last executing test programs: 7.748809666s ago: executing program 2 (id=329): sysctl$net_inet6_icmp6(&(0x7f0000000140)={0x4, 0x18, 0x3a, 0x8}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x43ff) open$dir(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) 6.622913201s ago: executing program 2 (id=332): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) mknodat(r0, &(0x7f0000000240)='./bus/file0\x00', 0x0, 0x4800) r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r2, 0xc00c7006, &(0x7f0000000080)=0x500) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) sysctl$vm(&(0x7f0000000040)={0x2, 0x3}, 0x2, &(0x7f00000001c0)="e4990300", &(0x7f0000000100)=0x4, 0x0, 0x0) getsockname$inet(r1, 0x0, &(0x7f00000002c0)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x10, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) minherit(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004440)={{0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xb6f4, 0xff, 0x0, 0x0, 0x0, 0xffffffffffffe165, 0x7}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) fcntl$lock(r3, 0x7, &(0x7f00000003c0)={0x0, 0x2, 0x7fffffffffffffff, 0x200000001}) kqueue() syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaafe4d0a5c56a086dd61a42e330018000000000000000043659d8a000000000000000000000000000000003259"]) r4 = syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r5 = open(&(0x7f0000000140)='./file0\x00', 0x85b9e9f4fa850faa, 0xa8) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x7, 0x369000000, 0xffffffffffffffff}) ioctl$WSMOUSEIO_GETPARAMS(r6, 0x80105727, &(0x7f0000000080)={&(0x7f0000000240)=[{0x21, 0x4}], 0x1}) ioctl$VNDIOCGET(0xffffffffffffff9c, 0xc4104603, &(0x7f0000000540)={'./bus/file0\x00', 0xff, 0x100, 0x3ff}) r7 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r7, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) kqueue() kevent(r5, &(0x7f0000000200)=[{{r5}, 0xfffffffffffffffe, 0x29, 0x80, 0x2, 0x20000c}, {{r5}, 0xfffffffffffffffe, 0x102, 0x10, 0x4, 0x8000000000000000}], 0x8, 0x0, 0x15, 0x0) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f0000000500)) 6.4381892s ago: executing program 2 (id=339): mknod(&(0x7f0000000040)='./bus\x00', 0x40, 0xed1372a7) open$dir(&(0x7f00000000c0)='./bus\x00', 0x80, 0x1a9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) 6.437820745s ago: executing program 2 (id=340): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r0, 0x400c570a, &(0x7f0000000180)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000140)={0x5, &(0x7f0000000280)=[{0x1d, 0x1, 0x0, 0xfffff4b5}, {0x25, 0x0, 0x2, 0x80000010}, {0xc, 0xff, 0x30, 0xb}, {0x84, 0x8, 0xae, 0x8}, {0x6, 0x4, 0x7, 0x800}]}) write(r1, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) (async) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) syz_emit_ethernet(0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa0b09408a08aabb314cc77a806f0800450000320000000001019078e0000001000000054e224e210008907899e57ae7417ead3732479e2a49fc04e445964adbfd52"]) (async) syz_emit_ethernet(0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaa0b09408a08aabb314cc77a806f0800450000320000000001019078e0000001000000054e224e210008907899e57ae7417ead3732479e2a49fc04e445964adbfd52"]) syz_emit_ethernet(0x112, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) (async) syz_emit_ethernet(0x112, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) 4.872731816s ago: executing program 2 (id=349): socket(0x18, 0x3, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff], [], [], [0x0, 0x0, 0xffffffffffffffff], [{}, {}, {0x0, 0x0, 0x0, 0x800000000000}]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/102, 0x66}, 0x80003f8d}, 0x10, 0x841, 0x0) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x10, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x45d48) ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40000846, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) setreuid(0xee00, 0x0) kevent(r1, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSRSIG(r2, 0x80044272, &(0x7f0000000040)=0xd2a0) 3.774526802s ago: executing program 2 (id=373): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0xcd, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x48a0}]}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000500)="000000ae6c8829ab2b3007837e2d726122288cd021060e7fc87c4c9e6e0acc24fb676ec93f2e68110e9f81d200e1f9ef1da255230a089866647d23850c4dce6c", 0x40}], 0x1, 0x200800) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$BIOCGDIRFILT(r0, 0x4004427c, &(0x7f0000000100)) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="a612165d535a36", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(0xffffffffffffffff, 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) ktrace(&(0x7f0000000040)='./file0\x00', 0x1, 0x40000f08, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) writev(r1, 0x0, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000140)="ea00000100000000", 0x8) r2 = syz_open_pts() writev(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_pts() r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCCONS(r4, 0x80047462, &(0x7f0000000040)=0x9) ioctl$TIOCCONS(0xffffffffffffffff, 0x80047462, 0x0) mmap(&(0x7f000032a000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x1, 0x800) r5 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) writev(r5, &(0x7f0000000100)=[{0x0}], 0x1) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0xffffffff, 0xa3cf, 0x28000083, 0xfffff18d, "142e28a47e7ce2dbe73100ffffff0d1300", 0x1000, 0x80000080}) 2.037935365s ago: executing program 3 (id=394): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0)="ed", 0x1) socket(0x18, 0x2, 0x0) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000140)='\x00\x00 \x00', 0x4) (async) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000140)='\x00\x00 \x00', 0x4) socket$inet(0x2, 0x2, 0x0) (async) r3 = socket$inet(0x2, 0x2, 0x0) getsockname$inet(0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000140)=0xc) r4 = dup(r3) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) ioctl$TIOCSETA(r5, 0xc0284416, &(0x7f0000000080)={0x400, 0x1, 0x10000, 0x6, "cd002200002181baab4c8c6d09b975390a000004", 0x6, 0xfffffffe}) setsockopt$inet_opts(r4, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4) connect$inet6(r4, &(0x7f0000000040)={0x18, 0x2, 0xed, 0x8}, 0xc) (async) connect$inet6(r4, &(0x7f0000000040)={0x18, 0x2, 0xed, 0x8}, 0xc) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000300)=""/163, 0xa3}], 0x1, 0x0}, 0x2}, 0x10, 0x1062, 0x0) readv(r1, &(0x7f0000000440)=[{0x0, 0x20}], 0x1) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e) (async) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) recvmmsg(r1, &(0x7f0000000840)={0x0, 0x6}, 0x10, 0x802, 0x0) (async) recvmmsg(r1, &(0x7f0000000840)={0x0, 0x6}, 0x10, 0x802, 0x0) close(r0) 1.821653272s ago: executing program 6 (id=400): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x8000}) r0 = syz_open_pts() close(r0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r1, 0xc1045763, &(0x7f0000000380)={0xfffffff5, [{0x2, 0x7f}, {0x2, 0x1}, {0x2}, {0x3, 0xe}, {0x1, 0xffff8001}, {0x3, 0x9}, {0x1, 0x2}, {0x3, 0x100}, {0x3, 0x4}, {0x1, 0x2}, {0x3, 0x5}, {0x0, 0x80000000}, {0x3, 0x1ff}, {0x2, 0x6}, {0x3, 0xa}, {0x1, 0xfffffff8}, {0x2, 0x9}, {0x3, 0xffffffff}, {0x1, 0x14cb7aa9}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0x1ff}, {0x1, 0x8}, {0x1, 0xc34}, {0x2, 0x6}, {0x2, 0x5998}, {0x3, 0x2}, {0x2, 0xe}, {0x1, 0xc}, {0x3, 0x1}, {0x1, 0x6}, {0x3}]}) getrlimit(0x5, &(0x7f0000000080)) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000040)={0xfffffff7, 0xffff, 0x1, 0xfffdffe0, "72b3b392007d902b56d864d3c3a3f4d3c900", 0x5, 0x88}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000002000)="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", 0x6e9}], 0x1) 1.591931245s ago: executing program 5 (id=401): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) pwritev(r0, &(0x7f0000002740)=[{&(0x7f0000000000)="370aea79bb", 0x5}], 0x1, 0x6cb) ftruncate(r0, 0x40002) open(&(0x7f0000000080)='./file0\x00', 0x100, 0x110) pwrite(r0, &(0x7f00000000c0)="17c0d2761dae", 0x6, 0x5) open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) (async) pwritev(r0, &(0x7f0000002740)=[{&(0x7f0000000000)="370aea79bb", 0x5}], 0x1, 0x6cb) (async) ftruncate(r0, 0x40002) (async) open(&(0x7f0000000080)='./file0\x00', 0x100, 0x110) (async) pwrite(r0, &(0x7f00000000c0)="17c0d2761dae", 0x6, 0x5) (async) 1.590766125s ago: executing program 5 (id=402): r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x61) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) r1 = getpid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) r3 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1003, &(0x7f00000000c0)=0x100001, 0x3) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x4000011e, r1) syz_open_pts() mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0) writev(r2, &(0x7f00000008c0)=[{0x0}], 0x1) sysctl$net_inet_etherip(&(0x7f0000000100)={0x4, 0x2, 0x61, 0x3}, 0x4, &(0x7f0000000140)="635be1a6b0c9d165dcdfa353fd6aca7c6c5a3fab837ff98c7fa938530ecf6375bc7df9573a3fcfe8bd88ba55424bd20468df69", &(0x7f0000000180)=0x33, &(0x7f00000001c0)="a1f1a3c4d27344fbb126ac", 0xb) mlock(&(0x7f0000000000/0x3000)=nil, 0x3000) sysctl$hw(&(0x7f0000000000)={0x6, 0x1c}, 0x2, &(0x7f0000000040)="fe", &(0x7f00000000c0)=0x1, 0x0, 0x0) 1.381976s ago: executing program 6 (id=403): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) r0 = socket(0x2, 0x2, 0x0) dup(r0) socket(0x18, 0x3, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0xfffff115}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x1}, {0x4, 0xe2, 0xf, 0x100}, {0x3, 0x7, 0xf15, 0x4}, {0x788c, 0xffff, 0x8, 0x9}, {0x4, 0x800, 0x3, 0x9}, {0x9, 0x9, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x3, 0xfffffffc, 0x800, 0x8bfd}, {0x0, 0x0, 0xa, 0xde}, {0x3, 0xa, 0x800000, 0xa6a}, {0x401, 0x6, 0x9, 0xa1}, {0x3, 0x6e2, 0x2, 0x6f5fc48b}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x2, 0x2, 0x69}]}) ioctl$FIONREAD(0xffffffffffffffff, 0x80206919, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(r2, &(0x7f0000000080)=[{0x0}], 0x1) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x402}]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="c5eabfedf9e2011c5dc17154e0ec16c8c7d3335c92", 0x15}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f00000004c0)={&(0x7f00000000c0)='./file0\x00', 0x5, 0x0}) r5 = open(0x0, 0x80000000000206, 0xd6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) execve(0x0, 0x0, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, 0x0) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000180)={0x0, 0x0}) write(r3, &(0x7f00000002c0)="007bf99e76148d16ba76f95ef39aa8e800"/26, 0x1a) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r6 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) 1.381789951s ago: executing program 3 (id=404): mprotect(&(0x7f00007bc000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$unix(0x1, 0x5, 0x0) mmap(&(0x7f0000413000/0x4000)=nil, 0x4000, 0x1, 0x2012, r0, 0x280) (async) mmap(&(0x7f0000413000/0x4000)=nil, 0x4000, 0x1, 0x2012, r0, 0x280) munlockall() 1.381030447s ago: executing program 1 (id=405): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x2412df7) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000002f40)="79ed", 0x2}], 0x1) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="89ffa22f3c25aaaaaaaaaabb86dd60f61900001c0600fe8000000000000000000000000000bb0d000000000d000000080000000313004e221770", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="709b"]) 1.349321444s ago: executing program 5 (id=407): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000a80)=ANY=[@ANYRES16=r1], 0x401, 0x0) msgsnd(r1, 0x0, 0xfffffffffffffcc3, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xcd50441a, &(0x7f00000003c0)={0x621, 0x621, 0x2, 0x2000000, "3d80000006020000040080000000000000000040", 0x3, 0xff}) ioctl$KDMKTONE(r2, 0x20004b08, &(0x7f0000000140)=0xc22) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="d29ef4", 0x3}], 0x1) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x5) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f0000000140)=[{0x22, 0x4005}, {0x41, 0x1}], 0x2}) socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) mkdir(&(0x7f0000000180)='./file0/file0/..\x00', 0x5292725df42e5924) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file0\x00') rename(&(0x7f0000000140)='./file0/file0/..\x00', &(0x7f00000001c0)='./file0/file0/..\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r5 = socket(0x2, 0x3, 0x0) setgid(0xffffffffffffffff) setuid(0xffffffffffffffff) setregid(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r5, 0x80146945, &(0x7f00000001c0)) r6 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) 1.123146549s ago: executing program 7 (id=408): mknod(&(0x7f0000000380)='./bus\x00', 0x100000000205f, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x2, &(0x7f0000000240)=[{0x34, 0x6, 0xfd, 0x6}, {0xb, 0x0, 0xfa, 0xfff}]}) writev(r0, &(0x7f0000000240), 0x0) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000080)=0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x802069b4, &(0x7f0000000300)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) link(&(0x7f0000000080)='./bus\x00', &(0x7f0000000100)='./file0\x00') ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x5, &(0x7f00000002c0)=[{0x7, 0x1, 0x0, 0xfffff4b2}, {0x35, 0x0, 0x2, 0x7ffffffc}, {0x84, 0x0, 0xae, 0x9}, {0x6, 0x6, 0x7, 0x800}, {0x9, 0x1, 0x0, 0x6}]}) socket(0x1, 0x2, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) poll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x1}], 0x1, 0x0) r3 = socket(0x2, 0x4001, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x7, 0x1, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @icmp=@generic={0x9, 0x6, 0x0, "569864a1"}}}}}) r4 = dup(r3) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETA(r5, 0xc0104454, &(0x7f00000000c0)={0xa, 0xffff0691, 0x4, 0x0, "97a2e900", 0x7, 0x4}) r6 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) poll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x1}], 0x1, 0x2000) close(r6) r7 = dup(r2) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$FIONREAD(r7, 0xc0106924, &(0x7f00000000c0)) 1.122663682s ago: executing program 5 (id=409): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCGBLEN(r0, 0x40044266, &(0x7f0000000140)) setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) r1 = syz_open_pts() close(r1) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r2, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x95}, {0x9, 0x80000}}, 0x0) setitimer(0x0, &(0x7f0000000000)={{0x8, 0x1}, {0x9, 0xb}}, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffe, 0xffffffffffffffff, 0x400000, 0x1, 0x4000000000000, 0xfffffffffffffffc, 0x0, 0x5}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x100009ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_open_pts() r3 = socket(0x1, 0x4, 0x9) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000100)={0x80978c, 0x1, 0xef7fff00, 0x80a19a, "bf08000100f1675910812cc900", 0x8, 0x100}) r4 = socket(0x18, 0x3, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1003, &(0x7f00000000c0)=0x100001, 0x3) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x7, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x9, 0x0, 0x0, 0x0, 0xfffffe0c) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x248f, 0xfffffde2, 0xffff, 0x1, 0x24, 0x6, 0x1, 0x0, 0x0, 0x1, 0x9}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KDGETLED(r5, 0x40044b41, &(0x7f0000000040)) r6 = socket(0x11, 0x3, 0x0) sendto$unix(r6, &(0x7f0000000280)="b1000501600000000000000007000000201c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af63003728211e000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e4b2fff040ff00"/177, 