last executing test programs: 4.487993239s ago: executing program 4 (id=111): kqueue() (async) r0 = kqueue() kevent(r0, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x9, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) kevent(r0, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000040)=0xc) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb4050000000000009dd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)='\x00ZO', 0x3}], 0x1}, 0x406) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)='\x00ZO', 0x3}], 0x1}, 0x406) sysctl$net_inet_carp(0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0), 0x0) (async) sysctl$net_inet_carp(0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0), 0x0) socket(0x11, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r2, 0xc4504444, &(0x7f0000000740)={0x0, 0xf012, 0x800010fe, 0xd286, "97a2224ef1696b47c1d100", 0xc5d}) sysctl$kern(&(0x7f0000000140)={0x1, 0x58}, 0x2, &(0x7f0000002480)="71f91eca", &(0x7f0000000080)=0x4, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = socket(0x800000018, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x404) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5901) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5901) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$TIOCSWINSZ(r4, 0x80087467, &(0x7f0000000100)={0xfffc, 0xd, 0x8, 0x7}) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0x2a, &(0x7f0000000040)="84ae975e", 0x4) (async) setsockopt(r5, 0x1000000000029, 0x2a, &(0x7f0000000040)="84ae975e", 0x4) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r5, 0xffff, 0xe9, &(0x7f0000000140)="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", 0xfd) mmap(&(0x7f00002d8000/0x1000)=nil, 0x1000, 0x1, 0x12, r1, 0x34c) 4.136079579s ago: executing program 1 (id=128): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) unveil(&(0x7f0000000040)='./file1\x00', 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0xa63, 0x2}, {0xfffffffffffffffb, 0x8000100000000002}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') minherit(&(0x7f00002dd000/0x1000)=nil, 0x1000, 0x2) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="71f91e3471ac0058bc5a9146dec3708200", &(0x7f0000000080)=0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x2, 0x0, &(0x7f0000000040)={0x50}, &(0x7f0000000080), &(0x7f00000000c0)) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r2 = socket(0x2, 0x2, 0x0) close(r2) fchmod(r2, 0x2) chroot(&(0x7f0000000340)='./file0\x00') read(r1, &(0x7f0000000100)=""/11, 0xb) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) 2.882647532s ago: executing program 4 (id=141): r0 = getpid() setpgid(r0, r0) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0xbc, 0x2, 0x4, "012d0cfb000700000000098002001000", 0x5, 0x20000000}) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x1e, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r1 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x1, 0x9}}}}}) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r3, 0x8020699f, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000001}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r5 = syz_open_pts() r6 = msgget$private(0x0, 0x254) msgsnd(r6, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000000009130d2debfc5a5d54ad39f140471f4528a46c950a53375e8290f333ae564343f20feb8c367795525255098fc6230b75b1343867eab47117c491e20c2b40c0d93d5fbc305c879a3e1865cfb7672c10f22d794c4b2a65a4e1e59"], 0x61, 0x800) ioctl$TIOCSETA(r5, 0xc0284457, &(0x7f0000000740)={0x7a, 0x4, 0x2, 0xdd, "deffff0357d6b6a419e84dce0000e300", 0x3, 0x800004}) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') 2.876263805s ago: executing program 1 (id=142): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x2000000000000056}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x7, 0x5, 0xffffdf84, 0xfffffbff, "ffffffffffe600000000000000ff00", 0x4000000, 0x673}) r1 = syz_open_pts() writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="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", 0x1db}, {&(0x7f0000000000)="d8d5ecd49f44aaca769a2cef19dc29dce9df8e7d9fb128bf7f798eca683035044edc01fe66f91e59570a81e09e206ae067a8ba844f71bda42f", 0x39}], 0x2) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 2.766430778s ago: executing program 3 (id=144): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000002c0)={0x9, &(0x7f0000000200)=[{0x0, 0x80, 0xf, 0x9}, {0x69ef, 0x5d, 0x5, 0xfffffffa}, {0x1000, 0x9, 0xff, 0x2}, {0xffff, 0x1, 0xab, 0x3}, {0x7fff, 0x1, 0xf, 0x9}, {0x5, 0x8, 0x8c, 0x7f}, {0x1, 0x5, 0x4, 0x7fff}, {0x6, 0x4, 0x1}, {0xfffb, 0x6, 0xff, 0x7}]}) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 2.639609055s ago: executing program 5 (id=150): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ddee36ee6e0e1b0378c5bd98e071b6e8e6561956", 0x14}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="00a0a78d0ca82026dec3e59be543bfcb4c969b0000000000000017bc", &(0x7f0000000080)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000300)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x21, 0x0, 0x0, 0x0, @multicast1, @loopback}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x18c3, 0x8001, 0x9, 0x2, 0x4}}}}}) sysctl$kern(&(0x7f00000002c0)={0x1, 0x32}, 0x2, &(0x7f00000003c0)="2617782c", &(0x7f0000001800)=0x4, &(0x7f0000000440)="06000000", 0x4) 2.630426026s ago: executing program 5 (id=152): writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x300}], 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffffe, 0x29, 0x80, 0x2, 0xc}, {{r0}, 0xfffffffffffffffe, 0x10a, 0x10, 0x4, 0x8000000000000000}], 0x8, 0x0, 0x15, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r2 = syz_open_pts() close(r2) syz_open_pts() dup(r1) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 2.597428027s ago: executing program 7 (id=153): r0 = syz_open_pts() ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000000)) sysctl$net_inet_gre(&(0x7f0000000040)={0x4, 0x2, 0x2f, 0x1}, 0x4, &(0x7f0000000080)="5f5a8bdccb37d0f0cc89230d4bb5da62ac291317acd1213431312a41cf9a5e0d66587e225b709f60ea8e0d95aecf30cbacad514d9edd9cb9eccd23a3af5f3ff9af123efd9892d6d37a14b380c9b7f87327", &(0x7f0000000100)=0x51, &(0x7f0000000140)="eb11f0f7b5d7cbf380170b422cc004c4e7acc2af5aee50083e6975549c1b4e2942492c465c4f81f6d89faadf1f9446cba4d8", 0x32) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000180)=0x7) r1 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x20, 0x65) utimensat(r1, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{0x7fffffffffffffff, 0x5b5}, {0xfffffffffffff801, 0x7}}, 0x2) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) ioctl$TIOCGTSTAMP(r2, 0x4010745b, &(0x7f00000002c0)) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0) ioctl$TIOCSCTTY(r2, 0x20007461) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000340)=0x2) ioctl$TIOCEXCL(r0, 0x2000740d) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSCTTY(r4, 0x20007461) r5 = openat$tty(0xffffffffffffff9c, &(0x7f00000003c0), 0x80, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000400)=""/129, 0x81}, {&(0x7f00000004c0)=""/59, 0x3b}], 0x2) ioctl$TIOCMBIS(r5, 0x8004746c, &(0x7f0000000540)=0x6c) ioctl$TIOCSDTR(r3, 0x20007479) sysctl$vfs_ffs(&(0x7f0000000580)={0xa, 0x1, 0x7}, 0x3, &(0x7f00000005c0)="887106587d2bbf92cc175a254cca7bca76c69d3bb04295c47307217b49f78ecb5c2285df6aa82f64b61679734b1a1c644e785fdb255543b0c0d8fbbf884f1d10e4a7cf981287e31ad913e3b7d18aa26e5a78a11cd6ff3e6e1a3b372a62137a8efc248681a3be60a24e0b3bf9aefd0944ed02531e5902f24516b9f7e7", &(0x7f0000000640)=0x7c, &(0x7f0000000680)="4b78210139741900d48fe0a958c433cd87a6dbfa274a4c7b5c1ca42ab3c7465f9fafc833981baeb3780d8614508f9d9f8ea05c6004a1deaf99373b5f8839960aaaa4c1e83f44a21eb849f2aea99ad5dff2faf791bec1cadc0b9d5ef453198e509321e1b050c9da536bcbc1ba690fc86697d1c8751159d59f3e2839aacbf589c09e763c2275c437b069400bcf2db86d42cde8cc91344963908398a07e32977f562c22f0b1535c14b6f8a4384bbc1892ecd8c37a0302c618cec4a0a48609fae94d30fb26b129c432e06aada61e6338ae5c0a94b90e96ab1ab9ee542797379b419be2820a1b6f09ea505e11f10ff6569391993e50478668a60d64fd66294ab6", 0xfe) ioctl$TIOCSPGRP(r4, 0x40047477, &(0x7f0000000780)) clock_gettime(0x4, &(0x7f00000007c0)) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000800)="17bf080f65d1c7179a587cd32467b21a31aa0a2cd1539512c6335d15f040da5af1719f94e47346b928069d2d420fb3390f416fa20507637f9ff6254dd07c43925359235ec44bbda70b66d4229d30f943a8422b8d6b8c305d1cfb0edbfb1d6675e400740b5fe874709b57cec135a960e9e1abfbce052070623d37503436bd70941e1d93803fc0aba8bda91cbbee6bfe5d6715c7dcdf0fa82aab668f9b21a01ef7d214733e51", 0xa5) fcntl$setstatus(r2, 0x4, 0x80) unveil(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)='W\x00') fcntl$getown(r5, 0x5) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000940), 0x80, 0x0) ioctl$TIOCMGET(r4, 0x4004746a, &(0x7f0000000980)) ioctl$WSKBDIO_SETMODE(r6, 0x80045713, &(0x7f00000009c0)=0x1) ioctl$TIOCDRAIN(r2, 0x2000745e) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000a00)={'tap', 0x0}) 2.43933246s ago: executing program 3 (id=156): r0 = socket(0x18, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aad5aaaaaaaa9f96b0db5822080045000030000000000001907800000000000000000b01907800000000450c010100680000070305e400000000e0000001"]) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000180)="ac2740c6d63124acd7d21972817267b5ab7037a43a29d21f9ddfa7cc2a9c202dbc7765095d5315a53a318705639f0b1400049f29f71c31238df64bf6b32f43ac81f08132062d7621991e9cf881ad439e3be48e738487c5ed9d7b9a66b3f8042aa9c8e9d9d8c793192280a72a4bf7dbce4627f7a2c6202be2a701aa406abe3dc5bccc5ea46816de894a7bf9a77f6ff46ea6b3ef089e6cb6285da4c9450f2910c1018db944226ba44f67c1739caf839c53fbe112f28569ce977de80e4780c6b9b1e118", 0xc2, 0x5, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000000140)="53183374", 0xffffffba) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x10000) recvmmsg(r3, &(0x7f0000000380)={0x0, 0xb}, 0x10, 0x1800, 0x0) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x8) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000040)=0x5, 0x4) close(r0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 2.438828868s ago: executing program 1 (id=157): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x40) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ddee36ee6e0e1b0378c5bd98e071b6e8e656195650092e23f0409518", 0x1c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000340)="00a0a78d0ca82026dec3e59be543bfcb4c969b0000000000000017bc333f1255636e729535f1324b593cc5307b8972f4af81643f60710e000000140000bf4875744b0000000000002bba63f1", &(0x7f0000000080)=0x4c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r0, &(0x7f0000000480)='\x00'/14, 0xe) r1 = socket(0x2, 0x3, 0x2f) r2 = dup(r1) setsockopt$inet_opts(r2, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)="70bfd7084e25953c42980539410184f14294d68632d8d26900000000c53b1793f1ac085e7c773d9ec757a519c83b3d4566d3ae6ffc480ccadfd69a7533916b3e5a8604a6bebcc6b5d82003ba258a3ebba44287a1f5634fce286db6eb7c128921f017dd359aafa4f98f46d552fec971650015a5daa856ad196033e2188fe4a1bca55579877762ab3d4f7a921036d9d267575f36cc3d9694fe5e0d03f83d741cfb427403a478d1ea191a86e0a129f48862d7de4f5244286f66d4d73e", 0xbb}], 0x1) r4 = syz_open_pts() ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000080)=0x5) execve(0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000002a40)={&(0x7f0000000080)=@abs={0x1, 0x0, 0x3}, 0x8, 0x0}, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r5 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7ddab, 0x0) stat(&(0x7f0000000040)='.\x00', &(0x7f0000000380)) r6 = socket(0x18, 0x2, 0x0) getsockopt$sock_cred(r6, 0xffff, 0x1024, &(0x7f0000001840), &(0x7f00000000c0)=0xc) 2.221807706s ago: executing program 7 (id=158): r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x3, 0x0) r1 = open(0x0, 0x0, 0x22) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r2, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sysctl$kern(&(0x7f0000000080)={0x1, 0x21}, 0x2, &(0x7f0000000700)="6be5f9f952af4f486e2ccf64e74688e07f87af8813eb83043b82ebc97965e1704d43dc63b85371bc4e61142db92664758fffb8c31c527b6f623555e067f68ca770958e43202e35d441679b24ff8c9d5da99de3d648e5c63badb8cc973d46f1b7f645e6a557150a328a262cbecdf2257e1d6fa6de3fdc7e5467d883bda5e9a3a3ea979fb8e629e6b1fc94e1f54390f0d54c457fcf9b6d0b6fb60ae3232deecb033eb980a69ceb1c3d9f2ce049e6839b907e9624546505b1347a8dd1a79948c33a6a5942f5fc3088d4d6ac9ab07a0737160c159081d94fe1910ec46063da69", &(0x7f00000000c0)=0xde, &(0x7f0000000940)="b82fe512ea3ca394bf43b216594629cdaa08ecda0c8c5ea7a7acfa7a5cffbf3ab61d957df696af385292447f9f212c2d821360b81fe4dd4ef5d1dd561e94a79d8e915623434305ea2e286f8f1b9bf2f0bcd1d200c81c3836edd97fb6642cd8a98f17262f1e0da63d4238e14d890bb533d5bd755dfbbbf2c74aa1fb6ea400eebedc0371711cc9dadb56ece9cf60bdb4b773a13337b05c9819ec6fe0b7717270f1", 0xa0) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) linkat(r3, &(0x7f0000000a00)='./file0\x00', r1, &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000480)='./file0\x00', r2, &(0x7f0000000180)='./file1\x00') r4 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000300)={0x7, 0x1, 0x7f, 0xb6e8, 0xb8f}, 0xc) mkdirat(r4, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r6 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x4000011e, r6) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x1010, r6) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x0) unlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000900)='./file1/file0\x00') r7 = socket(0x18, 0x3, 0x50) ioctl$WSDISPLAYIO_DELFONT(r5, 0x8058574f, &(0x7f0000000c80)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x4, 0x800, 0x9, 0x0, 0x6, 0x8, 0x7, 0x1, 0x1, 0x8000000, 0x7f}) ioctl$FIONREAD(r7, 0x8020699f, &(0x7f00000001c0)) 2.218893252s ago: executing program 4 (id=159): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1024, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000180)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x38, 0x2b, 0x1, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@fragment={0x2b, 0x0, 0x9, 0x0, 0x0, 0x7, 0x66}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c33e", 0x0, 0x3a, 0x80, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0xb}, {0xffffffffffffff9c, 0x10}], 0x2, 0xa4a) r1 = socket$inet(0x2, 0x3, 0x0) getsockopt(r1, 0x0, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 1.138933526s ago: executing program 3 (id=161): r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000680), 0x800, 0x0) fcntl$dupfd(r0, 0xa, r0) (async) r1 = fcntl$dupfd(r0, 0xa, r0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x1010, r1, 0x8010000000007fe) syz_emit_ethernet(0xd6, &(0x7f0000000440)={@broadcast, @remote, [{[{0x88a8, 0x4, 0x0, 0x1}], {0x8100, 0x5, 0x0, 0x1}}], {@generic={0x86de, "c8c67f7fb9da253456d26b937bfe7e4f13c4525d61ecbd4e648336ccaebb413a46da3765e814bdb0bd7664a0fae8e6709377b6f42373ccd2530a588bd3696f1bd5983164b8e8e223e45e74c8d2271a3f34a6aa7317a962a5dce96219f224e1cdffd85f433f8d854a7e86ca091d7490f0c76201c63344f97c88f0e622cc0e0272631921fb62dfc366de76d4603854c2f41ac4c9c4cf1ba29d36c531e64f0c3ed235fb74f744c576e8e188c2c34cd3452efd97588333b206581aeb37ec4d43b5fe"}}}) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x3, 0x40, 0x1, 0x7}, {0x84, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r3, &(0x7f00000000c0)="bb89a7a5895ea5280304000000e1", 0xe) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="8f6f77ede655fffffffffffd86dd605f6ad900403a0000000000000000000000000800000000000000000000000000000000000000aa"]) (async) syz_emit_ethernet(0x76, &(0x7f0000000340)=ANY=[@ANYBLOB="8f6f77ede655fffffffffffd86dd605f6ad900403a0000000000000000000000000800000000000000000000000000000000000000aa"]) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000006c0)={0x6, &(0x7f00000001c0)=[{0x2, 0x1, 0x9, 0x4}, {0x6, 0x9, 0x5, 0x7ff}, {0x8, 0x6, 0xdf, 0xff}, {0x60f, 0x0, 0xb2, 0x2a}, {0xaf2, 0x8, 0x3, 0x7}, {0xff, 0x4, 0x40, 0x1}]}) socket$inet(0x2, 0x3, 0x102) (async) r4 = socket$inet(0x2, 0x3, 0x102) sendmsg(r4, &(0x7f0000000280)={&(0x7f0000000180)=@un=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="725351e875bf88590000000000000000"], 0x10}, 0x0) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000140), 0xc) syz_extract_tcp_res(&(0x7f0000000000), 0xf14, 0xd) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) close(r5) (async) close(r5) r6 = socket$inet(0x2, 0x2, 0x0) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x80, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xffffffffffffff2a, 0x0, 0xffffffffffffffb7) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xffffffffffffff2a, 0x0, 0xffffffffffffffb7) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x54, 0x10, 0x5}, {0x3, 0x9, 0xfd, 0x8}, {0x16, 0xff, 0xb}]}) (async) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x54, 0x10, 0x5}, {0x3, 0x9, 0xfd, 0x8}, {0x16, 0xff, 0xb}]}) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[]) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000540)={0x4, 0x7, 0x40, 0x101, 0x8, 0x3, 0x5, 0x10, [{0xd03, 0x3, 0x40, 0x3a70}, {0x5, 0x9, 0x80000001, 0x6}, {0x80, 0xfffffd56, 0x8, 0x9}, {0x8, 0x7, 0x8, 0x3}, {0x4, 0x400, 0x8, 0x8}, {0x880, 0x3ff, 0x3faf64de, 0x100}, {0x3, 0x2, 0x7, 0x49a5}, {0x8, 0x7, 0x4, 0x2}, {0x800, 0x1102, 0x399e}, {0x1000, 0x6, 0x10001, 0x2}, {0x400, 0xaa0, 0x2, 0x8b}, {0x0, 0x4, 0x3, 0x7}, {0x56, 0x400, 0x7, 0xff}, {0x2dc8fc74, 0x4, 0x9, 0x2}, {0x2, 0x5, 0x4, 0x1}, {0x3ff, 0x7, 0x0, 0x7}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000540)={0x4, 0x7, 0x40, 0x101, 0x8, 0x3, 0x5, 0x10, [{0xd03, 0x3, 0x40, 0x3a70}, {0x5, 0x9, 0x80000001, 0x6}, {0x80, 0xfffffd56, 0x8, 0x9}, {0x8, 0x7, 0x8, 0x3}, {0x4, 0x400, 0x8, 0x8}, {0x880, 0x3ff, 0x3faf64de, 0x100}, {0x3, 0x2, 0x7, 0x49a5}, {0x8, 0x7, 0x4, 0x2}, {0x800, 0x1102, 0x399e}, {0x1000, 0x6, 0x10001, 0x2}, {0x400, 0xaa0, 0x2, 0x8b}, {0x0, 0x4, 0x3, 0x7}, {0x56, 0x400, 0x7, 0xff}, {0x2dc8fc74, 0x4, 0x9, 0x2}, {0x2, 0x5, 0x4, 0x1}, {0x3ff, 0x7, 0x0, 0x7}]}) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$inet_opts(r6, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) recvmmsg(r6, &(0x7f00000002c0)={&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000380)=""/129, 0x81}], 0x2, &(0x7f00000019c0)=""/4096, 0x1000}, 0x8}, 0x10, 0x802, &(0x7f0000000300)={0xa, 0x7fffffff}) ioctl$WSKBDIO_SETKEYREPEAT(r5, 0x800c5707, &(0x7f00000000c0)={0x6, 0xfffffffa, 0x8}) (async) ioctl$WSKBDIO_SETKEYREPEAT(r5, 0x800c5707, &(0x7f00000000c0)={0x6, 0xfffffffa, 0x8}) 1.076194563s ago: executing program 4 (id=164): mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) (async, rerun: 64) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x6dc) (rerun: 64) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async, rerun: 64) r2 = getpid() (rerun: 64) fcntl$lock(r1, 0x8, &(0x7f00000000c0)={0x2, 0x0, 0x4000000000000000, 0x40000000000, r2}) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000004c0)={&(0x7f00000000c0)='./file0\x00', 0x5, 0x0}) (async) getpgrp() (async, rerun: 64) r3 = kqueue() (rerun: 64) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000040)) (async) kevent(r3, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x17, 0x11, 0x40000000000, 0xfffffffffffffff8}], 0x29f, 0x0, 0x8009, 0x0) (async) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, ""/519}, &(0x7f0000000080)=0x209) r5 = getuid() setuid(r5) (async) r6 = getgid() r7 = socket$inet(0x2, 0x3, 0x4) (async) r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) r9 = geteuid() (async) getgroups(0x7, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0]) (async) r11 = fcntl$dupfd(r1, 0xa, r1) sendmsg$unix(r4, &(0x7f0000000440)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000240)=[{&(0x7f0000000140)="c7d8cfb3d05add526f8b8b34b81ed384fc12f318ffe1c80be0", 0x19}, {&(0x7f0000000180)="0b0b51b34b7d8ee7d006988c2520fa7f347e754119ba4e7d4331409c61e4fcdd089d", 0x22}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000000340)=[@cred={0x20, 0xffff, 0x0, r2, r5, r6}, @rights={0x18, 0xffff, 0x1, [r1, r1]}, @rights={0x28, 0xffff, 0x1, [r0, r0, r7, r3, r0, r8]}, @cred={0x20, 0xffff, 0x0, r2, r9, r10}, @rights={0x38, 0xffff, 0x1, [r3, r3, r3, 0xffffffffffffffff, r3, r3, r0, r11, r1]}, @rights={0x30, 0xffff, 0x1, [r3, r0, r3, r0, 0xffffffffffffffff, r0, r3]}, @rights={0x18, 0xffff, 0x1, [r1, r3]}], 0x100}, 0x0) 1.075422519s ago: executing program 1 (id=165): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9, 0x10009, 0x11b, 0x0, 0x80000001, 0x33a, 0x5, 0x10, [{0x0, 0x107, 0x4, 0x71004}, {0x7, 0x4, 0x8, 0xfffff7f8}, {0x8, 0xf8a, 0x0, 0xaf9}, {0x1, 0x800, 0x7}, {0x200, 0x7fff, 0x4, 0x7}, {0x6, 0x6, 0x3, 0x99}, {0x1cdf, 0x1, 0x4f8, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x4, 0x8, 0x88}, {0x2, 0x50001, 0x9, 0xae7}, {0x7ff, 0x400, 0xffff8001, 0x9}, {0xb8c, 0x2, 0x2, 0x6}, {0xa6d2, 0x7, 0x1, 0x8}, {0x1, 0x7, 0x2004, 0x400}, {0x0, 0xfffffffc, 0x4, 0x2fffd}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0x0, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x31, &(0x7f00000001c0)="ebff8bff13924800", 0x8) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) socket(0x11, 0x3, 0x0) r2 = syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIONBIO(r4, 0xc0307004, &(0x7f0000000140)=0x1) ftruncate(r2, 0xfffffffffffffffe) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$WSKBDIO_SETBELL(r5, 0x80105703, &(0x7f0000000180)={0x2, 0x4800, 0xc93, 0x5}) select(0x40, &(0x7f00000000c0)={0xc9, 0x9, 0x4, 0x7ff, 0x2, 0x0, 0x2b7aa285, 0x2}, &(0x7f0000000340)={0x101, 0x6, 0x5, 0x791, 0x3f11, 0x55, 0x0, 0x5}, &(0x7f00000001c0)={0x5, 0x4, 0x101, 0x1ff, 0x5, 0x6, 0x2, 0x7}, &(0x7f0000000080)={0x7, 0x6}) sendto$unix(r5, &(0x7f0000000240)="b100051300000000000000dd03000000000013fecea105f8e528c952562a00fe3c9df96ecf2ac72fd3357ae30200004e3039d2dafeacf20b7804be38164991f7882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335ce43041978dbf9c1cb02cfa896443a42118000000720fd38bfbb770c1f53a26851f06002ec5890400000072648b0473ba2dbd59b5741e6ae600000000261b12547ba8ffff002002fbfe0c2300008abfba29e4a04a8600000008e371a3f8343700051eeab7", 0xbf, 0x7, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 1.017262728s ago: executing program 5 (id=166): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r0 = kqueue() kevent(r0, 0x0, 0x2, 0x0, 0x8, 0xffffffffffffffff) read(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f00000002c0)='./file0\x00', 0x710, 0x0) 1.013758939s ago: executing program 7 (id=167): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x1b, &(0x7f0000000000), 0x0) socket(0x18, 0x3, 0x8) socket(0x18, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) socket(0x18, 0x3, 0x3a) r1 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0xfffffff7, 0x101, 0x80000011, 0x81b0, 0x10000, 0x10, [{0x9, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x6b7d, 0xfff}, {0x80008000, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x2800, 0x80000000}, {0x1, 0x652, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0xa, 0x82, 0x5, 0x1000005}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x40000008, 0x10000009, 0x8, 0x2}, {0x0, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x4, 0xfff, 0x7}]}) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{r2}, 0x2, 0x0, 0x8, 0x4, 0x5}], 0x3, 0x0, 0x6, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="859000042d00ffffffffffff86dd605f6ad9001c3a0000000000000000000000000000000000fe80000000000000ffffff7f000000000200907800000000"]) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x8}], 0x2, 0xa5) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) listen(r4, 0x1) getitimer(0x2, &(0x7f00000000c0)) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r4, 0x1}) 1.012272191s ago: executing program 5 (id=169): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, &(0x7f0000000100)="71f91e34f90058bc5a73351d9409f009d3a34b8eaf49e5d3", &(0x7f0000000080)=0x18, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) seteuid(0xffffffffffffffff) r0 = open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="f615c8d088b113e049a0be824bcfa2a9614ff4c2778b5f3767ba51e546c97ac5649999be18bc897d1335f361987f029b3f6dcd9ee818f9b01ce86f39234b1206b7d0c3d4498a7ca95ef4f4cb67daf59757ebec17f2458f334073eb1e23f94d86a5e059935dd0dcaa832ddff0fb665434d0ac884c617bf76049078d4ae9bb9bb2d0f60d1297d71a111ebc6fbe1707d6bc936e94f8fdb0c8435b61a69629931332e7ef4e9176284202801620cc1ca7ea37960ce95310a2af8b908897f67b8f796089078d5a00afb3f1baf05e217e", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="df93bd35595fda7c173f662d54c674b93490257f6523d78c30033dafde9abbc54f7aa1d26c5ac2f6298dfb876480b7e4bc91a58d5848f8c75cd36e9abea7ebb429ce16dc26a4b50dfefd748f420d30c249fed0e6d18a3ef0df9e1a17a980403a94a2cca66b77f56727279acb1b65a81ee387b84717b1e52bfc93e2b6c4a55d31dafbdcaba529d742b692f2fc114fd677965b14d9847a5cecb591a2e1bb5c", @ANYRES16=r0, @ANYRESOCT]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x7, 0x0) r1 = socket(0x2, 0x1, 0x0) bind(r1, &(0x7f0000000000), 0x10) listen(r1, 0x0) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) r3 = socket(0x11, 0x3, 0x0) recvmsg(r3, 0x0, 0x2) accept(r1, 0x0, &(0x7f0000000080)) utimensat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{0x0, 0xffffffffffffffff}, {0x0, 0xffffffffffffffff}}, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x33}, 0x2, &(0x7f0000000140)="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", 0x0, 0x0, 0x0) mlock(&(0x7f0000120000/0x4000)=nil, 0x4000) mlock(&(0x7f00001a0000/0x2000)=nil, 0x2000) mprotect(&(0x7f00003dd000/0x1000)=nil, 0x1000, 0x4) 840.083243ms ago: executing program 3 (id=170): open(&(0x7f0000000000)='./file0\x00', 0x200, 0x6) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) (async) getrusage(0xffffffffffffffff, &(0x7f0000000280)) (async) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000100)={0x1, 0x5}) (async) r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000080), 0x0) (async, rerun: 64) mknod(&(0x7f0000000380)='./file0\x00', 0x30, 0x0) (async, rerun: 64) r2 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0xd4) ioctl$FIONREAD(r2, 0x2000747a, 0x0) (async) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x1e5f) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10000, 0x10, [{0x0, 0x7, 0x2, 0x71000}, {0x7, 0x8, 0x9, 0xfffffff9}, {0x2, 0x8000b86, 0xffffff7c, 0x9}, {0x9d37, 0x8800, 0x2}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x6}, {0xcdf, 0x1, 0x200004f8, 0x10}, {0x6, 0x80b, 0x14}, {0x2, 0x82, 0x4, 0x9}, {0x4, 0x8101, 0x1000d1b, 0x1ff}, {0x1e0, 0x10001, 0x7ff, 0x3}, {0x7ff, 0x9, 0x9, 0x5}, {0xb8c, 0xc3b, 0x3, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x8, 0x6}, {0xffbffff9, 0x9, 0x5c000000, 0x30005}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 32) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES64]) (async, rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="0002"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r4 = socket(0x1, 0x5, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) (async) write(r4, 0x0, 0x0) (async) r5 = syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x0, 0x0, 0xfffffffe, 0x8000, "ff14e700", 0x3, 0x40000}) (async) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000540)={0x7, 0x7fff, 0x5, 0x6, "f695900f51acbce138b90a83ead6832ef91de88c", 0xd1, 0xd52}) (async) syz_open_pts() (async) ioctl$TIOCSTAT(r5, 0x20007465, 0x0) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000000029, 0x2a, &(0x7f0000000040)="84ae975e", 0x4) 836.537897ms ago: executing program 1 (id=172): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000002c0)={0x9, &(0x7f0000000200)=[{0x0, 0x80, 0xf, 0x9}, {0x69ef, 0x5d, 0x5, 0xfffffffa}, {0x1000, 0x9, 0xff, 0x2}, {0xffff, 0x1, 0xab, 0x3}, {0x7fff, 0x1, 0xf, 0x9}, {0x5, 0x8, 0x8c, 0x7f}, {0x1, 0x5, 0x4, 0x7fff}, {0x6, 0x4, 0x1}, {0xfffb, 0x6, 0xff, 