last executing test programs: 4.253422553s ago: executing program 2 (id=729): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x50, 0x10, 0x5, 0x37}, {0x9e, 0x19, 0x0, 0x3}]}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x30, 0xb4100000}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x400, 0x12) (async) r2 = open(&(0x7f0000000180)='./file0\x00', 0x20, 0xa0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) setreuid(0x0, r4) (async) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, 0xc) setreuid(r4, r5) (async) poll(&(0x7f00000001c0)=[{r0, 0x8}, {r1, 0x2}, {r2, 0x2}, {r0, 0x40}], 0x4, 0x7) ioctl$BIOCLOCK(r2, 0x20004276) 4.150938673s ago: executing program 6 (id=731): syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x7, 0xd, 0x40, 0x0, 0x9}}}}}}) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105727, &(0x7f0000000300)={&(0x7f0000000040)=[{0x2, 0xe748}], 0x1}) r1 = accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x1}, 0x8) 4.080815296s ago: executing program 6 (id=735): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat(0xffffffffffffff9c, 0x0, 0xb5219f1000b913f1, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x48, 0xe, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x6}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x5, 0x1, 0x1}, {0x80, 0x3, 0x0, 0x6}]}) sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x9, 0x0, 0x0, 0x0, 0xfffffe0c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) r3 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000500)={0x2, 0x0, 0x10000000000004, 0x1000381a10087}) flock(r3, 0x2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x411, 0x50) r5 = open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r6 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r6) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xc) r8 = getpgrp() getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000540)=@un=@file={0x0, ""/265}, 0x10b, &(0x7f0000000980)=[{&(0x7f0000000680)=""/235, 0xeb}, {&(0x7f0000000780)=""/8, 0x8}, {&(0x7f00000007c0)=""/246, 0xf6}, {&(0x7f00000008c0)=""/185, 0xb9}], 0x4, &(0x7f00000009c0)=""/202, 0xca}, 0x1000) r10 = getegid() r11 = getpgrp() r12 = geteuid() r13 = getegid() openat(r1, &(0x7f00000002c0)='./file0\x00', 0x40, 0x42) sendmsg$unix(r1, &(0x7f00000004c0)={&(0x7f0000000040)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000000200)=[{&(0x7f0000000080)="442fc82274171823cb0102148d421569c04caf", 0x13}, {&(0x7f0000000180)="c3466c7fd54c247ec58591f7974f7e73266732456dae404629ca602b4f6d0f0daddb585c41e78c9251f8b8f06e20400683bcc5e541d6f21f0df313d35ae8510bedbc6e0553", 0x45}], 0x2, &(0x7f0000000400)=[@cred={0x20, 0xffff, 0x0, r6, 0x0, r7}, @cred={0x20, 0xffff, 0x0, r8, r9, r10}, @rights={0x18, 0xffff, 0x1, [r5]}, @rights={0x18, 0xffff, 0x1, [r4]}, @cred={0x20, 0xffff, 0x0, r11, r12, r13}], 0x90, 0xa}, 0x4) 3.03016097s ago: executing program 6 (id=739): setuid(0xee01) r0 = socket(0x2, 0x1, 0x0) getsockopt(r0, 0x6, 0x9, 0x0, 0x0) r1 = kqueue() preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000000)=""/251, 0xfb}, {&(0x7f0000000100)=""/17, 0x11}, {&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f0000000300)=""/192, 0xc0}, {&(0x7f00000003c0)=""/214, 0xd6}, {&(0x7f00000004c0)=""/191, 0xbf}, {&(0x7f0000000180)=""/49, 0x31}], 0x7, 0x100) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = semget(0x0, 0x1, 0x281) semop(r2, &(0x7f0000000000), 0x23) semop(r2, &(0x7f0000000640)=[{0x4, 0x0, 0x1000}], 0x1) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0x401, 0x3, 0x1ffffffffffffffc, 0x181c, 0x8, 0x10000000009}, 0x0, 0x0, 0x0) ioctl$BIOCLOCK(0xffffffffffffffff, 0x20004276) r3 = kqueue() ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xfffe, 0x2, 0xfff4, 0x1, 0x7ff, 0x0, 0x1, 0x1, 0x1, 0x4000000000000006, 0x101}) kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000680)='./file0\x00', 0x40, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000780)={'./file1\x00', 0x3, 0xa, 0xfdfffffe, 0x0, 0xf, 0x3fb, 0x8000003e, 0x2, 0x0, 0xffffffff80000001, 0xb}) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb405000000f9ffff9cd52840fafd3493776665d4cd12c63d34", 0x31}], 0x1}, 0xe) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r5, 0xc4504444, &(0x7f0000000740)={0x1ff, 0xffff, 0x101, 0x105, "040009100000000000004800", 0x9, 0xfffffffe}) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) open$dir(&(0x7f0000000600)='./file0\x00', 0x40, 0x40) socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r6, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.903523387s ago: executing program 0 (id=742): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x40, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x3}]}) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="00040000003e187f863769213fc33d0817c53fcb7c7d40c8acbe3b2f", &(0x7f0000000000)=0x1c, 0x0, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x1604) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1, 0x3}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x3c, 0x0, 0x10, 0x2}]}) syz_emit_ethernet(0xe9, &(0x7f0000000180)={@broadcast, @remote, [{[], {0x8100, 0x7, 0x0, 0x1}}], {@ipv4={0x800, {{0xb, 0x4, 0x1, 0x23, 0xd7, 0x68, 0x1ff, 0x54, 0x8, 0x0, @local={0xac, 0x14, 0x0}, @empty, {[@noop, @rr={0x7, 0x17, 0xf5, [@local={0xac, 0x14, 0x0}, @rand_addr=0x7, @multicast2, @empty, @multicast2]}]}}, @generic="da25cf505b59a47a0a6d8445caaa33bd4c5d79016c6397ccadd079582026c1db780b23234e50bddfb62105b18769fa31b52abdad6ae58a336ed2e97ac32f4315bc3ab8a1a05539294153e21d343342fa320917b1049b736ba7521c673b49abd15134b4576afd93f8edf6188cc7c4bc80d4a101844ac0706193c2386f14ab1a84930ae82552fbae2d3bf24b8f3c7bba113c81c2baa19c53413ad1887ec6d4376563746f3bdb1fd97c49b44d"}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x1}, {0x0, 0x3}, {}, {}, {}, {}, {0x1, 0xffffffff}, {}, {}, {0x0, 0x1ff}, {}, {0x0, 0x1000}, {0x3, 0x4}, {}, {0x2, 0x3}, {0x3}, {}, {0x0, 0x7ff}, {0x5}, {}, {0x3}, {0x0, 0x400}, {}, {0x2}, {0x0, 0xfffffffd}, {}, {0x3}, {}, {0x1, 0xa}, {0x1}]}) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000280)={0x0}, 0xc) fcntl$lock(r0, 0x892b29e02998eefd, &(0x7f00000002c0)={0x1, 0x0, 0x1, 0x80000000, r4}) (async) fcntl$lock(r0, 0x892b29e02998eefd, &(0x7f00000002c0)={0x1, 0x0, 0x1, 0x80000000, r4}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0x37) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x1, 0x1c, 0x2, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x6, 0x2}}}}}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r5, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5]) (async) syz_emit_ethernet(0x30, &(0x7f0000000300)=ANY=[@ANYRESOCT=r5]) 1.902815298s ago: executing program 5 (id=743): r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f00000000c0)=0xfffffffc, 0x4) shutdown(r0, 0x2) 1.901156885s ago: executing program 2 (id=744): sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)=@un=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x10}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x1e, 0x4, 