ec9cc05d1aa64164d64fa77411bae849a84dd5278e4bfc5bd65fa4eccb87abe2c45c1e04e3fb0e7f4cc48441004c4e8c5ca8ee65ab573cbebfc91a1482b769d717b36efc636c560c493583973cbff87ddb541e998396ec42119cc31d85fd8ce79111616fd08bb6d1fa4112a952947193d187ead6172ee503aba37354ac29150ca8fe08f442af1abd41eac4c8f2e387f31e7c5a", &(0x7f0000002f00)=0x9f, &(0x7f0000002f40)="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", 0x1000) openat$vnd(0xffffffffffffff9c, &(0x7f0000003f40), 0x20, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000003f80), &(0x7f0000003fc0)=0xc) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000004000)={0x8, 0x1, {0xf, 0x2}}) openat$wskbd(0xffffffffffffff9c, &(0x7f0000004040), 0x80, 0x0) connect$unix(r0, &(0x7f0000004080)=@file={0x0, './file0\x00'}, 0xa) ioctl$VMM_IOC_INFO(r0, 0xc0185603, &(0x7f0000004180)={0x8d, 0x0, &(0x7f00000040c0)=""/141}) getpeername(r0, &(0x7f00000041c0)=@un=@abs, &(0x7f0000004200)=0x8) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000004240)={0x7, 0x3, 0x2, 0x0, "24046c53b94c1c6eea2b30b5e5fff2129d472e5f", 0xfffffff7, 0x4}) 352.994µs ago: executing program 0 (id=197): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x87, 0x9, 0x4, 0x4}, {0x20, 0x0, 0x0, 0x441}, {0x6, 0xfd, 0x0, 0xfffffffe}]}) (async) syz_emit_ethernet(0xb2, &(0x7f00000002c0)=ANY=[]) (async) r1 = socket(0x18, 0x2, 0x0) (async) r2 = socket(0x18, 0x1, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000080)={0x0, 0x1, {0xfffffffffffffffe, 0xfffffffffffffffc}}) r3 = socket(0x18, 0x2, 0x0) close(r3) r4 = socket(0x800000018, 0x3, 0x0) sysctl$net_inet_carp(&(0x7f00000005c0)={0x4, 0x2, 0x6, 0x1}, 0x4, 0x0, 0x0, &(0x7f0000000540)='\x00\x00\x00\x00', 0x4) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) (async) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) close(r7) getsockopt$sock_int(r7, 0xffff, 0x1, &(0x7f00000010c0), &(0x7f0000001100)=0x4) (async) kevent(r5, &(0x7f00000001c0)=[{{r2}, 0xffffffffffffffff, 0x80, 0x20000000, 0x4, 0x7fffffffffffffff}, {{r1}, 0xfffffffffffffff9, 0x9, 0x2, 0x1ff, 0x8}, {{r1}, 0xfffffffffffffffb, 0xc0, 0x80, 0xfffffffffffffffc, 0x5}, {{r6}, 0x5, 0x28, 0x40, 0x2, 0x7000}, {{r2}, 0xfffffffffffffff3, 0x131, 0xf0000000, 0x6, 0x9d1b}, {{r4}, 0xffffffffffffffff, 0xd2, 0xfffff, 0xb600, 0x6}], 0x2, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffffa, 0x10, 0xc0000001, 0x6, 0x2}, {{r7}, 0xfffffffffffffffb, 0xc1, 0x2, 0x3, 0x3}, {{r1}, 0xfffffffffffffffb, 0x0, 0x4, 0x3, 0x2}], 0xfffffffa, &(0x7f0000000140)={0x8, 0x5}) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r8 = socket(0x18, 0x2, 0x0) dup2(r3, r8) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) write(r8, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) getsockopt$sock_int(r1, 0xffff, 0x100, 0x0, 0x0) unveil(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='x\x00') openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x288, 0x0) 0s ago: executing program 5 (id=198): setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x67, &(0x7f0000000100)={0x0, 0x0, 0xfc, 0x4587}, 0xc) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000000), 0x10) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0x3b, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) readv(r2, &(0x7f00000000c0)=[{0x0}], 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) setitimer(0x2, &(0x7f0000001ac0)={{0x18000000000, 