0xb1, 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffe, 0x1, "ff0107002015c8a32d00000065c0bdf9c6f04aaf", 0x0, 0x40000}) socket(0x18, 0x3, 0x1) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="73b9ccc3000000f70004000086dd6000000000183a01feab4000000000b6c60c38ea608380000010000001"]) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x3}, 0x8) 1.122195324s ago: executing program 6 (id=410): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000380)=[{0x2c, 0x10, 0x12, 0x1}, {0xb1, 0x10, 0x2}, {0x16, 0xa, 0x25, 0xc1}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r2, 0x0, 0x0, 0x43}}) ioctl$SPKRTUNE(0xffffffffffffffff, 0x20005302, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f95f84cf71b59c7afec37582", &(0x7f0000000080)=0x2, 0x0, 0x37) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[]) 993.266634ms ago: executing program 1 (id=411): lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000300)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x10, 0xb, 0x1}, {0xb1, 0x10, 0x2, 0xffff}, {0x16, 0x4, 0x7f, 0x400f}]}) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x4129ff) (async) open(&(0x7f00000001c0)='./file0\x00', 0x80, 0x2c) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x2) (async) r0 = socket(0x1, 0x2, 0x0) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r2 = syz_open_pts() (async) r3 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r3, 0x80286987, 0x0) (async, rerun: 32) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f0000000480)) (rerun: 32) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000080)=0x9) (async) r4 = accept(r0, &(0x7f00000000c0)=@in, &(0x7f0000000140)=0xc) getsockopt$sock_linger(r4, 0xffff, 0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x8) (async) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x12}, 0x4, &(0x7f0000000140)="9b642f4b", &(0x7f0000000040)=0x4, 0x0, 0x0) (async) r5 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x4000011e, r5) ktrace(&(0x7f0000000400)='./file0\x00', 0x1, 0x804, r5) r6 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000380), &(0x7f00000003c0)=0xc) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x4, 0xffffffff, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x8000, 0x81}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000180)="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", &(0x7f0000000080)=0xaa, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async, rerun: 64) syz_emit_ethernet(0x62, &(0x7f0000000280)={@local, @local, [], {@ipv4={0x800, {{0x13, 0x4, 0x0, 0x0, 0x54, 0x65, 0x85, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0}, @rand_addr=0xa, {[@lsrr={0x83, 0x7, 0x6, [@loopback]}, @rr={0x7, 0x7, 0x83, [@multicast1]}, @end, @ra={0x94, 0x6, 0x2}, @noop, @generic={0x0, 0xe, "66c623ce0463a269afc739f4"}, @lsrr={0x83, 0xb, 0xc6, [@local={0xac, 0x14, 0x0}, @broadcast]}, @lsrr={0x83, 0x7, 0x5, [@loopback]}]}}, @udp={{0x0, 0x2, 0x8}}}}}}) (rerun: 64) 992.979145ms ago: executing program 7 (id=412): select(0x40, &(0x7f0000000180)={0x4e, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x6}, 0x0, 0x0, 0x0) (async) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0xc8) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x3) (async) r1 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x10c) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) (async) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000080)}, {&(0x7f00000001c0)="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", 0xfa}, {&(0x7f00000000c0)="c5bcec1e54091c380c1b0ec2982c2c478e03e7d5f5f36575609e6580a56a8704e4febc", 0x23}, {&(0x7f00000002c0)="db14af12d7ad41151897c62de375beb452f71410fd3e61e03934d4b41bc17a6ee8d3d87f8546ee1ec717efe52950724cde8a1e65aa7910f9b4c4a0b76dcb64e793c2fd71ee2b2c39fac1d5a45b455ee4efbe489ff5b7cf882d77583adb1c56e051aa15904c4dc90717a582c9b3aaa12479c08906c59d1721217f4ee1923967c6", 0x80}, {&(0x7f0000000340)="b2dc0b982ab7cde44b5315f33d36b6a5de86709bad36e05dab420cecad21fa3d9b63f28af44577277cae74525e58d97988615fb6832090580c946d2a2d37cd9f82e5e21d041b0da02daca2b5a928bb27ae30d84f6acc2d78c5674e1b30aaee95cdaf50ea1f373541aeb11cf646f16439d105b3f04c5317378057e26481703963fb413a39eaa04b002f80b2ce93c6906162d6bb2ff0878c54c1eb6f18a841b57b3596ad076532896ca6ae875b8da928f6e685f3c2", 0xb4}, {&(0x7f0000000100)="feeace24840d", 0x6}, {&(0x7f0000000400)="635ea19feea6ca2e7f1fc20d1d03bd80ceeb33c1eacd6fe158c6ce48e401fb0a61d1466524d3fa85c744da4dcd3d98155f4b249e2bb6ed85e4c98a6449bad9cb400c1ea3ddfaaba5c6ad3098a8134c7c3d7c5f6f65b5b8d8f12cff81f1fb973aa634280e8ae69cb618adaf9621e9b7fcf003f1d67efffeae89904e", 0x7b}, {&(0x7f0000000480)="3404f7470b8f4b70632544a6831517222e9162dd61d80dc4fd20f0be1aa1b1fef3447d82ff30b5055badc06eff386162b0927132eee58ff83c41046015156920f7e59acf2ca32dbda4bbd3cb0023c4150812ce67b4feac1f4bc0d69e2fbc5e9b56cf77141e1fbc4347d05c82d7d1ffaad7d2b49e16ec8688f84658c5039178c6b64404a81d20effbac0ae5c0c318ea82527ce1e4040b27f38bc8ebf94a43e932b3cf577c2d48da82949dc5ce84829bdc160c07a033269f59a7", 0xb9}, {&(0x7f0000000540)="bf4836a115179aa539436543a6d2af343cd743d3d93e75b91c1857a19b63139212172c6a11be6a69a89869268a5d34378be470b04337305d04b03c023fd69235038fe7cbfe48493dcdf8ee2482c7623431727570433bca945f2db0cbbe45b77e0d499cbed6e06e6e758b90daa8487405b157d768a4d1cbed1dac66966207f0cc5aad595ca04bf663bd", 0x89}], 0x9, 0x8000000000000000) syz_emit_ethernet(0x5f, &(0x7f0000000000)={@broadcast, @empty, [{[{0x88a8, 0x5, 0x0, 0x1}], {0x8100, 0x2, 0x0, 0x1}}], {@ipv4={0x800, {{0xb, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @rand_addr=0x1, {[@ra={0x94, 0x6}, @end, @noop, @generic={0x88, 0x10, "c5c948e00c89466bf250dce0285f"}]}}, @udp={{0x0, 0x0, 0x8}, {"4c05ab957cccc45b21bbb39415b2dd98b782a277db"}}}}}}) 992.846353ms ago: executing program 3 (id=413): r0 = socket(0x2, 0x2, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005", 0x3, 0xc, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5e5c9f93cf50d30d00000007019078ffffffffac1400aa09069078569864a1"]) r1 = socket(0x10, 0x2, 0xf9) setsockopt(r1, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000000029, 0xb, 0x0, 0x0) r2 = socket(0x18, 0x3, 0x0) setsockopt(r2, 0x1000000029, 0x28, &(0x7f0000000000)="5ab7776a", 0x4) mkdir(0x0, 0x0) mknod(0x0, 0x2000, 0x5c4a) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@random="69e169d16174", @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6b9efb", 0x8, 0x50, 0x0, @rand_addr="cb69bc83c1987a653e2c6f00", @mcast2, {[], @udp={{0x0, 0x3, 0x8}}}}}}}) sysctl$net_inet_tcp(&(0x7f0000000200)={0x4, 0x2, 0x6, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, &(0x7f0000000140), 0x0) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x30, 0xb}, 0x402) 992.286039ms ago: executing program 4 (id=395): syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="fffeffffffffc7a2e46f05fa0800450000300000000000019078ffffffffe00000010c009078000000004500fffc00000000003a0000e000000100000000"]) syz_extract_tcp_res(&(0x7f0000000040), 0xfffffffe, 0x9) 925.727338ms ago: executing program 6 (id=415): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4, 0x501a, 0xffffffffffffffff, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1100) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0xffffffffffffffac) sysctl$net_inet6_ip6(&(0x7f0000000240)={0x4, 0x18, 0x29, 0x3c}, 0x4, &(0x7f0000000880)="06259136", &(0x7f00000002c0)=0x4, 0x0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000380)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000040)="c6625fd353fbb3270206bf4cb207112e5a2f2dee3bc3088e675ad9b3f987d11ab9821b44f8695ec88aacabde417376388a66060487619c4bf0cdda690aa09256c7fb4c157b16acb30357befa92dd6c4ad1efd857ed303361ee76c8f7549e82f36c8415923175ee51ef3106e1b13e2b8858be2e78464bda8424935523c29adb07970fb5223fc3dd275bcda8efe8997f40de1f613f5a73897dc3fda04513322c762ca7279c95f88716b33886905772e79c104420e4a912b4a455808aef3c41da4aef3a5edd6f55", &(0x7f0000000140)=0xc6, &(0x7f0000000400)="7129d445e934d755005e925e241b257b0747ae1e88f7ac2f60ed587a3f052ee309c43df9047015109d6cde13862b7421b14d53f5286c58302e3043cecdc2482de1692313fa132009747e11b359e9fb4c7849fde3a3802d2bc5e6e36345d60a85387e8e1e031544942e72ea4fc9e42095c7189ff062eef366024ac9984c455c076a5b5b71a02a38245bde23ae581d9ba848479c2cc30fee0fac10", 