last executing test programs: 5.565485112s ago: executing program 4 (id=5): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f00000001c0)={'./file0\x00', 0x7, 0x9, 0x80, 0x0, 0x800, 0x2, 0xda9, 0x1, 0x1, 0x8000000000000000, 0x4}) (async) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f00000001c0)={'./file0\x00', 0x7, 0x9, 0x80, 0x0, 0x800, 0x2, 0xda9, 0x1, 0x1, 0x8000000000000000, 0x4}) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020090780000000369c46dea0006060800000026e51acee851d2299ecfd40b7399e6e400000000000000000000000001ff02"]) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r2, 0x0) pipe2(&(0x7f0000000100), 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) writev(r4, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) (async) writev(r4, &(0x7f0000000280)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) close(r5) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x40000800) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0xe0) ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000080)=0x8) (async) ioctl$TIOCSETD(r6, 0x8004741b, &(0x7f0000000080)=0x8) open(&(0x7f0000000040)='./file0\x00', 0x800, 0x146) ioctl$TIOCSFLAGS(r1, 0x8004745c, &(0x7f0000000140)=0x7892b711) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0xc0284459, &(0x7f0000000040)={0xb40, 0xffffffff, 0x3, 0xffff492b, "06002e01000000100001800001001300", 0x6, 0x728ffc4a}) 4.024841029s ago: executing program 5 (id=6): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff"]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x89, 0x0) syz_extract_tcp_res(&(0x7f00000001c0), 0x9, 0x2) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000100)={0x5, &(0x7f00000005c0)=[{0x9, 0x9, 0x6, 0x5}, {0x8, 0x60, 0xda, 0x352b}, {0x7, 0x7, 0xf8, 0x400}, {0x3, 0x8, 0x7, 0x6}, {0x3f34, 0x5, 0x9c}]}) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@random="73b9ccc300", @random="00f7000400", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x8, 0x3a, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @generic="8284c1dd577ce5bd"}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = fcntl$dupfd(r0, 0x2, r0) close(r2) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) r4 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000080)=0x83, 0x4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x2, r5) close(r6) r7 = socket(0x2, 0x2, 0x0) sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x2, 0x32, 0x4}, 0xb, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r8, 0xffff, 0x1, &(0x7f0000000000)=0xffffc5db, 0x4) getsockname(r8, 0x0, &(0x7f0000000140)) connect$unix(r7, &(0x7f0000000000), 0x10) getpeername$unix(r4, &(0x7f0000000140)=@file={0x0, ""/5}, &(0x7f0000000180)=0x7) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000080)=0x200, 0x4) 3.736291829s ago: executing program 5 (id=25): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x280, 0x0) fcntl$setown(r0, 0x6, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0x0) ioctl$TIOCSETA(r1, 0xc4504446, &(0x7f0000000740)={0x8, 0x5, 0x2, 0x4, "a3ae02c1000000000002000ffb7dd5a80b546600", 0x28, 0x4042}) ioctl$TIOCSETA(r0, 0xc4504442, &(0x7f0000000300)={0x200032, 0x8, 0x0, 0x0, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) r3 = msgget$private(0x0, 0x127) msgrcv(r3, 0x0, 0x0, 0x0, 0x3000) msgsnd(r3, &(0x7f00000004c0)=ANY=[@ANYBLOB="0300000000000000f67e7b64d4bf5a620722202985cd0cb626bfe381d589b43f4200ea35e53024c9c9eb2fc5828c0a5ea79ef5437919e15b86322c"], 0x9e, 0x0) 3.410713174s ago: executing program 5 (id=31): r0 = socket(0x18, 0x2, 0x0) close(r0) r1 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9e, 0x411}, 0x4, 0x800100000001, 0x0, 0x0, 0x0, 0x2, 0x40000000001, 0x4}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r2 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) sysctl$net_inet_tcp(&(0x7f0000000180)={0x4, 0x2, 0x6, 0xd}, 0x4, &(0x7f0000000000)="0615010000000000000072", &(0x7f0000000140)=0xb, 0x0, 