0x7}]}) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0}) preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 748.520577ms ago: executing program 1 (id=177): openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ddee36ee6e0e1b0378c5bd98e071b6e8e656195650092e23f040951877a81a8701e4257b4909ddd72505fefe", 0x2c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="00a0a78d0ca82026dec3e59be543bfcb4c969b0000000000000017bc333f1255636e7295358972f4af81643f60", &(0x7f0000000080)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r0, 0xc008441e, &(0x7f0000000200)={0x2003, 0xfff, 0x4007, 0x0, "97a2e900", 0x4, 0xbfb}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x1, 0x1ffffffffffffffc, 0x181c, 0x8, 0x10000000009}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x4, 0x5}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x1001, 0xb}, {{}, 0xffffffffffffffff, 0x20, 0x4, 0x800}, {{r2}, 0xfffffffffffffff8, 0x37, 0xf0000000, 0x9, 0x3}, {{}, 0xfffffffffffffffe, 0x6, 0x4, 0xe, 0x10000}, {{}, 0xfffffffffffffff9, 0x14, 0x10, 0x2, 0x100000001}, {{}, 0xfffffffffffffffd, 0x80, 0x1, 0x1f70, 0x5}], 0xb19, 0x0) sysctl$hw(0x0, 0x0, &(0x7f0000000580)="99c5069e7aab2155751fcf107818533afc9ff01a68a4b1baa30a07f4c4b66ce08d59af3b49cd7e54a8341f3be67ba174c3a12223a171ff2ab99d0e0d43f0a6c3948f11658e876a76166614dcd00f966cf3c364d5dfe20c0af828b5c508585fd9df9ae729f85999a053e2c9872fbdd4e491010010791840000000000000000081131a6f0b680f72f2b0d9a19e533fadb9f010b608931ef60d88622c9ce5c9cd5b783fc192c7703fb75e87524a9f61260f6afbb2497cd4520b0d89da8539da1bd945e797dbfaf8d5587de2bf4a4cf3f0c48159b8a1f41bf270eb658e", 0x0, 0x0, 0x0) accept(0xffffffffffffff9c, &(0x7f00000001c0)=@in6, &(0x7f0000000200)=0xc) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) socket(0x20, 0x2, 0x5) write(r3, &(0x7f0000000480)='\x00'/14, 0xe) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) kevent(r2, &(0x7f00000004c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x2, 0x4002, 0x0) connect$unix(r5, &(0x7f0000000000), 0x10) 636.459973ms ago: executing program 3 (id=181): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0) poll(&(0x7f0000000180)=[{r0, 0x91cbd8417f6167d9}], 0x1, 0xffffff29) sysctl$kern(&(0x7f0000000380)={0x1, 0x16}, 0x2, 0x0, 0x0, &(0x7f0000000480), 0x0) select(0x40, &(0x7f0000000300)={0xffffffffffffffc0, 0x3, 0x9, 0x6, 0x56, 0x51a4, 0x3, 0xffffffff}, &(0x7f0000000340)={0x5, 0x7, 0xe2, 0x5, 0xfffffffffffffff7, 0x9, 0x8, 0x6}, &(0x7f00000003c0)={0x80000000, 0x1ff, 0x1, 0xfffffffffffffffd, 0x400, 0x0, 0x7, 0x4}, &(0x7f0000000400)={0x2d9167f4, 0x100000001}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r1 = accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = syz_open_pts() ioctl$TIOCSWINSZ(r2, 0x80087467, &(0x7f00000000c0)={0x1, 0x1ff, 0x28, 0x8}) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000200)={0x2, 0x401, 0x8, 0x6, "e8e59680817145af294be6b5581c68cb3f6f1317", 0xffffb62a, 0x3000000}) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000440)={0x4, 0xb}, 0x10) fchdir(r1) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000080)={0x76f, 0xc, 0x5, 0x5, "59d2e29cec6f97ef2bd3cb1ffbff798164efafd3", 0x8, 0x6}) ioctl$TIOCGETD(r2, 0x4004741a, &(0x7f0000000100)) sysctl$kern(&(0x7f0000000080)={0x1, 0x4e}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffe64) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500002c0066000000069078e0000001ac1400aa4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000ba76d321ea21edd7"]) sysctl$kern(&(0x7f0000000140)={0x0}, 0x0, &(0x7f00000001c0)="e58d063345fbccf611171a1e91e2b3f2d7b993792dc85396eb8431", &(0x7f0000000240)=0x1b, &(0x7f0000000280)="ad6ac518edb6d4741c31a1a31e0412c4bfb9e1ce74f195ca259026d70ef288013462d5c3b5605c112d426ce88d1d36c08a934c07ab986a65b49f211a078db95b642d8718603ee84c8480a9c38d", 0x4d) kqueue() (async) kevent(r0, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x10d, 0x3, 0xffffffffffff564e}], 0x1, 0x0, 0x0, 0x0) (async) poll(&(0x7f0000000180)=[{r0, 0x91cbd8417f6167d9}], 0x1, 0xffffff29) (async) sysctl$kern(&(0x7f0000000380)={0x1, 0x16}, 0x2, 0x0, 0x0, &(0x7f0000000480), 0x0) (async) select(0x40, &(0x7f0000000300)={0xffffffffffffffc0, 0x3, 0x9, 0x6, 0x56, 0x51a4, 0x3, 0xffffffff}, &(0x7f0000000340)={0x5, 0x7, 0xe2, 0x5, 0xfffffffffffffff7, 0x9, 0x8, 0x6}, &(0x7f00000003c0)={0x80000000, 0x1ff, 0x1, 0xfffffffffffffffd, 0x400, 0x0, 0x7, 0x4}, &(0x7f0000000400)={0x2d9167f4, 0x100000001}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async) accept$inet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) syz_open_pts() (async) ioctl$TIOCSWINSZ(r2, 0x80087467, &(0x7f00000000c0)={0x1, 0x1ff, 0x28, 0x8}) (async) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000200)={0x2, 0x401, 0x8, 0x6, "e8e59680817145af294be6b5581c68cb3f6f1317", 0xffffb62a, 0x3000000}) (async) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000440)={0x4, 0xb}, 0x10) (async) fchdir(r1) (async) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000080)={0x76f, 0xc, 0x5, 0x5, "59d2e29cec6f97ef2bd3cb1ffbff798164efafd3", 0x8, 0x6}) (async) ioctl$TIOCGETD(r2, 0x4004741a, &(0x7f0000000100)) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x4e}, 0x4000000000000003, 0x0, 0x0, 0x0, 0xfffffffffffffe64) (async) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500002c0066000000069078e0000001ac1400aa4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000ba76d321ea21edd7"]) (async) sysctl$kern(&(0x7f0000000140)={0x0}, 0x0, &(0x7f00000001c0)="e58d063345fbccf611171a1e91e2b3f2d7b993792dc85396eb8431", &(0x7f0000000240)=0x1b, &(0x7f0000000280)="ad6ac518edb6d4741c31a1a31e0412c4bfb9e1ce74f195ca259026d70ef288013462d5c3b5605c112d426ce88d1d36c08a934c07ab986a65b49f211a078db95b642d8718603ee84c8480a9c38d", 0x4d) (async) 536.414979ms ago: executing program 3 (id=184): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) getsockname$unix(r0, &(0x7f0000000100)=@file={0x0, ""/64}, &(0x7f0000000080)=0x42) mknod(0x0, 0x2000, 0x80) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) close(r0) (async) close(r0) 534.291124ms ago: executing program 0 (id=185): sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, 0x0, &(0x7f0000000240), &(0x7f0000000280)="84951277", 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0xfffffffffffffff9, 0x78af09b1f23c0e93, 0x2, 0x2, 0x200}], 0xfffffffd, 0x0, 0x0, 0x0) r0 = kqueue() r1 = socket(0x2, 0x4001, 0x0) r2 = fcntl$dupfd(r1, 0x2, r1) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) close(r2) socket(0x2, 0x1, 0x0) shutdown(r2, 0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) kevent(r0, &(0x7f0000000140)=[{{}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x4, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x2}, 0x2, &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000280)='w', 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, 0x0, &(0x7f0000000240), &(0x7f0000000280)="84951277", 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0xfffffffffffffff9, 0x78af09b1f23c0e93, 0x2, 0x2, 0x200}], 0xfffffffd, 0x0, 0x0, 0x0) (async) kqueue() (async) socket(0x2, 0x4001, 0x0) (async) fcntl$dupfd(r1, 0x2, r1) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) (async) close(r2) (async) socket(0x2, 0x1, 0x0) (async) shutdown(r2, 0x2) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) kevent(r0, &(0x7f0000000140)=[{{}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x4, 0x0) (async) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x2}, 0x2, &(0x7f0000000000), &(0x7f0000000240), &(0x7f0000000280)='w', 0x1) (async) 473.846375ms ago: executing program 6 (id=186): r0 = socket(0x18, 0x1, 0x0) recvfrom(r0, &(0x7f0000000080)=""/123, 0x7b, 0x1003, &(0x7f0000000000)=@in={0x2, 0x2}, 0xc) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) kevent(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x1, 0x0) r3 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) syz_emit_ethernet(0x4de, &(0x7f0000000680)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6d9efb", 0x4a8, 0x67, 0x0, @rand_addr="00000000010000000000000afffffffe", @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x88, 0xc, 0x0, 0x0, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @rand_addr="95a8e3f69261b11bfb779408877c5d94", @mcast1, @loopback]}, @hopopts={0x4}, @routing={0xc, 0x4, 0x0, 0x9, 0x0, [@mcast2, @mcast2]}, @dstopts={0x2b, 0x33, '\x00', [@pad1, @generic={0x5, 0xe4, "af20e4b21154e61fbb43d551c50b7bec06f120fe504d4df35619925b72a6b1656feb28597a452998fa7670c7e96a891d6ffe777cb844100410886327f4331b6b7014666b21692ac200f83283494936a2e78e688b24a12df0663b29bf2e8d3ccbab810b49c1ef16b67262e6271040c842f03cde08a1a439e382f0920b9d06cf2a5bbbf68f7e27c398dab6a1feba46ece491f2e3afc9dd415f72d449774cb6d7531708f6d0e12b3c1a52dbbd75db6ecc1ca45fe9dec04ea9d29642012029d0a721f39288cb0be11b5d12fc1fb0cad4845a210fbb369574dfe4b35dfd15d19d936c7f56a1b7"}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x80}, @generic={0x2, 0x8e, "ed197aa389e457f4964bef7ff489c04e6627466843c434adf00a7bdd4e1845eb275580125c799e8a837b4dda49ef9e1fa1b70dece49089c3b020b00734a60eb098995dd84e35eebbf81112e75783b6e677a4b2bf6e58471b44f252e4f2887854c4a848f436483155e7cc43b331e26c10d119db5da37942f6ea9bda53c43a5dfad197b5e36606161fe8c31c6053fc"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xb8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0xff, 