last executing test programs: 6.106667408s ago: executing program 7 (id=366): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000004c0)=[{0x1, 0xd, 0x2, 0x8}, {0x60, 0xf, 0xff, 0x7}, {0x6, 0x80, 0x9, 0xfffffffe}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f00000000c0)=""/179, 0xb3}, {&(0x7f00000002c0)=""/229, 0xe5}], 0xfffffffffffffb6, 0x3) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCCLRVERAUTH(r3, 0x2000741d) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000000)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d357e382526b1573271aeabc1b7", 0x23}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x18, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000040)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x20, 0x2}, 0x6) ioctl$TIOCSETD(r2, 0x8004741b, 0x0) ioctl$TIOCSETAF(r2, 0x802c7416, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb", 0x2}], 0x28) ioctl$TIOCDRAIN(r2, 0x2000745e) unveil(0x0, &(0x7f00000000c0)='x\x00') mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 6.105792465s ago: executing program 7 (id=367): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x7f}, {0x4, 0x7fe, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x0, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f00003f5000/0x4000)=nil, 0x4000, 0x3, 0x5012, r0, 0x8000000000000031) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000040)={0x1c39, &(0x7f00000003c0)}) 6.03286228s ago: executing program 2 (id=369): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) r1 = syz_open_pts() close(r1) (async) r2 = openat(r1, &(0x7f0000000700)='./file0\x00', 0x40, 0x100) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000740)=0x3) (async) r3 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047470, &(0x7f0000000000)=0x2) (async) ioctl$TIOCSTART(r2, 0x2000746e) (async) ioctl$FIOASYNC(r3, 0x80047460, &(0x7f00000000c0)=0x4) (async) ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000040)={0x7, 0x8798, 0x8, 0xc, "d0ec170000000000cfffff9b0000a17d002000b1", 0xc8b7, 0x80000001}) (async, rerun: 64) sync() (async, rerun: 64) getrusage(0x1, 0xffffffffffffffff) (async) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f00000001c0)="03000000", 0x4) (async) setsockopt(r4, 0x1000000000029, 0xd, &(0x7f0000000080), 0x0) (async) sendmmsg(r4, &(0x7f00000006c0)={&(0x7f0000000180)={&(0x7f0000000080)=@in={0x2, 0x2}, 0xc, &(0x7f0000000640)=[{&(0x7f0000000200)="cd974ce64ced8346fa0b98c4969733e3ac5ca59929e12734637e3f85e52a64fa5225c0d3dbe961cc2d0af63a4ece37af0ac1fa885e026dd9c5a88f219f98ead21ab9ecd94228523ea6b1d53b7fa37abe95e288c9dc08c6a9083042332119882028a8fdac0244ea1b95b921a0bd2b3992aa3351885b658d6b7482473930f14d40930bb38afff5a3886c6a280a2e4eda7d21cb7ca26199098a6bd3d692a77edd8ff4f2c335ccc50e3514d176a9d2a88a3f720844aecfb226a6856a44ec1b02023028", 0xc1}, {&(0x7f0000000300)="28bd2c2889fa61019348379a33b2513906eca148031691b991e2a76bddf2ceffef52db50d1894831a74d0135d3239b35f39758fe07c110edc0a759f3d2030b63aa1d34b9cf5aa956665492d5b9fd43ea73f6bd1333003b292808255fbdb6a5dcd135b8b767e00d218effc12d610b6605456d383fb8bd4b2040d1b9a83e7b1b8eaae323a86f2b7a5050165246dc380cb3e015e02e308d7e235f525cf6bc443b2beed8aa8801b44b6540234602c03ce9b6eab879e489bd52f00021f3c81d341dfd17896254bfeaa7953f6dc1b3600a7df86dfa7f22d86b2ce7621538f037478e", 0xdf}, {&(0x7f0000000400)="9f601a09eeae44f317123f4c17dd40b20e98651b004fb91375b5f521bac27114165138f6e4be585a3ff7b679d1ca24c3550752ec7a42864555bf29af38452fe5e6b8331ba6d4a18f9dcbb8bd2d286ce680246ec26d94c6cf092fd867709431b19a9b82f83c0f8d1f987cfc5bb2c7358d9008e85eb58c7fd1b2aaf43ce78378df00f123980549c6f4d0ab7384ac301f5739c122317ef1b275a8c97b3bbf73b7084cccced2c7cddac177", 0xa9}, {&(0x7f0000000100)="10ee26a1a167d7b5ff2a8096", 0xc}, {&(0x7f00000004c0)="291f58a0645cdb3ac85114bb9336095262de640d160d0e07413a318fa51e9928810fc59f4c84a7ef80f8a0be37d0fd8a18bc7bff856328fd4f0c472e2a40dc6c4ce4bf20c03926d4aea6ab8bdcd3ced3c0106bc74853a8905c3d0fc8cc133fba3df919222acda35287bcbe7bf2a520e946aa1528fe808ad47f3014afa69bd3026904d0c0c84bc1717af7a99161c3768ba65199df386f518b09ae4d527f1f92bd7cf3faed7b1b95f6e46c3f3d500f7c381d16404657582006c7e457129050c0f12a3adb8561b619034a6049d4b66ce65c4576ee7019270408b451962c6e60", 0xde}, {&(0x7f00000005c0)="849b82fba70a4b6b62253eb4ab7bec1671b30a1007548edec0877434b54aa9446fbb0c5b5b70c2800b657e136c901e2113924f5e7790db76f2791de1f3f3c0f73e", 0x41}], 0x6, &(0x7f00000009c0)=[{0xb8, 0x1, 0x8, "8e875432d78b3d643ba0397278df0f79a6a6675f232dd25377a05d5d80701c157800c4d501ef69b353d206fee7d390130fecff4372d1555ddcc27e320fced47ca4f3e4d19b0f5761a477bddf6ebac3540644c19f8b5340757c156f827159fcdd806271cb40eb242d9d625abeca52fbbd1a65d2437f998a5b79b8f2406a925fded45933acfb1481b1f7342553b306049df2e087555ca99016ea853db251870639c2f55f9f"}, {0xa8, 0x1, 0x97, "8ba5d356d25a1fae89f326c939186bcb69f181031f16cdb8ff29f548e384e25daba264a5ac894ccaee4da70db0b1a55c0ca5489c6343cf780d8a3730bd61cd05a58b71504f9a28e0bfb86ded8d66786c275e07d387f0a56d06143ed81a4eba63013e5d7fa45a102c087bfbe91d181b8994cc09008b058753a121f434a04f4534d1a02832dd293205678d9a34f125f2f173f9155080"}, {0x68, 0xffff, 0x7, "8c6a93305642fed7594535f4b06c45db1182444702b3508f81c34399c24dc548c23f83310466bfd2d349ed37929825bbce852c1b972729e6988980be54aa4c9dd8ee7b5d7a9f66086db5b017f9d3ef4b47070885d5"}, {0x50, 0xffff, 0xc1, "93b528eb9cdb83fd271e4852a1023ce72e6bde43a75d64cdfbdb73455cf6945ec5576d9d9816fb39f83c7a04c41ca1f89df2fabdc5b251312200def8cd"}, {0xa0, 0x1, 0x9, "2fc1e241a31719a743f315a59954574f7a77ec26cd9c2ba8fc07aa59afded25b089345c9e95407652c160c4f64d33239d0b37dafb033c75d8b44a02864704e8693b9203461c5be7159c720ffa0c2b8a0247e856e8e27b11d31a10ebfe3c56feef8603da3f6cf4c86dce19d6abc94a73a7893b7aed4bfe5eb8179e16875d407c730df20c30adf623d4987158420"}, {0xc0, 0x1, 0x1, "34a7cec99fecec8405a916bc908d2826f190bcc0176dd1000b802b951ed2bc28f68f09a693d8155cfa25b781a53d4a020ad3af5ef5130fc979e658e6e89b4d5f1da2ba72eb77cd02d71dc03c4605a53bcbee927253811f490d2f5f4cf08008620e8180f24fa34ddc9dd66ed45165ff0764d040d76c7007bce41a17500cb839acaf33e8c76b78f47405d86d9db65fe608f612ee89ad79c5ab8b5b31888dad6d376411cf7bb1fbee1ffc271e5b"}, {0x50, 0xffff, 0x10000, "c6931ef051f1c292c416e539704e3beb9960dcec73fcf4a01d458fa8e146d46adcf50d9e16bd448aaf881b3e1c0e17a4d343f38ea0cbecda6f7f4e83e2f37a5c"}, {0x20, 0xffff, 0x0, "e9b047614aa01f7a32757bc62f16"}, {0x28, 0x1, 0x7, "fb390d38847eb25b24ed175a6ca95a50b61f"}, {0x58, 0x1, 0x7, "28a5ddbd695143f30293c54a56e1635cd3e29dc2d38f7981c1082da3cfd50912a0b39a619e7e91f0524213ba6aefecf2e828b7c3df7645c47054aa168a05c836215e239c0b5222"}], 0x468}, 0xf980}, 0x10, 0x9) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000036c000/0x1000)=nil, 0x2}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x80000002}, {&(0x7f000055e000/0x4000)=nil, &(0x7f000032f000/0x2000)=nil, 0xa}, {&(0x7f0000613000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000251000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f000043b000/0x1000)=nil, &(0x7f000076c000/0x4000)=nil, 0xffff}, {&(0x7f00000a5000/0x1000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f0000576000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) (async, rerun: 64) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x14, 0xa7, 0xec}]}) (rerun: 64) 6.032472174s ago: executing program 2 (id=370): socket(0x2, 0x5, 0x2) (async) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x2000000000000}) (async) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) (async) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$VMM_IOC_CREATE(r0, 0x8004630a, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000fff000/0x1000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffe000/0x1000)=nil}, {0x0, &(0x7f0000002000/0x1000)=nil}, {0x0, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {0x0, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}], './file0\x00'}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x1ffa, 0x0) (async) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000200)={0x2, 0x8, {0x3, 0x80000000}}) (async) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x5) recvmmsg(r1, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x63}}, 0x10, 0x0, 0x0) 6.03140905s ago: executing program 2 (id=372): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) ktrace(&(0x7f0000000180)='./file0\x00', 0x0, 0x900, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2015, r0, 0x0) (async) sysctl$vm_swapencrypt(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) (async, rerun: 32) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) (async) syz_emit_ethernet(0x1000e, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) setrlimit(0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xffffffffffffffff}) mprotect(&(0x7f000019f000/0x1000)=nil, 0x1000, 0x1) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r1 = socket$inet(0x2, 0x1, 0x0) close(r1) (async, rerun: 64) socket(0x1, 0x2, 0x3) (async, rerun: 64) setsockopt(r1, 0x6, 0x1, &(0x7f00000001c0), 0x0) (async) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0xf9, 0x81b0, 0x4a, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1104, 0xf88, 0x0, 0x4}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0xc, 0x650, 0x3, 0x99}, {0xce0, 0x3, 0x4f8, 0x6d}, {0x3, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x20006a75, 0x8001, 0x1, 0x4}, {0x1cc, 0x10201, 0xc, 0x3}, {0x8, 0x9, 0x4000008, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x2001, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xf, 0xa}]}) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$lock(r3, 0x0, &(0x7f0000000640)={0x1, 0x1, 0x0, 0x100000000002}) (async) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 5.956513403s ago: executing program 7 (id=374): sysctl$kern(&(0x7f0000000380)={0x1, 0x32}, 0x2, &(0x7f0000000400), 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, &(0x7f0000000080)="3e6de58e8c7c936e32bc7e045379b65d11c5d4aac518bd2d4130c875defec870020aac9f82754b16f60f0ba93b181f4b2423b917b279a944f65a97b963976b30e71d1c2f305938136eab7423c88e46f32fe2434a029c3c3680e183489e834cb8c59df821b1e837cee86151d48120ddf0631bb169239af63dbeb88de70c0a5d4a", &(0x7f0000000100)=0x80, &(0x7f0000000140)="88497ea698fb023fdd5db8b120fda6e28e16a8974268e2aeeb8efa79a37bcb387137418a51c6e8b9e18fdf90bbc6285a07c058d2b138c5e1388f8c6fa6740e1bf988a7a18bd55d7ec967587378ac88990a31d4", 0x53) (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001080), 