0x0) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040)={0x700}, &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) (async) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040)={0x700}, &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) 1.856340928s ago: executing program 2 (id=746): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7}, 0x85c, 0x8000000000000007, 0x0, 0x0, 0x1, 0x7b, 0x7, 0x4}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x10004) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r2 = getppid() fcntl$setown(r1, 0x6, r2) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000003c0)={0x0, 0x0}, 0xc) r4 = getegid() r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) sendmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000240)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000380)=[{&(0x7f0000000280)="b3664faacaf8a08cb57185b156e2195afb9142c2e92d0cc8e876a5cdb6790bf00bb7322a15438d93c3fcaecd0b33eb6878ff005879d27b1f0c4c72c4138b2465f7728037d8de761976377f27eedf27c649c22ffed01f2dcf297d271c4c432836db0fc1595d54219ce0f71558ceac02a0af0ddd9cea9c7852255578f88383a4c92fc8eebbe7f4880b615904230317382f60a35011087c49081c28af27402fc34fa40c5e97949f71ea072dabad046a17e88fc72befd75ee3a7107a9dca825555f0ed43022f79c8f0835a477f2855714076ac84af61db", 0xd5}], 0x1, &(0x7f0000000440)=[@cred={0x20, 0xffff, 0x0, r2, r3, r4}, @rights={0x28, 0xffff, 0x1, [r5, r0, r0, r0, r0]}], 0x48, 0x40a}, 0x0) pwrite(r0, &(0x7f00000001c0)="6437b005c15ca406f260e0a382a1844fce632361eaa45cdc53211f78607df96e81670d82df39247d1ab0cd865e9f90e74c598f03c4d92b665b23b37a02467acb2af06c737018efc2c9e8625eb82973fc2ab10cd00f567b50f105e42d9a948482e12d932244e32574", 0x68, 0x5) mkdir(&(0x7f0000000140)='./file0\x00', 0xcc) 1.855114126s ago: executing program 0 (id=748): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000417000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0x5}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0x1}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000180000/0x4000)=nil, 0x4001}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xc6}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x4000000001}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000508000/0x2000)=nil, 0x51a}, {&(0x7f0000349000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1000039f7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x9e}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa}) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1022, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, '!\r\x00\x00\x00\b\x00', 0x2000000, 0x5}) syz_emit_ethernet(0x0, 0x0) (async) syz_emit_ethernet(0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, 0x0) semget$private(0x0, 0x4, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x200, 0x1a1) (async) r2 = open(&(0x7f0000000040)='./bus\x00', 0x200, 0x1a1) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000380)={0x3, 0x7, 0xe150, 0x1000, "0010004021582d6c153708870000000047ff00", 0x0, 0x1}) (async) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000380)={0x3, 0x7, 0xe150, 0x1000, "0010004021582d6c153708870000000047ff00", 0x0, 0x1}) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/133, 0x85}], 0x1, 0x2270) 1.813774754s ago: executing program 5 (id=750): mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='x\x00') r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0)=[{{}, 0xfffffffffffffff6, 0x3, 0xf27ff7794bbc9c2d, 0x8000, 0x10000}], 0x1, 0x0, 0x9b68, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) setuid(0xee01) ioctl$FIONREAD(r2, 0x8028698c, &(0x7f0000000100)) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r3, 0xc4504445, &(0x7f0000000740)={0x8, 0xffff, 0x0, 0x20000023, "0400000000800000ebb181d952d6d31962c3f0d1", 0x5, 0x2}) sendto(r3, &(0x7f0000000100)="3be258acd81c836d65f00401c29a82222635b2236778b2d21ad7c8289843993d87b03b54da9c266ca16f565ae29b79d680a01a5b4e5d7c6fd3ae98cf6c6df6b3c189a7a18443d74343b77797fe56eaba9dc428303fc375e7f5ce32e7d9adf4963985100ea94047e2106f205b75ab039d1e4ddd9a8180dcdaa69beddb72f0fe34726afd880897544d539ac4966107bceb1b8e0f0f96f2c59a23af9f6ed8334625fa32fdca654e78c38c98d8632e81b8e9242772a6da71d5db568372a4a8e01051a4e082ae3ddf474b86203c", 0xcb, 0x9, 0x0, 0x0) kevent(r1, &(0x7f0000000040), 0xe4a, 0x0, 0xa9fa, 0x0) fcntl$getown(r0, 0x5) 1.753211316s ago: executing program 0 (id=752): r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x61, 0x6, 0x7e, 0xc}, {0x80, 0x0, 0x10, 0x2}, {0x9e, 0x9, 0x0, 0x3}]}) setsockopt(0xffffffffffffffff, 0x1000000029, 0x33, &(0x7f0000000080)="0500000000", 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x3, 0x10, 0x2, 0x0, 0x31b, 0x7, 0x6, 0x2, 0x0, 0x5}) syz_emit_ethernet(0x1000e, &(0x7f0000000180)=ANY=[]) sendmsg(0xffffffffffffffff, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000440)="befc5310414ea1f117730e081cd91d6833e491cf8e7fe0a5b4927c2b0815c8053a1c2252a568f42e2c5319d40bcd0e926c9e56fd1c164bb6fa1f224356c1da6605e378d9c140704d17", 0x49}], 0x1, 0x0}, 0x2) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETA(r3, 0xc450444a, &(0x7f0000000040)={0xffffffff, 0x6, 0x10000000, 0x65, "01d04b0a0047c1d100", 0xf, 0xb}) 1.752602974s ago: executing program 1 (id=753): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000005880), 0x2, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (async) r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000000)) ioctl$BIOCGRSIG(r0, 0x20007461, 0x0) 1.71788457s ago: executing program 4 (id=755): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1) syz_emit_ethernet(0x5b, &(0x7f0000000000)=ANY=[@ANYBLOB="fb000000000000000000000086dd6000000000250600fe70475dfe543305a600000000000000aafe8000000000000000000000000000aac6cd0b3d3cd07b41a7b816947a"]) r0 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6d428440d7124f22) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r1 = getpid() ktrace(&(0x7f0000000000)='./file1\x00', 0x0, 0x40001022, r1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, r2, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x5a}, 0x4000000000000006, 0x0, 0x0, &(0x7f0000000100)="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", 0x1) r3 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1003, &(0x7f0000000200)=0x1ffff, 0x3) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) setuid(0xee01) r5 = getpid() ktrace(0x0, 0x5, 0x128, r5) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0xc, 0x7, 0x2, 0x807}, {0xc, 0x2, 0x48, 0x400020}, {0x6, 0x4, 0xfe, 0x1001}]}) write(r4, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f00000000c0)={'./file2\x00', 0x0, 0x400, 0x9, 0x1, 0x9, 0x10, 0x2, 0x0, 0x0, 0x4, 0x6}) 1.710986427s ago: executing program 0 (id=757): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000040)={'./file0\x00', 0x7, 0x4, 0x4, 0x1, 0x1, 0x3, 0x8a, 0x2, 0x2, 0xffffffffffffffff, 0x291}) ioctl$WSKBDIO_COMPLEXBELL(r0, 0x80105702, &(0x7f00000000c0)={0xe, 0x3, 0xfffffeff, 0x7}) ioctl$WSDISPLAYIO_SBURNER(r0, 0x800c5751, &(0x7f0000000100)={0x10, 0x1}) ioctl$VT_SETMODE(r0, 0x80087602, &(0x7f0000000140)={0x1, 0xa1, 0xfffe, 0x5, 