0x0, 0x9, 0x0, 0x0, 0x7, 0x67}, @routing={0x2, 0x10, 0x0, 0x5, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @mcast1, @mcast1, @rand_addr="0a1067686fc379684e0d60984f1c5249", @loopback, @mcast1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @mcast2]}, @routing={0x3b, 0x6, 0x0, 0x3, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, @mcast1]}, @dstopts={0x3b, 0x2a, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffb}, @generic={0xb8, 0x67, "565fc4a440455a1a7548fad6b96271745fda9cf4b7bee3a0b78bcf79630797a5c8060ca443d36dc21e639a2e80b46dbf8cb4840f61456b1ee1a709374103e5fe768ce764a5386ddb66358c5d5551c48c4d773f6da7c6e8322ccb64d605f6476f980f077e9aba42"}, @generic={0x6, 0x4, "7f2f6066"}, @generic={0x4, 0xd4, "c434ce0964f6f448087dccd18f338ee73b9918980cfb6e10485a5374564a79e158b738cb44ef1f505e5fb1a0aa956d67c99527f7b6628136f30ad298f4e60d1133d0e4558287c61c9a8fe2befbc04a14228a66af4a4aeb6055850654dd8bf30a12e2c764e9ee173d0c80bf3db9e1944070c45810cff0101731dc8ba4def1139a8ee2150488e54537eba88cead8e3981d809fbd7d913aeda2c6c46a15023b69db83a1c4448dd171d6bca4829368fbd89a8baff87c778a7b6309ba1470002e9eb93ce6fdbc7649d3e334bb28f875bb76190362bfd5"}, @pad1, @pad1]}, @dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x11, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x1, [0x0]}, @pad1]}], @udp={{0x2, 0x3, 0x8}}}}}}}) dup2(r3, r2) sendmsg$unix(r2, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x8) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f9", &(0x7f0000000080)=0x2, 0x0, 0x0) mquery(&(0x7f00004e1000/0x4000)=nil, 0x4000, 0x1, 0x0, r1, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r1, &(0x7f0000000480)='\x00'/14, 0xe) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) 465.524364ms ago: executing program 6 (id=187): syz_emit_ethernet(0x10004, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db83440002000000000000000000200000fe80fffffffffffffffe0000"]) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 465.037338ms ago: executing program 7 (id=188): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000003f00)={0x0, 0xfdc7}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xfffd, 0x8a, 0xff, 0x8}, {0x4, 0xff, 0x0, 0x800}, {0x6, 0x0, 0x0, 0xc}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 331.281231ms ago: executing program 2 (id=189): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) r1 = socket(0x2, 0x4001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f0000000040)=@abs={0x1, 0x0, 0x3}, 0x8) r3 = dup(r1) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) writev(r6, &(0x7f00000015c0)=[{0x0}], 0x1) recvmsg(r5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) close(r4) setsockopt$sock_int(r4, 0xffff, 0x1023, 0x0, 0x0) r7 = getpgid(0xffffffffffffffff) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000b80)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r10}}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000240)="656f040fa62f7c650c5cc29c581cadb8b51659fb967f112a2c13061fd26d06200fb4f9213e64f583e4729ec309d9d661d3478d5580e24c234ece0858f3478315ca38885f5eff1335b4cf5f63f598", 0x4e}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="17c147f76cf851dc9fc59dd01ba701de5b8950065bc82f3d61e68dd8cab50a2f63041669762d73cc8761cb674f8b4a9c9ecc08e286a9922c98a6061938ff567a7649c9290cd48eaceb5119de7af01b64bfaf89cf23c0dd880803f7284980ec8b79644f81898ded838800", 0x6a}, {&(0x7f00000003c0)="e2c806688a3f28499756a3334769868dead184b3a0532fca5233f0165c1d9bbd29dff5fd3b73f6ebaeaded5fed621db2fbe688e00437b64a44218b4e8a453c1d15482f290f8dc86b147bed26c60e21a562c58dffa5a7fca68a9d10da0553dfea6d8ba56d79c4f9", 0x67}], 0x4, &(0x7f0000000c00)=[@cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, @rights={0x18, 0xffff, 0x1, [r2]}, @rights={0x38, 0xffff, 0x1, [r3, r4, 0xffffffffffffffff, r3, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}, @cred={0x20}, @cred={0x20, 0xffff, 0x0, r7, r8, r10}], 0xb0, 0x40d}, 0x0) ioctl$BIOCGRTIMEOUT(r4, 0x4010426e, &(0x7f0000000040)) select(0x40, &(0x7f0000000000)={0x10, 0x8, 0x9, 0x3, 0x5, 0x4, 0xc2e, 0xa}, 0x0, 0x0, 0x0) r11 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34e}], 0x0) ioctl$TIOCSETA(r11, 0xc0504417, &(0x7f0000000740)={0x3, 0x4, 0x2, 0x5, "0000000000000000000000000000001700", 0x10000004, 0xffffb6ca}) unveil(0x0, &(0x7f0000000300)='W\x00') 327.452731ms ago: executing program 6 (id=190): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x1}, {0x3, 0x63d}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)="fb408c0a5e1b2c1d6d00000080", 0xd}], 0x1) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x4, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c280bfc9c11f26026f6231b5e725921be8b099", 0x0, 0x0, 0xfffffffffffffd2a) setitimer(0x0, &(0x7f0000000400)={{0xe0e2, 0x295b}, {0x6, 0x6}}, &(0x7f0000000440)) r1 = dup(r0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000100)=0x6) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000000)={0x0, 0x2}) ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f00000000c0)=0xd6) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="000000000000000300", @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) semget(0x1, 0x2, 0x2) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) setitimer(0x0, &(0x7f0000000040)={{0x0, 0x1}, {0x3, 0x63d}}, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000040)="fb408c0a5e1b2c1d6d00000080", 0xd}], 0x1) (async) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x4, &(0x7f0000000140)="118bea625d95de8f92c010baed45ec4bf03ace254b57973bb6de7b1c90301e9d3b5e6fb6ffffffffffffffff76c775a2a4e0556565a830032eef776127fd247103c14ab0a1cea9b4593be484f46a02ea73e910d041c5777bd852e57d3248832b91d06fe47d126022a1654859149e9486306d2f11fb1cc826c42f81b0d114f8af4ceb029a5210bb6947464bf678ba1d64a2013131fedfe60443aa13e015b28a16ea924bf89ad45c006213a6d0e194b9abcb3ddfab0c69b8c280bfc9c11f26026f6231b5e725921be8b099", 0x0, 0x0, 0xfffffffffffffd2a) (async) setitimer(0x0, &(0x7f0000000400)={{0xe0e2, 0x295b}, {0x6, 0x6}}, &(0x7f0000000440)) (async) dup(r0) (async) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f0000000100)=0x6) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) (async) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000000)={0x0, 0x2}) (async) ioctl$BIOCSDLT(r0, 0x8004427a, &(0x7f00000000c0)=0xd6) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="000000000000000300", @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) (async) semget(0x1, 0x2, 0x2) (async) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000040)=""/17, 0x11}], 0x2) (async) 327.044087ms ago: executing program 6 (id=191): setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1002, &(0x7f00000000c0)=0x80, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x80) truncate(&(0x7f0000000040)='./file0\x00', 0x1) 326.726259ms ago: executing program 7 (id=192): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xae828e137847f62, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="e694ee6309c680500bd55f38739c50cc196233845019ba9883bd6af038abb4feacbc83204e8058ce0900000000", &(0x7f0000000080)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x65, 0x0}) write(r2, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) write(r1, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) dup2(r0, r1) setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) ftruncate(r0, 0x40000000007) 326.120666ms ago: executing program 0 (id=193): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') unveil(&(0x7f0000000040)='./file0/file0/../file0/file0\x00', &(0x7f00000000c0)='r\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x43) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="c60005136000009f05", 0x9, 0xa, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffff21) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, 0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, &(0x7f00000001c0)=0xffffffffffffff45) setreuid(r0, r1) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) 321.911946ms ago: executing program 6 (id=194): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000002c0)={0x9, &(0x7f0000000200)=[{0x0, 0x80, 0xf, 0x9}, {0x69ef, 0x5d, 0x5, 0xfffffffa}, {0x1000, 0x9, 0xff, 0x2}, {0xffff, 0x1, 0xab, 0x3}, {0x7fff, 0x1, 0xf, 0x9}, {0x5, 0x8, 0x8c, 0x7f}, {0x1, 0x5, 0x4, 0x7fff}, {0x6, 0x4, 0x1}, {0xfffb, 0x6, 0xff, 0x7}]}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 250.406781ms ago: executing program 2 (id=195): openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x2040, 0x2000) r1 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x6f) ioctl$WSMOUSEIO_GCALIBCOORDS(r0, 0x41205725, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$WSKBDIO_SETDEFAULTBELL(0xffffffffffffffff, 0x80105705, &(0x7f0000000000)={0x7, 0x1, 0x2, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VNDIOCCLR(r0, 0x80384601, &(0x7f0000000240)={&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)='./file0\x00', 0x8}) ioctl$BIOCSETIF(r3, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETIF(r3, 0x40384900, 0x0) ioctl$WSMOUSEIO_SETMODE(r1, 0x80045726, &(0x7f0000000300)={0x1}) close(r3) r4 = openat$tty(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$TIOCSETA(r4, 0xc0104454, &(0x7f0000000200)={0x10, 0x41, 0xffffffff, 0x3, "97eaffffffffffffffff00", 