0x4) (async) ktrace(0x0, 0x0, 0x1d0e, 0x0) (async) sysctl$net_pipex(&(0x7f0000000000)={0x4, 0x23, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x9, 0x0, 0x0, 0x0, 0xfffffe0c) (async) poll(0x0, 0x47, 0x6) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2, 0x10, r0, 0x0) (async) clock_gettime(0x3, &(0x7f0000000080)) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 5.953064225s ago: executing program 7 (id=375): r0 = socket(0x18, 0x1, 0x0) r1 = socket(0x18, 0x400000002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="673b08f1b8d24e2217f981aa6a78ef1d337eda482e328d93bd3aa24deb3a6c382526b1", 0x23}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x2) shutdown(r0, 0x2) bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x2}, 0x8) socket(0x18, 0x1, 0x0) (async) socket(0x18, 0x400000002, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000002c0)="673b08f1b8d24e2217f981aa6a78ef1d337eda482e328d93bd3aa24deb3a6c382526b1", 0x23}], 0x1) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000001480)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x2) (async) shutdown(r0, 0x2) (async) bind$unix(r0, &(0x7f0000000080)=@abs={0x0, 0x0, 0x2}, 0x8) (async) 5.952422036s ago: executing program 7 (id=377): write(0xffffffffffffffff, &(0x7f0000000000)="3fc866ff34cf", 0x6) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x2802) r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0xfc) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', 0x10, &(0x7f0000000180)='./bus\x00', 0x6}) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000000)) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) pipe2(&(0x7f0000000040), 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r2, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, &(0x7f0000000100), 0x0, 0x0, 0x0) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0xd) write(r3, &(0x7f00000000c0)="c3", 0xffffffed) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r5 = syz_open_pts() close(r5) r6 = syz_open_pts() sysctl$kern(&(0x7f0000000000)={0x1, 0x47}, 0x2, &(0x7f0000000080)="b9d55a65edf95074454cbeef747750212b261340975c61c98fc44606f6c84c8106c596189f2824da6ce26ef22601faa932f8506c338734f736b71fe63c3db1e9d4", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIOASYNC(r5, 0x80047470, &(0x7f0000000000)=0x2) ioctl$FIOASYNC(r6, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCSETAW(r6, 0x80047460, &(0x7f0000000040)={0x7, 0x8798, 0x8, 0xc, "d0ec170000000000cfffff9b0000a17d002000b1", 0xc8b7, 0x80000001}) read(r4, &(0x7f0000000400)=""/119, 0xfd4c) 5.883077989s ago: executing program 2 (id=380): r0 = socket(0x10, 0x8000, 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) lchown(&(0x7f0000000040)='./file0\x00', 0x0, r1) 5.874954555s ago: executing program 2 (id=382): setitimer(0x2, &(0x7f0000000080)={{0x0, 0x4}, {0x4, 0x6}}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)="cc", 0x1}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="f260865a", 0x4) sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}}, 0x10, 0x40, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x21}, 0x2, &(0x7f0000000140)="e7839efdf1f71cc1d42d44a67eb5aa8868b9996f315141883136fa2d95645cde602caa1d10babb25316ca3deb008a86a82a2000722ce4ea00277e0118e1ed4e64bff58a2848a527bca50d4ea2f87db2f720890346c5b5c77", &(0x7f0000000040)=0x58, &(0x7f0000000480)="5f5debb299550822fa87b825ce9fed3ee271640d7c3170d649b791107a1b182b9b5ef7d42c8e6850a2f6b9770b7a8b429fbc0737e79d8607b790609faec81b34b0db6a2a6d8470bd11387cddaeae8af8f2e40dbdf19edc0a4ace", 0x5a) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x33) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)={{0x1a8, 0x3}, {0x36, 0x1}}) r2 = open(&(0x7f0000000500)='./file0\x00', 0x20, 0x252) ioctl$TIOCGWINSZ(r2, 0x40087468, &(0x7f0000000780)) 4.23939563s ago: executing program 2 (id=406): r0 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047460, &(0x7f00000000c0)=0x4) (async) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000300)={0x80000000, 0x1ff, 0x80c003, 0x8004, "0000000000000000ff0300000180000000000040", 0xa, 0xffffffff}) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f00000006c0)="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", 0x141}], 0x1) (async) bind(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x18, 0x1, 0x9, 0x225}, 0xc) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x9}, 0x2, &(0x7f00000002c0)="284f8762", &(0x7f0000000240)=0x4, &(0x7f0000000280)="84951277", 0x4) (async) r1 = socket(0x2, 0x1, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r3 = getpid() fcntl$setown(r2, 0x6, r3) ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async) r4 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r4, 0x8020699d, &(0x7f00000001c0)) (async) setsockopt$sock_int(r1, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) r5 = semget(0x0, 0x1, 0x281) semctl$SETVAL(r5, 0x5eb87944c330b457, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r1, &(0x7f0000000000), 0x10) 4.006465285s ago: executing program 7 (id=411): r0 = syz_open_pts() writev(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="e8224804e42b9336962c2090aed324a2c45c14ec877fad3807b3d769e40359abf07aeda7bebf082ef48e0dc32b082edffbf58be5161665d7a643c7f5521b7cde378aa46602d81817322fa0762360e5f76e6ad72eec36f196c0668a7076658c305cd8e554f90b30684f1202188e5d1ad806cd6e63e57078c3dde1220396029007263df31f6b9bad44a1f22b14c1d957a0ba4791170b5856b42c79d46ac43e6455757d644558d035b3f73d84eee6a9ce90b04a672e35cf1cb7790207c1ccfe9c9338585e4d9175b9823830e23c149513c7b22210ca93ad7ca9dd879d659590ee7fc4ca74a18209f1d0f231ceedd2636833408c90", 0xf3}, {&(0x7f0000000180)="2931c4d45438d926b6d04d34207cf4c543c2a586dcf45a9bad8a8cb7051d931d5b43acde417f1d2d05a6f35d350691d0d1b925d81d175c8bb70c01417529a83f728eaa27202d76ad7b3e8ca17ff020bec006e788de8f57abef345a2927142f0427200954", 0x64}, {&(0x7f0000000300)="98b51e148df080e252be4fe5bbea19f8654297bb14cb8c6abb71fbc2f2b80df6ebb59bb0f650b8ee1b9dc7d70eb66f87146709cf86d83c8cb10f71379ccdcc9c5ceeea134d70bf23f6bcf016651b2d983d9ad6b159623cf667194ad62e541f2204d606568eb9951cdc168d44f9b6578efb97ee5b487dbae128c458c18df1c6c210c57318fe75c5d0ac5c74a3ddacc4d89499be4e256870f9f20e8b574eb9a2941d170cee6015008cdd47707e0a284e6e19e8dd3535094a7c9dc11606a4e54caa81", 0xc1}, {&(0x7f0000000400)="a828b9c18bb03366bfee36cc94a72034f80eb65b563f62be9f3190515bdd738f2713c85113ab42bd51020a2fc4438518ff21610d4560d6bad9cbbd99659ed857a32e0c3fc23bbd4d2ae490b3e53b797a297978", 0x53}, {&(0x7f0000000480)="c503bc24cf1c52103311a9bc894b72ea668ad0b5e41625cbb1903bdc67ce53f3430b9e04088b04f29e9373edda15a4c941a1d713f12c82535d54eb7b5df6148d7c56a0d69293246ef7af97ad5b4726cf695cd847e37d3cdddcd3c5f19f0595a0f46e67fd4c5a1f02bd2c4f67e8558e6d664aeca1b2a019b180bba915811d266188ed774871023dea0e3c", 0x8a}, {&(0x7f0000000540)="412ea605c9db3da04c62adc856568f4bd0a995c17286ccf54d0aac213693839ac0351ffa46e9e0f9e2bd48c1566373bc673d358dbb042583c6ba136beaa99991c04d2631948d8d03f4b98e1eff201f1b2c7b457017118adb31e59590b9397b16275108065c96cd255846f02b8f5cc0c12a9a05e79c8eaa01bdb98c2ed7b0300b48d049b09e20d4815bd45e127487d264c9be01948daafd2b9191645753102cfc268f59dacbea2e5bb47b384dc8bb871cdf3dc5d39683b7d48ae1a168ea456b5d", 0xc0}], 0x6) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x8000003, 0x5, "001a3cfcff000b00000000000000f5ff00", 0x10003, 0xc04}) socketpair$unix(0x1, 0x1, 0x0, 0x0) open(0x0, 0x615, 0xc1) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x8982, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r1, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) listen(r2, 0x1) r3 = socket(0x18, 0x4001, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendto$inet(r3, &(0x7f0000000300)="96e5bc58b5667872fb2fcd472a9ffc52750f", 0x12, 0x3, 0x0, 0x0) r4 = accept$inet(r2, 0x0, 0x0) openat$wsdisplay(0xffffffffffffff9c, 0x0, 0x20000, 0x0) sysctl$hw(&(0x7f0000000440)={0x6, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000240), 0x1f) openat$pf(0xffffffffffffff9c, 0x0, 0x80, 0x0) setsockopt(0xffffffffffffffff, 0x1000000000029, 0xb, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0xa) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000280)={0x5, 0x9, 0x4e869df, 0x7ff, "37daba29de5bf1e4f80869b34d64c3848de08738", 0xea18, 0x8}) recvfrom$inet(r4, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x3, 0x8, 0x80000001, 0xa1b0, 0x10001, 0x10, [{0xfffffffc, 0x2890, 0x4, 0x5}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x1, 0xfffffffa, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x4, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x10000}, {0x6, 0x803, 0x3, 0x7}, {0xd0f5, 0x82, 0x5, 0x9}, {0x6a75, 0x8009, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x7, 0xa, 0x8}, {0x3, 0x7, 0x6, 0x1}, {0x6, 0xfffffffa, 0x60, 0x6}, {0x10008, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30004}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r6 = dup2(r0, r0) read(r6, &(0x7f0000000680)=""/268, 0x10c) ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f0000000000)=0x6) 2.923369866s ago: executing program 3 (id=461): pwritev(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000001c0)="3ad748b1010000004a1e3042", 0xc}], 0x1, 0x9) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() openat$wskbd(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r2, 0x0) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) (async) r3 = open(&(0x7f0000000100)='./file0\x00', 0x10, 0x8) ioctl$TIOCSETD(r3, 0x8004741b, &(0x7f0000000080)=0x7) acct(&(0x7f0000000040)='./file0\x00') ioctl$FIOASYNC(r2, 0x80047460, &(0x7f0000000240)=0x8) (async) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000040)={0xffffffff, 0xb, 0x2000d, 0x7fffffff, "d0ec170000000000ee0d009c0000a17d002000b1", 0x80000000, 0xf}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) write(r0, &(0x7f00000001c0)="7bf77eb077", 0x5) r4 = socket(0x18, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x2}, 0xc) (async) ioctl$FIONREAD(r4, 0x8020697a, &(0x7f00000001c0)) (async) r5 = socket$inet6(0x18, 0x1, 0x1) pwritev(r5, &(0x7f0000000140)=[{&(0x7f0000000040)="8794936d819c381491840d41d56ca51ccdabd97b976445f543d6c1299e302fe844b4971402cab24c77aee839d96b7831704140768e4ce71de32341209a85455c0312679968cb68c5ed8910b0b0a8f084ef41a8d183081362d7c619ce066d5cff3b9f3bfb641f2152348029a5378cdc02d7033c11a3067cdb06ae5a6a136c2b23a012bfa2aefb0b9795c9e98cb3c50dcebe14a4ce216724533102a49318f312d5026ad5dc8565d505b267dfb05f82cf47e1118c6497ebabf5bb155eccd4714c4114aa404d24a54b9d72bae29c4a8d37cad23a4c22e6a6b17a3d7fbdd87bf2298e4b7f355efe1421b734", 