0x8000}) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000180)={'./file0\x00', 0x4c4d, 0x2, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x1, 0x0, 0x1000, 0x7}) ioctl$WSDISPLAYIO_WSMOUSED(r0, 0x80185758, &(0x7f0000000200)={0x1b9, 0x401, {0x6}}) ioctl$KDMKTONE(r0, 0x20004b08, &(0x7f0000000240)=0x9) ioctl$WSDISPLAYIO_GETSCREENTYPE(r0, 0xc028575d, &(0x7f0000000280)={0x1, 0x2, './file0\x00', 0x7fffffff, 0x4ec, 0x8001, 0x8}) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x8000, 0x1cc) ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f0000000300)) ioctl$WSKBDIO_GETBACKLIGHT(r1, 0x400c5711, &(0x7f0000000340)) ioctl$WSDISPLAYIO_WSMOUSED(r0, 0x80185758, &(0x7f0000000380)={0x4, 0x8, {0x5, 0x5}}) ftruncate(r1, 0xd7) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) ioctl$VT_OPENQRY(r2, 0x40047601, &(0x7f0000000400)) ioctl$WSKBDIO_SETDEFAULTBELL(r2, 0x80105705, &(0x7f0000000440)={0x10001, 0x8, 0x4, 0x2}) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000004c0)={&(0x7f0000000480)='./file0\x00', r1, 0x1}) ioctl$WSKBDIO_SETMODE(r2, 0x80045713, &(0x7f0000000500)) syz_emit_ethernet(0xed, &(0x7f0000000540)={@broadcast, @local, [], {@generic={0x88a8, "0a5b6d670e4b1ef48e5ab5c3857a2c7a413b479698c03af99370aeb08904631d421c36209be410fe61951bced42295822f0997266544c89fdddd6b16a6901b06e48aadaa6c0fc6c716a2e2423c87acd08f2e08feb818ea287d78040ab7754da1bbc828ce5bbb158332660463e831e412bd7f1a80854b3e9613ba34456886b11293a6b95fc0fddd5445235004ac04a384f4231243a3c5220a3876cc4c17dbb0c768f2f387d9fb9abd34617c079e3359e5ee655d45ea77c60db2d3dd54bfc2882dc80d5fd5cb46bff8af44fcbc1e918802d1ec401bb8e04cf831b92eb0cb77e9"}}}) getdents(r2, &(0x7f0000000640)=""/107, 0x6b) ioctl$KDGETLED(r0, 0x40044b41, &(0x7f00000006c0)=0x1) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000700), 0x800, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r1, 0x80085762, &(0x7f0000000740)={0x3, 0xc}) r4 = openat$pci(0xffffffffffffff9c, &(0x7f0000000780), 0x20, 0x0) mquery(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x10, r4, 0x100000000) sync() preadv(r3, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1, 0x7) ioctl$WSDISPLAYIO_GETEMULTYPE(r3, 0xc014575e, &(0x7f0000000900)={0x2, './file0\x00'}) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) 1.639699039s ago: executing program 7 (id=758): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x50, 0x10, 0xf9, 0x37}, {0x9e, 0x19, 0x0, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000140)="02a01a0215ca9a21695cfeef13bf", 0xe) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSWINSZ(r1, 0x80087467, &(0x7f0000000080)={0xff, 0x7f, 0x5, 0x5}) ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f00000000c0)={0xc94, [{0x2, 0xfff}, {0x1, 0x6}, {0x2, 0x3}, {0xb695a256fe631166, 0x1}, {0x3, 0x9}, {0x2, 0x7}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x1}, {0x2, 0x9}, {0x3, 0x3}, {0x1, 0x2}, {0x2, 0x3}, {0x2, 0xe1}, {0x3, 0x2}, {0x1, 0xfffffff6}, {0x3, 0x3}, {0x1, 0xfffffff4}, {0x2, 0x8}, {0x0, 0x9f}, {0x3, 0x40003}, {0x3, 0x9}, {0x2, 0x7fff}, {0x2, 0xa}, {0x3, 0x6e25}, {0x3, 0x66869a3f}, {0x3, 0x7f}, {0x1, 0x10005}, {0x2, 0x5}, {0x1, 0xc37f}, {0x2, 0x401}, {0x2, 0xfff}]}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3, 0x7e, 0x6, 0x80}, {0xffff, 0x0, 0xaa, 0xd66e}, {0x1b2e, 0x0, 0x46, 0x9}, {0xca3, 0x1, 0x4, 0x2}]}) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x3, 0x3, 0x20, 0x67, 0x6, 0x2, 0xf0, 0x0, @multicast1, @rand_addr=0x2, {[@noop, @rr={0x7, 0x3, 0x3}]}}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x1, 0x8}}}}}) 1.639353943s ago: executing program 1 (id=759): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x48, 0xe, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x3}]}) sysctl$hw(0x0, 0x0, &(0x7f00000001c0)="000400003e69217fa12de9393fc33d0817ae3fcb7c7d40c9acbe3b2f8516751dabe77a8e4cc09c69c4bb2b59260000ef590ec732b912cd6b6b49234fc9195d1a129d7c7c4e", &(0x7f0000000000)=0x45, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) sysctl$kern(&(0x7f0000000000)={0x1, 0x2f}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x8000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) socket(0x18, 0x3, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1008, &(0x7f0000000000)=0x10000005, 0x4) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f00000000c0)="b5", 0x1) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000200), 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x48, 0xe, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x3}]}) (async) sysctl$hw(0x0, 0x0, &(0x7f00000001c0)="000400003e69217fa12de9393fc33d0817ae3fcb7c7d40c9acbe3b2f8516751dabe77a8e4cc09c69c4bb2b59260000ef590ec732b912cd6b6b49234fc9195d1a129d7c7c4e", &(0x7f0000000000)=0x45, 0x0, 0x0) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x2f}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) socket(0x18, 0x8000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) socket(0x18, 0x3, 0x0) (async) setsockopt$sock_int(r1, 0xffff, 0x1008, &(0x7f0000000000)=0x10000005, 0x4) (async) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f00000000c0)="b5", 0x1) (async) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000200), 0x0) (async) 1.63919952s ago: executing program 2 (id=760): r0 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac"]) syz_emit_ethernet(0x138, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x1) readv(r1, &(0x7f0000000340)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1) ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x4) 1.638137493s ago: executing program 0 (id=761): mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x3) r0 = open(&(0x7f0000000240)='./file0\x00', 0x80, 0xcb) ioctl$TIOCGETA(r0, 0x402c7413, &(0x7f0000000040)) readv(0xffffffffffffffff, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xc, 0x0, 0x80, 0x2}, {0x20, 0xe, 0xfe, 0xc}, {0x9e, 0x9, 0x0, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./bus/file0\x00', 0xfffffff9, 0x2c, 0x0, 0x0, 0xa094, 0x5, 0x0, 0x0, 0x0, 0xb9c, 0x101}) open(&(0x7f0000000040)='./bus\x00', 0x200, 0x1a1) 1.595854209s ago: executing program 3 (id=762): r0 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @local, [], {@generic={0x8863}}}) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) r1 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) setuid(0xffffffffffffffff) ioctl$BIOCLOCK(r2, 0x20004276) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f00000000c0)) lseek(r1, 0x5, 0x2) fcntl$lock(r1, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x4c1, 0x369000000, 0xffffffffffffffff}) 1.595109268s ago: executing program 7 (id=763): sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r0, 0xc0284457, &(0x7f00000000c0)={0xfffeffff, 0xfffffffb, 0xfefffffc, 0xfffefffc, "0800000000060000000100002a1e0400", 0x5}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) setuid(0xee01) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x800, 0x2, 0x100200000, 0x8, 0x7, 0xdf60, 0x1, 0x0, 0x2efe, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0x3, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffd, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0xffffffffffffffff, 0x80000000000001fd], [0x100000000, 0x8000, 0x40000000, 0x1ff, 0x9, 0x0, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffd, 0x8], [{0x0, 0x0, 0xfffffffd, 0x7d06}, {0xfffc, 0x22, 0x5}, {0x4, 0x69c, 0xfffffffe}, {0x3, 0x4, 0x1, 0xa631}, {0x0, 0x2, 0x2, 0x8}, {0x4, 0x9, 0xd, 0x2000000000000000}, {0x0, 0xfffffffd, 0xfffffff9}, {0x0, 0x100, 0xfffffffd, 0x8}], {0x1, 0x5, 0x6, 0x4}, {0x8, 0x3, 0xfffffffb, 0x6}}}) open(0x0, 0x800, 0x120) r1 = kqueue() close(0xffffffffffffffff) mknod(&(0x7f0000000300)='./file0\x00', 0x2000, 0x8c2) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x80000002000007, 0x7, 0x0, 0x0, 0x3, 0x2, 0xfa5, 0x100}) setsockopt(0xffffffffffffffff, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04a1190", 0x4) kevent(r1, &(0x7f0000000000), 0x96, &(0x7f0000000180), 0xfffb4161, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xcd504404, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, '!