0x0) setsockopt(r4, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080)="6733602c9755c1d1d4824e671479abc45c027ba3960721da1afe9f3a73d430e7296b837f7fa4163f9071f0b05d3b389f775f9d8db18ce70264a62c7a70eebfb3b78e50dba99236425f4c9a4208edd2ef69fc9998b5d97e2db8c5c6bd49071547964f4e16a00c2dc9d55d37661aee19afb1b2f6e3bb9810dac332f3fae82ef2034e13b9f855a2bb2c8dbc60516401dc4bd58d7792a64d4cf6", 0x98}], 0x1) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8000, 0x0, 0xfffc}}}}}}) 3.037380066s ago: executing program 5 (id=40): r0 = syz_open_pts() writev(r0, &(0x7f0000000540)=[{&(0x7f0000000080)="700826c4d56b365333a4fd3546167ab5cda229654c97576cdfae80a2743cce9d409806c1a92187b6ff0ea30f5f24f7e37dbeb9b24ec1349813982665", 0x3c}, {&(0x7f00000000c0)}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="467e89742f1148bd47844811483dfb9c3d", 0x11}, {&(0x7f00000003c0)="da7a3a7547948bd1b39869873732a1f929708e89d76ad5b21fc9b7a126046f835c5786043b2a8a96131511e1b59ee460694898678eb513dc4b2a2937ad01ebb685ec32631742d1426b70acc807fa1cc14aa653af7e89f6bb946bfc68964ba2947f6a15e7e90276026f75eb4a518cbac53b000e49e44facdb359e3e871acd5730e7", 0x81}, {&(0x7f0000000480)="fa5ad5440438387a623ba8b12892251665b91a210c40824bbdb0680d3d9765563618b2e8cb3706c98c3889eafaa8411f8e1820917039ac379be5bd9409e16d3e64aa43234d96b2429efb812b65e387d96b2e39dc6050eae49095547c08099c7e5562b70be5c69a11c8970e52f1be3de40fe67209c82fde6e50b2b1b7333336d3fb69c1ece32b62e7ef2b481b53f49635ee8eb7b6518e245c61c01712d538f7abf46d9005f1edb941cd058b", 0xab}, {&(0x7f0000000280)="5f55b00afe87f898de9c8fc3d8cb7e9f0c95454a45641b08161d110a84185624585de3fa68c6bebd9a6a88b0646c4ed3378c6d", 0x33}], 0x7) (async) sysctl$kern(&(0x7f00000002c0)={0x1, 0x29}, 0x2, &(0x7f0000000200)="e1298e4feec76a87d0482e96c76f41ff89dd031a450ebb8e4fd92ddd414487105646764b2c81e9411142b1919dc92176a25c522091ac09cddb9d25c987aa38aa42897e8e66982d7ea27c565c2a5fba7e2d56662dae953373032df8de8bed282e", &(0x7f0000000040)=0x60, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x18}, 0x2, &(0x7f0000000300)="466a9526303eceeff32cde868605d707cfacced4fd6284c98bad0d3ae71e35c4fddebb8f503fbcebf4da5c832c9f9e6b2a7fe326f47b5229bdc0a96a4f8c889138bd5bf8f741ca000000000000b228c474cf06aa0caf836b385c902627252900c69f813ab04815a941810000000000000000000000000000ab158880d6e4048d95954e7171f37c0be162a1c0bd1770938402", &(0x7f0000000100)=0x92, &(0x7f0000000140)="48a50bc086ae89495bb72d900a678ce9109532cd7cd30d5d335d2a69", 0x1c) 1.358106906s ago: executing program 3 (id=67): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) kqueue() ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0xc0, 0x3, 0x0, 0x7ff, 0xfffeffff, 0x2, 0x1, 0x2, 0x2004007, 0xff}) sysctl$vfs_ffs(0x0, 0x0, &(0x7f0000000080)="06e6a186cf8257197b8d91e7c56e0abd770a63cab73518977eb4e7f3cf84aa05aa7689c8dbe18896a2e8229d32f6e84c8033909c4b569ec9cc4cf6a445c82559ea205149a66ab99c89e4c319f5ced9ad4f702334eeb646b39b919a8d4fde562ba7135f28c86c751ee09b3028f555ae44a521f306ab76d3ef708e7f40d6e5c7cae35bb7622d953d709d8f83a05b80ff08aeb6f1a2537d113aedf5291a08932a64899b6d9e9be1f561e9fbc452ea18", 0x0, 0x0, 0x0) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) 1.357619843s ago: executing program 2 (id=69): r0 = syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSTAT(r1, 0x20007465, 0x0) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000000c0)=0x7) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x18, 0x1, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unveil(0x0, &(0x7f0000000000)='x\x00') ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000240)=0x4) unveil(0x0, &(0x7f00000003c0)='c\x00') syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) write(r0, &(0x7f0000000000)="780351", 0x3) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) 984.930977ms ago: executing program 3 (id=80): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT], 0x401, 0x0) msgsnd(0x0, &(0x7f0000000100)={0x3}, 0x8, 0x800) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0xa) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000340)=""/214, 0xd6}], 0x1) dup2(r1, r0) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000000)=0x9) 