0x9a) r0 = socket(0x18, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987aa9feb13ec99e805e6e84010003582a83570000000000001202000036ba1bd82e86322c3eac80280712f8", &(0x7f0000000000)=0x31, 0x0, 0x0) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = dup2(r2, r2) ioctl$WSKBDIO_GETMAP(r3, 0xc0105715, &(0x7f0000000000)={0x0, &(0x7f0000001f40)}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r4 = syz_open_pts() close(r4) r5 = syz_open_pts() ioctl$TIOCSDTR(r5, 0x20007479) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000380)={0xf66d, 0x4b, 0x9, 0xd, "03000000000d02f181e6bff92152c70ac500", 0x0, 0x5}) write(r4, &(0x7f0000000240)="c570a4a5bbebc12d2a91854a3269facb1316b1dbefdc29ce59a480cfbf608dea9c620e5c769e41325bb05beb095558da1082977cecf0ae7465d33a476b2bf8d8323faf622b829cdd2def3aebda43f9d65bdedac3153eaa24e781fe6c886078dc1997598181a8a2b44b588cefa7fe886b4990181ebd182952bc83b084eeaf3c75abd47f349f01f6", 0xfead) fchflags(r1, 0x1) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000340)="97bdce2eac9d7d48ed219dab6c5ec20992f53b4aa24761910d5946b24ea2b61867ed6548055f8aa84c26", 0x2a, 0x402, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0xa) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000001180)={0x2, &(0x7f0000000040)=[{0x48, 0x1}, {0x6, 0x0, 0x0, 0x1}]}) open$dir(&(0x7f0000000280)='./file0\x00', 0x200, 0x1) 925.406653ms ago: executing program 1 (id=416): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x32) pread(r0, &(0x7f0000000000)="3cd15d", 0x3, 0x2) r1 = socket(0x1, 0x7fff, 0xff) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmmsg(r1, &(0x7f0000000140)={0x0}, 0x10, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x32) (async) pread(r0, &(0x7f0000000000)="3cd15d", 0x3, 0x2) (async) socket(0x1, 0x7fff, 0xff) (async) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) sendmmsg(r1, &(0x7f0000000140)={0x0}, 0x10, 0x0) (async) 924.641151ms ago: executing program 6 (id=417): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x80000000, 0x2ba, 0x0, 0x11, "0000000000000000000000000100008000002000", 0x40004, 0xfffffffe}) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f0000000000), 0x0) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x4, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000180)={0x9, &(0x7f0000000100)=[{0x4, 0x8, 0x4, 0x397fc561}, {0x6f, 0x1, 0x7}, {0xffff, 0x4, 0xfd, 0xe000}, {0x7, 0x8f, 0x0, 0x1}, {0x2, 0x2, 0x40}, {0x401, 0x3, 0x2, 0x7}, {0x7ff, 0x9, 0x2, 0x7ff}, {0x7fff, 0x24, 0x32, 0x4}, {0x8, 0x2, 0xb, 0x6}]}) syz_emit_ethernet(0x10004, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60db8344ff8c1100fe00000001003865009ed6a38f721e00ff80d1440000200000fe8000000000000000000000000000aa4e204e2200089078"]) mprotect(&(0x7f000038a000/0x3000)=nil, 0x3000, 0x0) 848.078337ms ago: executing program 4 (id=418): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1100) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) (async) sendmsg$unix(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/51, 0x33}, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f0000001840), &(0x7f0000001880)=0xc) setitimer(0x2, &(0x7f00000001c0)={{0xfffffffbfffffffd, 0x500000000}, {0xfffffffe, 0x7f}}, 0x0) socket(0x18, 0x2, 0x0) (async) r5 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r5, 0xc038694e, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r5, 0xc038694e, &(0x7f00000001c0)) sendto$unix(r0, &(0x7f0000000100)="62dcb51532e0a5f9d209cada2ae3fdefbf4df8d180dc55ad39e905d3f5552ff103faebabcc253ceff38d3a8dedb54992ac3f803fb475e5ab5beb522d6f2dda64157b8ee908e49a5af65760011c13e6c8a4dabc0b47e78a8560db030741d33928c7b3a30930864d398a77da5b8ff5eb3dc97359bfed7fa1d4cb17ec1b90e9c3358a395ab4e24844835a6ae7fca52c203969d39d30d04de2eafd4f6dd9eaf7b8e538ee38b4eb180b5975d334b79aaf12d0e9ea4417e8642279c0b0d0576cd96f1a472265df8037858eede3781be216a48f19607317358aa3a8f8c66465e212276b972a8ffdce7422ed98db6bee43802c2c5957d5", 0xf3, 0xc, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0xa) 847.822183ms ago: executing program 7 (id=419): syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffeaff000000000000081c45006d300000000400019078ac1400bbac1400aa0c00907800000000450000000000000000000000e000000100000000"]) 789.838318ms ago: executing program 5 (id=421): syz_extract_tcp_res(&(0x7f0000000000), 0xfffffff4, 0x3) sysctl$net_inet6_icmp6(&(0x7f0000000140)={0x4, 0x18, 0x3a, 0x8}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) 789.600905ms ago: executing program 7 (id=422): sysctl$net_inet_tcp(&(0x7f0000000180)={0x4, 0x2, 0x6, 0x14}, 0x4, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) read(r1, &(0x7f00000001c0)=""/117, 0x75) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x38a, 0x7ff, 0x6, 0x1, "34db416df13a6ebdba5f581e21bebf32dec4a6ec", 0xe1, 0x1ff}) readv(r1, &(0x7f0000000580)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/4096, 0x1000}], 0x2) r2 = getppid() setuid(0x0) getpgid(r2) 787.271157ms ago: executing program 0 (id=423): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050460000000000000000010000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac7ebbc257699a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5a872c881ea6e69e0bb7600000000000200361b12", 0x82, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x2, 0x3, 0x0) r3 = dup(r1) dup2(r3, r2) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xa) sendto(r1, &(0x7f0000000080)="e7920273c94c3c52", 0x8, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x7}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x4f8, 0x6d}, {0x6, 0x803, 0x14, 0x8}, {0x2, 0x82, 0x1, 0x9}, {0x4, 0x8101, 0xd1b, 0x88}, {0x1c1, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0xc3b, 0x6, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0xc, 0x7, 0x6}, {0x0, 0x1, 0x4, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r5 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r6 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r6, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r5, 0x80606948, &(0x7f0000000100)) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000002}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x18, 0x1, 0x0) close(r7) socket(0x18, 0x2, 0x0) 641.481408ms ago: executing program 5 (id=424): syz_emit_ethernet(0x46, &(0x7f0000000280)={@broadcast, @broadcast, [{[{0x88a8, 0x2}], {0x8100, 0x2, 0x0, 0x2}}], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@parameter_prob={0xc, 0x2, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}}}}}}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000001c0)=[{0x21, 0x10, 0x5, 0x1}, {0x3, 0x10, 0x8, 0x4}, {0x16, 0x9, 0x7f, 0x400f}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000140)="a616165d000000fc9b6ef46d06e8775492d82f8a89dbb53bd806a6e0", &(0x7f0000000080)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="890704", 0x3) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0) r2 = getppid() writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000300)=ANY=[@ANYBLOB="4702", @ANYRES32, @ANYRES16=r2, @ANYRES16=0x0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) recvmsg(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0}, 0x0) sysctl$hw(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x18, 0x2, 0x0) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc) connect$unix(r3, &(0x7f0000000000), 0x10) sendto(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000680)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6d9efb", 0x8, 0x67, 