\r\x00\x00\x00\b\x00', 0x2000000, 0x5}) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@random="574010000002", @broadcast, [{[{0x88a8, 0x6, 0x1}], {0x8100, 0x1}}], {@arp={0x806, @generic={0x6, 0x800, 0x6, 0x0, 0x2, @random="91d7073c6ff3", "", @local, "687223fb214cb60a5ad33be773b8bb72"}}}}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) ktrace(&(0x7f0000000080)='./bus\x00', 0x1, 0x0, 0x0) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r3, 0xc0104419, &(0x7f0000000000)={0x2, 0x0, 0xa20, 0x80000000, "01d04b0a00ff02000000000b00", 0xb, 0x7}) r4 = syz_open_pts() openat$wsdisplay(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_emit_ethernet(0x56, &(0x7f0000001a00)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "fff800", 0x20, 0x2c, 0x0, @rand_addr="25ba0498035ddeac53732c6bffd1470a", @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x37}], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x7f, '\x00', @mcast1}}}}}}) fchmod(r4, 0x0) r5 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r5, 0xc1206949, &(0x7f00000001c0)) 1.594846656s ago: executing program 3 (id=764): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x2, 0xd27d43220c7d68f, 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x0, 0x3, 0xfd, 0x3}, {0x1c, 0x3, 0x27, 0xd}, {0x6, 0x1, 0x53, 0xfffff000}]}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) r4 = getegid() syz_emit_ethernet(0x10004, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db8344ff8c0600fe000000010000ff80d1440000200000fe7dc9000000000000000000000000aa4e204e2200089078037904d55d38"]) lchown(&(0x7f0000000080)='./file0\x00', r3, r4) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) setsockopt(r1, 0x1000000029, 0x32, &(0x7f00000001c0)="ebff", 0x2) pledge(0x0, &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) 1.594653529s ago: executing program 2 (id=765): select(0x0, 0x0, 0x0, &(0x7f0000000100)={0xad2d, 0x1c, 0x0, 0x3, 0x1, 0x8000000000000000, 0x1, 0xb}, &(0x7f0000000080)={0x0, 0x9}) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000040)={0x2}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000140)) r3 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x42) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0x61) r6 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000240)="673bb5b8cc0c16ed08f1b8d24e2217f981a86a78ef1d357e382526b157159c54cba16c653271aeabc1b7", 0x2a}], 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) getsockname$unix(r7, &(0x7f0000000300)=@abs, &(0x7f0000000340)=0x8) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r6, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x20, 0x2}, 0x4) fchownat(r4, &(0x7f0000000200)='./file0\x00', r5, r2, 0x2) shmat(r3, &(0x7f0000ffd000/0x3000)=nil, 0x2000) 1.398337891s ago: executing program 3 (id=766): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f00006af000/0x1000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x678b}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil, 0x104}, {&(0x7f00001e0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f00002ba000/0x4000)=nil, 0x0, 0xfffffffffffffff9}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f00005f0000/0x3000)=nil, 0x1}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000ad5000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x402}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x40000000000001fc}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x10000000000002}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000403000/0x3000)=nil}], './file0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x18, 0x1, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0xc) ktrace(0x0, 0x5, 0x128, r1) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) 1.397916984s ago: executing program 6 (id=767): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0xc028698a, &(0x7f0000000100)) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r3 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) close(r3) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000001000/0x2000)=nil, 0x2000) semget(0x2, 0x2, 0x4) r4 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) kevent(r3, &(0x7f0000000200)=[{{r0}, 0xfffffffffffffffc, 0x81, 0x20, 0x9, 0x7a8}, {{r2}, 0xfffffffffffffffd, 0xc, 0x80, 0x3aa5, 0x400}, {{r4}, 0xfffffffffffffffc, 0x40, 0x1, 0x0, 0x9}], 0x9, &(0x7f0000000300)=[{{r1}, 0xfffffffffffffff8, 0x8, 0x40000000, 0xf, 0xe883}, {{r2}, 0xfffffffffffffffc, 0x40, 0x1, 0x5, 0xfffffffffffffffc}, {{r3}, 0xfffffffffffffffe, 0x52, 0x0, 0x400, 0x3}, {{r1}, 0xfffffffffffffff8, 0x80, 0x40000000, 0x6, 0x7}, {{r2}, 0xfffffffffffffff9, 0x23, 0x1, 0x0, 0x15e5}, {{r1}, 0xfffffffffffffffe, 0x10, 0x40, 0xa, 0x4}, {{r2}, 0xfffffffffffffff8, 0x4, 0x20000000, 0x5, 0x8}], 0x0, &(0x7f0000000040)={0x7}) 1.381827317s ago: executing program 0 (id=768): sysctl$net_inet_esp(&(0x7f0000000000)={0x4, 0x2, 0x2, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f00000002c0)=""/159, 0x9f}, {&(0x7f0000000200)=""/93, 0x5d}], 0x3) setsockopt(r0, 0x6, 0x10, &(0x7f0000000000)='\x00\x00\x00\x00', 0x4) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x0) 1.381551487s ago: executing program 4 (id=769): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x327) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000080)="b10005010000009f0500070007010000331c13fecea10500fef96ecfc72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c84eaf29b9c12036fbcf5f882b297be1aa0500000051e2f0ad3ebbc257697d0c032bfa851d27896443a42118210000720fd38bfb0000fd54c125191b12570bdec500002002fbfe0c2300008abfba0902000000e371a3f0240000000000000004eab7080000002ad1732e72b68d00050000ffffffff001000000080", 0xb1, 0x0, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f00000002c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000300)="cce47d35", &(0x7f0000000380)=0x4, &(0x7f00000003c0), 0x0) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000000c0), 0xc) (async) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000000c0), 0xc) fchdir(r0) (async) fchdir(r0) 1.381189877s ago: executing program 5 (id=770): pwritev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="c0af9c5e1db4fd5fff65b414d2ab7e9272d5352c05ee77920d40f1464cd15ae4501e86cd60be18e30e712c4b8436fac4d84d91caad9539b289077278bef8cfb1a82afe28d81f813700006e28156cc484f83301db4fa0b31779689d00df988eed13b563904a37981fa5ee6d2d25e8a5aae6ec0750959e603694727249a6103b8adca7ed6ba35421bb5910aaa5b15ca15ce37e3709fa01e84a66ed3a9d75b4da2ff7cbf5fa9de43e816a501a6914f103560caa401cad3e05fc67d3029f25", 0xbd}, {&(0x7f0000000080)="e8b2187fe8ceb940538dbf", 0xb}], 0x100002e2, 0x5) r0 = socket$inet(0x18, 0x4, 0x4) r1 = dup(r0) getsockopt(r1, 0x3a, 0x12, 0x0, 0x0) socketpair(0x2, 0x8000, 0x6, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000300), 0xc) ioctl$WSKBDIO_SETMODE(0xffffffffffffff9c, 0x80045713, &(0x7f0000000040)=0x1) setitimer(0x1, &(0x7f0000000000)={{0xfff, 0x1}, {0x4000000000000003, 0x3}}, 0x0) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x1b}, 0x2, &(0x7f0000000180)="71f91e3871ac0058bc5a91501d94a34b324cdab171b59c7afec37082e363887ebffa77d713554d8a8f187aa7cbb06d650010acab70e4f9a1a5ee0d6b4ac9003b0f160b949a1b8d729d2d5e0732f0a17a6936f79725f18ed3de706f1260791e9dccfe3bede5997701da4e3affd824c4f590ba4759e676260669d4dc139e239f799d9e744ede4db756b41821714651b62e290d090f2d5b6a7dc4c70229d71cbbd842a70741295cb296e02177ae037cde038ac2937d1bad2c96f4b085f9adc8e90653351d055aea3c3e60aac93039be7dd469f4528bf0c934ae6673f662421810098d07c124991ffec4d621d852adec158d", &(0x7f00000000c0)=0xf0, 0x0, 0x0) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x1, 0x4}) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r3, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r4 = socket(0x18, 0x2, 0x0) (async) r5 = socket(0x18, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r5, &(0x7f0000000080)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) (async) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt(r4, 0x1000000029, 0x3f, &(0x7f0000000040)="6700d6e5", 0x4) (async, rerun: 32) sendto(r4, &(0x7f0000000200)="1832557344067fc0", 0xb, 0x2, 0x0, 0x0) (async, rerun: 32) bind(r1, &(0x7f0000000340)=@in6={0x18, 0x1, 0xb0, 0x3}, 0xc) (async) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f00000002c0)) 1.27455308s ago: executing program 3 (id=771): setrlimit(0x8, &(0x7f0000000980)={0x7, 0x54}) (async, rerun: 32) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (rerun: 32) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfd, 0x6}, {0x60, 0x10, 0x5, 0x1}, {0x9e, 0x19, 0x0, 0x3}]}) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="00040000003e187f863769213fc33d0817c53fcb", &(0x7f0000000000)=0x14, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) (async) write(r0, &(0x7f0000000140)="d81ad3d204f7eb4e9b0800bd1a30", 0xe) (async) r1 = syz_open_pts() close(r1) (async) syz_open_pts() (async, rerun: 64) ioctl$TIOCSETD(r1, 0x8004745f, &(0x7f0000000000)=0x1d) (rerun: 64) 1.273884244s ago: executing program 2 (id=772): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa) r2 = socket(0x2, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x100, 0x0) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000100)='./file0\x00', 0x3ff, 0x0, 0xfffffffffffffe63}) r5 = openat$zero(0xffffffffffffff9c, 0x0, 0x20010, 0x0) ioctl$WSMUXIO_INJECTEVENT(r5, 0x80185760, 0x0) sysctl$net_inet_ah(&(0x7f0000000140)={0x4, 0x2, 0x33, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000180)=""/15, 0xf) execve(0x0, 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x80087602, &(0x7f0000000080)={0x1, 0x7, 0x8000, 0xffff, 0x1}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r6, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) 1.273721131s ago: executing program 1 (id=773): r0 = socket(0x18, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8) setsockopt(r0, 0x1000000000029, 0x38, 0x0, 0x0) r1 = socket(0x2, 0x4001, 0x0) getsockname$unix(r1, &(0x7f0000002240)=@file={0x0, ""/4089}, &(0x7f0000000300)=0xffb) 1.27190446s ago: executing program 4 (id=774): mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x30) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind(r0, &(0x7f0000000080)=@un=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0xfb) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r1, 0x80085761, &(0x7f0000000440)={0x3, 0x1}) 207.285451ms ago: executing program 7 (id=775): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x5}, 0x2, &(0x7f0000000080)="1837c7ef", &(0x7f00000000c0)=0x4, 0x0, 0x0) close(r0) 150.862885ms ago: executing program 3 (id=776): r0 = socket(0x18, 0x2, 0x0) close(r0) (async) r1 = socket(0x18, 0x2, 0x0) (async, rerun: 64) r2 = socket(0x18, 0x2, 0x0) (async, rerun: 64) select(0x40, &(0x7f0000000000)={0x9, 0x100000001, 0x4, 0x0, 0x1f2f196, 0x1ff, 0x7, 0x6}, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = dup2(r1, r2) (async) r4 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=ANY=[], 0xb0}, 0x0) setsockopt(r3, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) r5 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000340)='O', 0x1}, {&(0x7f0000000000)='l', 0x1}, {0x0}], 0x3) (async) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) (async) r6 = socket(0x1, 0x2, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 32) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x4, 0x6}, {0x7, 0x0, 0x40, 0x9}, {0x9, 0x0, 0x0, 0x9}]}) (async, rerun: 32) r7 = shmget$private(0x0, 0x2000, 0x208, &(0x7f0000ffe000/0x2000)=nil) shmat(r7, &(0x7f0000fff000/0x1000)=nil, 0x2000) (async) shmat(r7, &(0x7f0000ffc000/0x1000)=nil, 0x4000) shmat(r7, &(0x7f0000183000/0x1000)=nil, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x2, &(0x7f0000000100)="71f91e3471ac0058bcfb91501d94a34b02f906b228153f94dbc37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r8 = socket(0x18, 0xc003, 0x3a) setsockopt(r8, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0x66, &(0x7f00000003c0)={0xff, 0x1, 0x10, 0x3}, 0xc) (async) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0x67, &(0x7f0000000000)={{0x18, 0x3, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x4}, 0x1003, [0x4, 0xfffffcb1, 0x24a, 0xc, 0x1, 0x8, 0x9, 0x1]}, 0x75) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x120) ioctl$BIOCGRSIG(r9, 0x40044273, &(0x7f0000000200)) kqueue() 150.26901ms ago: executing program 6 (id=777): setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8) (async, rerun: 64) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) ioctl$TIOCGETD(r2, 0x4004741a, &(0x7f0000000300)) (async, rerun: 32) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000140)=0x2) (async, rerun: 32) ioctl$TIOCSTOP(r1, 0x2000746f) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) (async, rerun: 64) chroot(&(0x7f00000002c0)='./file0/file0\x00') (rerun: 64) rename(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)='./file0/file0/..