0x3}, {0x3, 0x43a}}, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x23, 0x10, 0x2, 0x1}, {0x16, 0xa, 0x7f, 0x400f}]}) ioctl$BIOCGBLEN(r0, 0x40044266, &(0x7f0000000140)) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="a612165d535a3672ab3eed65745ca3329e519b6ef46dcae877db092ba08a89db", &(0x7f0000000080)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. kernel: protection fault trap, code=0 Stopped at sys_semop+0x45b: movzwl 0(%rax),%r15d ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace sys_semop(ffff8000fffeb4a8,ffff80003c45b380,ffff80003c45b2d0) at sys_semop+0x45b syscall(ffff80003c45b380) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x833407e7b00, count: -3 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c45b2a0 rbx 0 rdx 0 rcx 0xffff8000fffeb4a8 rax 0xdeafbeaddeafc0d5 r8 0x7f7fffffc000 r9 0x1 r10 0xd2a367247a5b285b r11 0xe76182a22f7405f0 r12 0xffff8000014e6c04 r13 0 r14 0xffff80003c45b380 r15 0 rip 0xffffffff82ff2a3b sys_semop+0x45b cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c45b180 ss 0x10 sys_semop+0x45b: movzwl 0(%rax),%r15d ddb{1}> show proc PROC (syz-executor) tid=392281 pid=33820 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=79, usrpri=79, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffea2b8,0xffff8000fffeb228 process=0xffff8000fffe4e18 user=0xffff80003c456000, vmspace=0xfffffd806be34018 estcpu=29, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 40089 117542 51612 0 7 0 syz-executor 40089 145174 51612 0 3 0x4000080 ttyout syz-executor 33820 288291 95326 0 2 0 syz-executor *33820 392281 95326 0 7 0x4000000 syz-executor 33820 245856 95326 0 2 0x4000000 syz-executor 33820 522036 95326 0 3 0x4000080 fsleep syz-executor 76274 90553 80755 0 2 0 syz-executor 76274 445989 80755 0 3 0x4000080 fsleep syz-executor 76274 61995 80755 0 2 0x4000000 syz-executor 98891 141047 77249 0 3 0x80 nanoslp syz-executor 98891 252027 77249 0 3 0x4000080 nanoslp syz-executor 98891 170227 77249 0 3 0x4000080 fsleep syz-executor 94507 497120 0 0 3 0x14200 bored sosplice 35151 138742 59841 0 3 0x82 nanoslp syz-executor 92674 150472 59841 0 3 0x82 nanoslp syz-executor 4493 344523 59841 0 2 0x2 syz-executor 80755 477821 59841 0 3 0x82 nanoslp syz-executor 77249 139750 59841 0 3 0x82 nanoslp syz-executor 95326 382665 59841 0 3 0x82 nanoslp syz-executor 51612 171073 59841 0 3 0x82 nanoslp syz-executor 24332 81800 59841 0 2 0x2 syz-executor 59841 319694 80505 0 3 0x82 kqread syz-executor 80505 232130 17918 0 3 0x10008a sigsusp ksh 17918 401376 7176 0 3 0x98 kqread sshd-session 7176 217607 58766 0 3 0x92 kqread sshd-session 99168 414040 1 0 3 0x100083 ttyin getty 58766 335028 1 0 3 0x88 kqread sshd 35338 437583 9565 74 3 0x1100092 bpf pflogd 9565 457904 1 0 3 0x80 sbwait pflogd 80552 227740 76632 73 3 0x1100090 kqread syslogd 76632 14230 1 0 3 0x100082 sbwait syslogd 22696 192207 1 0 3 0x100080 kqread resolvd 88455 115194 17728 77 3 0x100092 kqread dhcpleased 48654 272691 17728 77 3 0x100092 kqread dhcpleased 17728 246485 1 0 3 0x80 kqread dhcpleased 36392 496808 0 0 3 0x14200 bored smr 12145 124525 0 0 2 0x14200 zerothread 99454 210036 0 0 3 0x14200 aiodoned aiodoned 83062 17570 0 0 3 0x14200 syncer update 23499 354761 0 0 3 0x14200 cleaner cleaner 47115 143011 0 0 3 0x14200 reaper reaper 67268 393080 0 0 3 0x14200 