0x0, @rand_addr="00000000010000000000000afffffffe", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x2, 0x3, 0x8}}}}}}}) kevent(0xffffffffffffffff, &(0x7f0000000180)=[{{}, 0xfffffffffffffff9, 0x78af09b1f23c0e93, 0x2, 0x2, 0x200}], 0xfffffffd, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r4 = kqueue() kevent(r4, &(0x7f0000000140)=[{{}, 0xfffffffffffffff9, 0x11, 0x80000000, 0x0, 0xc}], 0x0, 0x0, 0x4, 0x0) munmap(&(0x7f0000000000/0x1000)=nil, 0x71c47) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) kevent(r4, 0x0, 0x29, &(0x7f0000000100)=[{{0xffffffffffffff9c}, 0x4, 0x80, 0x1, 0xffffffffffffffff, 0x4}, {{r0}, 0xfffffffffffffff8, 0x0, 0xfffff, 0x5, 0x7}], 0x6, &(0x7f0000000240)={0x2, 0x3}) kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) syz_emit_ethernet(0xab, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaabbaaaaaaaaaaaa08004627009ddbd99dc45037e65a00000002e0000001000000004e204e220008907860505fde366c602d7b23dfc8acb149bf59f33693b0cdfbd88e5c75dca89d341f243f2f57ce3a7e1cf52978384cf1a935800067a9c974ab95e20c5832def1eabf9de5e96aa4af5a91e6b22f8fb0d25d1ff6594ff69e279ccc2a62e84bf9014b41f8aaa2317afb1a8e581cf91d2424bd092a35be8d8778a38845c9022d5e"]) socket(0x2, 0x2, 0x0) 641.093676ms ago: executing program 4 (id=425): writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f00000001c0)="b806ac243e06bca432", 0x9}], 0x1) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000340)='./file0\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f00000001c0)) 640.26261ms ago: executing program 6 (id=426): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000200)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0xfffff7fe}, {0x2, 0x0, 0x0, 0xfffffffb}, {0x2, 0x0, 0x0, 0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000000102c00000000008000000000000000000000000000000000000800001a003f0000000504000007"]) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x3, &(0x7f00000005c0)="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"/678, &(0x7f0000000080)=0xd4, 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f00000000c0)=@in, &(0x7f0000000100)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xa}, 0x4, &(0x7f0000000140), 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd62e24b4b00100003fe8000000000000000000000000000aafe8000000000000000000000000000aa080000e1650000004e234e0d00089078"]) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) close(r0) open(&(0x7f0000000000)='./file0\x00', 0x2f2, 0x0) 640.163245ms ago: executing program 1 (id=427): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sysctl$hw(&(0x7f0000000380)={0x7, 0x6}, 0x2, 0x0, 0x0, &(0x7f0000000000), 0x0) 568.776687ms ago: executing program 4 (id=428): socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000000)="b10005166000009f050000002010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be3816267396aaaf9c4ed8297be1aa5b23edeb51d851f307000000599a1f139b672f4d335d223e7d9a008b95665bc6fc2118000000000180000000000000e7000000000000ffff0405b3b9c2668396f4cd1257ffa8c500002002fbfc0cba0800000008e37f71a3f834173712051eea080089e000040381ecb66400000000000000", 0xb1, 0x20f, 0x0, 0x0) 419.051461ms ago: executing program 1 (id=429): socket(0x18, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f0000000040)=0xfffffffc) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4, 0x0, {[0xfffffffffffffffb, 0x1, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x3, 0x0, 0xffffffffffffffff, 0x2, 0x800000, 0x0, 0x1, 0x100], [0x2, 0x0, 0xfffffffffffffffa, 0x1ffffffe, 0x0, 0x7b98, 0x0, 0x0, 0x800000000000000], [0x100000004, 0x2, 0x0, 0x10000, 0x81, 0x11000, 0x8], [0xff, 0x20000000000, 0x1, 0x100000001, 0xfffffffffffffffe], [{0x0, 0x9, 0x0, 0x7d06}, {0xfffc, 0x2, 0x1ff}, {0x0, 0x0, 0x80, 0x80}, {0x3, 0x5, 0x6, 0xfffffffffffffffe}, {0xcc8b, 0x2, 0x0, 0x48}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {}, {0x1, 0x963, 0x5, 0x8}], {0x0, 0x5, 0x1, 0x400000000000}, {0x0, 0x0, 0x0, 0x4}}}) r1 = kqueue() kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) r2 = socket(0x1e, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x8020697f, &(0x7f00000001c0)) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ed0000000200000000000000aa0400070000000000007806"]) 416.177838ms ago: executing program 3 (id=430): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x7fffbfff, 0x0, 0x0, 0x0, 0x0, 0x1b7, 0xfffe}, 0x7, 0x4, 0x1}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) mknod(&(0x7f0000000200)='./bus\x00', 0x2000, 0x202) symlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./bus\x00') rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 415.832534ms ago: executing program 4 (id=431): socket(0x18, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x2, 0x62}) (async) setrlimit(0x8, &(0x7f0000000980)={0x2, 0x62}) r0 = syz_open_pts() close(r0) (async) close(r0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000480)={0x5, 0x8, {[0x6, 0xffff, 0x1, 0x8, 0x9, 0xfffffffffffffff9, 0x7, 0x7fff, 0xb, 0x7, 0x3, 0x2, 0x7fff, 0x7fff, 0xe00000, 0x8c, 0x1, 0xc0], [0x9, 0xd, 0xe, 0x1923, 0x5, 0x800, 0x93b, 0x2, 0x9, 0x7], [0x2, 0x8001, 0xb8cb, 0xb, 0x7, 0x2, 0x5], [0xfffffffffffff001, 0x1, 0x12, 0xfff, 0xffffffffffffffff, 0x4514], [{0x5, 0x3, 0x7, 0x400}, {0x1, 0x80000000, 0x3, 0x6}, {0x6, 0x5, 0x1, 0x100000000}, {0x5, 0x0, 0x8, 0x1d57}, {0xf42, 0x4, 0x6, 0x3}, {0x8, 0x8, 0x4, 0x8000000000000000}, {0x1e13, 0x3, 0x9, 0x1}, {0x8, 0x3, 0x9, 0x3}], {0x3, 0x2, 0x3}, {0x0, 0xfffffffd, 0x1, 0x3}}}) syz_open_pts() (async) r2 = syz_open_pts() kqueue() (async) kqueue() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0xcd5, 0x7fe, 0xfffffff8, 0x5c90, '\x00\b\x00', 0x9, 0x7}) syz_open_pts() writev(0xffffffffffffffff, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4, 0xfffffffe, {[0x88c1, 0x1, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x3, 0x0, 0xffffffffffffffff, 0x8, 0x800002, 0x0, 0x1, 0x100], [0x2, 0x0, 0xfffffffffffffffa, 0x401ffffffe, 0x0, 0x7b98, 0x0, 0x0, 0x800000000000003, 0x101], [0x100000004, 0xcad, 0x0, 0x10000, 0x81, 0x11003, 0x8], [0xff, 0x220000000000, 0x1, 0x100000001, 0xfffffffffffffffe], [{0x0, 0xb10b, 0x0, 0x7d06}, {0xfffc, 0x400, 0x1ff, 0x9}, {0x0, 0x0, 0x80, 0x80}, {0x3, 0x5, 0x6, 0xfffbfffffffffffe}, {0xcc8b, 0x9, 0x0, 0x48}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {0x1, 0x20}, {0x1, 0x963, 0x5, 0x8}], {0x5, 0x5, 0x1, 0x400000000000}, {0x0, 0x0, 0x3, 0x4}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x4, 0xfffffffe, {[0x88c1, 0x1, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f01, 0x3, 0x0, 0xffffffffffffffff, 0x8, 0x800002, 0x0, 0x1, 0x100], [0x2, 0x0, 0xfffffffffffffffa, 0x401ffffffe, 0x0, 0x7b98, 0x0, 0x0, 0x800000000000003, 0x101], [0x100000004, 0xcad, 0x0, 0x10000, 0x81, 0x11003, 0x8], [0xff, 0x220000000000, 0x1, 0x100000001, 0xfffffffffffffffe], [{0x0, 0xb10b, 0x0, 0x7d06}, {0xfffc, 0x400, 0x1ff, 0x9}, {0x0, 0x0, 0x80, 0x80}, {0x3, 0x5, 0x6, 0xfffbfffffffffffe}, {0xcc8b, 0x9, 0x0, 0x48}, {0x0, 0x2003, 0x40000, 0x2000000000000000}, {0x1, 0x20}, {0x1, 0x963, 0x5, 0x8}], {0x5, 0x5, 0x1, 0x400000000000}, {0x0, 0x0, 0x3, 0x4}}}) r3 = kqueue() kevent(r3, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) 413.951653ms ago: executing program 7 (id=432): select(0x40, &(0x7f0000000000)={0x1b, 0x3, 0x4, 0x0, 0x0, 0xfffffffffffffff9, 0x2, 0x8}, 0x0, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100051300000000000000dd03000000000013", 0x13, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) connect$inet(r1, &(0x7f00000004c0)={0x2, 0x2}, 0xc) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000300)={0xf1ac, 0x4, 0x6, 0x4, 0xd1d, 0x10001, 0xfffffffe, 0x10, [{0x129, 0x9, 0x7, 0x1ed0e52c}, {0xb8, 0xfffffff2, 0x401, 0xeffffffa}, {0x0, 0x7ff, 0x1ff, 0x6}, {0x38, 0x1, 0x6}, {0xfffc0000, 0x4, 0xf3, 0x40}, {0xbb5, 0x9, 0xf, 0x1}, {0x2, 0x800, 0xbe58, 0x2}, {0xc97, 0x20000, 0x8724}, {0x8, 0x52, 0x4, 0x4}, {0x10000, 0x9, 0x5, 0x5}, {0x1, 0x4, 0x1, 0x10}, {0x6, 