\x00') poll(&(0x7f00000001c0)=[{r0, 0x4}], 0x1, 0x3) 149.828083ms ago: executing program 5 (id=778): r0 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0xd8f9dec52c47c6a3, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r1, 0x80245753, &(0x7f00000000c0)={0x5, './file0\x00', './file0\x00'}) (async, rerun: 64) ioctl$PCIOCWRITE(r0, 0xc00c7007, &(0x7f00000005c0)={{}, 0x1, 0x8003, 0x2}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) poll(0x0, 0x0, 0x40007) r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PCIOCWRITE(r2, 0xc00c7007, &(0x7f00000005c0)={{}, 0x1, 0x0, 0x2}) (async) ioctl$PCIOCWRITE(r2, 0xc00c7007, &(0x7f00000005c0)={{}, 0x2, 0x800002}) (async) execve(0x0, 0x0, 0x0) (async) r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCWRITE(r3, 0xc00c7007, &(0x7f0000000080)={{0x0, 0xb}, 0x0, 0x4}) 149.186874ms ago: executing program 4 (id=779): r0 = syz_open_pts() (async) syz_open_pts() (async) syz_open_pts() (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async, rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) (async) shutdown(r1, 0x1) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x0, 0xf042, 0xffffffffffff64d9}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 122.443504ms ago: executing program 6 (id=780): open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0) r1 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x2e) ftruncate(r1, 0x80002) r2 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) 122.166094ms ago: executing program 1 (id=781): sysctl$net_inet6_icmp6(&(0x7f0000000080)={0x4, 0x18, 0x3a, 0x11}, 0x4, &(0x7f0000000000)="3e31008052a1d31dde973d5f82460643441dbf72132300b97caf3d7b73220a1b717854599593d804b86816fd90ed27a1c88e091707af1450597868dd236beeff6d7e1a020d6d285f290fc080da8b4109d258506db391b1d02abf29b7bc26a262070e5fd9bc9e2e26b151fa9f96654660cc3c7e6400813c17bb824abdd148", 0x0, 0x0, 0x0) 121.485691ms ago: executing program 3 (id=782): sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffe6) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xe, 0x60, 0x2}, {0x3c, 0x4, 0x7, 0x6}, {0x6, 0x7, 0x81, 0x80000000}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000400)="71f91e070089854c3d9768347144bcc001247102eabae3a88b0949e0ec971250", &(0x7f0000000080)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000002c0)=[{0x30, 0xe, 0x3, 0xc}, {0x54, 0x0, 0x10}, {0x9e, 0x5, 0x0, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, &(0x7f0000000400)="71f91e070089854c3d9768347144bcc001247102eabae3a88b0949e0ec97125053a7134863", &(0x7f0000000080)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) 121.324954ms ago: executing program 7 (id=783): r0 = socket$inet(0x2, 0x5, 0x2) getsockopt(r0, 0x0, 0x22, 0x0, 0x0) 118.528054ms ago: executing program 1 (id=784): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x5f, 0x6, 0x7, 0x1}, {0x61, 0x0, 0x7, 0x2}, {0x9e, 0x9, 0x0, 0x3}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="000000000007000000000b29a219c27e9b6ec0fb3ba9e2637f8eee8c3e8c7ff4775e6dc2b87c7899", &(0x7f0000000080)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x8) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="cff5c05664da486cdaae4a8238b1f359025250129bdb3b8c172b8359eb32d47209b2a02c3b553a3b0b2e4247b103", 0x2e}], 0x1) 117.932916ms ago: executing program 4 (id=785): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x87, 0xc, 0xfd, 0x20014dd}, {0x4, 0x1, 0x27, 0x6443}, {0x6, 0x3, 0x4, 0xf7fff000}]}) setrlimit(0x0, &(0x7f0000000040)={0x2000005469, 0x4}) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) ioctl$FIONBIO(r1, 0xc0107008, &(0x7f0000000040)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fe485c825b7e096723ff5a9800", @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) pledge(0x0, &(0x7f00000000c0)='\x00') pledge(0x0, &(0x7f0000002840)='tty \x00 \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x03\x00\x00\x00H\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15+\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0/\x80vI\x94\x0f6>]\x84a\xf7\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8\t\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00') sysctl$vfs_nfs(&(0x7f0000000780)={0xa, 0x11, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) 9.827505ms ago: executing program 1 (id=786): r0 = socket(0x1, 0x5, 0x0) r1 = socket(0x18, 0x4000, 0x80) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) setsockopt(r1, 0x1, 0x5, &(0x7f00000000c0)="55b6daa4b32a5f23fef906676ba9de1e045206ffbab45b6e8bbf4c61ea5340c94ac787ed28ca7062a91fa8604e6f3b7db5870b81852d1d5ca335affcbbd18217365caff9b2a33bd8b7c1d0cb4699378d246f896ce1e330c924b0726f048275d3b1448ff89f2b18bc129bc891379062abfea8b72cceb2c250ce34df9d2e5c5cf0a2388209855c8eca383d758a2ab3571903d25a396000a72b7e4df184241eb720f1902c135412b8ca652631d89fc54a55f3bcf006097c89cf7054896e5e0cd4e0aec8424e7d40c5378ab8fb1792dd546fe2cff9773450a59f954f2fe4f87cda3048b381634fa22195", 0xe8) r2 = socket(0x18, 0x3, 0x0) getsockname$inet(r2, 0x0, &(0x7f0000000000)) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x80}, {0x0, 0x4}}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x10000, 0x1a4) getitimer(0x0, &(0x7f0000000380)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000080), 0xc) bind(r1, &(0x7f0000000000), 0x10) munmap(&(0x7f00005ad000/0x1000)=nil, 0x1000) fcntl$setown(r0, 0x6, 0x0) 9.49542ms ago: executing program 4 (id=787): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000003700)=[{&(0x7f00000003c0)="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", 0x78b}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x1, 0x5, 0x8cbe, 0x9, "909c992f86cd2092107e9479749d3b6d7f164aeb", 0x8, 0x7f}) read(r1, &(0x7f00000001c0)=""/159, 0x9f) syz_open_pts() ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000280)={0x40000004, 0x9, 0x6d2, 0x1, "a890dcefab00040000000000001000b50800", 0x1002, 0x8001}) ioctl$TIOCSETA(r0, 0xcd504406, &(0x7f0000000740)={0x0, 0x4, 0x0, 0x4, "9700", 0xfffffffd, 0x8}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/9, 0x9}, {&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000080)=""/151, 0x97}, {&(0x7f0000000140)=""/49, 0x31}], 0x4) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000a00)="5afc927c13ffc0ef5e6d4de4f906d34e9814549202a74a2abdbd9e33f60342ad5c9d42ca20c7ba5c5682493311f2e81cfa993e134951eb2719d6854d2fa40e6be3edc6e22a3714baf14a223cbb1709da6e5c62f915", 0x55}], 0x1) 5.64199ms ago: executing program 5 (id=788): mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0xb}, 0x4, &(0x7f00000014c0)="41c07cff", &(0x7f0000000200)=0xffffffffffffff1e, 0x0, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="73b9ccc3000000f70000000086dd6000000000093a01048000008000000000000000000000bbff02000000000000000d0000000002018284"]) 5.155223ms ago: executing program 7 (id=789): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r0, 0xffff, 0x800, &(0x7f0000000000), &(0x7f0000000040)=0x4) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f00000cb000/0x3000)=nil, 0x3000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') r1 = socket(0x18, 0x3, 0x3a) setsockopt(r1, 0x29, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0x69, 0x0, 0x0) 4.604952ms ago: executing program 7 (id=790): setuid(0xee01) ioctl$BIOCIMMEDIATE(0xffffffffffffffff, 0x80044270, 0x0) ioctl$BIOCSFILDROP(0xffffffffffffffff, 