0xe9}], 0x1, 0x7) 1.662788033s ago: executing program 3 (id=466): sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) (async) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0xffffffffdf001fff, 0x0) (async) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat(r0, &(0x7f0000000000)='./file0\x00', 0x80, 0x4) 1.57485051s ago: executing program 3 (id=474): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r1 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) kevent(r1, &(0x7f0000000640)=[{{r2}, 0xfffffffffffffffa, 0xba, 0x1, 0x3, 0x8000000000000001}, {{r0}, 0xfffffffffffffff8, 0xb0, 0x1, 0x1, 0x6}, {{r0}, 0xfffffffffffffffa, 0x3, 0x0, 0xfffffffffffffff8, 0xd}, {{r0}, 0xfffffffffffffffe, 0x50, 0x4, 0x2, 0x8000000000000001}, {{r3}, 0xfffffffffffffffb, 0x20, 0x1, 0x77, 0x60}, {{r0}, 0xfffffffffffffff9, 0x10, 0x10, 0x0, 0x9}, {{r0}, 0xfffffffffffffff9, 0x2e, 0x4, 0xe, 0x5}, {{r0}, 0xfffffffffffffff8, 0xb8, 0x8, 0x4, 0x5}, {{r0}, 0xfffffffffffffffd, 0x1b, 0x1, 0x7fffffff, 0x9}], 0x2, &(0x7f0000000540)=[{{r0}, 0xfffffffffffffff8, 0x0, 0x40, 0x0, 0x2}, {{r0}, 0xfffffffffffffffd, 0x8, 0x20000000, 0x3, 0x1}, {{r0}, 0xfffffffffffffffd, 0x81, 0x80000000, 0x101, 0x8}], 0x2, &(0x7f00000005c0)={0x3, 0x7}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x2d, 0x2, 0x8}, {0x40, 0xf, 0xff, 0x7}, {0x6, 0x80, 0x8, 0xfffffffe}]}) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020090780000000369c46d"]) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r4, 0xc0284459, &(0x7f0000000040)={0x2, 0xffffffff, 0x3, 0x10000000, "00000000000000000f0000ee0900", 0x6, 0xfffffff7}) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="0004849d0f3e8095043fa8985d012c0000935102cbd09f97fc7c7d40b5bf6610803975018f983200000020be7a", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) sysctl$vfs_nfs(&(0x7f0000000280)={0xa, 0x2, 0x1}, 0x3, &(0x7f00000002c0)="5710ae86e3ea4098e1b940987a683301016298c6ec6c13c44f282f0894fe42bbde61cb798ebb4440adc391a1ffd9845167aaae7b91ab9408068543270262c2963fb2efc8063ac841c7a442d21c85e5e431f17e1b7607a3f7f60838262d7bfc513ea2f0a5b0ae54f768ac2ba2c83d3f2d2d6560bfc41b033fa7004399359b8354c4acf7d89cb1449c44fc17a2ea8dbdd6157d89fc8cd704f1c5dc093126e3ec3be105903e736166be1678a451eb2486bc3b85404c982b30535c8de82a0fcb3c7826a749ebeae8999c8a3365b9913505bbaaf84228d1ab133b46655f6d1c5d31cd994ed8e6ba9c75ee5c0a525996d5562e2d401e878f6aa0bf23e6c0a99db3fae710f53a2c59ddca04b47dbf0f84fc9599dcbae9cd3f40e3ebbabbbee9dc133bb914f9874647642b74fd7e8d951db47f10d1a0b6ff16d42a41ac230646f36be668770c41916f7791c37dd4866e518c51c6c46d39e3a3537918512ad8414b882e5479280877974b2fa1834045cd1476ef736e6fb8d7bc2ed97c170d9c7e62ca34edeb777c62be872c632847cc1c5087c58f6e08b9cd830486eadf627364b18ca0bf6f3763ce8dfbd4c5d7280cc1bc6df9d112e9165ac831e7019d80c9b1a100fad9f77e968887fbffbc1d31c4e71b694a8199f675127ba76815b64eeed5c5136e081c2c23bd5fd746d689cf2b1b18c8f3366830d3f28016df39172883a30dc768e8d64946075bee2618eb6dd29b94727826ff3753f9204a7640698327e94260c50db7f8ee7c8f56fb1e20f625598392bb2fe70c1448e20e4ae8b1515fca12cef0dd3718835c9fc4d411539e4eb44571562c9bb209b3bd8291970a8f99077e5b64a9d672f31ccee4ec5ad191c253a97f8a30", &(0x7f0000002380)=0x270, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000040)="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", &(0x7f0000000140)=0xfa, &(0x7f0000000180)="7f5a95dd56b06b383410466a6b839a8e52860f06b5c8152907b7c3a46d5321f9aaf1feed4f26956a216456348bed8e3a11091362ab90e1d921360049ba4abed8", 0x40) 1.543485293s ago: executing program 3 (id=476): r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000001180)=@file={0x0, ""/516}, &(0x7f0000001080)=0x206) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0xc003, 0x3a) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="673bb5b8cc0c16ed08f1b8d24e22171881a86a78ef1d357e38090019d89dfdeb7db8a8ef06ccb91027808b79c68516e3da3d", 0x32}], 0x1) r2 = socket(0x18, 0x2, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20, 0x409}, 0x4) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x1, 0x1, 0x10, 0x1}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x65, 0x0, 0x0) getpeername$unix(r0, &(0x7f0000000000)=@file={0x0, ""/4096}, &(0x7f0000001040)=0x1002) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x4e) syz_emit_ethernet(0x26, &(0x7f0000001140)={@broadcast, @remote, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0xff, 0x0, @broadcast, @rand_addr=0xac14ffff, {[@noop]}}}}}}) 1.519467438s ago: executing program 3 (id=483): r0 = socket(0x18, 0x2, 0x0) close(r0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) munmap(&(0x7f000067e000/0x4000)=nil, 0x4000) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) sendto$inet(r0, &(0x7f0000000880)="757b384bbd3476508860e2d5aacda22745041769bb94b8dc2786c2d5af54daa2e4524550458226ef2edf450490a0bc4d1f091f1fc63da9e357f81ca48a", 0xff98, 0x0, 0x0, 0x0) 1.370423179s ago: executing program 4 (id=492): sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffde7) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f0000000100)=0x2) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x6a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000003c0)=""/185, &(0x7f0000000100)=0xb9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x0, 0x3, 0x4, 0x6}, {0x7, 0x0, 0x40, 0xb}, {0x2, 0x0, 0x0, 0x9}]}) setrlimit(0x8, &(0x7f00000000c0)={0x8, 0x54}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000180)={0x42b78c, 0x1, 0xfffbfc03, 0x80a199, "bb080006020900d91050080000000f00", 0x20000001, 0x5}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x80a0, 0x0) ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f0000000080)={0x10, 0x2, [{&(0x7f00003f1000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x8}, {&(0x7f00001dc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7fffffff}, {&(0x7f00007f1000/0x1000)=nil, &(0x7f0000434000/0x1000)=nil, 0x4}, {&(0x7f000047b000/0x1000)=nil, &(0x7f000004d000/0x4000)=nil, 0x2}, {&(0x7f000011a000/0x3000)=nil, &(0x7f00007f7000/0x4000)=nil, 0x9}, {&(0x7f00004e1000/0x2000)=nil, &(0x7f00004dd000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000719000/0x4000)=nil, 0x5a}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f00003b6000/0x1000)=nil, 0xb37}, {&(0x7f00007b6000/0x1000)=nil, &(0x7f0000079000/0x1000)=nil, 0x37e}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000730000/0x4000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000006000/0x2000)=nil, 0xe6}, {&(0x7f00006b1000/0x2000)=nil, &(0x7f0000766000/0x3000)=nil, 0x2}, {&(0x7f0000166000/0x3000)=nil, &(0x7f00001e3000/0x4000)=nil}, {&(0x7f0000211000/0x3000)=nil, &(0x7f0000536000/0x3000)=nil, 0x6}, {&(0x7f0000466000/0x3000)=nil, &(0x7f0000409000/0x3000)=nil, 0x4a77}, {&(0x7f000066d000/0x4000)=nil, &(0x7f000038e000/0x4000)=nil, 0x8}], './file0\x00', 0x7}) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x9, 0x6) syz_extract_tcp_res(&(0x7f00000002c0)={0x41424344, 0x41424344}, 0x0, 0x7) syz_emit_ethernet(0x96, &(0x7f0000000300)={@empty, @empty, [], {@ipv4={0x800, {{0x18, 0x4, 0x3, 0x7, 0x88, 0x66, 0x0, 0x7, 0x33, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0x8, 0x2, 0x3, 0x1, [{[], 0x4}]}, @lsrr={0x83, 0x1b, 0x4, [@empty, @multicast1, @multicast1, @remote={0xac, 0x14, 0x0}, @loopback, @local={0xac, 0x14, 0x0}]}, @lsrr={0x83, 0x27, 0xf0, [@remote={0xac, 0x14, 0x0}, @rand_addr=0xfffffff7, @rand_addr=0xfffffffa, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, @multicast1, @broadcast, @multicast2, @remote={0xac, 0x14, 0x0}]}]}}, @tcp={{0x0, 0x3, r4, r5, 0x0, 0x0, 0x7, 0x8, 0x7f, 0x0, 0xe, {[@mss={0x2, 0x4, 0x8070}, @mss={0x2, 0x4, 0xf9}]}}, {"eee7672ac8c5459b2cea8335"}}}}}}) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000001180), 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0xf}, 0x2, 0x0, 0x0, &(0x7f0000000040), 0x0) 1.37012836s ago: executing program 4 (id=493): r0 = syz_open_pts() fcntl$lock(r0, 0x8, &(0x7f0000000840)={0x3, 0x2, 0x5, 0x4d55}) ioctl$BIOCSETWF(0xffffffffffffff9c, 0x80104277, &(0x7f0000000040)={0x1e4, &(0x7f0000000480)=[{0x5, 0x7, 0xfd, 0x8}, {0x4, 0x10, 0x7, 0x6}, {0x9e, 0x19, 0x0, 0x440003}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0xd, 0x8000003, 0x5, "001a3cfcff000b00000000000000f5ff00", 0x10003, 0xc04}) read(r2, &(0x7f0000000200)=""/255, 0xff) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x2e00) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = fcntl$dupfd(r3, 0xa, r0) ioctl$VNDIOCSET(r4, 0x8004630b, &(0x7f0000000100)={0x0, 0x0, 0x0}) sysctl$hw(0x0, 0x0, &(0x7f00000001c0)="a2352f75fcb72f258152ea33ef03ebcc5800003aad60754473d45204b35bd22e", &(0x7f0000000000)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a00140630fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000700cf59efcf57bff878a2be000001"]) flock(r0, 0x3) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_emit_ethernet(0xbb, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000ad0000000000019078ac1400aa7f0000012475c6a584d2d9389edb5b9510f8dec530a9290aac31027f2b830c13e7cccb74fb381729040cc6bbdaed8c99e300dbbe928ee5ae86d89b3765377d90e0e5ae8c49b25e88a5c4f07a7337dec22ece8d0dbce0486bc9ea013c5c2de885f946a12090a305b101a50d84f969ac6d4e42d1013f0e93106430192ac72612c6c288af501140fcc97d6178b90be7f5ed327f74fa162f51f6c1bb73b104"]) ioctl$TIOCSETA(r5, 0xc0104454, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd, 0x80}) sysctl$kern(&(0x7f00000004c0)={0x1, 0x30}, 0x2, &(0x7f0000000500)="6d043402728e6c00ede8af937b61c84388b334e81708434520a5c95b0bc30c982b037b8c424f2bd1f1f0801c9b7859118681564455c98504d45ece72f2928ee6cf1632a754cc99b0bebfa26c63f29e69198fee9c3f643e2640fb660b94fbfedbf1b409b5542f563b29762c2540bf86b02bc4b8443bd1e8f8294322a3ef04e1dae7b895edc7c9779de899cc0f6f42949abdda65fb2f8b876cc93f41865263b4aa484c6bd05b33b7bb8e85bb706a11f95d7b", &(0x7f00000005c0)=0xb1, &(0x7f0000000400)="add921a0ea085a551d35adc73e680fd0fbca869ee72efa29b2a76cd3dc316c99492fa573b11b938a86ee19d512f6c5dac887584bcf27ba176ade9e2c214091b025a6", 0x42) flock(r0, 0x3) syz_open_pts() syz_open_pts() openat$wsmouse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0xb}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) ioctl$VT_WAITACTIVE(r3, 0x20007606, &(0x7f0000000140)=0xa30) socket(0x18, 0x1, 0x0) 