0x7, 0x7912, 0x3c4}, {0x4, 0x101, 0x3, 0xfffffffe}, {0x2, 0xfffffffc, 0x7, 0x5}, {0x9, 0xffffffff, 0x4, 0x5000000}, {0xe541, 0xfffffff9, 0x5d8, 0xfffffffd}]}) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000100), 0x2, &(0x7f0000000140)="1f6066860288ad857bac04bec078d49a47d5a5f3aa2ec978da5d33ae7425a6bd1ce0d52bec25f3728208b25b21417b37f285ec037424c62b236e3f2ae481bf28284c9f5d45419a35543e59724e0d78f0b11a7b15dbbb95f29b25869e3cea97a762a1293f0fdcc695a4494dc6bfeebc4c19b8a6f67d642e788befd1da69a2101980513c1195fb932677c96e5c31dc81bd0b894bb69e201e9163defe7b190920c9ddc90ba2cb68868780d1a2f80425385f49b29c0200455b01eb74f2f21a8005", &(0x7f0000000200)=0xbf, &(0x7f0000000240)="365c5236601c0d0448ec6d9f423b2af7a12e7c523f132ecf641a88b8d3eb6632de4d40a87095b2a6687d1ba30be60c43dde081bacfe9fa3c84c394b9ac206accf7d2db6f1e6325770ca97e0b0df51f402c46c3e968b65980aeef7142e7771cd0e9b9e38f9586f784564d1714d3e41a7916221b381ad40102e5e39e4a854301cbff", 0x81) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8000000000000004}) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffd40) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000440)) 243.786837ms ago: executing program 0 (id=433): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x8) write(r0, 0x0, 0x0) setitimer(0x2, 0xffffffffffffffff, 0x0) 241.953915ms ago: executing program 1 (id=434): select(0x40, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x7, 0xffffffff) syz_emit_ethernet(0x157, &(0x7f0000000140)={@empty, @local, [{[], {0x8100, 0x6, 0x0, 0x1}}], {@ipv4={0x800, {{0x9, 0x4, 0x1, 0x1e, 0x145, 0x66, 0x3, 0x1, 0x2b, 0x0, @multicast1, @multicast1, {[@ssrr={0x89, 0xf, 0x5c, [@multicast2, @loopback, @empty]}]}}, @tcp={{0x3, 0x0, r0, r1, 0x1, 0x0, 0xc, 0x8, 0x7, 0x0, 0x45e, {[@window={0x3, 0x3, 0x3c}, @eol, @nop, @nop, @nop, @sack_perm={0x4, 0x2}, @generic={0x13, 0xf, "1ca136899a3b4a6107bddd54f1"}, @eol]}}, {"cdfa8b83489111e9007a41a9e7ce9c52af21fd5533f0fa0c2054a1b41eca5bbf56ded2c0a9afb0df6e3161cec8b35c8fa13ae38f31b88f313e6e248dccdac86736f21687787d6aea5e7f09644de68b10779087d10a833ce785979f509744d8b678f75f30c546a6f078c5e5fc8e7181011cd6d5434a55e53cfcd84715746a3bbe6209ea022ae89419ecaf8f6ff7c36e9afde7ca7a84ccc6fad6ca17ad5d51a2a4ea7304faca9c83b986f137115fb7366aece22bf9ed3c3c8e4e04ea6d98bc9e2378f3c470433e4b5f512cadebd185a305b51fd523612b713c7625d5d959a714d259fd90a2fdb6ad3b0bbaae86c69ba53b0f"}}}}}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x10, 0x0, 0x37) 241.671043ms ago: executing program 0 (id=435): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000b40)="8215c9ec3d1e6ed7eda0f59047bf65b18d7c51f78b06ccff666914ee000000009dd52840fafd3493857d65d4cd12c63d34", 0xfffffffffffffe9f}], 0x1, 0x0, 0x0, 0x8}, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x10, 0x2, 0x2}, {0xb1, 0x10, 0xe4}, {0x6, 0xa, 0x83, 0x400f}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000380)="0000f8ffffdf540f2e04000095487ecd83d348ffff9527ab88633024719afbbec054d8a99882b9549f3978a06c2728db", &(0x7f0000000080)=0x30, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r0, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) (async) write(r0, &(0x7f0000000480)="bb89a7a58919b0f928e41c8a84e1", 0xe) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x85c, 0x2, 0x0, 0x0, 0x3, 0x7b, 0x7, 0x8000004}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x85c, 0x2, 0x0, 0x0, 0x3, 0x7b, 0x7, 0x8000004}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffff5a) syz_emit_ethernet(0x146, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"]) (async) syz_emit_ethernet(0x146, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa0700bb86dd606d9efb0110670000f70000010000000000000afffffffefe8000000000000000000000000000aa3210000000000000010c00000000000000000000000004010d056137e9d88ccf99f6ba641edef01384c33d10746368db86d035dc87b5ca8cea30767b2689889dccd7df3b6e5e6ca7536c8157fa8d1c020588669722fb371b4419a10651fc0a7267da5b0fbee1c678e2efc0e9bcafc75e7bdd95a730f3ae5f1ee6085b01070000000000c1d9ed896e310d53000000000004000000000000000c02000900000000000000000000000000000000000000002b0900000000000000010004010bc20400000003c204000000800235ed197aa389683752f26d6393fc89c04e6627466843c434adf00a7bdd4e1845eb275580125c799e8a837b4dda49ef9e004e234e230008907800000000000000"]) ioctl$TIOCSETA(r1, 0xc4504446, &(0x7f0000000740)={0x2f, 0x5, 0xa9, 0x0, "0400000000800000ebb178d952d6d31962fff0d1", 0x9, 0x3}) 241.051727ms ago: executing program 7 (id=436): r0 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) r1 = getpid() symlink(&(0x7f0000000240)='./file2\x00', &(0x7f0000000100)='./file2\x00') ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x4000011e, r1) fcntl$getown(r0, 0x5) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r0, 0x0) r2 = socket(0x800000018, 0x1, 0x0) bind$unix(r2, 0x0, 0x44) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x40009, 0x5, 0x4008, 0x8000000000000003, 0x3, 0x1000000000090, 0x4c}, 0x0, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r4, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0xc, &(0x7f0000000000)="ffdaf64c000000004f0527000000055e473e0000", 0x14) ioctl$TIOCFLUSH(r3, 0x80047476, &(0x7f0000000000)) getrusage(0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x5e}, 0x2, &(0x7f00000000c0)="cd613922f905b48e91445552395fdba283781266d4002b719f83908f11a0e741cb0a9babd00adc157cc79bf860fa3c1bb04f60626f88ff87947d319ec954a850f157d9919a0c8cfc", &(0x7f0000000180)=0x48, &(0x7f00000001c0)="952c98e6e1743cb37abd508a77a8ff0daedc2d3ba305d1e3c5c64d0351810329245b5598f8b19b629fff48413e3b1c78f07025ceb733e7765ba14facb9369fbde6428244301b67311f39d98106abd32c35f8a84b8b08e87d3155bfdf9185676c318b760513e1726f9399c79f2bb227ce3ecb8c18778abad86dd901955d6f214b9c8784fc77d3f2", 0x87) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) 232.506087ms ago: executing program 4 (id=437): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) fcntl$getown(r0, 0x5) (async) syz_open_pts() sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b10005166000009f050000002010000000000000cea10500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4de57804be38164991f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b672f4d335d223e7db3008b95665bc6fc210200b100e4ff0000fbb770c1f5a872c881ea772ec5890405b3b9c2668396f4cd125707000000002002fbfc0c2300008abfba", 0x93, 0x2, 0x0, 0x0) (async) socket(0x18, 0x1, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x100000001}) (async, rerun: 64) r2 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) (rerun: 64) fcntl$lock(r2, 0x9, &(0x7f0000000280)={0x0, 0x0, 0x3b5, 0x1000381210089}) r3 = semget(0x0, 0x1, 0x200) semop(r3, &(0x7f0000000000)=[{0x0, 0x8f60, 0x1000}, {0x0, 0x3}, {0x0, 0x400, 0x800}, {0x1, 0x9, 0x1000}, {0x2, 0x4, 0x800}], 0x52) (async) semctl$IPC_RMID(r3, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f00000004c0), 0x80, 0x0) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) pipe2(0x0, 0x10000) (async) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x2}, 0x4, &(0x7f0000000340), 0x0, 0x0, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) select(0x40, &(0x7f0000000280)={0xff, 0x12bd8a5d}, 0x0, 0x0, 0x0) 9.117969ms ago: executing program 3 (id=438): mknod(0x0, 0x1ffa, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x3d}, 0x6, 0x0, 0x0, 0x0, 0x9c8bce8ce70f2362) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x41) socket(0x20, 0x1, 0x7f) (async) socket(0x20, 0x1, 0x7f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) setuid(0xffffffffffffffff) ioctl$FIONREAD(r1, 0x8028698c, &(0x7f0000001380)) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES32=0x41424344, @ANYBLOB='[B']) writev(r0, 0x0, 0x0) (async) writev(r0, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffb, 0x9, 0x0, 0x1, 0x2}], 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) 8.925947ms ago: executing program 0 (id=439): mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x2a, 0xa, &(0x7f0000000040)="00050000", 