pgdaemon pagedaemon 19480 325407 0 0 3 0x14200 bored viomb 31643 77932 0 0 3 0x40014200 acpi0 acpi0 58073 376137 0 0 3 0x40014200 idle1 35601 341199 0 0 3 0x14200 bored softnet3 51492 388026 0 0 3 0x14200 bored softnet2 98842 360183 0 0 3 0x14200 bored softnet1 17895 117751 0 0 3 0x14200 bored softnet0 42283 187387 0 0 3 0x14200 bored systqmp 51839 203016 0 0 3 0x14200 bored systq 91675 282324 0 0 3 0x14200 tmoslp softclockmp 70650 425340 0 0 3 0x40014200 tmoslp softclock 30320 394098 0 0 3 0x40014200 idle0 1 462384 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 33820 (syz-executor) thread 0xffff8000fffeb4a8 (392281) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839fad40) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 yield+0x6a #4 malloc+0xe5 #5 sys_semop+0x234 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 33820 (syz-executor) thread 0xffff80003a41a7e0 (245856) exclusive rwlock futex r = 0 (0xffffffff837c1f28) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sys_futex+0x69 #3 syscall+0xbc6 #4 Xsyscall+0x128 Process 76274 (syz-executor) thread 0xffff80003a41ad00 (61995) exclusive rwlock vmmaplk r = 0 (0xfffffd806be346b8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 vm_map_lock_ln+0x12e #3 uvmfault_lookup+0xe8 #4 uvm_fault_check+0x987 #5 uvm_fault+0x106 #6 upageflttrap+0xa9 #7 usertrap+0x2d8 #8 recall_trap+0x8 Process 4493 (syz-executor) thread 0xffff8000ffff07d0 (344523) exclusive rwlock vmmaplk r = 0 (0xfffffd806be34c58) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 vm_map_lock_ln+0x12e #3 uvmspace_fork+0x12b #4 process_new+0x572 #5 fork1+0x3ea #6 syscall+0xb08 #7 Xsyscall+0x128 exclusive rwlock vmmaplk r = 0 (0xfffffd8009ed2c40) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 vm_map_lock_ln+0x12e #3 uvmspace_fork+0x44 #4 process_new+0x572 #5 fork1+0x3ea #6 syscall+0xb08 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10198 11040K 11327K 166960K 11739 0 pcb 17 12K 12K 166960K 62 0 rtable 199 7K 8K 166960K 395 0 pf 35 17K 18K 166960K 56 0 ifaddr 37 6K 7K 166960K 52 0 ifgroup 55 2K 2K 166960K 67 0 sysctl 3 1K 1K 166960K 3 0 counters 64 36K 37K 166960K 76 0 ioctlops 0 0K 4K 166960K 1494 0 iov 0 0K 12K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1339 84K 85K 166960K 1501 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 97K 166960K 328 0 sigio 0 0K 0K 166960K 66 0 proc 72 91K 152K 166960K 539 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 16 0 in_multi 77 5K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 85 387K 387K 166960K 85 0 exec 0 0K 1K 166960K 392 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 237 151K 165K 166960K 4711 0 UVM aobj 12 2K 2K 166960K 12 0 pinsyscall 43 86K 104K 166960K 1456 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 8 0 NDP 12 0K 1K 166960K 33 0 temp 38 8679K 8745K 166960K 7038 0 kqueue 15 24K 26K 166960K 58 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 81 0 77 2 0 2 2 0 8 1 rtentry 176 114 0 26 5 0 5 5 0 8 0 unpcb 144 311 0 294 4 3 1 4 0 8 0 syncache 336 5 0 5 1 1 0 1 0 8 0 tcpcb 808 73 0 68 3 2 1 3 0 8 0 arp 128 19 0 5 1 0 1 1 0 8 0 inpcb 384 292 0 284 9 7 2 8 0 8 1 nd6 144 24 0 6 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 5 0 5 2 1 1 1 0 8 1 pffrag 232 3 0 0 1 0 1 1 0 482 0 pffrnode 88 3 0 0 1 0 1 1 0 8 0 pffrent 40 3 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 