1.369858323s ago: executing program 4 (id=494): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x413dff) open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x160) 1.318860655s ago: executing program 4 (id=498): r0 = kqueue() kevent(r0, &(0x7f00000003c0)=[{{r0}, 0xffffffffffffffff, 0x1, 0x4, 0x9, 0x7ff}, {{r0}, 0xfffffffffffffffa, 0x30, 0xe, 0x7ed79adb, 0x8}, {{r0}, 0xfffffffffffffff8, 0xc4, 0x20000000, 0xa229, 0x2f}], 0x2, 0x0, 0x2, 0x0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0x7ff7fffb, 0x7bed, 0x4347e793, 0xffffff8d, "1826287ff80f00ff000000eeffffff000000e000", 0x1, 0x1ffff}) kevent(r0, &(0x7f0000000180)=[{{}, 0xfffffffffffffff9, 0x180, 0x20000000, 0x8, 0x4753}], 0x4, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffff8, 0x41, 0x10, 0x6, 0x5}], 0x6, &(0x7f0000000280)={0x8, 0x7fffffff}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0) symlink(0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) syz_open_pts() r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x8, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x637d) r5 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x1) pwrite(r4, &(0x7f0000000140)="4f0e76907a", 0x5, 0xb30e) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) openat$pf(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r7, 0x80104267, 0x0) syz_emit_ethernet(0x1000e, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) close(r2) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0xe}, 0x3, 0x0, 0x0, 0x0, 0x0) r8 = accept(0xffffffffffffffff, &(0x7f0000000040)=@in6, &(0x7f0000000080)=0xc) accept(r8, &(0x7f00000000c0)=@un=@abs, &(0x7f0000000100)=0x8) sysctl$vfs_nfs(&(0x7f0000000340)={0xa, 0x2, 0x6}, 0x3, &(0x7f0000000680)="6ce1f60328e2dd064c9ad99067f268c7441d657bcf3e108a825a8344450c23b1c6403fac1dd88347080e914bfe0881c7079642ab582126b319860236ad0825196ad6f4276b5af9f8dafcf5e85aad906caf1c5d7609693aacebc93049d63f2b2d40e492d9ee5619b4a63afc1b4941a519a43641c524300fea925a4768e9cf83fcb8a2aead0e1dd0122f8012a26fa86880018482dc3328f47ac5bb2a6f4cf880162a386d728fd695e5981b9b8cdab025f1e70e4c6412ba39850ffa91eca5259941d66e02a3a2fa0fc083174ac0ee925003af7d9de7113b5f9183cde11863e392ec496f", &(0x7f0000000300)=0xe2, &(0x7f0000000480)="81a395dd1ea76ae099d0ff4f7619f11f8b4e9972a77606b407aacdc62288ec4c6a4d78097127f3960b7a164178bd9d4fdb31cf071705ebca77977b4b5c5f5dd6765b684af8105fe6d47c013956858cc28371d7b44482349061b98fdd7b6768231a7fe62e1e4ce52c35e78a8d83ef8819386c8a9876cdd6b6daab4aaabf9d4f5fa1e91074216e404caaa190ea6f55eaf8fb108c59636b9ce4cca8f8db6e4d2fb6c54b44ae7aa96b7e943c0cd98c55f6a935df6fdb9f0fa0ecc6dbf2455a55266c6fa2bfebf771b2650bd086fe95cdfcd2598c636dd6", 0xd5) 1.267375982s ago: executing program 5 (id=503): r0 = kqueue() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580), &(0x7f0000000140)=0xc) dup2(r0, r0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x0, 0x0, 0x80000001, 0x7, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x2, 0x4, 0xfffffff9}, {0x101, 0x6, 0x1ff, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x9}, {0x6, 0x8, 0x14, 0x8}, {0x2000002, 0x82, 0x5, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1cc, 0x800, 0xc}, {0xc, 0x6, 0xb}, {0x4, 0x7, 0x7, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x6}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)='.\\{}&$+Z#\x00', &(0x7f0000000140)='\x00'], &(0x7f0000000440)=[&(0x7f0000000200)='*:&$}\\!^\x00', &(0x7f0000000240)='%\x00', &(0x7f0000000280)='-\xa4\x00', &(0x7f00000002c0)='-\'#@\x98\'}(&}\x00', &(0x7f0000000300)='\x92:!\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='-}L\x00', &(0x7f00000003c0)='*}{)&{\x00', &(0x7f0000000400)='\x00']) kevent(r0, &(0x7f0000000600), 0x1, &(0x7f0000000500)=[{{r0}, 0xfffffffffffffffc, 0x1, 0x1, 0x0, 0xad}], 0x5, 0x0) kevent(r0, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffffa, 0x96, 0x2, 0x2, 0x8}, {{r0}, 0xffffffffffffffff, 0x1, 0x80, 0x9, 0x7ff}], 0x2, &(0x7f0000000240), 0x2, 0x0) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000004c0), 0x10, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[], 0x210}, 0xfffffffa}, 0x10, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="ed", 0x1) recvmmsg(r5, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000540)=""/185, 0xb9}], 0x1, 0x0}}, 0x10, 0x2040, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r6 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x14, 0x2000007, 0xfd6, 0x8, 0x80000001, 0x17ffe, 0x10, [{0x0, 0x3, 0x4, 0xa24}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f05, 0x200, 0x3}, {0x7ffffffe, 0x8800, 0x3, 0x1}, {0x3fe, 0x7ff, 0x1002802, 0x4d8a}, {0x6, 0x2, 0x3, 0x800000b4}, {0x8000008, 0xd16e, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x1000004, 0x8e, 0xd1b, 0x88}, {0x1c5, 0x5, 0x4, 0x412c8391}, {0xfffffc01, 0x7, 0x20004, 0x4000000c}, {0xb8d, 0x4, 0x8, 0x202}, {0x29a71720, 0xffffdffa, 0x1, 0x6}, {0x2, 0x7, 0xfffffff9, 0x100}, {0x0, 0x8, 0x1002, 0x9}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) readv(r5, &(0x7f0000000380)=[{0x0}], 0x1) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r6, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) 1.248443518s ago: executing program 4 (id=504): msgsnd(0x0, &(0x7f0000000a80)=ANY=[@ANYRESOCT], 0x401, 0x0) setrlimit(0xa, &(0x7f0000000040)={0x6, 0xffffffffffffff80}) r0 = syz_open_pts() close(r0) sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x2, 0x2}, 0x3, 0x0, &(0x7f0000001940), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f0000000900)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000940), &(0x7f0000001940), 0x0, 0x0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x28d) writev(r0, &(0x7f0000001880)=[{&(0x7f00000004c0)="33f57cbd9b7a3dce024abd0a4458ebe67b96abcc9815f01b7384118224bac83dd8e2f9bac9fcf5581b498f230fc2c56937691faa0a6fbc6ec7d970f3e70feb02fcbb032f1cd7719778b73a00610bbc2cda7a2357f162165a18ec7a8361d61e5f202c9c6839ada531b7f39a0c09140e3052f9116a0a4d3d422542a855d3257c406d5788afe863c7854a8c4906fe9008dcaf7540ee", 0xfdf5}, {&(0x7f00000001c0)="4ac86e07b6f5cf353ce773366d0d1462532e49bb326d1951a16fadedf93ecbca2089c60264be4f5368f05fb89ffcee8bcc1f30c0cd028f53323eed00", 0x3c}, {&(0x7f00000002c0)="8072f965e5368d8a2ce261ea12ce28665881a3c985", 0x15}], 0x3) 1.06476734s ago: executing program 5 (id=510): mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000380)={0x1, 0x7fffffff, 0x41, 0xcd4, "9cdc452b68767b0400", 0x2004, 0x8}) r1 = syz_open_pts() ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000140)=0x2) syz_open_pts() select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x7, 0x2000007, 0x101, 0x80000001, 0x8004, 0x7, 0x10, [{0x1000000, 0x100, 0x0, 0x71003}, {0xfffffffb, 0x8, 0x8, 0xfffffff9}, {0xb, 0x4, 0x0, 0x8}, {0x1, 0x800, 0x3}, {0xf, 0xf2e, 0x9, 0x5}, {0x40000002, 0xfffffffd, 0x8, 0x95}, {0x82ce1, 0x800, 0x5, 0x400006d}, {0x3, 0x803, 0x14, 0x5}, {0xffffffff, 0x82, 0x2, 0x9}, {0x20000004, 0x7fffffff, 0xd1b, 0x88}, {0x1d0, 0x10001, 0x2c, 0x975e616}, {0x7fc, 0x9, 0x8, 0x5}, {0x81f, 0x4, 0x6, 0xffe}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xf, 0x8, 0x6}, {0x100, 0x1, 0x4, 0xae89}]}) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc028698a, &(0x7f0000000100)) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r4 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x74, 0x6, 0x17, 0x3}, {0x0, 0x1, 0xfd, 0x5}, {0x400e, 0x4, 0x43, 0x7fffffff}]}) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x0, 0x3c, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) 976.286856ms ago: executing program 5 (id=516): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f0000000040)={'./file0\x00', 0x80000000, 0x0, 0x4, 0x0, 0x2, 0x3, 0xff, 0x2, 0x2, 0x4, 0xc0}) (async) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='*#%)}\x00', &(0x7f0000000180)='#\x00', &(0x7f00000001c0)='\\.-\x00', &(0x7f0000000200)='/{%[\x00', &(0x7f0000000240)='/dev/ttyCcfg\x00', &(0x7f0000000280)='&{/\x00', &(0x7f00000002c0)='/dev/ttyCcfg\x00', &(0x7f0000000300)='#]/+&!'], &(0x7f0000000500)=[&(0x7f00000003c0)=')\'#/!D\'\xd8,#-\xa0-^\x00', &(0x7f0000000400)='*\x13\x00', &(0x7f0000000440)='/dev/ttyCcfg\x00', &(0x7f0000000480)='/dev/ttyCcfg\x00', &(0x7f00000004c0)='/dev/ttyCcfg\x00']) (async) ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f0000000540)) (async) ioctl$WSDISPLAYIO_GETSCREEN(r0, 0xc0245755, &(0x7f0000000580)={0xfffffffa, './file0\x00', './file0\x00'}) (async) ioctl$WSKBDIO_SETMODE(r0, 0x80045713, &(0x7f00000005c0)=0x1) (async, rerun: 64) ioctl$WSDISPLAYIO_SBURNER(r0, 0x800c5751, &(0x7f0000000600)={0xc, 0x1, 0x2}) (async, rerun: 64) nanosleep(&(0x7f0000000640)={0x62, 0x7}, &(0x7f0000000680)) (async) r1 = socket(0x10, 0x5, 0x7) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000006c0)="dd556f70bbef1539edd6181097e235bcc019a9392c82dad52e275d31d3aa63e5ec08d65372d37b7ccde3d747", 0x2c) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000700), 0xef655378db96d46d, 0x0) fcntl$setflags(r2, 0x2, 0x0) (async) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f0000000740)=0x101) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f0000000780)={0x400, [{0x1, 0x4}, {0x2, 0x4}, {0x1, 0x9}, {0x1, 0x9}, {0x3, 0x7ff}, {0x2, 0x9}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x28}, {0x3, 0x43fe5716}, {0x2, 0x1}, {0x1, 0x2}, {0x1, 0xf7f}, {0x2, 0x3}, {0x3, 0xeed}, {0x3, 0x5}, {0x3, 0x1}, {0x2, 0x7}, {0x2, 0xfffffffe}, {0x2, 0x2}, {0x3, 0x9eeb}, {0x1, 0x89e}, {0x2, 0x6}, {0x1, 0x81}, {0x2, 0x2}, {0x2, 0xfffffffc}, {0x1}, {0x1, 0x6}, {0x1, 0x5}, {0x1, 0x1174}, {0x1, 0x6}, {0x2, 0xb}]}) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000940)={&(0x7f00000008c0)='./file0\x00', 0x1000, &(0x7f0000000900)='./file0\x00', 0x8}) (async) fsync(r1) (async) fsync(r2) (async, rerun: 32) recvmmsg(r1, &(0x7f0000000b80)={&(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000980)=""/148, 0x94}], 0x1, &(0x7f0000000a80)=""/129, 0x81}, 0x7}, 0x10, 0x0, &(0x7f0000000bc0)={0x7fffffffffffffff, 0xa}) (async, rerun: 32) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000c00), 0x80, 0x0) (async) r4 = accept$inet6(r1, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) (async) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000cc0)={'./file0\x00', 0x7, 0x5, 0x6, 0x0, 0x3, 0x5, 0x6, 0x0, 0x3, 0x2, 0x1}) (async) ioctl$WSDISPLAYIO_LSFONT(0xffffffffffffff9c, 0xc058574e, &(0x7f0000000d40)) (async) r5 = socket$inet(0x2, 0x8004, 0xb) kevent(r2, &(0x7f0000000dc0)=[{{r3}, 0xfffffffffffffffb, 0x20, 0x40, 0x80000000, 0x2}, {{r0}, 0xfffffffffffffffb, 0x40, 0x4, 0xd, 0x8}, {{r3}, 0xfffffffffffffffe, 0x0, 0x42, 0x7bd5eb8c, 0x402e}, {{0xffffffffffffff9c}, 0xffffffffffffffff, 0x34, 0x1, 0x5, 0x5}, {{r5}, 0xfffffffffffffffb, 0x46, 0x60, 0x9, 0x9}], 0x8eb8, &(0x7f0000000e80)=[{{r2}, 0xfffffffffffffffa, 0x4, 0x1, 0x5, 0x8}, {{r3}, 0xffffffffffffffff, 0x2e, 0x2, 0xfffffffffffffffe, 0x1}, {{r4}, 0xffffffffffffffff, 0xc0, 0x8, 0x100000000, 0x114b000000}, {{r3}, 0xfffffffffffffffc, 0x22, 0x20, 0x7, 0x76}, {{r0}, 0xfffffffffffffffa, 0x1, 0x2, 0x6, 0x100}, {{r3}, 0xfffffffffffffffd, 0x5, 0x2, 0x7fff, 0x1}, {{r0}, 0xfffffffffffffff8, 0x4, 0x1, 0x10001, 0x7}, {{r1}, 0xfffffffffffffffc, 0x20, 0x10, 0x0, 0x2}, {{r1}, 0xfffffffffffffff9, 0x30, 0x1, 0x255}], 0x5, &(0x7f0000000fc0)={0x5, 0x2152c000000}) (async, rerun: 32) dup2(r3, r5) (async, rerun: 32) ioctl$WSDISPLAYIO_SBURNER(r2, 0x800c5751, &(0x7f0000001000)={0x3, 0x400, 0x3}) execve(&(0x7f0000001040)='./file0\x00', &(0x7f0000001180)=[&(0x7f0000001080)='/{%[\x00', &(0x7f00000010c0)='/dev/ttyCcfg\x00', &(0x7f0000001100)='\x00', &(0x7f0000001140)='^\xca)\x00'], &(0x7f0000001280)=[&(0x7f00000011c0)='\\.