0x4) setsockopt(r0, 0x29, 0x9, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000080)=ANY=[@ANYRES8=r0]) 8.664649ms ago: executing program 0 (id=440): syz_emit_ethernet(0x1000e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000fd00083a00fe8000030000000000000000a40000aafe80"]) (async) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x39, 0x0, 0x0) (async) mknod(0x0, 0x2000, 0x2cff) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETA(r1, 0xc0284457, &(0x7f0000000280)={0x0, 0xfffffffe, 0xfeffffff, 0x9, "080014000000000000010000000100000f1eeaed", 0x10000000, 0x9}) setsockopt$inet_opts(r1, 0x0, 0x0, &(0x7f00000000c0)="ed9ac309899e1b3118c35f02560a17674328a3a3674cfd9bbcefec0b1ce84c0cd5f25676bcfa", 0x26) r2 = socket(0x2, 0x3, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1003, 0x0, 0x18) (async) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write(r3, &(0x7f0000000040)="2ebbc04ad75b741155cc56280e6d0851cb1ab0c7cc66a32d3c04ed6f1914b93e1485ae2994f09aba0a07a0d89574cc11f94ad2c4e3f1727a31e3c90a715a479abc0d67547324329ab8aeb4b770", 0x4d) 837.63µs ago: executing program 0 (id=441): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSKBDIO_GETBACKLIGHT(r0, 0x400c5711, &(0x7f0000000040)) r2 = getppid() fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x7ff, 0x3, r2}) fcntl$getown(0xffffffffffffffff, 0x5) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) r6 = getuid() setreuid(r4, r6) setreuid(r6, r4) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) r10 = dup2(r1, r1) r11 = socket$unix(0x1, 0x5, 0x0) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000240)=[{&(0x7f0000000140)="8b70c1fe92e9d8fc1943676fbca862425713d6706b5c916bc198f693763d4426c17910a1bc8bb77f76a27060082320eb0f66421cb5570846308ab0b9fd6be61708d40076047b63b6f5712dd2c2ab931cddde94a074bdd514944bee0b51d071990bb9b052f7bd0abaa710b4f024b004e0add597c6d4aed0ec3e8e6a77ceeb3767d31a3158b43b6577be9214762b", 0x8d}, {&(0x7f0000000200)="355da9f0b0a48bfc657b85", 0xb}], 0x2, &(0x7f0000000300)=[@cred={0x20, 0xffff, 0x0, 0xffffffffffffffff, r8, r5}, @rights={0x20, 0xffff, 0x1, [r10, r1, r11, r0]}, @cred={0x20, 0xffff, 0x0, r2, r6, r5}, @cred={0x20, 0xffff, 0x0, r3, r4, 0xffffffffffffffff}, @rights={0x18, 0xffff, 0x1, [r1]}], 0x98}, 0x9) pread(r1, &(0x7f0000000400)="cd2d46e40ef089c2d61ca12283c95ed04ec1ddd9df2a9364d2068a276ef889686b3627d9868b46e77438c636893c12e36bb9446bd5e45d0954f315b1092657aeebab615404e0f6103c27bf0cddde2f8e120c507c5da3b9ce245662bf1dcd8f31df4b34abf744f3dc653f7b43edaabd482406e844730c007ba72c51f655a161b25b1d3a41b66d21140abbcef9ebc36b4f9127766fb3e35a4be2ce4704aa3d3f4e21f5594609b8506cadc4a8cf4cd45ae6dc2a0376432a0b2dcd75", 0xba, 0x3) r12 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000004c0), 0x10, 0x0) r13 = syz_open_pts() kevent(r0, &(0x7f0000000500)=[{{r0}, 0xfffffffffffffff9, 0xd8, 0x1, 0x9, 0x3}, {{r1}, 0xffffffffffffffff, 0xe8, 0xfffff, 0x3, 0x8000000000000000}, {{r0}, 0xfffffffffffffffe, 0x42, 0x1, 0x1, 0x100000000}, {{r10}, 0xfffffffffffffffd, 0x2c, 0x80000000, 0x0, 0x2}, {{r12}, 0xfffffffffffffffd, 0xc6, 0x1, 0x9, 0xfffffffffffffffe}, {{r10}, 0xfffffffffffffffa, 0x2, 0x2, 0xd}, {{r0}, 0xfffffffffffffffa, 0x1, 0xf0000000, 0x2, 0x80000000}], 0x0, &(0x7f0000000600)=[{{r12}, 0xfffffffffffffffe, 0x2, 0x2, 0x7ff, 0x2}, {{r13}, 0x97144dd44f9ad949, 0xc4, 0x1, 0x65873473, 0x5}, {{r0}, 0xffffffffffffffff, 0xc6, 0xfffff, 0x3}], 0x1, &(0x7f0000000680)={0x7fff, 0xe9c1}) connect$unix(r0, &(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0xa) ioctl$WSKBDIO_SETBELL(r0, 0x80105703, &(0x7f0000000700)={0xfffffff7, 0x10001, 0x2, 0x8}) ktrace(&(0x7f0000000740)='./file0\x00', 0x1, 0x40000002, r7) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000780)={{0x5, r6, r5, r6, r9, 0x0, 0x4}, 0x8000, 0x5, 0xd}) kevent(r12, &(0x7f0000000800)=[{{r1}, 0xfffffffffffffffd, 0x68, 0x2, 0xff, 0x9}, {{r10}, 0xfffffffffffffff9, 0x92, 0x40000000, 0x2}], 0x2, &(0x7f0000000840)=[{{r11}, 0xfffffffffffffffd, 0x20, 0x2, 0x8, 0x2}, {{r12}, 0xfffffffffffffffa, 0x18, 0x10, 0x2, 0xfb}, {{r1}, 0xffffffffffffffff, 0x4, 0x8, 0x100000000, 0x100000000}, {{r13}, 0xfffffffffffffffc, 0x80, 0x1, 0xffffffffffff0000, 0x3}, {{r0}, 0xfffffffffffffff9, 0x4, 0xf0000000, 0x0, 0x5}], 0x5, &(0x7f0000000900)={0xe}) r14 = socket(0x20, 0x4, 0x6) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000940)=0x8) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000980), &(0x7f00000009c0)=0xc) r15 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000a00), 0x400, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r15, 0x80105705, &(0x7f0000000a40)={0xffff3a75, 0x4, 0xfffffff8, 0x4}) fcntl$setown(r14, 0x6, r2) ioctl$TIOCSETD(r10, 0x8004741b, &(0x7f0000000a80)=0x8) ktrace(&(0x7f0000000ac0)='./file0\x00', 0x4, 0x0, 0x0) 0s ago: executing program 3 (id=442): setgid(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) setregid(r1, 0xffffffffffffffff) setregid(r1, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0xbffab6d3d3d32fb2, 0x202) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error fuse: Cannot find fusebuf pckbd_enable: command error pckbd_enable: command error kernel: protection fault trap, code=0 Stopped at sys_semop+0x3f9: movzwl 0(%r15),%r12d ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace sys_semop(ffff80003c44d218,ffff8000367f2960,ffff8000367f28b0) at sys_semop+0x3f9 syscall(ffff8000367f2960) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdb408208c10, count: -3 ddb{1}> show registers rdi 0 rsi 0x8f60 __ALIGN_SIZE+0x7f60 rbp 0xffff8000367f2880 rbx 0xffff80000151c404 rdx 0 rcx 0xffff80003c44d218 rax 0xffff8000299edff0 r8 0x7f7fffffc000 r9 0x1 r10 0x99ca180c64542f4d r11 0x95dfe528a52821d7 r12 0xffff80000151c404 r13 0xffff8f60 r14 0xbead __ALIGN_SIZE+0xaead r15 0xdeafbeaddeafbead rip 0xffffffff8289b799 sys_semop+0x3f9 cs 0x8 rflags 0x10286 __ALIGN_SIZE+0xf286 rsp 0xffff8000367f2760 ss 0x10 sys_semop+0x3f9: movzwl 0(%r15),%r12d ddb{1}> show proc PROC (syz-executor) tid=418199 pid=65291 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=86, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c44dc58,0xffff8000ffff14b0 process=0xffff80003c424970 user=0xffff8000367ed000, vmspace=0xfffffd806b3f35c0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 65291 341702 32086 0 2 0 syz-executor *65291 418199 32086 0 7 0x4000000 syz-executor 65291 386333 32086 0 7 0x4000000 syz-executor 65291 352272 32086 0 2 0x4000000 syz-executor 86031 130825 16208 0 3 0x80 nanoslp syz-executor 86031 375129 16208 0 3 0x4000080 kqsel syz-executor 86031 181320 16208 0 3 0x4000080 fsleep syz-executor 37692 429752 74004 0 3 0x80 nanoslp syz-executor 37692 465838 74004 0 3 0x4000080 fifow syz-executor 37692 205429 74004 0 3 0x4000080 fsleep syz-executor 89097 300781 61477 0 3 0x80 nanoslp syz-executor 89097 167393 61477 0 3 0x4000080 kqread syz-executor 89097 383641 61477 0 3 0x4000080 fsleep syz-executor 32086 251958 79705 0 3 0x82 nanoslp syz-executor 90629 338484 0 0 3 0x14200 bored sosplice 60537 77323 79705 0 3 0x2 biowait syz-executor 74004 352265 79705 0 3 0x82 nanoslp syz-executor 61477 432617 79705 0 3 0x82 nanoslp syz-executor 38714 347054 79705 0 3 0x2 biowait syz-executor 82266 520860 79705 0 3 0x82 wait syz-executor 16208 517701 79705 0 3 0x82 nanoslp syz-executor 92422 421724 79705 0 3 0x2 biowait syz-executor 79705 9360 76513 0 3 0x82 kqread syz-executor 76513 465062 47828 0 3 0x10008a sigsusp ksh 47828 390778 73777 0 3 0x98 kqread sshd-session 73777 462363 69632 0 3 0x92 kqread sshd-session 9700 1266 1 0 3 0x100083 ttyin getty 69632 55160 1 0 3 0x88 kqread sshd 27914 358781 58618 74 3 0x1100092 bpf pflogd 58618 278663 1 0 3 0x80 sbwait pflogd 84173 171371 255 73 3 0x1100090 kqread syslogd 255 360365 1 0 3 0x100082 sbwait syslogd 23578 249706 1 0 3 0x100080 kqread resolvd 61209 163204 33902 77 3 0x100092 kqread dhcpleased 27597 138752 33902 77 3 0x100092 kqread dhcpleased 33902 