25 0 0 1 0 1 1 0 8 0 pfstkey 128 25 0 0 1 0 1 1 0 8 0 pfstate 384 25 0 0 3 0 3 3 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 459 0 90 29 0 29 29 0 8 0 art_table 32 461 0 90 4 0 4 4 0 8 0 art_node 16 113 0 33 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 0 1 0 1 1 0 8 0 semapl 112 4 0 1 1 0 1 1 0 8 0 shmpl 112 9 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1901 0 398 95 0 95 95 0 8 0 ffsino 288 1901 0 398 109 0 109 109 0 8 0 nchpl 144 2346 0 661 63 0 63 63 0 8 0 rtmask 32 1 0 1 1 1 0 1 0 8 0 uvmvnodes 80 2067 0 0 43 0 43 43 0 8 0 vnodes 216 2067 0 0 115 0 115 115 0 8 0 namei 1024 7336 0 7336 2 1 1 2 0 8 1 percpumem 16 53 0 6 1 0 1 1 0 8 0 kstatmem 264 34 0 10 2 0 2 2 0 8 0 scxspl 216 7335 0 7335 3 2 1 2 1 8 1 plimitpl 152 186 0 169 1 0 1 1 0 8 0 sigapl 424 641 0 590 8 2 6 7 0 8 0 futexpl 64 2837 0 2833 1 0 1 1 0 8 0 knotepl 120 494 0 0 15 0 15 15 0 8 0 kqueuepl 224 105 0 94 3 2 1 3 0 8 0 pipepl 336 186 0 158 8 5 3 8 0 8 0 fdescpl 520 622 0 590 3 0 3 3 0 8 0 filepl 160 2966 0 2741 18 7 11 18 0 8 0 lockfpl 104 52 0 50 1 0 1 1 0 8 0 lockfspl 48 26 0 24 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 34 0 17 1 0 1 1 0 8 0 ucredpl 104 268 0 255 1 0 1 1 0 8 0 zombiepl 144 608 0 606 1 0 1 1 0 8 0 processpl 1192 641 0 590 5 0 5 5 0 8 0 procpl 656 967 0 908 7 1 6 6 0 8 0 srpgc 96 4 0 4 2 1 1 1 0 8 1 sosppl 168 3 0 3 2 1 1 1 0 8 1 sockpl 728 687 0 658 11 5 6 9 0 8 2 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 118 0 0 15 0 15 15 0 8 0 mcl2k 2048 25 0 0 4 0 4 4 0 8 0 mtagpl 96 40 0 0 1 0 1 1 0 8 0 mbufpl 256 1293 0 0 81 0 81 81 0 8 0 bufpl 280 2581 0 123 176 0 176 176 0 8 0 anonpl 32 5479 0 0 45 0 45 45 0 246 0 amapchunkpl 152 14046 0 13549 30 8 22 29 0 158 2 amappl16 200 1400 0 1373 4 2 2 4 0 8 0 amappl15 192 9 0 9 1 1 0 1 0 8 0 amappl14 184 115 0 103 1 0 1 1 0 8 0 amappl13 176 9 0 8 1 0 1 1 0 8 0 amappl12 168 1285 0 1255 4 2 2 3 0 8 0 amappl11 160 55 0 40 1 0 1 1 0 8 0 amappl10 152 4 0 4 1 1 0 1 0 8 0 amappl9 144 256 0 256 1 1 0 1 0 8 0 amappl8 136 18 0 16 1 0 1 1 0 8 0 amappl7 128 114 0 102 1 0 1 1 0 8 0 amappl6 120 185 0 182 1 0 1 1 0 8 0 amappl5 112 119 0 110 1 0 1 1 0 8 0 amappl4 104 327 0 308 1 0 1 1 0 8 0 amappl3 96 2556 0 2442 4 0 4 4 0 8 0 amappl2 88 666 0 605 2 0 2 2 0 8 0 amappl1 80 9571 0 8972 15 0 15 15 0 8 0 amappl 88 3968 0 3802 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 11 0 0 1 0 1 1 0 8 0 uaddrrnd 24 621 0 590 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 621 0 590 1 0 1 1 0 8 0 vmmpekpl 168 7090 0 7057 3 0 3 3 0 8 0 vmmpepl 168 45077 0 43146 90 1 89 90 0 357 0 vmsppl 480 620 0 590 5 1 4 5 0 8 0 rwobjpl 72 16492 0 13484 55 0 55 55 0 8 0 pdppl 4096 1250 0 1180 104 32 72 88 0 8 2 pvpl 32 12177 0 0 99 0 99 99 0 265 0 pmappl 256 620 0 590 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 464 0 43 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff837afff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff839fab38) at __mp_lock+0x1a3 softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x765c8b3f2b20, count: -7 ddb{0}> machine ddbcpu 1 Stopped at sys_semop+0x45b: movzwl 0(%rax),%r15d ddb{1}> trace sys_semop(ffff8000fffeb4a8,ffff80003c45b380,ffff80003c45b2d0) at sys_semop+0x45b syscall(ffff80003c45b380) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x833407e7b00, count: -3