-\x00', &(0x7f0000001200)='#]/+&!', &(0x7f0000001240)='*\x13\x00']) (async) r6 = dup(r3) (async) execve(&(0x7f00000012c0)='./file0\x00', &(0x7f0000001340)=[&(0x7f0000001300)='\x00'], &(0x7f0000001400)=[&(0x7f0000001380)='/!(\\::%\x00', &(0x7f00000013c0)='\x01\xcb\\\x00']) ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000001440)={0x5, 0x7, 0x9, 0x7, "2c0aa66d16d8dcdcca1209aa8e293bc90fc81dd6", 0x7, 0x1}) 921.427472ms ago: executing program 6 (id=518): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) shmctl$IPC_SET(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) mkdir(&(0x7f0000000000)='./file1\x00', 0x100) chmod(&(0x7f0000000080)='./file1\x00', 0x80) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file1\x00') 920.815418ms ago: executing program 5 (id=519): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) sysctl$hw(0x0, 0x0, &(0x7f0000000080)="a2352f75fc972f258152ea33ef03d3fff7b2524e2b139055034a78940a4febcc5800000d0060754473d404b3e0c323e23e9527ac5bd22e7d16c6a91460da2adcc2db3d00", &(0x7f0000000000)=0x44, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(0xffffffffffffffff, 0xc008441e, &(0x7f00000000c0)={0x10000005, 0xfffffffa, 0xfeefffff, 0x2, "080054d1000000010000000100000f1e0400", 0xd50, 0x10000}) r3 = socket(0x18, 0x1, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) getppid() r4 = geteuid() r5 = dup2(r1, r0) r6 = fcntl$getown(0xffffffffffffffff, 0x5) r7 = geteuid() getgroups(0x7, &(0x7f0000000880)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) getuid() getegid() pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r10, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r11 = fcntl$getown(r10, 0x5) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x1a2c, r11) r12 = getuid() r13 = getgid() sendmsg$unix(r1, &(0x7f0000000a00)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000580)=[{&(0x7f0000000180)="5f895c85f11f16b0459167fed354a7493522d5a539cf109fcff93f5c91b5cdaa6262a04d21511f18c154714fd2df5ae3b1504628f29b26fe385aa0a654b9a87977ed247b7c2456503b2151b855043a571b45ff83359353535f8620cf5a8244d7e392a57722d73da8e68411985992dcfe013b959697bcaa0abc013cb47ee7562a593782cd1cbc808e60287affa699cebcde137035807f00abd0a2a18b9eb55fadf0a35d9b9c2e4d9c444f6e659e7482f7aa4d0aef0007887ac0f047a613f357fbab75b997f5ec5a4d96de44", 0xcb}, {&(0x7f0000000280)="8670608c0020d1a0d3e749a51577db7a4ed0e9f260aff12516c91fcb5017dce947d6f34a7ad659d7dddf5220d1ce8cd8e04d564e3d8b574db01f06c893db4ec4c967f287c98ae9c1046838fbc9b145b89f4c789224ed849c3a9cf7661a0740ae9bd5228397595fbf2685ee20b9e302552300746695378d9288bf0aa96d7440b06567a38385a4de8b8519794e7c7d64c9eaf2aeb698a7b4ee752275714470786550145fe4254fd021fba41588a404a3be6e389f5b482aee919ff2a476d36f84aeded220b047ea73946ad8ff64e58ded9c8567513b93f16873b4700ce76ae53a40", 0xe0}, {&(0x7f0000000380)="fea15688c6797698d278de44e9bcbb5f", 0x10}, {&(0x7f0000000a40)="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", 0x29b}, {&(0x7f0000000900)="6f60fbaa6bd27021e8bdf7f594cfbb188afb1231b204f153eb6959376bfdbc36c732f254b48caf93b32710c66164eb449bb0e41b023a263b5ce811a5c867f707971791cb2b6c32bd6390419bc7e5f9ba199eca7e6c867ddaf839f6d901010934c13d163a5f3c07ccc05ae6efd985f6438bf224bfb7837ad2dfe09a1c47de349315eabf3baa11df7a2bf445405f2462aa5e2cf98583f7eae90144943df4f8afbd2c860011847369bb856d4bba8af239c85e74c57492930971588cb23971e06eb16186ab35bc0e", 0xc6}, {&(0x7f00000003c0)="32370f599006c67528deb36adbcc06fe16861e1e11cc4fd39b81ba", 0x1b}, {&(0x7f0000000740)="8e94cbd946e90a4e94e35ef576ce81057c1aa25746f873b8fade3d853b9d302ab89377fb0b0446e62a6b84e99faf0e90df5a88193f2082615a0a2f71e6a136b3cf260b19a022df92270fc797d8e1a22934fba3b7cad89fb4a8984f013c7b5a8e6ce6b2fc512d717e30e90aa97056ef79c38d799a356538cb0e9d508869468cfcacd7d8d9b73bdafe9bf2fc4f243351c91685cb5b1e75d6850569c02f92327240260d64e601d907d572b08efae57dc56dbccc2b3391c3418496f26c0f06f3786a21aea05ace6c56f522803f39cac364157426ff10fa95", 0xd6}], 0x7, &(0x7f0000000e80)=ANY=[@ANYBLOB="2000be5200004884493e23f558e02b50033812ceae6afbf40b6e0852dcda5c6d8a756c1375097e3421afc8e17800a270e68318cfb897ea24b215601cc9f73040ba9441089492d1e40d0291c58947415a1697a0406620c96a16541fdb9d4a4e73fb883cd23e673eae1a3a4e53ef220000000000", @ANYRES32=0x0, @ANYRESHEX=r5, @ANYRES32=0x0, @ANYBLOB="000000003000000000000000ffff000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="000000000000000000000000ffff000000000000", @ANYRES32=r11, @ANYRES32, @ANYRES32=r9, @ANYBLOB="000000001800000000000000ffff000001000000", @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="2000000000000000ffff000000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32, @ANYRES32=r12, @ANYRES8=r8, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0xd8}, 0x404) write(r2, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000040)={0xb, './file0\x00'}) 877.21307ms ago: executing program 6 (id=520): sysctl$ddb(&(0x7f0000000000)={0x9, 0x8}, 0x1, 0x0, 0x0, &(0x7f0000000080)="000000009f501056a0773ba58fea08eefd72f4cce11474fb9a0e56386b71294ef1225ea12f78f9cd9ac4f7fda7eaaedb6a428b56fa0217470c5a133fd2af3af4d808a1925fe6d67a82ddcb7736b018b6d21d1f4d1627efc488cc999e3abb8f3c1b1a919e320fa0772bea147a64f5d8ddf875ddee48910576de83fbb18c9818c4442f3c4691b2fc3925f9c5dbbf652022e988b092f1148b26ea9d768c091270fd4b8a94a241d2e3d0e87cbe32dc4e1d77a41a7d69baee3e8fdb1e74ec0b82a86dffa95a", 0x4) 876.845903ms ago: executing program 5 (id=521): sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c, 0x4}], 0x1, 0x887e) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x2) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100021000000000000000001800", 0x2}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffd83) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open$dir(&(0x7f0000001240)='.\x00', 0x0, 0x0) setuid(0xee01) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) kevent(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCFLUSH(r2, 0xc0187009, &(0x7f0000000080)) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000003}) kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x0, 0x40000000, 0x200000000000001, 0x54}], 0x200, 0x0, 0xd6, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x2c, 0x6, &(0x7f0000000140)="ebffcbfff8c3249cd6a33bb0c8227035278b113d944f4ea53048e69931929648", 0x20) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) syz_emit_ethernet(0x4c6, &(0x7f0000000b80)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa"]) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r4, 0xc4504446, &(0x7f0000000740)={0x8, 0x5, 0x2, 0x1ff, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x9, 0x42}) mprotect(&(0x7f000046e000/0x4000)=nil, 0x4000, 0x5) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 875.064027ms ago: executing program 6 (id=522): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0x1d5d3, 0xf9, 0x3, 0x80000003, 0x4, 0x181c, 0x4, 0x2}, 0x0, 0x0, 0x0) r0 = openat$speaker(0xffffffffffffff9c, 0x0, 0x20, 0x0) writev(r0, 0x0, 0x0) syz_emit_ethernet(0xd9, &(0x7f0000001700)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xcb, 0x0, 0x8}, @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x10, 0x7e77, 0x0, 0x3ff, {[@nop, @sack_perm={0x4, 0x2}, @generic={0x4, 0x2}]}}, {"adc9bd63270ab004b48f6a3df96059c55084185a4667eba76464e1a744c24099a0985cb33063e7bfc8e351854ef7017ef7528b5d8ee8a9903569ca0c5f434abee5d639c343bfacaa49cad460bd33338afcdb7d6c2662b393cb5ff239b0b3f2545e2d71c44b756cf301ac4b6f14758418c723cbc293367a70d6888c077c21f10f397083db5402b58aa5a560355c078ea588ea0ed86543a13f58f053"}}}}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x114, 0x0, 0x2000, 0x4, 0x0, 0x0, @rand_addr}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xf3}, {"a30e76cb3f6121b2d66550f5fd227c6cec208240e1fd4b42301fbce20dca03b048c1f7d03ef0c1695badab700c5bd7ffafeab2cafc67e4ee6bc4b704da7f72bd92dc8ca145ab196319a64fba250c317ac4ce2c0e3c4e2afbc156f50f848b7e45e8133dbd035e7e2fc2847f9751d836de04e527c46587a830fff210efd250da4f72dfde1b0ee3f77ea5efa03015857225e13612f518c39feab00a51c323d2509829fb72b5af2e23bdbc4a22196a14a7a175e38b1aa5333e657ba7e7c770144b4250c7e92558d04f0c0939c2dfdfedc38c4d0f6a894342cbc97a116e106ae2be206b538d3dbc5ab23296712e22"}}}}}}) r1 = kqueue() ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0xfffffffd, 0x400, 0x4, 0x0, "d76c0b652155cb57000b9034aee9c6d700004f00", 0xffffffb7, 0x401}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0xffffffb7, 0x9f, 0x1, 0x2, 0x8000, 0x8000003e, 0x2, 0x2, 0x6, 0x9}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) dup2(r1, r2) 783.280344ms ago: executing program 6 (id=525): sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xd}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc7f}) getitimer(0x2, &(0x7f0000000040)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f0000000080), &(0x7f0000000000)=0xfffffffffffffe22) r1 = socket(0x800000018, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r2, 0x0, 0x69, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) 782.019852ms ago: executing program 6 (id=527): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x6, 0x12, 0x1}, {0x4, 0x0, 0x40, 0x800}, {0x2, 0x0, 0x0, 