0x1, 0x3}) ioctl$TIOCDRAIN(r0, 0x2000745e) 249.469337ms ago: executing program 6 (id=196): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) r1 = socket(0x11, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x1000, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x402, 0x0) r3 = open(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x0) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000100)='./file0\x00', 0x10004, 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r2, 0xc) setsockopt(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r3, 0xc1045763, 0x0) close(r2) execve(0x0, 0x0, 0x0) setsockopt(r1, 0x11, 0x2, 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0xae98cd7e8d4e801f}], 0x1, 0x9) close(r0) 196.804031ms ago: executing program 4 (id=197): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setreuid(0x0, 0xee01) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0206911, &(0x7f00000001c0)) shmget$private(0x0, 0x1000, 0xd3eac4b1f802668f, &(0x7f000004c000/0x1000)=nil) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x3c, &(0x7f0000000040)="84ae975e", 0x4) 196.487411ms ago: executing program 0 (id=198): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x3, 0x400101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x3, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf88, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xeffffffa, 0x1, 0x6}, {0xc, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_pts() syz_open_pts() ioctl$TIOCSTAT(r2, 0x20007465, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f00000002c0)) 191.526254ms ago: executing program 2 (id=199): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) connect$inet6(r0, &(0x7f0000000040)={0x18, 0x3, 0x1, 0x3}, 0xc) 190.500508ms ago: executing program 4 (id=200): r0 = kqueue() kevent(r0, &(0x7f0000000200)=[{{}, 0xfffffffffffffff6, 0x9, 0xf27ff7794bbc9c2d, 0xfd, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x7) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ddee36ee6e0e1b0378c5bd98e071b6e8e656195650", 0x15}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471", &(0x7f0000000080)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3f, &(0x7f00000001c0)=ANY=[]) ioctl$TIOCSTOP(r1, 0x2000746f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f00000001c0)={0xbdf9, 0x6, 0xfff, 0xd1, "4a8799743f44f7be321fbdb64a0ff65c419df69f", 0x6, 0x3}) select(0x40, &(0x7f0000000180)={0x4e, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x6}, 0x0, 0x0, 0x0) kevent(r0, &(0x7f0000000040)=[{{}, 0xfffffffffffffffd, 0x4, 0xe00fffe0, 0xfd, 0x13fff}], 0x1, 0x0, 0x6, 0x0) 129.448204ms ago: executing program 2 (id=201): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000200)="b1000513000000000000000020000000000013fecea10500fef96ecf2ac72fd3357ae30208004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699af4879b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770bef5a872c88106002ec5890400000000000000361b1257aea8c508002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000e1718d30d4a13f1dd80460259bbdf3688f457ceb4dbd32bcd83790095c6eb09e606187259a80efe2122e02afb4f82cdc77eaa6a35869ff4c2c2e07ed6f2f37ceb26a25109b47e440a5b3da3aad2c170e1d9840746d7729bb0cd2ce63ab858a44c30951d643e0b1b411780a", 0xb1, 0xe, 0x0, 0x78) r1 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="77bd673bb5b8cc0c16ed080500000000000000d7f4601faa903493e339865dce0f225da73c1eede2526d", 0x2a}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x0) r2 = socket(0x18, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x3, 0xffffffffffffffff) recvmsg(r3, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1) 128.694142ms ago: executing program 7 (id=202): setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0x9}, {0x100, 0xf88, 0x0, 0x9}, {0x201, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x98}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0xff, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0x7, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x6, 0x5, 0x10001}, {0x0, 0xaf7, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfff, 0x0}) setrlimit(0x6, &(0x7f0000000040)={0x1, 0x100000000}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x0, [{&(0x7f0000ca1000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000b7b000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f000091c000/0x4000)=nil}, {&(0x7f0000ca2000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f93000/0x2000)=nil}, {&(0x7f0000c20000/0x4000)=nil, &(0x7f00008fb000/0x2000)=nil}, {&(0x7f0000e4c000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000eb0000/0x2000)=nil, &(0x7f0000a73000/0x3000)=nil, 0x2}, {&(0x7f0000ca4000/0x1000)=nil, &(0x7f0000b7c000/0x2000)=nil, 0x6}, {&(0x7f00008fb000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000a75000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x3}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f0000d93000/0x3000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c22000/0x2000)=nil}], './file0\x00'}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$VNDIOCSET(r2, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) fcntl$lock(r1, 0xa, &(0x7f0000000640)={0x1, 0x0, 0x5, 0x100000000002}) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x8, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0x9}, {0x100, 0xf88, 0x0, 0x9}, {0x201, 0x800, 0x8007}, {0x401, 0x200727, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x98}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0xff, 0x5, 0x5}, {0x6a75, 0x8001, 0xd1b, 0x4}, {0x7, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb8c, 0x7, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x6, 0x5, 0x10001}, {0x0, 0xaf7, 0xfff, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfff, 0x0}) (async) setrlimit(0x6, &(0x7f0000000040)={0x1, 0x100000000}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000080)={0x10, 0x0, [{&(0x7f0000ca1000/0x4000)=nil, &(0x7f0000ffb000/0x5000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000b7b000/0x3000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f000091c000/0x4000)=nil}, {&(0x7f0000ca2000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f93000/0x2000)=nil}, {&(0x7f0000c20000/0x4000)=nil, &(0x7f00008fb000/0x2000)=nil}, {&(0x7f0000e4c000/0x4000)=nil, &(0x7f0000efd000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000eb0000/0x2000)=nil, &(0x7f0000a73000/0x3000)=nil, 0x2}, {&(0x7f0000ca4000/0x1000)=nil, &(0x7f0000b7c000/0x2000)=nil, 0x6}, {&(0x7f00008fb000/0x2000)=nil, &(0x7f0000887000/0x4000)=nil}, {&(0x7f0000a75000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, 0x3}, {&(0x7f0000e0f000/0x2000)=nil, &(0x7f0000e03000/0x3000)=nil, 0x100000001}, {&(0x7f0000c64000/0x14000)=nil, &(0x7f0000d93000/0x3000)=nil, 0x9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00003b5000/0x2000)=nil}, {&(0x7f0000913000/0x2000)=nil, &(0x7f0000c22000/0x2000)=nil}], './file0\x00'}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) ioctl$VNDIOCSET(r2, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) fcntl$lock(r1, 0xa, &(0x7f0000000640)={0x1, 0x0, 0x5, 0x100000000002}) (async) 125.937647ms ago: executing program 5 (id=203): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x8228, 0x0) (async) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4) getpgrp() r1 = dup2(r0, r0) ioctl$TIOCCBRK(r1, 0x2000747a) (async) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f0000000080)=0x8) 125.516248ms ago: executing program 0 (id=204): syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfffc, 0x1, 0x2, 0x0, @multicast2, @rand_addr=0x8}, @tcp={{0x3, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}}}}}}) setrlimit(0x1, &(0x7f0000000000)={0x8000000000000000, 0x1000}) 9.720643ms ago: executing program 2 (id=205): ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x5, 0x2, 0x3}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x4000400f}]}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x8, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x765f}, {0x7, 0x6, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0xafd}, {0x1, 0x800, 0x7}, {0x401, 0x7fffffff, 0xe, 0x7}, {0x2, 0x6, 0x10003, 0x99}, {0xcdf, 0x1, 0xd, 0x6f}, {0xa, 0x8803, 0x14, 0xb}, {0x2, 0x81, 0x4, 0x9}, {0x6, 0x8001, 0x4, 0x200}, {0x4, 0x10001, 0x9, 0xaeb}, {0x2, 0x9, 0x4, 0x5}, {0xb8c, 0x4004, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x6, 0x4}, {0x7, 0x205, 0x1}, {0x0, 0x1, 0x4, 0x30000}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r0, 0x801169ab, &(0x7f00000001c0)) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x8000, [{}, {0x1, 0x40000}, {}, {0x2}, {0x3}, {}, {0x0, 0xffffffff}, {}, {}, {0x3}, {}, {0x2}, {}, {0x2}, {}, {0x0, 0x40}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x2}]}) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x8000, [{}, {0x1, 0x40000}, {}, {0x2}, {0x3}, {}, {0x0, 0xffffffff}, {}, {}, {0x3}, {}, {0x2}, {}, {0x2}, {}, {0x0, 0x40}, {0x0, 0x1}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34be3867e0e6c400cacfec37082ee4c57416bf7c912b246b4ede2570608015d567ec33a28501e952be75c986dec10b04f2d194775ae42cb00d6faa40b87f3508e18d8baed6b6cc42ad2785841ec4f19f24b69470737242d9dbd9b40e032006aca96f5257b4f5172bb5d65506efc9f6c847a99d889f7622cb8d3ace9f79684a57d6e0ad299b6f78d20656d501aea719075cf35f0e069f964b08faee0adbc1e9ce86adb2035014fff04e2c0a925f7159f8c12fe5324191901759d9e613c3b9d", &(0x7f0000000180)=0x6, 0x0, 0x2e) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000240)="71f91e3471ac0058bc5a91501d94a34be3867e0e6c400cacfec37082ee4c57416bf7c912b246b4ede2570608015d567ec33a28501e952be75c986dec10b04f2d194775ae42cb00d6faa40b87f3508e18d8baed6b6cc42ad2785841ec4f19f24b69470737242d9dbd9b40e032006aca96f5257b4f5172bb5d65506efc9f6c847a99d889f7622cb8d3ace9f79684a57d6e0ad299b6f78d20656d501aea719075cf35f0e069f964b08faee0adbc1e9ce86adb2035014fff04e2c0a925f7159f8c12fe5324191901759d9e613c3b9d", &(0x7f0000000180)=0x6, 0x0, 0x2e) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x0, 0x0, 0x0) (async) sendto$unix(r2, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)}], 0x1) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCGDLTLIST(r1, 0xc010427b, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[0x5]}) (async) ioctl$BIOCGDLTLIST(r1, 0xc010427b, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[0x5]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') rename(&(0x7f00000003c0)='.