0x4010427e, 0x0) r0 = getegid() setgid(r0) mprotect(&(0x7f000012d000/0x2000)=nil, 0x2000, 0x1) r1 = open(&(0x7f0000000100)='./file0/file1\x00', 0x0, 0x8) pread(r1, &(0x7f0000000040)="3cd15db7c300", 0x6, 0x0) mkdir(0x0, 0x41) r2 = shmget$private(0x0, 0x1000, 0x640, &(0x7f0000ffe000/0x1000)=nil) shmat(r2, &(0x7f0000ffd000/0x3000)=nil, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) 0s ago: executing program 5 (id=791): r0 = socket(0x2, 0x3, 0x0) r1 = kqueue() ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) ioctl$FIONREAD(r0, 0xc0206921, &(0x7f00000001c0)) r2 = syz_open_pts() ioctl$TIOCDRAIN(r2, 0x2000745e) r3 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r3, 0x8020690c, &(0x7f00000001c0)) mknod(0x0, 0x2000, 0x881) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. lo0: can't handle af0 pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (328945) exits with status -1 WARNING: thread `nfsio' (39859) exits with status -1 WARNING: thread `nfsio' (465241) exits with status -1 WARNING: thread `nfsio' (169443) exits with status -1 pckbd_enable: command error pckbd_enable: command error    OpenBSD/amd64 ($„É2¾¯¶¸‹Ÿ§¼1 Úâ–K:.´À*£¶šy+òF¾“4ïÔ={.¼ Ã6a) (tty00) login: WARNING: thread `nfsio' (150602) exits with status -1 WARNING: thread `nfsio' (332604) exits with status -1 WARNING: thread `nfsio' (166076) exits with status -1 pckbd_enable: command error witness: lock order reversal: 1st 0xffff8000014ccb40 sbufsnd (&so->so_snd.sb_lock) 2nd 0xfffffd807d5a8338 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff833d1e1a -> 0xffffffff83343bfc is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 soreceive+0x27d #3 fifo_read+0x117 #4 VOP_READ+0x101 #5 vn_rdwr+0x15b #6 vndsetcred+0xa1 #7 vndioctl+0xdfe #8 VOP_IOCTL+0xac #9 vn_ioctl+0xf8 #10 sys_ioctl+0x674 #11 syscall+0xbd4 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 sosplice+0x3e1 #3 sys_setsockopt+0x2ba #4 syscall+0xbd4 #5 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd807d5a8338,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd807d5a8320,1) at rw_do_enter_write+0xba rrw_enter(fffffd807d5a8320,1) at rrw_enter+0xc6 VOP_LOCK(fffffd805c528e58,2001) at VOP_LOCK+0xa3 vn_lock(fffffd805c528e58,2001) at vn_lock+0xa4 vfs_lookup(ffff80003c484b30) at vfs_lookup+0x11c namei(ffff80003c484b30) at namei+0x7ca unp_connect(ffff8000014cc958,fffffd8066495d00,ffff80002a280018) at unp_connect+0x29d uipc_dgram_send(ffff8000014cc958,fffffd8064f9ef00,fffffd8066495d00,0) at uipc_dgram_send+0x163 sosend(ffff8000014cc958,fffffd8066495d00,ffff80003c484db8,0,0,e) at sosend+0x804 sendit(ffff80002a280018,5,ffff80003c484f38,e,ffff80003c484ff0) at sendit+0x5a5 sys_sendmsg(ffff80002a280018,ffff80003c4850a0,ffff80003c484ff0) at sys_sendmsg+0x246 syscall(ffff80003c4850a0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x41befdde30, count: -15 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003c4847b0 rbx 0 rdx 0xffff800001510f80 rcx 0xffff80002a280018 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003c484690 r9 0x8080808080808080 r10 0xeb49c74b9b872ff0 r11 0x3a0d5d2383258ad1 r12 0xfffffd8003ef7680 r13 0xfffffd80046dec68 r14 0x3 r15 0xffffffff833dadbe substchar+0xb292 rip 0xffffffff81d6b285 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c4847a0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=164241 pid=71947 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a280d10,0xffffffff838a2ac8 process=0xffff8000fffdc9c8 user=0xffff80003c480000, vmspace=0xfffffd806b8335d8 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 99420 150691 32708 0 2 0 syz-executor 99420 62626 32708 0 3 0x4000080 fsleep syz-executor 99420 119953 32708 0 2 0x4000000 syz-executor 29336 398716 42065 0 2 0 syz-executor 37576 304325 3515 0 2 0 syz-executor 37576 415409 3515 0 3 0x4000080 fsleep syz-executor 71947 298947 16462 60929 7 0x10 syz-executor *71947 164241 16462 60929 7 0x4000010 syz-executor 10954 185716 66187 0 2 0 syz-executor 10954 486960 66187 0 2 0x4000000 syz-executor 83452 360422 43096 0 2 0 syz-executor 83452 219518 43096 0 2 0x4000000 syz-executor 83452 253669 43096 0 2 0x4000000 syz-executor 90305 417178 38251 0 3 0x80 nanoslp syz-executor 90305 301807 38251 0 2 0x4000000 syz-executor 90305 73793 38251 0 3 0x4000080 fsleep syz-executor 7169 321214 77436 0 2 0 syz-executor 7169 468021 77436 0 2 0x4000000 syz-executor 7169 47752 77436 0 3 0x4000000 inode syz-executor 7169 12856 77436 0 3 0x4000000 inode syz-executor 55035 96784 0 0 3 0x14280 nfsidl nfsio 55092 337491 0 0 3 0x14280 nfsidl nfsio 86396 281732 0 0 3 0x14280 nfsidl nfsio 38494 494653 0 0 3 0x14280 nfsidl nfsio 88306 474391 0 0 3 0x14280 nfsidl nfsio 47073 247957 0 0 3 0x14280 nfsidl nfsio 88758 77615 0 0 3 0x14280 nfsidl nfsio 39500 312033 0 0 3 0x14280 nfsidl nfsio 31396 21143 0 0 3 0x14280 nfsidl nfsio 66247 373925 0 0 3 0x14280 nfsidl nfsio 81485 257554 0 0 3 0x14280 nfsidl nfsio 81353 275399 0 0 3 0x14280 nfsidl nfsio 932 270082 0 0 3 0x14280 nfsidl nfsio 3127 256481 0 0 3 0x14280 nfsidl nfsio 99756 271663 0 0 3 0x14280 nfsidl nfsio 50013 256457 0 0 3 0x14280 nfsidl nfsio 72628 448890 0 0 3 0x14280 nfsidl nfsio 70741 431795 0 0 3 0x14280 nfsidl nfsio 89007 179545 0 0 3 0x14280 nfsidl nfsio 16462 14277 55789 0 3 0x82 nanoslp syz-executor 32708 192817 55789 0 3 0x82 nanoslp syz-executor 63851 192715 0 0 3 0x14280 nfsidl nfsio 61448 59957 1 0 3 0x100083 ttyopn getty 38251 126253 55789 0 3 0x82 nanoslp syz-executor 22981 174059 0 0 3 0x14200 bored sosplice 43096 486411 55789 0 3 0x82 nanoslp syz-executor 3515 75752 55789 0 3 0x82 nanoslp syz-executor 66187 75606 55789 0 3 0x82 nanoslp syz-executor 77436 336808 55789 0 2 0x2 syz-executor 42065 47446 55789 0 3 0x82 nanoslp syz-executor 55789 294690 42164 0 3 0x82 kqread syz-executor 42164 458865 15729 0 3 0x10008a sigsusp ksh 15729 338853 91591 0 3 0x98 kqread sshd-session 91591 180248 3154 0 3 0x92 kqread sshd-session 3154 126460 1 0 3 0x88 kqread sshd 19582 474985 18614 74 3 0x1100092 bpf pflogd 18614 408680 1 0 3 0x80 sbwait pflogd 98351 32014 74571 73 3 0x1100090 kqread syslogd 74571 246577 1 0 3 0x100082 sbwait syslogd 384 443960 1 0 3 0x100080 kqread resolvd 38317 223288 63308 77 3 0x100092 kqread dhcpleased 41093 444497 63308 77 3 0x100092 kqread dhcpleased 63308 168529 1 0 3 0x80 kqread dhcpleased 88466 505801 0 0 3 0x14200 pause smr 87773 106618 0 0 2 0x14200 zerothread 76225 139751 0 0 3 0x14200 aiodoned aiodoned 68844 364042 0 0 3 0x14200 syncer update 2927 442400 0 0 3 0x14200 cleaner cleaner 97435 137133 0 0 3 0x14200 reaper reaper 43890 520269 0 0 3 0x14200 pgdaemon pagedaemon 24752 502623 0 0 3 0x14200 bored viomb 90383 465370 0 0 3 0x40014200 acpi0 acpi0 46502 494756 0 0 3 0x40014200 idle1 89084 89353 0 0 3 0x14200 bored softnet1 44834 449696 0 0 2 0x14200 softnet0 47164 134416 0 0 3 0x14200 bored systqmp 19608 191860 0 0 3 0x14200 bored systq 42955 513885 0 0 3 0x14200 tmoslp softclockmp 59608 11567 0 0 3 0x40014200 tmoslp softclock 62047 64953 0 0 3 0x40014200 idle0 1 421367 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 