0x20000000}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(0x0, r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001600)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000001740), 0xfffffffffffffdff) lchown(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, r2) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(r5, r5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) accept$unix(r4, &(0x7f00000011c0)=@abs, &(0x7f0000001200)=0x8) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x54e}], 0x1) sendmsg(0xffffffffffffff9c, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="5000000000000000ffff0000070000007b97c2378d967b1288110afcf60278d34210047c9e97d5d222786317ad75e96d6de37b5fe355dca8d7e43dd99d0b15a3b4106baaed09341100b4ab2ffd978e9aa800000000000000010000000180ffff28a04997184820f2e4982879200d3b2f9cfb00aa8fd1622d25abeee89b886e486051e6e12a6d251f5c621cb157d82eaf7853a910c6bb424d42d9cec25ccc60757aa05472f0e253def5ee715b23182360dd7563b81b3909c9274bc006118352bfdba4cf49a62454bd1eec3509206d6c81c18051973b7ee3dffd7fdd7985e1ba68febb8c8a7bc04b26e7233e740a870d4d3d7e2a7be0f39b002800000000000000010000000800000001bf8093b31ecd8a3fc84d6edb936a208d18fbbf11420000f00000000000000001000000ff070000f64e1838f79726412d01c762cb5cdf14e605329ead48ada1317b3185403f29709aaa299a7932bcc6bb668a690d21cfa7c1e3f24131e71ecc9dbdac88b668d4452872b450600563f2d82e9598cc45910303510d2bcfbefd737b7d54b085a775ae7fbe573bb9289171d788461274d8ad4d7151bbb547798dcb2a05e112613cdaa89f5ca096c901501d3531bc6c4df975c8a7e4042e8bdedd86a7ac10fc405b46003c6168d0b47086ddf6e7f2c8b54bb431bff21b38372c13b2ed4a489214eb5659f68e053388df0b4a0bbcc191350255d0f2d7d258f09f000dc9de0000000000009000000000000000ffff00000600000057247fd7074069a16184aeab7fa8c8621fcc04b11ed1c59687a8d1b5207005b96164c655c32b6ee2d675c24f32818beb9c9e0483525024bc1d1804d429eba11902f597c065aae9d5fbd453499cf543cf848d72d5b751ec56e535d593807fb1bc37306adb5970dccba44fa950dceaa941e7dc18ec03e32b8b9a4519d41308ce002800000000000000ffff000064000000e292fb1d3b9195d169561562e31e897c625ddcfca8000000b000000000000000ffff0000ffff000044feff0609d15fcd54ba6b5495ed420de0f005f612240657a7b4e840993c5cf18f0dc396f55f5f6e797f563b290632955c2c183b959a49c40ac678f70b6795661fb1d0537562aecda6d71d360bd557c7c1d42bb04ede105c31e101c15088256dc20a4306a6a3e586e98b93297c0554f851a3fd86800b010dd18b3e465808f969f19f53e5b6e0413fdaa4e5d6e191014dcbf3ccb2d3bfdd788e000000000000009800000000000000010000000600000036af0dbe02"], 0x410}, 0x0) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r7, 0xc0504417, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) ioctl$BIOCSBLEN(r6, 0xc0044266, &(0x7f0000000140)=0x1) 718.057031ms ago: executing program 6 (id=529): openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) socket(0x11, 0x3, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xff, 0x1, 0x2, 0xfffffffffffff1ba, 0xfffffffffffffffa, 0x1000000000000, 0x6, 0x0, 0x0, 0x7, 0x0, 0x2000000000000003, 0xffffffffffffffff, 0x4, 0x3, 0xa4, 0x7, 0xff], [0xfffffffffffffffc, 0x80000002, 0x59, 0xffffffff, 0x100, 0x7b99, 0x200, 0x4, 0xffffffffffffffff], [0x100000001, 0x3, 0x4, 0x5, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffe], [0xfffffffffffffffe, 0x20000000000, 0x401, 0x100000000, 0xfffffeffffeffffe, 0x100000005], [{0x0, 0x20000007, 0x0, 0x36e8}, {0xfffc, 0x2, 0x200000c9, 0x2}, {0x0, 0x0, 0x1, 0xfffffffffffffffd}, {0xfffe, 0x5, 0x7, 0x3e}, {0x10, 0x2, 0x0, 0x80b}, {0x6, 0x2003, 0x4, 0x1ffffffffffffffd}, {0x0, 0x0, 0x800000, 0x7}, {0xff7f, 0x965, 0x8, 0x4}], {0x2000, 0x7aae, 0x3ff, 0x7fffffff}, {0x0, 0x0, 0x73e8, 0x8}}}) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket(0x18, 0x1, 0x0) getsockopt(r1, 0x29, 0x39, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0xf4, 0x5, 0x3b}, {0x6, 0x0, 0x8, 0x10000}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x3, 0x50) ioctl$FIONREAD(r2, 0x8020699f, &(0x7f00000001c0)) syz_extract_tcp_res(0x0, 0x5, 0x401) readv(r2, &(0x7f0000000700)=[{&(0x7f0000000080)=""/54, 0x36}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000440)=""/63, 0x3f}, {&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000580)=""/187, 0xbb}, {&(0x7f0000000640)=""/170, 0xaa}], 0x7) 714.6377ms ago: executing program 0 (id=532): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0xaa, 0x0, 0x0, {[0x5, 0x0, 0xffffffffffffffd, 0x1, 0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x1], [0x63, 0x5, 0x4, 0x10000, 0x0, 0x0, 0x10, 0x0, 0x80000002, 0xfffffffffffffff8], [0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x9], [0x4, 0x0, 0x0, 0x165, 0x0, 0xb], [{0x0, 0x10, 0x0, 0x8000000000000}, {0x0, 0x0, 0x6}, {0x1000, 0xa, 0x0, 0x1}, {0x0, 0x1000, 0xfffd}, {0x0, 0x0, 0xc8, 0x7fffffffffffffff}, {0x9, 0x5, 0x0, 0x1}, {0x0, 0x0, 0xaa}, {0x0, 0xfffffff5, 0xc00000}], {0xfffc, 0xfffffffd, 0x20000003, 0xf5a752c}, {0x0, 0x5, 0x10000000}}}) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r1, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1a7, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0x2, 0xb}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) (async) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0x3, &(0x7f0000000140)="12000000", 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r3, 0x6007, 0x8000, &(0x7f0000000380)="36eac3813e349b8834c24abafb6d5a537ca214b855ffee99effbb1d95c632fe5dacd24747aa4290220938abaa2eb917267e65ba4aaadefe3cbf1b39ebd5c7c6e2d53e8", 0x43) (async) setrlimit(0x1, 0x0) (async) r4 = syz_open_pts() (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, 0x0) (async) mknod(0x0, 0x2006, 0x4f4b) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, 0x0, 0x0) (async) ioctl$WSKBDIO_GETDEFAULTBELL(0xffffffffffffffff, 0x40105706, 0x0) (async) fchflags(0xffffffffffffffff, 0x0) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, 0x0, 0x0) (async) close(r4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r5 = shmget$private(0x0, 0x2000, 0x192, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r5, 0x1, 0x0) (async) shmat(r5, &(0x7f0000ffa000/0x5000)=nil, 0x2000) (async) shmget$private(0x0, 0x3000, 0x372, &(0x7f0000ffa000/0x3000)=nil) 609.11766ms ago: executing program 0 (id=533): mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x1, 0x80000000d, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0xb, 0x2000000007}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x132) r2 = socket$inet(0x2, 0x3, 0x0) close(r2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460000000000000000010000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac7ebbc257699a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb7600000000000200361b12", 0x82, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$inet(0x2, 0x2, 0x0) r5 = dup(r4) setsockopt$inet_opts(r5, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) r6 = socket(0x2, 0x3, 0x0) r7 = dup(r5) dup2(r7, r6) connect$unix(r6, &(0x7f0000000000), 0x10) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x800000054}) r8 = syz_open_pts() close(r8) syz_open_pts() ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000000c0)={0x8041, 0xd, 0xfffdff80, 0x1603511, "02f0ee091a000c1300000fe0ff22850900", 0x1000007, 0xa}) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) sendto(r5, &(0x7f0000000080)="e7920273c94c3c52", 0x8, 0x0, 0x0, 0x0) 608.717883ms ago: executing program 3 (id=534): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x840, &(0x7f0000000240)={0x34, 0xffffffffffffff80}) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PCIOCGETROM(r0, 0xc0107005, &(0x7f0000000100)={{}, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 64) nanosleep(&(0x7f0000000000)={0x4, 0x54c}, &(0x7f0000000040)) (rerun: 64) 608.101952ms ago: executing program 0 (id=535): r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x6, 0x2, 0x0, 0x0) syz_emit_ethernet(0x17d, &(0x7f00000000c0)={@empty, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "16318d", 0x147, 0x32, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr="72996f957544775f440849820d9d8001", {[@dstopts={0x67, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x9}]}], @udp={{0x0, 0x3, 0x8}, {"ade954d35fef1d1aad3f4cffe43b002e7c6d095e4f0cc7bfd7ff2a49d8bec7b0ffc7c949d3c59d74348969b8b20200000000000000d3cf6ac913707961bcec0df25b4d6bddbabd4d8f20dbae41770d0bd7646c91f7940cea0153e78e188942c60b4a09677271584402bc377d484356b2324320f698035e1d40e52be42fa9227305fd1c2c5ce50cd56047948090b463ca6d2de0756128f617ed5879d352a1feb2dc1ec3cac8aecfa0202c05ab99f1bf3d270c4107a3fe8612d4700e17d1917bc96d0f2692ec1ba0d699af1e3a9953e9251633737b4fcc2b487c482017c8a4d0d2755f474f660192d7bcd1a8c405758dee60eab5160a3f37a3eb573f1e9546645f10868bb7b84e6ef5afb938d0124d5dd85bc08e496baa527c66136bdb41bece7952bc1c910e8765"}}}}}}}) 607.920389ms ago: executing program 0 (id=536): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={0x0}, 0x10, 0x2842, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x5}, 0x4, &(0x7f0000000140)="e33745e8", &(0x7f0000000100)=0x4, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) sendmmsg(r0, &(0x7f00000008c0)={&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x8}, 0x10, 0x5) 399.66032ms ago: executing program 0 (id=537): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x80, 0x11e) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b98) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x4) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) close(r0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x0, 0x41) ioctl$BIOCSRTIMEOUT(r1, 0xc0307006, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) write(r2, 0x0, 0x0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x2, 0xfffffffe, 0x80000000, 0x2, "67be3492a68581195185edec07d88c783c5dd80f", 0x1, 0xe}) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x80}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x40}, {r2, 0x20}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x7}], 0x20000037, 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="3fc866ff34cf918b031d46366061875f437ce9cf01a9c6441b575955454d2161e02cc7ae7c7beab7f6700239429076d569778b5105d0a45cc06496e238c7b44e8bc902ab597eedddebed42b686922cd3078ab2b06ebaa984ef1638f9e02a7b2d696f55f96b2e9cabcd44b494ea4e851b0299e27879df34c50773465775df5c521994f137d3c6a65343c898748798aa4e01ba1c178d53e6f669f974ec7a43aadbe2f008ca5ed739efda", 0xa9) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000000), 0x96, &(0x7f00000003c0), 0xfffb4161, 0x0) ioctl$TIOCSETA(r3, 