364209 1 0 3 0x80 kqread dhcpleased 72428 102570 0 0 3 0x14200 bored smr 10780 365738 0 0 2 0x14200 zerothread 96031 372528 0 0 3 0x14200 aiodoned aiodoned 18719 6170 0 0 3 0x14200 syncer update 10930 484837 0 0 3 0x14200 cleaner cleaner 17216 33429 0 0 3 0x14200 reaper reaper 11883 273786 0 0 3 0x14200 pgdaemon pagedaemon 32993 41570 0 0 3 0x14200 bored viomb 19425 328895 0 0 3 0x40014200 acpi0 acpi0 71273 384495 0 0 3 0x40014200 idle1 47217 390326 0 0 3 0x14200 bored softnet3 94410 188785 0 0 3 0x14200 bored softnet2 28789 94490 0 0 3 0x14200 bored softnet1 37553 166208 0 0 3 0x14200 bored softnet0 12655 181679 0 0 3 0x14200 bored systqmp 98366 310533 0 0 3 0x14200 bored systq 97891 453515 0 0 3 0x14200 tmoslp softclockmp 71548 241208 0 0 3 0x40014200 tmoslp softclock 36473 19894 0 0 3 0x40014200 idle0 1 372620 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 65291 (syz-executor) thread 0xffff80003c44d218 (418199) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a00ba8) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 yield+0x6a #4 malloc+0xe5 #5 sys_semop+0x234 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 65291 (syz-executor) thread 0xffff8000ffff2f70 (352272) exclusive rwlock futex r = 0 (0xffffffff838b2fe8) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 sys_futex+0x69 #3 syscall+0xbc6 #4 Xsyscall+0x128 Process 60537 (syz-executor) thread 0xffff8000ffffdc38 (77323) exclusive rrwlock inode r = 0 (0xfffffd806aa0fe20) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xb08 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806dd61788) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 cache_lookup+0x36e #7 ufs_lookup+0x21b #8 VOP_LOOKUP+0x6e #9 vfs_lookup+0x8fa #10 namei+0x7aa #11 dounlinkat+0xc1 #12 syscall+0xb08 #13 Xsyscall+0x128 Process 38714 (syz-executor) thread 0xffff80002a2b59b8 (347054) exclusive rrwlock inode r = 0 (0xfffffd8077f8ac08) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xb08 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806aa0fac0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 cache_lookup+0x36e #7 ufs_lookup+0x21b #8 VOP_LOOKUP+0x6e #9 vfs_lookup+0x8fa #10 namei+0x7aa #11 dounlinkat+0xc1 #12 syscall+0xb08 #13 Xsyscall+0x128 Process 92422 (syz-executor) thread 0xffff80002a2b42a8 (421724) exclusive rrwlock inode r = 0 (0xfffffd806dd3ee30) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xb08 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806ccfe430) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 dounlinkat+0xc1 #8 syscall+0xb08 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10200 11090K 11415K 166960K 11985 0 pcb 17 14K 16K 166960K 155 0 rtable 193 8K 10K 166960K 521 0 pf 32 17K 81K 166960K 82 0 ifaddr 35 5K 8K 166960K 70 0 ifgroup 51 2K 2K 166960K 111 0 sysctl 4 1K 1K 166960K 4 0 counters 62 36K 37K 166960K 112 0 ioctlops 0 0K 4K 166960K 1540 0 iov 0 0K 12K 166960K 56 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1403 88K 89K 166960K 1972 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 7 0 VM map 2 1K 1K 166960K 2 0 sem 12 1K 1K 166960K 23 0 dirhash 12 2K 3K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 102K 166960K 595 0 sigio 0 0K 0K 166960K 3 0 proc 72 91K 128K 166960K 595 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 57 0 in_multi 74 5K 7K 166960K 127 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 491 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 238 179K 194K 166960K 7124 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 40 80K 106K 166960K 1697 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 30 0 NDP 11 0K 2K 166960K 46 0 temp 52 8685K 8753K 166960K 24786 0 kqueue 13 20K 32K 166960K 106 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 61 0 58 1 0 1 1 0 8 0 rtentry 176 134 0 52 6 0 6 6 0 8 0 unpcb 144 449 0 430 5 0 5 5 0 8 4 syncache 336 4 0 4 2 2 0 1 0 8 0 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 808 109 0 103 1 0 1 1 0 8 0 arp 128 20 0 6 1 0 1 1 0 8 0 inpcb 384 519 0 508 10 8 2 8 0 8 0 nd6 144 29 0 9 1 0 1 1 0 8 0 pkpcb 40 4 0 4 3 2 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 14 0 14 2 1 1 1 0 8 1 pppxif 1504 4 0 4 2 1 1 1 0 8 1 pffrag 232 3 0 1 1 0 1 1 0 482 0 pffrnode 88 3 0 1 1 0 1 1 0 8 0 pffrent 40 5 0 3 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 51 0 21 1 0 1 1 0 8 0 pfstkey 128 51 0 21 2 0 2 2 0 8 0 pfstate 384 51 0 21 5 0 5 5 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 4 0 1 4 1 3 3 0 8 0 art_heap4 256 533 0 197 30 4 26 30 0 8 3 art_table 32 537 0 198 4 0 4 4 0 8 0 art_node 16 131 0 57 1 0 1 1 0 8 0 sysvmsgpl 40 41 0 2 1 0 1 1 0 8 0 semupl 112 2 0 2 2 1 1 1 0 8 1 semapl 112 20 0 11 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 2589 0 1078 95 0 95 95 0 8 0 ffsino 288 2589 0 1078 109 0 109 109 0 8 0 nchpl 144 3375 0 1681 63 0 63 63 0 8 0 rtmask 32 4 0 4 3 3 0 1 0 8 0 uvmvnodes 80 2943 0 0 61 0 61 61 0 8 0 vnodes 216 2943 0 0 164 0 164 164 0 8 0 namei 1024 11432 0 11432 2 1 1 1 0 8 1 percpumem 16 71 0 25 1 0 1 1 0 8 0 kstatmem 264 56 0 34 3 0 3 3 0 8 1 scsiplug 72 2 0 2 2 2 0 1 0 8 0 scxspl 216 10346 0 10343 12 8 4 8 1 8 3 plimitpl 152 119 0 102 1 0 1 1 0 8 0 sigapl 424 886 0 838 7 1 6 7 0 8 0 futexpl 64 6700 0 6696 1 0 1 1 0 8 0 knotepl 120 533 0 0 17 0 17 17 0 8 0 kqueuepl 224 205 0 194 5 2 3 3 0 8 2 pipepl 336 196 0 169 5 2 3 5 0 8 0 fdescpl 520 867 0 838 3 0 3 3 0 8 0 filepl 160 5161 0 4917 26 12 14 15 0 8 3 lockfpl 104 350 0 345 1 0 1 1 0 8 0 lockfspl 48 64 0 60 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 1129 0 1115 1 0 1 1 0 8 0 zombiepl 144 1068 0 1067 1 0 1 1 0 8 0 processpl 1192 886 0 838 5 0 5 5 0 8 0 procpl 656 1701 0 1644 6 0 6 6 0 8 0 srpgc 96 6 0 6 1 0 1 1 0 8 1 sosppl 168 1 0 1 1 1 0 1 0 8 0 sockpl 728 1043 0 1010 17 5 12 12 0 8 8 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 120 0 0 15 0 15 15 0 8 0 mcl2k 2048 27 0 0 3 0 3 3 0 8 0 mtagpl 96 17 0 0 1 0 1 1 0 8 0 mbufpl 256 238 0 0 15 0 15 15 0 8 0 bufpl 280 3176 0 126 218 0 218 218 0 8 0 anonpl 32 6014 0 0 49 0 49 49 0 246 0 amapchunkpl 152 23286 0 22805 34 4 30 30 0 158 7 amappl16 200 2582 0 2552 13 7 6 6 0 8 2 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 113 0 101 1 0 1 1 0 8 0 amappl13 176 9 0 9 2 2 0 1 0 8 0 amappl12 168 1518 0 1489 3 1 2 2 0 8 0 amappl11 160 52 0 38 1 0 1 1 0 8 0 amappl10 152 5 0 5 1 1 0 1 0 8 0 amappl9 144 247 0 247 1 1 0 1 0 8 0 amappl8 136 24 0 20 1 0 1 1 0 8 0 amappl7 128 111 0 99 1 0 1 1 0 8 0 amappl6 120 190 0 187 1 0 1 1 0 8 0 amappl5 112 141 0 131 1 0 1 1 0 8 0 amappl4 104 320 0 300 1 0 1 1 0 8 0 amappl3 96 4340 0 4237 5 1 4 4 0 8 0 amappl2 88 647 0 585 2 0 2 2 0 8 0 amappl1 80 10290 0 9681 17 3 14 15 0 8 0 amappl 88 6353 0 6192 5 0 5 5 0 92 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 867 0 838 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 867 0 838 1 0 1 1 0 8 0 vmmpekpl 168 8753 0 8708 3 0 3 3 0 8 0 vmmpepl 168 60284 0 58379 96 2 94 94 0 357 0 vmsppl 480 866 0 838 6 1 5 5 0 8 1 rwobjpl 72 21140 0 17256 73 1 72 72 0 8 0 pdppl 4096 1741 0 1676 109 36 73 87 0 8 8 pvpl 32 13640 0 0 110 0 110 110 0 265 0 pmappl 256 866 0 838 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 404 0 50 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83892ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf softintr_dispatch(0) at softintr_dispatch+0x5b Xsoftclock() at Xsoftclock+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x3d doopenat(ffff8000ffff14a0,ffffff9c,200000000240,205,0,ffff80003c445190) at doopenat+0x314 syscall(ffff80003c445240) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdb39655c3d0, count: -10 ddb{0}> machine ddbcpu 1 Stopped at sys_semop+0x3f9: movzwl 0(%r15),%r12d ddb{1}> trace sys_semop(ffff80003c44d218,ffff8000367f2960,ffff8000367f28b0) at sys_semop+0x3f9 syscall(ffff8000367f2960) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xdb408208c10, count: -3