968.81389ms ago: executing program 2 (id=82): r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc028698a, &(0x7f0000000000)) 967.530327ms ago: executing program 7 (id=83): mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) minherit(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) sysctl$kern(&(0x7f0000000100)={0x1, 0x18}, 0x2, &(0x7f0000000080)="71f91e5a91501d94a34bdf536647f49a902027647169000000000000", &(0x7f0000000000)=0x1c, 0x0, 0x0) 922.13679ms ago: executing program 7 (id=84): unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0x2, 0x3, 0x0, "fc686b340da1e4795af94547bd1305d65c21963c"}) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000001180)=',', 0x1) r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) 921.671647ms ago: executing program 2 (id=85): mkdir(&(0x7f0000000140)='./file0\x00', 0x44) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)="15b9202955077c0581946156d5bc6bf83da0b349cc52c0d070585f05f9a854548d8e6638df307a4ecf13c4f6532b326ef5c3ac1864c9c16a80435d9f47753542a31e632dec2269812d05a7f7de2b17df60a0ee2136a99a2588c4beec5303475130a283383f465e902e31be81cc569a733dcf87c327c30fa0", 0x78) ioctl$WSMOUSEIO_SRES(r0, 0x80045721, &(0x7f0000000040)=0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)="ee", 0x1}], 0x1) select(0x40, &(0x7f0000000040)={0x2, 0x0, 0x5, 0xa, 0xea, 0x3ff, 0x0, 0x1}, &(0x7f00000002c0)={0x1ff, 0xed03, 0x8, 0x1, 0x6, 0xffffffffffffffff, 0xc, 0x5}, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3fc, 0x1, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7}, 0x0, 0x0, 0x0) syz_open_pts() 804.29283ms ago: executing program 7 (id=88): getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2012, r1, 0x0) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r2, 0x0) setitimer(0x0, &(0x7f0000000040)={{0x5, 0x8355}, {0x0, 0x8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, r0) 802.649262ms ago: executing program 0 (id=89): openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) (async) openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0x99, 0x27fffffffffffffe, 0x181c, 0x1ff, 0x2000000000000004}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0xa8, 0x0, 0x0, 0x0, 0x0, 0x50, 0x2}, 0xc, 0x2a2, 0x0, 0x0, 0x6, 0x80000000000000f, 0x6, 0x40}) r0 = msgget$private(0x0, 0x204) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140), 0xc) (async) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, 0xc) getpid() (async) r6 = getpid() ktrace(&(0x7f0000000640)='./file0\x00', 0x0, 0x40000530, r1) setpgid(r6, r4) r7 = getuid() setreuid(0xee00, r7) (async) setreuid(0xee00, r7) socket(0x11, 0x3, 0x0) (async) r8 = socket(0x11, 0x3, 0x0) sendto$unix(r8, &(0x7f0000000000)="b10005130000200000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0xb1, 0x0, 0x0, 0x0) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xb) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r12, 0x1) setsockopt$sock_cred(r12, 0xffff, 0x1022, &(0x7f0000000240)={r1, r5, r3}, 0xc) (async) setsockopt$sock_cred(r12, 0xffff, 0x1022, &(0x7f0000000240)={r1, r5, r3}, 0xc) getsockopt$sock_cred(r12, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f00000005c0)={{0xfffffffd, r10, r3, r2, r14, 0x60, 0x1}, 0x7, 0x9, r9, r9, 0x8001, 0x8, 0x9, 0x4}) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x2, &(0x7f0000000680)="bd0f192efd4235ebf1106d18e48760489a97d12f3889b66adb6756d95840b2904d30be7a1f22db19f50b85c0e0aee875689f58f969d1f06f062264dcb639626b64c30e67bff58519805f9b5ca70494e09c", &(0x7f0000000280)=0x51, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) r15 = getgid() lchown(&(0x7f00000000c0)='./file0\x00', r10, r15) getsockopt$SO_PEERCRED(r13, 0xffff, 0x1022, &(0x7f0000000180)={0x0}, 0xc) r17 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r17) sendmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000780)=@in6={0x18, 0x3, 0x8, 0x4}, 0xc, &(0x7f0000000500)=[{&(0x7f0000000300)="8621ffccdd233dad5e2f14adc64af3a25cb7c2061f53ebe81330ff10df2c784d03ddc47a32", 