71947 (syz-executor) thread 0xffff80002a280018 (164241) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83929028) #0 witness_lock+0x5f1 #1 unp_connect+0x28c #2 uipc_dgram_send+0x163 #3 sosend+0x804 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff8000014ccb40) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 sosend+0x2e9 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 7169 (syz-executor) thread 0xffff8000fffe8fb0 (468021) exclusive rrwlock inode r = 0 (0xfffffd807d5a80e8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 Process 7169 (syz-executor) thread 0xffff80002a282fa0 (47752) exclusive rrwlock inode r = 0 (0xfffffd807d5a86b0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 uipc_bind+0x328 #8 sys_bind+0x2f6 #9 syscall+0xbd4 #10 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10222 11226K 11460K 166960K 12504 0 pcb 17 12K 12K 166960K 145 0 rtable 209 7K 8K 166960K 806 0 pf 37 18K 67486K 166960K 109 0 ifaddr 43 7K 8K 166960K 91 0 ifgroup 57 2K 2K 166960K 134 0 sysctl 4 1K 9K 166960K 17 0 counters 70 37K 37K 166960K 146 0 ioctlops 0 0K 4K 166960K 1587 0 iov 0 0K 24K 166960K 48 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1459 92K 92K 166960K 2237 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 9K 166960K 16 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 33 0 dirhash 12 2K 2K 166960K 33 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 228K 166960K 984 0 sigio 0 0K 0K 166960K 84 0 proc 72 115K 163K 166960K 705 0 subproc 72 4K 4K 166960K 99 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 81 0 in_multi 96 7K 7K 166960K 166 0 ether_multi 1 0K 0K 166960K 6 0 mrt 1 0K 0K 166960K 9 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 109 493K 493K 166960K 109 0 exec 0 0K 1K 166960K 630 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 239 151K 160K 166960K 10426 0 UVM aobj 57 2K 2K 166960K 60 0 pinsyscall 43 86K 98K 166960K 2136 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 48 0 NDP 13 0K 1K 166960K 61 0 temp 64 8648K 8725K 166960K 46940 0 kqueue 13 20K 31K 166960K 197 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 156 0 153 2 1 1 2 0 8 0 rtentry 176 340 0 250 5 0 5 5 0 8 0 unpcb 144 444 0 421 3 1 2 2 0 8 1 syncache 336 5 0 5 3 3 0 1 0 8 0 tcpqe 32 6 0 6 1 0 1 1 0 8 1 tcpcb 736 376 0 372 13 9 4 7 0 8 3 arp 136 83 0 69 1 0 1 1 0 8 0 inpcb 328 1072 0 1063 15 11 4 12 0 8 3 nd6 152 26 0 6 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 1 0 1 0 8 0 kcovpl 48 11 0 3 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 29 0 28 1 0 1 1 0 8 0 pppxif 1504 5 0 5 2 2 0 1 0 8 0 pfstscr 40 1 0 0 1 0 1 1 0 8 0 pffrag 232 4 0 2 1 0 1 1 0 482 0 pffrnode 88 4 0 2 1 0 1 1 0 8 0 pffrent 40 9 0 7 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 3 0 3 2 1 1 1 0 8 1 pfstitem 24 61 0 22 1 0 1 1 0 8 0 pfstkey 128 61 0 22 2 0 2 2 0 8 0 pfstate 384 60 0 22 5 0 5 5 0 8 0 pfrule 1344 23 0 18 2 1 1 2 0 8 0 rttmr 136 2 0 2 1 1 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 1023 0 634 46 21 25 46 0 8 0 art_table 40 1025 0 634 8 2 6 8 0 8 0 art_node 32 338 0 261 3 1 2 3 0 8 0 sysvmsgpl 40 7 0 2 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 28 0 18 1 0 1 1 0 8 0 shmpl 112 57 0 3 2 0 2 2 0 8 0 dirhash 1024 31 0 14 3 0 3 3 0 8 0 dino2pl 256 3134 0 1621 96 0 96 96 0 8 0 ffsino 296 3134 0 1621 118 0 118 118 0 8 0 nchpl 144 4435 0 2733 64 0 64 64 0 8 0 rtmask 32 4 0 4 2 2 0 1 0 8 0 uvmvnodes 80 3748 0 0 77 0 77 77 0 8 0 vnodes 216 3748 0 0 209 0 209 209 0 8 0 namei 1024 15422 0 15419 2 0 2 2 0 8 1 percpumem 16 88 0 38 1 0 1 1 0 8 0 kstatmem 264 80 0 52 3 0 3 3 0 8 0 scsiplug 72 4 0 4 2 2 0 1 0 8 0 scxspl 216 21137 0 21137 11 9 2 8 1 8 2 plimitpl 152 207 0 189 1 0 1 1 0 8 0 sigapl 424 1292 0 1223 8 0 8 8 0 8 0 knotepl 120 565 0 0 18 0 18 18 0 8 0 kqueuepl 224 482 0 473 8 6 2 5 0 8 1 pipepl 344 226 0 199 6 3 3 6 0 8 0 fdescpl 528 1247 0 1215 3 0 3 3 0 8 0 filepl 160 7490 0 7268 18 5 13 16 0 8 1 lockfpl 104 383 0 379 1 0 1 1 0 8 0 lockfspl 48 155 0 151 1 0 1 1 0 8 0 sessionpl 144 27 0 18 1 0 1 1 0 8 0 pgrppl 48 51 0 34 1 0 1 1 0 8 0 ucredpl 104 1148 0 1134 1 0 1 1 0 8 0 zombiepl 144 1223 0 1223 1 0 1 1 0 8 1 processpl 1232 1292 0 1223 6 0 6 6 0 8 0 procpl 664 2692 0 2611 8 0 8 8 0 8 1 sosppl 168 4 0 4 2 2 0 1 0 8 0 sockpl 752 1692 0 1657 22 13 9 17 0 8 5 mcl64k 65536 11 0 0 2 0 2 2 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 110 0 0 14 0 14 14 0 8 0 mcl2k 2048 40 0 0 4 0 4 4 0 8 0 mtagpl 96 7 0 0 1 0 1 1 0 8 0 mbufpl 256 583 0 0 37 0 37 37 0 8 0 bufpl 280 8117 0 1973 439 0 439 439 0 8 0 anonpl 32 11710 0 0 95 0 95 95 0 246 0 amapchunkpl 152 34110 0 33618 29 3 26 28 0 158 6 amappl16 200 4493 0 4407 44 32 12 24 0 8 7 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 117 0 105 1 0 1 1 0 8 0 amappl13 176 2 0 2 1 1 0 1 0 8 0 amappl12 168 1931 0 1900 3 1 2 2 0 8 0 amappl11 160 47 0 33 1 0 1 1 0 8 0 amappl10 152 23 0 23 2 2 0 1 0 8 0 amappl9 144 251 0 251 1 1 0 1 0 8 0 amappl8 136 24 0 22 1 0 1 1 0 8 0 amappl7 128 189 0 177 1 0 1 1 0 8 0 amappl6 120 231 0 228 1 0 1 1 0 8 0 amappl5 112 137 0 127 1 0 1 1 0 8 0 amappl4 104 314 0 294 1 0 1 1 0 8 0 amappl3 96 5977 0 5880 3 0 3 3 0 8 0 amappl2 88 1492 0 1412 2 0 2 2 0 8 0 amappl1 80 12134 0 11526 16 2 14 15 0 8 0 amappl 88 9559 0 9392 5 0 5 5 0 92 0 dma4096 4096 2 0 2 2 2 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 59 0 3 2 0 2 2 0 8 0 uaddrrnd 24 1247 0 1215 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1247 0 1215 1 0 1 1 0 8 0 vmmpekpl 168 11358 0 11314 3 0 3 3 0 8 0 vmmpepl 168 83666 0 81577 117 8 109 109 0 357 13 vmsppl 488 1246 0 1215 5 0 5 5 0 8 0 rwobjpl 80 27775 0 22976 103 0 103 103 0 8 3 pdppl 4096 2502 0 2430 104 32 72 80 0 8 0 pvpl 32 21712 0 0 177 2 175 175 0 265 0 pmappl 256 1246 0 1215 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 336 0 69 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff837b5ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83928e20) at __mp_lock+0x192 intr_handler(ffff80003a0105f0,ffff800000069c00) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff83928e20) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x77e26d95dd10, count: -10 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd807d5a8338,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd807d5a8320,1) at rw_do_enter_write+0xba rrw_enter(fffffd807d5a8320,1) at rrw_enter+0xc6 VOP_LOCK(fffffd805c528e58,2001) at VOP_LOCK+0xa3 vn_lock(fffffd805c528e58,2001) at vn_lock+0xa4 vfs_lookup(ffff80003c484b30) at vfs_lookup+0x11c namei(ffff80003c484b30) at namei+0x7ca unp_connect(ffff8000014cc958,fffffd8066495d00,ffff80002a280018) at unp_connect+0x29d uipc_dgram_send(ffff8000014cc958,fffffd8064f9ef00,fffffd8066495d00,0) at uipc_dgram_send+0x163 sosend(ffff8000014cc958,fffffd8066495d00,ffff80003c484db8,0,0,e) at sosend+0x804 sendit(ffff80002a280018,5,ffff80003c484f38,e,ffff80003c484ff0) at sendit+0x5a5 sys_sendmsg(ffff80002a280018,ffff80003c4850a0,ffff80003c484ff0) at sys_sendmsg+0x246 syscall(ffff80003c4850a0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x41befdde30, count: -15