0xcd504404, &(0x7f0000000580)={0x20000b, 0x2, 0x1, 0x2f, "cd00fd00", 0x40048003, 0x6}) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r5 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x1, 0x2e) ftruncate(r5, 0x84002) poll(&(0x7f0000000000)=[{r5, 0x1}, {r5, 0x1}], 0x2, 0x3) r6 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x0) preadv(r6, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x1, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) r7 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0) write(r7, &(0x7f00000004c0)="b96a", 0x2) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) 398.730033ms ago: executing program 0 (id=538): r0 = syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000000)=0x8000) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xc0284457, &(0x7f0000000140)={0xbffffffe, 0x5, 0x3, 0x1000, "080000400006000000010000f0ff0f00", 0x20004917, 0x8}) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x5, "ff14e7130b1e586ca6294000", 0x40, 0x3effc}) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) (async) r2 = semget(0x0, 0x1, 0x281) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) (async) setuid(0xffffffffffffffff) (async) r3 = getuid() setreuid(0xee00, r3) (async) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000180)={{0x0, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1c2, 0xe}, 0x2, 0x2, 0xfffffffffffffffc}) (async) syz_open_pts() 397.544999ms ago: executing program 4 (id=539): socket(0x18, 0x1, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) r0 = syz_open_pts() mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x1) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/43, 0x24}], 0x1000000000000247) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x4) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0804467, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x1a7, 0x4003}, 0x8, 0xd7f, 0x0, 0x0, 0x1ff, 0x4000000000, 0x2, 0xb}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCGETROM(r3, 0xc0107005, &(0x7f0000000080)={{}, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) 33.356515ms ago: executing program 1 (id=545): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001400)={&(0x7f00000013c0)={&(0x7f0000000080)=@in, 0xc, &(0x7f0000000100)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000001180)=""/228, 0xe4}, {&(0x7f0000001280)=""/114, 0x72}], 0x4, &(0x7f0000001300)=""/184, 0xb8}, 0xff}, 0x10, 0x2, &(0x7f0000001440)={0x6}) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x2, 0x0) close(r1) r2 = socket(0x2, 0x3, 0xfe) bind(r2, &(0x7f0000000000), 0x10) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$FIOASYNC(r3, 0x80047469, &(0x7f00000000c0)=0x5) writev(r3, &(0x7f0000000040)=[{0x0}], 0x1) ioctl$FIONBIO(r3, 0x8004667e, &(0x7f0000000000)=0x101) writev(r3, &(0x7f0000000580)=[{0x0}], 0x1) setrlimit(0x1, 0x0) syz_emit_ethernet(0x138, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r1, &(0x7f0000000000), 0x10) writev(r1, &(0x7f0000000100)=[{0x0}], 0x1) r4 = socket(0x18, 0x2, 0x0) socket(0x18, 0x1, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) kqueue() sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2, 0x2, 0x9, 0x300000006}) sendmsg(r5, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 31.930536ms ago: executing program 1 (id=546): sysctl$net_inet_udp(&(0x7f0000000080), 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000000380), 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x1042, &(0x7f0000000e00)=@in={0x2, 0x1}, 0xc) 31.809913ms ago: executing program 1 (id=547): mkdir(&(0x7f0000000180)='./file0\x00', 0x8) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) socket(0x11, 0x8000, 0x0) unveil(&(0x7f00000001c0)='.\x00', &(0x7f0000000000)='x\x00') (async) r0 = socket(0x24, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x40) open$dir(&(0x7f0000000480)='./file0/file0/../file0\x00', 0x200, 0x0) 31.610725ms ago: executing program 1 (id=548): sysctl$hw(&(0x7f0000000040)={0x7, 0xf}, 0x2, &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x0) (async) syz_open_pts() syz_open_pts() syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x2, 0x1, 0x0) bind(r0, &(0x7f0000000000), 0x10) (async) listen(r0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r1}, 0xffffffffffffffff, 0x13}, {{r1}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) (async) setsockopt$sock_int(r0, 0xffff, 0x1002, 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) (async) accept(r0, &(0x7f0000000480)=@un=@file={0x0, ""/260}, &(0x7f0000000180)=0x106) 1.474586ms ago: executing program 1 (id=549): execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r0 = socket(0x1, 0x2, 0x40) syz_emit_ethernet(0x42, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa60aaaaaaaa08004806003400640003069d90780000002cffffffff070b1effffffff00000010000e009078000b7832000003ff0000000100000009fabc6fddfa9a52c0bd3ef2e7c3ba46f9fb6567af93970cc084f554e0d570c52ccab83c2d12f8dbf771b98aaef7513b9f7fdfe12b46885915c400fe75571ea73d948a1152013d449f9363717a403e5315c7443e1099fee631822ccf39c7a7e6adc30deabd8edb1faf5164179274f11740f3beba278b2e4c9568cf8b57853600e42454dcb7efca14f05a00d770b1a6cf71dd"]) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x20, 0x2, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)="55f8f5782087a072a82ec35f78d14780f518", 0x12) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x2, 0x0) r3 = socket(0x18, 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x5) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f0000000240)) sysctl$net_inet_ah(&(0x7f0000000140)={0x4, 0x2, 0x33, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000440)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x20, 0x40a}, 0x4) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f00000001c0)) ioctl$FIONREAD(r1, 0x80206979, &(0x7f00000000c0)) readlink(&(0x7f0000000080)='./file0\x00', 0x0, 0xe9d5176748d01b19) 340.29µs ago: executing program 5 (id=550): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r3 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r3, 0x80487008, &(0x7f0000000140)=0x1) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) sendmsg$unix(r4, &(0x7f0000000080)={&(0x7f0000000040)=@file={0x170, './file0\x00'}, 0xa, 0x0}, 0xe) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) getsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f00000001c0), &(0x7f0000000100)=0x4) r5 = socket(0x18, 0xc003, 0x3a) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000440)="2e06b5a54fdc15d0e5ba5cd619e395d842161263a5bcf8d360b109113dd229c0dd47d6ff4f038bc8f40206bf8a1ef55ba04d8d4e4174e29e744d8606170795a2edaf3456112807f6d55fd9c3815257c10e07e8f0be3a7366f8123a42cb43f4302bf6b149e9b9bab6116b11b8ae693250f7fa8080cd8a2fc7c7e4ebf5c106c80fd386c7786c0421183de7b10dbde8040d96f51522423ca8e0f70989e1530cd2eaf7faaad41584384bf407ed7bed944e099fd18b59c86af22bb45fe92b05087191e530bc83a9e0975fc2a0f5988e9ae663b4fe25f69d661eb4ad0842a7be35dbe21e8911da844c7dce8d80f66713e13d96b30d5b4a13fb15282cf2a61a24880049b94a6e46bce752ff3230cd36789c42b37db904fd77060a84ca071839da23ef66bb45a18c9face3b3982d2edef1234405ec89e3ac812208780a2866cf52a8bbbe80b77e07f53d751ea0da7185414c403df8282d22a45b8a5ee7dc9b534106d98bb65aea3af32dea9a7a9881e7fdfbb46801408f1b94018abf7d5816d4e0344ab9dd8a6d43a2503180582f6d553e1a81fe4e8d68fafcd095560e83feda2fcd68d73fc71d7ff20511859f1b895d1a3f42970f1fb4dd61487901de9d5efcb92d63466e92bbe485aaf63988e255cbb607ac7ff9ee30732dd2482be6280b8946e32cf0ec48fc7c89e53c4aecb4af7af69e0dc04dd17405ce02898adf547f851e885964f836ec6b04d77f14d85025e415a01553d6b7e5dd946be3ea735515a624f74e2c09b863881e4412135ecbdd1f1ec73762d2b1bcb0f04f0bd1369f9c374d73fb9cc7465bbdb5e77078870423340ea32c9f49980888427f49eb9d4daf99a87d6d6e44aecd7dfeba2c6f1844b2b537d6de1ba1c8bd90f7ec014b4c84a9bfba26bb92b0d740de1e20c97ec18417a1f3d68fea076ad9aeb884efa6cedf35845dd4bc6eae82e37a2304c76ab6e7467f2d868e76df28b7dbba656b0998da5d54a00e706e8dc0699e961bfe8b6cef550c66eb7e5a40ef12896fb571be1d73d817d17e177f06c0679c784feb85129836c8724bf0c3e6026a3eb831c5335475950287c988059987f9198a074e7d92cdcf6c196d91f9368490b5d5f7033374c27b2aed8732fb84933a8fbe2bcaa68b68eea3400b5b022a2fae01ef3df9bf1ba0739b54faaa56ebe38c40fc6d1d99522c07af188a", 0x34e}], 0x1) ioctl$TIOCSETA(r6, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x400003, "000000000000000000000000d89ba2dd00", 0x11, 0x10008}) setsockopt(r5, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0x66, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0x7500, 0x6}, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) 0s ago: executing program 1 (id=551): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x2d, 0x2, 0x4}, {0x40, 0x1, 0xff, 0x7}, {0x6, 0x15, 0x4, 0xfffffefe}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000100)="050000003b12a840000018e1eee30d2baefcca3e0600096948cd0100badb55abe01959c700", &(0x7f0000000000)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, &(0x7f0000001300), 0x4) setitimer(0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, 0x0, 0x0) socket(0x11, 0x3, 0x0) getsockopt(0xffffffffffffffff, 0x8, 0xfff, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. login: pckbd_enable: command error WARNING: thread `nfsio' (324234) exits with status -1 WARNING: thread `nfsio' (86790) exits with status -1 WARNING: thread `nfsio' (297936) exits with status -1 WARNING: thread `nfsio' (122429) exits with status -1 uvn_flush: obj=0xfffffd80699537e0, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error lo0: can't handle af53 0#+"$%.!",%: #/--!.