\x00', 0x0) chdir(0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r4, 0x0) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r3, &(0x7f0000000480)='\x00'/14, 0xe) 1.413043ms ago: executing program 5 (id=206): poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x8}], 0x2, 0xa5) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ddee36ee6e0e1b0378c5bd98e071b6e8e6561956", 0x14}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471", &(0x7f0000000080)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3f, &(0x7f00000001c0)=ANY=[]) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x8}], 0x2, 0xa5) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="ddee36ee6e0e1b0378c5bd98e071b6e8e6561956", 0x14}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471", &(0x7f0000000080)=0x5, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x3f, &(0x7f00000001c0)=ANY=[]) (async) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async) 733.506µs ago: executing program 0 (id=207): sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x4) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) pipe(&(0x7f0000000740)={0xffffffffffffffff}) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000780)={'./file0\x00', 0x100, 0x1, 0x6, 0x1, 0x7, 0x6, 0x8000, 0x0, 0x0, 0x3258, 0x6}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) 471.091µs ago: executing program 2 (id=208): getdents(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ftruncate(r0, 0x40002) (async) pwrite(r0, &(0x7f0000000100)="93d4", 0xfffffeca, 0x5) (async) syz_emit_ethernet(0x80, &(0x7f0000000080)={@broadcast, @empty, [{[], {0x8100, 0x0, 0x0, 0x2}}], {@ipv6={0x86dd, {0x8, 0x6, "d40644", 0x46, 0x2c, 0x3, @mcast2, @mcast1, {[], @generic="66755e2a42ef3eabae1b9c36cceb4e35fe2d4adf38584ce33691ae703aced805a34a5719ee80e8fa539897c311e7367c39f300a4d93f77bab634eaa803d6a68f1f51bd28f15a"}}}}}) 0s ago: executing program 0 (id=209): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x318, 0xd222}, 0x8, 0x10001, 0xffffffffffffffff, 0x0, 0x80000000000000, 0xc, 0x40000009, 0x8}) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000183a0684042000000014000001000000086500ff02000000000000000000000000000188009078ff000000fe800000000000ffffffff"]) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0) r1 = syz_open_pts() r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x6, 0x2, &(0x7f0000000100)="02000000", 0x4) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x2, 0x7ffffffffffffffb, 0x20002fffffffa}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000004, 0x81b0, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0xceef, 0xf88, 0x6b7d, 0x9}, {0x4, 0x800, 0x8007, 0x4}, {0x401, 0x200727, 0x2800, 0xa51a}, {0x1, 0x652, 0x3, 0x99}, {0xce1, 0x8001, 0x4f8, 0x6d}, {0x6, 0x7ff, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x4}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cd, 0x9, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb84, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x3, 0x1, 0xfff, 0x30104}]}) syz_emit_ethernet(0x74e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60cbe4c807180000ff020000000000000000000000000001ff0100000000000000000000000000010001000000000000c2040000000000010000000000000000000800000000000000000000000000000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000bbff0200000000000000000000000000010000000000000000000100000000000000100000000000001a47c3d9ecf6d9e681110e71aa428bd4ff02000000000000000000000000000100000000000000000000ffff7f"]) r4 = socket(0x6, 0x5, 0x4) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r5, 0x80184404, &(0x7f00000001c0)={0x0, 0x3, 0x0}) ioctl$VNDIOCSET(r5, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{r5}, 0x2, 0x0, 0x8, 0x4, 0x5}], 0x3, 0x0, 0x6, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x49}, 0x6, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. pckbd_enable: command error load: 1.01 cmd: getty 99153 [ttyin] 0.00u 0.01s 0% 333k uvm_fault(0xfffffd8065e3a3e0, 0x48, 0, 1) -> e kernel: page fault trap, code=0 Stopped at witness_checkorder+0xa9: movl 0x20(%r14),%r15d TID PID UID PRFLAGS PFLAGS CPU COMMAND 479161 16798 0 0 0 0 syz-executor witness_checkorder(28,9,0) at witness_checkorder+0xa9 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff8000014b0130,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000148b000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80003c41bc60) at dtclose+0x105 spec_close(ffff8000333eb6f0) at spec_close+0x45f VOP_CLOSE(fffffd805b9b4b38,81,fffffd80097fb548,ffff80003c41bc60) at VOP_CLOSE+0x133 vn_closefile(fffffd8065e412c0,ffff80003c41bc60) at vn_closefile+0x12b fdrop(fffffd8065e412c0,ffff80003c41bc60) at fdrop+0x126 closef(fffffd8065e412c0,ffff80003c41bc60) at closef+0x192 fdfree(ffff80003c41bc60) at fdfree+0x116 exit1(ffff80003c41bc60,0,0,1) at exit1+0x59c sys_exit(ffff80003c41bc60,ffff8000333eba60,ffff8000333eb9b0) at sys_exit+0x1a syscall(ffff8000333eba60) at syscall+0xb08 end trace frame: 0xffff8000333ebae0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd8065e3a3e0, 0x48, 0, 1) -> e ddb{1}> trace witness_checkorder(28,9,0) at witness_checkorder+0xa9 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff8000014b0130,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000148b000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80003c41bc60) at dtclose+0x105 spec_close(ffff8000333eb6f0) at spec_close+0x45f VOP_CLOSE(fffffd805b9b4b38,81,fffffd80097fb548,ffff80003c41bc60) at VOP_CLOSE+0x133 vn_closefile(fffffd8065e412c0,ffff80003c41bc60) at vn_closefile+0x12b fdrop(fffffd8065e412c0,ffff80003c41bc60) at fdrop+0x126 closef(fffffd8065e412c0,ffff80003c41bc60) at closef+0x192 fdfree(ffff80003c41bc60) at fdfree+0x116 exit1(ffff80003c41bc60,0,0,1) at exit1+0x59c sys_exit(ffff80003c41bc60,ffff8000333eba60,ffff8000333eb9b0) at sys_exit+0x1a syscall(ffff8000333eba60) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fe5280863e0, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff8000333eb550 rbx 0 rdx 0 rcx 0xffff80003c41bc60 rax 0xffff8000299ddff0 r8 0xffffffffffffffff r9 0x1 r10 0xb97606d0042a4f63 r11 0x3ed425b8d2864a8e r12 0 r13 0x1 r14 0x28 r15 0x3 rip 0xffffffff830a0a69 witness_checkorder+0xa9 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000333eb4a0 ss 0x10 witness_checkorder+0xa9: movl 0x20(%r14),%r15d ddb{1}> show proc PROC (syz-executor) tid=143504 pid=91229 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c41bc60 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80003c41b740,0xffff80003c41b9e0 process=0xffff80003c41c9d0 user=0xffff8000333e6000, vmspace=0xfffffd8065e3a3e0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 16798 479161 65860 0 7 0 syz-executor 69008 502781 71897 0 2 0 syz-executor 69008 477626 71897 0 3 0x4000080 fsleep syz-executor 69008 304901 71897 0 3 0x4000080 fsleep syz-executor 69008 107071 71897 0 3 0x4000080 fsleep syz-executor 32723 263785 40041 0 2 0 syz-executor 32723 47211 40041 0 3 0x4000080 kqpoll syz-executor 24679 316143 46943 0 3 0x80 nanoslp syz-executor 24679 427558 46943 0 3 0x4000080 kqread syz-executor 24679 256170 46943 0 3 0x4000080 kqsel syz-executor 24679 483069 46943 0 3 0x4000080 fsleep syz-executor 5376 350888 34480 0 3 0x80 nanoslp syz-executor 5376 21615 34480 0 3 0x4000080 sbwait syz-executor 5376 430079 34480 0 3 0x4000000 inode syz-executor 5376 61150 34480 0 3 0x4000080 fsleep syz-executor 93915 524080 58217 0 2 0 syz-executor 93915 163815 58217 0 3 0x4000000 biowait syz-executor 93915 399139 58217 0 3 0x4000080 fsleep syz-executor 57679 304095 28052 0 2 0 syz-executor 57679 77759 28052 0 3 0x4000080 kqsel syz-executor 57679 333845 28052 0 3 0x4000080 fsleep syz-executor 83287 13333 0 0 3 0x14200 acct acct 10566 21951 0 0 3 0x14200 bored sosplice 30719 465010 91926 0 3 0x82 nanoslp syz-executor 34480 178861 91926 0 3 0x82 nanoslp syz-executor 40041 284377 91926 0 3 0x82 nanoslp syz-executor 46943 98089 91926 0 3 0x82 nanoslp syz-executor 58217 494214 91926 0 3 0x82 nanoslp syz-executor 71897 445810 91926 0 3 0x82 nanoslp syz-executor 28052 392757 91926 0 3 0x82 nanoslp syz-executor 65860 262847 91926 0 3 0x82 nanoslp syz-executor 91926 50874 23402 0 3 0x82 kqread syz-executor 23402 77836 16527 0 3 0x10008a sigsusp ksh 16527 280451 74067 0 3 0x98 kqread sshd-session 74067 372751 86354 0 3 0x92 kqread sshd-session 99153 181682 1 0 3 0x100083 ttyin getty 86354 277353 1 0 3 0x88 kqread sshd 790 5828 91565 74 3 0x1100092 bpf pflogd 91565 440424 1 0 3 0x80 sbwait pflogd 95356 94131 45515 73 3 0x1100090 kqread syslogd 45515 375023 1 0 3 0x100082 sbwait syslogd 9005 433993 1 0 3 0x100080 kqread resolvd 40119 48666 70161 77 3 0x100092 kqread dhcpleased 43114 270489 70161 77 3 0x100092 kqread dhcpleased 70161 377643 1 0 3 0x80 kqread dhcpleased 42074 522469 0 0 3 0x14200 bored smr 95319 245223 0 0 2 0x14200 zerothread 46618 99347 0 0 3 0x14200 aiodoned aiodoned 70526 83424 0 0 3 0x14200 syncer update 75415 45215 0 0 3 0x14200 cleaner cleaner 4675 454462 0 0 3 0x14200 reaper reaper 67214 198849 0 0 3 0x14200 pgdaemon pagedaemon 73585 488693 0 0 3 0x14200 bored viomb 36263 110784 0 0 3 0x40014200 acpi0 acpi0 34707 48445 0 0 3 0x40014200 idle1 40079 104544 0 0 3 0x14200 bored softnet3 97698 263419 0 0 3 0x14200 bored softnet2 15176 144169 0 0 3 0x14200 bored softnet1 56389 274051 0 0 3 0x14200 bored softnet0 85426 200216 0 0 3 0x14200 bored systqmp 97222 461291 0 0 3 0x14200 bored systq 66091 518419 0 0 3 0x14200 tmoslp softclockmp 93974 24224 0 0 3 0x40014200 tmoslp softclock 95433 268045 0 0 3 0x40014200 idle0 1 426614 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 5376 (syz-executor) thread 0xffff8000387ff738 (21615) exclusive rrwlock inode r = 0 (0xfffffd806f70b418) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 cache_lookup+0x36e #7 ufs_lookup+0x21b #8 VOP_LOOKUP+0x6e #9 vfs_lookup+0x8fa #10 namei+0x7aa #11 vn_open+0x13f #12 vndioctl+0xcb1 #13 VOP_IOCTL+0xac #14 vn_ioctl+0xf8 #15 sys_ioctl+0x5c3 #16 syscall+0xbc6 #17 Xsyscall+0x128 Process 93915 (syz-executor) thread 0xffff8000387ff9c8 (163815) exclusive rrwlock inode r = 0 (0xfffffd806e0e2788) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vn_write+0x190 #6 dofilewritev+0x23c #7 sys_write+0xa2 #8 syscall+0xbc6 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10244 11436K 11478K 166960K 11723 0 pcb 17 13K 14K 166960K 100 0 rtable 202 8K 8K 166960K 381 0 pf 36 17K 18K 166960K 61 0 ifaddr 42 7K 8K 166960K 57 0 ifgroup 59 2K 2K 166960K 77 0 sysctl 3 1K 9K 166960K 7 0 counters 70 37K 37K 166960K 90 0 ioctlops 0 0K 4K 166960K 1516 0 iov 0 0K 16K 166960K 17 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1407 88K 89K 166960K 1665 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 7 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 21 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 20 94K 102K 166960K 346 0 sigio 0 0K 0K 166960K 2 0 proc 72 91K 140K 166960K 569 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 37 0 in_multi 91 6K 7K 166960K 111 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 385 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 252 156K 168K 166960K 4919 0 UVM aobj 7 2K 2K 166960K 7 0 pinsyscall 43 86K 102K 166960K 1437 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 7 0 NDP 13 0K 2K 166960K 35 0 temp 41 8683K 8754K 166960K 14262 0 kqueue 15 22K 32K 166960K 69 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 83 0 79 2 0 2 2 0 8 1 rtentry 176 115 0 25 6 0 6 6 0 8 0 unpcb 144 219 0 200 4 0 4 4 0 8 3 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 808 88 0 84 5 0 5 5 0 8 4 arp 128 19 0 2 1 0 1 1 0 8 0 inpcb 328 297 0 288 8 0 8 8 0 8 6 nd6 144 24 0 3 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 8 0 8 1 0 1 1 0 8 1 pppxif 1504 1 0 1 1 0 1 1 0 8 1 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 30 0 0 1 0 1 1 0 8 0 pfstkey 128 30 0 0 1 0 1 1 0 8 0 pfstate 384 30 0 0 3 0 3 3 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 491 0 91 29 0 29 29 0 8 3 art_table 32 492 0 91 4 0 4 4 0 8 0 art_node 16 113 0 32 1 0 1 1 0 8 0 sysvmsgpl 40 3 0 2 1 0 1 1 0 8 0 semapl 112 5 0 0 1 0 1 1 0 8 0 shmpl 112 4 0 0 1 0 1 1 0 8 0 dirhash 1024 23 0 6 3 0 3 3 0 8 0 dino2pl 256 1964 0 457 95 0 95 95 0 8 0 ffsino 288 1964 0 457 109 0 109 109 0 8 0 nchpl 144 2432 0 737 63 0 63 63 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 uvmvnodes 80 2271 0 0 47 0 47 47 0 8 0 vnodes 216 2271 0 0 127 0 127 127 0 8 0 namei 1024 7873 0 7873 2 0 2 2 0 8 2 percpumem 16 60 0 10 1 0 1 1 0 8 0 kstatmem 264 42 0 12 3 0 3 3 0 8 1 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 8365 0 8364 3 2 1 2 1 8 0 plimitpl 152 45 0 25 1 0 1 1 0 8 0 sigapl 424 644 0 592 8 1 7 7 0 8 1 knotepl 120 323 0 0 10 0 10 10 0 8 0 kqueuepl 224 158 0 142 5 0 5 5 0 8 2 pipepl 336 123 0 96 3 0 3 3 0 8 0 fdescpl 520 624 0 592 3 0 3 3 0 8 0 filepl 160 3030 0 2771 16 0 16 16 0 8 3 lockfpl 104 152 0 150 2 0 2 2 0 8 1 lockfspl 48 76 0 74 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 227 0 213 1 0 1 1 0 8 0 zombiepl 144 593 0 592 1 0 1 1 0 8 0 processpl 1240 644 0 592 5 0 5 5 0 8 0 procpl 656 997 0 931 7 1 6 6 0 8 0 srpgc 96 2 0 2 1 0 1 1 0 8 1 sosppl 168 1 0 1 1 0 1 1 0 8 1 sockpl 728 602 0 566 17 6 11 17 0 8 6 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 126 0 0 16 0 16 16 0 8 0 mcl2k 2048 19 0 0 3 0 3 3 0 8 0 mtagpl 96 11 0 0 1 0 1 1 0 8 0 mbufpl 256 157 0 0 10 0 10 10 0 8 0 bufpl 280 3079 0 123 212 0 212 212 0 8 0 anonpl 32 5833 0 0 48 0 48 48 0 246 0 amapchunkpl 152 14883 0 14353 26 0 26 26 0 158 4 amappl16 200 2104 0 1992 8 2 6 6 0 8 0 amappl15 192 9 0 9 1 1 0 1 0 8 0 amappl14 184 116 0 104 1 0 1 1 0 8 0 amappl13 176 6 0 5 1 0 1 1 0 8 0 amappl12 168 1269 0 1237 4 1 3 3 0 8 0 amappl11 160 51 0 35 1 0 1 1 0 8 0 amappl10 152 22 0 22 2 2 0 1 0 8 0 amappl9 144 250 0 250 1 1 0 1 0 8 0 amappl8 136 29 0 27 1 0 1 1 0 8 0 amappl7 128 132 0 120 1 0 1 1 0 8 0 amappl6 120 190 0 187 1 0 1 1 0 8 0 amappl5 112 121 0 112 1 0 1 1 0 8 0 amappl4 104 322 0 303 1 0 1 1 0 8 0 amappl3 96 2631 0 2512 5 1 4 4 0 8 0 amappl2 88 655 0 595 2 0 2 2 0 8 0 amappl1 80 9462 0 8849 15 0 15 15 0 8 0 amappl 88 4196 0 4016 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 1 1 1 0 8 1 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 8 0 8 2 1 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 6 0 0 1 0 1 1 0 8 0 uaddrrnd 24 624 0 592 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 624 0 592 1 0 1 1 0 8 0 vmmpekpl 168 6874 0 6833 3 0 3 3 0 8 0 vmmpepl 168 45984 0 43868 95 0 95 95 0 357 1 vmsppl 480 623 0 592 5 0 5 5 0 8 0 rwobjpl 72 17346 0 14041 61 0 61 61 0 8 0 pdppl 4096 1255 0 1184 103 30 73 85 0 8 2 pvpl 32 13249 0 0 107 0 107 107 0 265 0 pmappl 256 623 0 592 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 390 0 32 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83845ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838caef8) at __mp_lock+0x192 intr_handler(ffff80003c44f120,ffff800000079f00) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff838caef8) at __mp_lock+0x19e syscall(ffff80003c44f2f0) at syscall+0xae6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72fe989b5af0, count: 6 ddb{0}> trace x86_ipi_db(ffffffff83845ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838caef8) at __mp_lock+0x192 intr_handler(ffff80003c44f120,ffff800000079f00) at intr_handler+0xe1 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __mp_lock(ffffffff838caef8) at __mp_lock+0x19e syscall(ffff80003c44f2f0) at syscall+0xae6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72fe989b5af0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at witness_checkorder+0xa9: movl 0x20(%r14),%r15d witness_checkorder(28,9,0) at witness_checkorder+0xa9 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff8000014b0130,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000148b000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80003c41bc60) at dtclose+0x105 spec_close(ffff8000333eb6f0) at spec_close+0x45f VOP_CLOSE(fffffd805b9b4b38,81,fffffd80097fb548,ffff80003c41bc60) at VOP_CLOSE+0x133 vn_closefile(fffffd8065e412c0,ffff80003c41bc60) at vn_closefile+0x12b fdrop(fffffd8065e412c0,ffff80003c41bc60) at fdrop+0x126 closef(fffffd8065e412c0,ffff80003c41bc60) at closef+0x192 fdfree(ffff80003c41bc60) at fdfree+0x116 exit1(ffff80003c41bc60,0,0,1) at exit1+0x59c sys_exit(ffff80003c41bc60,ffff8000333eba60,ffff8000333eb9b0) at sys_exit+0x1a syscall(ffff8000333eba60) at syscall+0xb08 end trace frame: 0xffff8000333ebae0, count: 0 ddb{1}> trace witness_checkorder(28,9,0) at witness_checkorder+0xa9 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff8000014b0130,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000148b000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,81,2000,ffff80003c41bc60) at dtclose+0x105 spec_close(ffff8000333eb6f0) at spec_close+0x45f VOP_CLOSE(fffffd805b9b4b38,81,fffffd80097fb548,ffff80003c41bc60) at VOP_CLOSE+0x133 vn_closefile(fffffd8065e412c0,ffff80003c41bc60) at vn_closefile+0x12b fdrop(fffffd8065e412c0,ffff80003c41bc60) at fdrop+0x126 closef(fffffd8065e412c0,ffff80003c41bc60) at closef+0x192 fdfree(ffff80003c41bc60) at fdfree+0x116 exit1(ffff80003c41bc60,0,0,1) at exit1+0x59c sys_exit(ffff80003c41bc60,ffff8000333eba60,ffff8000333eb9b0) at sys_exit+0x1a syscall(ffff8000333eba60) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6fe5280863e0, count: -15