$ %22/2 OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) login: pckbd_enable: command error pmap_unwire: wiring for pmap 0xfffffd806c969600 va 0x200000001000 didn't change! witness: lock order reversal: 1st 0xffff800001582b38 sbufsnd (&so->so_snd.sb_lock) 2nd 0xfffffd806c9bb6b0 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff834013ba -> 0xffffffff833759dd is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 soreceive+0x27d #3 fifo_read+0x117 #4 VOP_READ+0x101 #5 vn_rdwr+0x15b #6 vndsetcred+0xa1 #7 vndioctl+0xdf9 #8 VOP_IOCTL+0xac #9 vn_ioctl+0xf8 #10 sys_ioctl+0x674 #11 syscall+0xbd4 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 sosplice+0x312 #3 sys_setsockopt+0x2ba #4 syscall+0xbd4 #5 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806c9bb6b0,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806c9bb698,1) at rw_do_enter_write+0xba rrw_enter(fffffd806c9bb698,1) at rrw_enter+0xc6 VOP_LOCK(fffffd80649cca40,2001) at VOP_LOCK+0xbd vn_lock(fffffd80649cca40,2001) at vn_lock+0xa4 vfs_lookup(ffff8000373f08b0) at vfs_lookup+0x11c namei(ffff8000373f08b0) at namei+0x7ca unp_connect(ffff800001582950,fffffd80660e0d00,ffff8000fffea7f0) at unp_connect+0x29d uipc_dgram_send(ffff800001582950,fffffd80660e0c00,fffffd80660e0d00,0) at uipc_dgram_send+0x163 sosend(ffff800001582950,fffffd80660e0d00,ffff8000373f0b38,0,0,e) at sosend+0x804 sendit(ffff8000fffea7f0,6,ffff8000373f0cb8,e,ffff8000373f0d70) at sendit+0x5a5 sys_sendmsg(ffff8000fffea7f0,ffff8000373f0e20,ffff8000373f0d70) at sys_sendmsg+0x246 syscall(ffff8000373f0e20) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x85d24fffb40, count: -15 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff8000373f0520 rbx 0 rdx 0xffff800001474000 rcx 0xffff8000fffea7f0 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff8000373f0400 r9 0x8080808080808080 r10 0xcf90150f6394bdc8 r11 0xd060cd5d26bca7dd r12 0xfffffd8003f41880 r13 0xfffffd8004729790 r14 0x3 r15 0xffffffff8340ae0e substchar+0x3fb2 rip 0xffffffff82f02855 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000373f0510 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=289752 pid=84908 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffeb4e8,0xffff8000fffea568 process=0xffff80003b404020 user=0xffff8000373eb000, vmspace=0xfffffd806c96a208 estcpu=36, cpticks=3, pctcpu=0.0, user=0, sys=3, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 24354 63228 51342 0 2 0 syz-executor 79270 253674 77234 0 7 0 syz-executor 79270 19904 77234 0 2 0x4000000 syz-executor 84908 124986 98177 0 2 0 syz-executor *84908 289752 98177 0 7 0x4000000 syz-executor 84908 427014 98177 0 3 0x4000080 fsleep syz-executor 96653 162337 92975 0 3 0x80 nanoslp syz-executor 96653 118019 92975 0 3 0x4000080 kqsel syz-executor 96653 376833 92975 0 3 0x4000080 fsleep syz-executor 99930 116166 99964 0 3 0x80 nanoslp syz-executor 99930 194143 99964 0 3 0x4000080 fsleep syz-executor 99930 394315 99964 0 3 0x4000080 nanoslp syz-executor 89374 439908 1 0 3 0x100083 ttyin getty 22787 173082 0 0 3 0x14200 acct acct 15028 500086 86853 0 3 0x82 wait syz-executor 51342 60198 86853 0 3 0x82 nanoslp syz-executor 98177 507384 86853 0 3 0x82 nanoslp syz-executor 92975 376106 86853 0 3 0x82 nanoslp syz-executor 99964 200798 86853 0 3 0x82 nanoslp syz-executor 47661 48642 86853 0 3 0x82 wait syz-executor 77234 192635 86853 0 3 0x82 nanoslp syz-executor 30645 198147 86853 0 3 0x82 nanoslp syz-executor 86853 20595 51399 0 3 0x82 kqread syz-executor 51399 246163 45922 0 3 0x10008a sigsusp ksh 45922 393049 28351 0 3 0x98 kqread sshd-session 28351 184307 26657 0 3 0x92 kqread sshd-session 26657 143223 1 0 3 0x88 kqread sshd 94489 439704 48931 74 3 0x1100092 bpf pflogd 48931 285226 1 0 3 0x80 sbwait pflogd 48888 486749 70462 73 3 0x1100090 kqread syslogd 70462 252412 1 0 3 0x100082 sbwait syslogd 61612 26976 1 0 3 0x100080 kqread resolvd 79871 298734 68236 77 3 0x100092 kqread dhcpleased 49119 483427 68236 77 3 0x100092 kqread dhcpleased 68236 428830 1 0 3 0x80 kqread dhcpleased 85024 283630 0 0 3 0x14200 bored smr 67815 367106 0 0 3 0x14200 pgzero zerothread 51984 215713 0 0 3 0x14200 aiodoned aiodoned 35924 446088 0 0 3 0x14200 syncer update 44233 60278 0 0 3 0x14200 cleaner cleaner 10142 453644 0 0 3 0x14200 reaper reaper 84268 491312 0 0 3 0x14200 pgdaemon pagedaemon 43349 138168 0 0 3 0x14200 bored viomb 92112 518338 0 0 3 0x40014200 acpi0 acpi0 91828 227750 0 0 3 0x40014200 idle1 80238 171257 0 0 3 0x14200 bored softnet1 44285 309253 0 0 2 0x14200 softnet0 87119 328174 0 0 3 0x14200 bored systqmp 27287 177716 0 0 3 0x14200 bored systq 34791 328575 0 0 3 0x14200 tmoslp softclockmp 67753 195538 0 0 3 0x40014200 tmoslp softclock 95132 253742 0 0 3 0x40014200 idle0 1 200409 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 84908 (syz-executor) thread 0xffff8000fffea7f0 (289752) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83933048) #0 witness_lock+0x5f1 #1 unp_connect+0x28c #2 uipc_dgram_send+0x163 #3 sosend+0x804 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff800001582b38) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 sosend+0x2e9 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10244 11174K 11494K 166960K 12562 0 pcb 17 14K 16K 166960K 257 0 rtable 197 9K 10K 166960K 426 0 pf 39 18K 82K 166960K 173 0 ifaddr 39 6K 8K 166960K 83 0 ifgroup 60 2K 2K 166960K 124 0 sysctl 4 1K 9K 166960K 17 0 counters 72 37K 37K 166960K 418 0 ioctlops 0 0K 4K 166960K 1865 0 iov 0 0K 14K 166960K 37 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1398 88K 88K 166960K 2001 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 13K 166960K 14 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 33 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 709 0 sigio 0 0K 0K 166960K 22 0 proc 72 115K 180K 166960K 579 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 79 0 in_multi 77 5K 7K 166960K 126 0 ether_multi 1 0K 0K 166960K 7 0 mrt 1 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 223 996K 996K 166960K 223 0 exec 0 0K 1K 166960K 442 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 260 152K 167K 166960K 7996 0 UVM aobj 20 6K 6K 166960K 20 0 pinsyscall 43 86K 102K 166960K 1816 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 42 0 NDP 13 0K 2K 166960K 54 0 temp 77 8668K 8740K 166960K 33644 0 kqueue 14 22K 30K 166960K 149 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 145 0 142 1 0 1 1 0 8 0 rtentry 176 124 0 47 5 0 5 5 0 8 0 unpcb 144 339 0 321 3 1 2 2 0 8 1 syncache 336 5 0 5 2 1 1 1 0 8 1 tcpqe 32 1 0 1 1 0 1 1 0 8 1 tcpcb 736 144 0 137 2 0 2 2 0 8 1 arp 136 19 0 6 1 0 1 1 0 8 0 inpcb 328 867 0 854 13 6 7 7 0 8 5 nd6 152 27 0 6 2 0 2 2 0 8 0 pkpcb 40 5 0 5 2 1 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 169 0 168 2 1 1 1 0 8 0 pppxif 1504 3 0 2 1 0 1 1 0 8 0 pffrag 232 7 0 2 1 0 1 1 0 482 0 pffrnode 88 7 0 2 1 0 1 1 0 8 0 pffrent 40 10 0 5 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 63 0 1 1 0 1 1 0 8 0 pfstkey 128 63 0 1 2 0 2 2 0 8 0 pfstate 448 63 0 1 7 0 7 7 0 8 0 pfrule 1344 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 537 0 230 31 3 28 31 0 8 7 art_table 40 538 0 230 5 0 5 5 0 8 0 art_node 32 124 0 56 1 0 1 1 0 8 0 sysvmsgpl 40 7 0 3 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 30 0 20 1 0 1 1 0 8 0 shmpl 112 15 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2663 0 1158 96 0 96 96 0 8 0 ffsino 296 2663 0 1158 118 1 117 118 0 8 0 nchpl 144 3640 0 1941 64 0 64 64 0 8 0 rtmask 32 15 0 15 2 1 1 1 0 8 1 vnodes 216 3126 0 0 174 0 174 174 0 8 0 namei 1024 12175 0 12174 3 2 1 2 0 8 0 percpumem 16 224 0 173 1 0 1 1 0 8 0 vcpupl 3968 2 0 0 1 0 1 1 0 8 0 vmpool 840 2 0 0 1 0 1 1 0 8 0 kstatmem 264 80 0 50 4 1 3 3 0 8 0 scsiplug 72 3 0 3 2 1 1 1 0 8 1 scxspl 216 16588 0 16588 10 8 2 8 1 8 2 plimitpl 152 303 0 285 1 0 1 1 0 8 0 sigapl 424 998 0 949 7 1 6 7 0 8 0 knotepl 120 442 0 0 14 0 14 14 0 8 0 kqueuepl 224 449 0 437 5 0 5 5 0 8 4 pipepl 344 180 0 153 3 0 3 3 0 8 0 fdescpl 528 977 0 945 3 0 3 3 0 8 0 filepl 160 5908 0 5681 20 4 16 16 0 8 4 lockfpl 104 268 0 266 1 0 1 1 0 8 0 lockfspl 48 122 0 120 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 54 0 37 1 0 1 1 0 8 0 ucredpl 104 960 0 946 1 0 1 1 0 8 0 zombiepl 144 952 0 949 1 0 1 1 0 8 0 processpl 1232 998 0 949 5 0 5 5 0 8 0 procpl 664 1968 0 1912 7 1 6 7 0 8 0 sockpl 752 1368 0 1334 17 6 11 11 0 8 6 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 130 0 0 17 0 17 17 0 8 0 mcl2k 2048 35 0 0 5 0 5 5 0 8 0 mtagpl 96 20 0 0 1 0 1 1 0 8 0 mbufpl 256 653 0 0 41 0 41 41 0 8 0 bufpl 280 6295 0 158 439 0 439 439 0 8 0 anonpl 32 11494 0 0 93 0 93 93 0 246 0 amapchunkpl 152 27273 0 26667 45 13 32 36 0 158 4 amappl16 200 3450 0 3339 48 29 19 27 0 8 8 amappl15 192 24 0 23 1 0 1 1 0 8 0 amappl14 184 4 0 4 2 1 1 1 0 8 1 amappl13 176 423 0 422 1 0 1 1 0 8 0 amappl12 168 1357 0 1315 3 0 3 3 0 8 0 amappl11 160 6 0 6 2 2 0 1 0 8 0 amappl10 152 53 0 39 1 0 1 1 0 8 0 amappl9 144 262 0 261 1 0 1 1 0 8 0 amappl8 136 27 0 23 1 0 1 1 0 8 0 amappl7 128 94 0 93 1 0 1 1 0 8 0 amappl6 120 280 0 265 1 0 1 1 0 8 0 amappl5 112 76 0 65 1 0 1 1 0 8 0 amappl4 104 418 0 386 1 0 1 1 0 8 0 amappl3 96 4458 0 4358 3 0 3 3 0 8 0 amappl2 88 1112 0 1036 2 0 2 2 0 8 0 amappl1 80 11752 0 11142 15 0 15 15 0 8 0 amappl 88 7152 0 6968 5 0 5 5 0 92 0 uvmvnodes 80 120 0 0 3 0 3 3 0 8 0 dma32768 32768 1 0 1 1 0 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 19 0 0 1 0 1 1 0 8 0 uaddrrnd 24 978 0 946 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 978 0 946 1 0 1 1 0 8 0 vmmpekpl 168 9376 0 9336 3 0 3 3 0 8 0 vmmpepl 168 68733 0 66639 122 20 102 109 0 357 8 vmsppl 488 977 0 946 5 1 4 5 0 8 0 rwobjpl 80 20891 0 19707 35 5 30 32 0 8 1 pdppl 4096 1968 0 1894 103 29 74 86 0 8 0 pvpl 32 19077 0 0 154 0 154 154 0 265 0 pmappl 256 979 0 946 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 322 0 38 9 0 9 9 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff837bbff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83932e40) at __mp_lock+0x192 intr_handler(ffff8000373f5fb0,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x25 __mp_lock(ffffffff83932e40) at __mp_lock+0x1a3 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x741833828df0, count: -11 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806c9bb6b0,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806c9bb698,1) at rw_do_enter_write+0xba rrw_enter(fffffd806c9bb698,1) at rrw_enter+0xc6 VOP_LOCK(fffffd80649cca40,2001) at VOP_LOCK+0xbd vn_lock(fffffd80649cca40,2001) at vn_lock+0xa4 vfs_lookup(ffff8000373f08b0) at vfs_lookup+0x11c namei(ffff8000373f08b0) at namei+0x7ca unp_connect(ffff800001582950,fffffd80660e0d00,ffff8000fffea7f0) at unp_connect+0x29d uipc_dgram_send(ffff800001582950,fffffd80660e0c00,fffffd80660e0d00,0) at uipc_dgram_send+0x163 sosend(ffff800001582950,fffffd80660e0d00,ffff8000373f0b38,0,0,e) at sosend+0x804 sendit(ffff8000fffea7f0,6,ffff8000373f0cb8,e,ffff8000373f0d70) at sendit+0x5a5 sys_sendmsg(ffff8000fffea7f0,ffff8000373f0e20,ffff8000373f0d70) at sys_sendmsg+0x246 syscall(ffff8000373f0e20) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x85d24fffb40, count: -15