0x25}, {&(0x7f0000000340)="c2ee0e36f2dfa456ea5bb00e1eb76f4dc24abbaedb5acaeb58e79574a6a8bdb63e90e560b44b744dd5ebf65f98813c7b58e714962dcd0cdd357afffaec3efd5a3f6f51b98d4f18c880472ff3fd468f4fd5b8dc13a4a49a79264c31ffb5f7cd0c0cf091ff5c38aba2f71b8efc21b2062e90", 0x71}, {&(0x7f00000003c0)="fee88ebb82c15c7cc36d3baaf8938c07995e78877d76dd0c1d4490c8210e243dd7e47f4f7fdcd83439199094350ecd9cf086d5ea89dc55f1edb476b3d1eba63985b72431d4b872e3d3a9c86a5c08018d097bc59317e3ea053e5c094550dad3e8b9ccb6ac0d4b9c7bff6ad802781b3d1b0493d602b39236691c9c22f74a2d737bff2fee222e3a14de3f09fd0956c9d04a27a340a76680a447a793294d9589502ecbac09b678e14af99e09ea6716dfc72fae73bcefe3d771f80935cce57d9fcefb94637ff7cd3f951adb43c958104981eb11e0580f58b62222", 0xd8}, {&(0x7f00000004c0)="ef1a25f5dc106ec80300001eae716cbf9abf61acc4c9502321b69d41000383", 0x1f}], 0x4, &(0x7f0000000740)=ANY=[@ANYRES64=r17], 0x1a0}, 0x3) msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x53cbf8aa, r2, r11, r7, r15, 0x189, 0x5}, 0xe, 0x0, r16, r17, 0x81, 0x2, 0x5, 0x100}) (async) msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x53cbf8aa, r2, r11, r7, r15, 0x189, 0x5}, 0xe, 0x0, r16, r17, 0x81, 0x2, 0x5, 0x100}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) 802.124115ms ago: executing program 2 (id=90): socket(0x2, 0x3, 0x0) socket(0x11, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) r0 = syz_open_pts() close(r0) (async) close(r0) syz_open_pts() (async) r1 = syz_open_pts() ioctl$TIOCMBIS(r1, 0x8004746c, &(0x7f0000000340)=0x9) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="0002", 0x2}], 0x1) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f00000002c0)="0002", 0x2}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x0, 0x10000004, 0xa72, 0x58fc3a95, "a100ec0000000043ea00000000000a00", 0x461d, 0x2001}) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000080)=""/140, 0x8c}], 0x1) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6], [0x100000001, 0x8000, 0x4, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x8, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) r2 = kqueue() kevent(r2, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) socket(0x18, 0x1, 0x0) (async) r3 = socket(0x18, 0x1, 0x0) fcntl$setstatus(r3, 0x4, 0x40) shutdown(r3, 0x2) (async) shutdown(r3, 0x2) kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 800.220225ms ago: executing program 7 (id=91): r0 = socket(0x11, 0x3, 0x0) (async) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200, 0x80) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x4012, r1, 0x4) sendto$unix(r0, &(0x7f00000000c0)="b10005010000009f05003f0107000000211c13fecea79c5dfaf66e8d030100000000000000ef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc25769a51f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abf090000000008e37193f8343712050500b71d8000090005080000fca65361ba84913f01000008000000000000000000", 0xb1, 0x408, 0x0, 0x0) 798.974579ms ago: executing program 7 (id=92): fchdir(0xffffffffffffffff) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) fchmod(0xffffffffffffffff, 0x1) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)='O', 0x1}], 0x1) 727.565256ms ago: executing program 0 (id=94): setrlimit(0x8, &(0x7f0000000340)={0xc, 0x4000000000054}) setrlimit(0x0, &(0x7f0000000400)={0x5, 0x6}) r0 = socket(0x800000018, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x8) r1 = syz_open_pts() setuid(0xffffffffffffffff) r2 = socket(0x2, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x80206980, &(0x7f00000001c0)) close(r1) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000200)={0x200750, 0x49, 0x9, 0xc2cc, "030800", 0xc, 0x85}) write(r1, &(0x7f0000000240)="c570a4a5bbebc12d2a91854a3269facb1316b1dbefdc29ce59a480cfbf608dea9c620e5c769e41325bb05beb095558da1082977cecf0ae7465d33a476b2bf8d8323faf622b829cdd2def3aebda43f9d65bdedac3153eaa24e781fe6c886078dc1997598181a8a2b44b588cefa7fe886b4990181ebd182952bc83b084eeaf3c75abd47f349f01f6", 0xfead) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000000480)="00003d147c689519c6eb92b250a7209123570000", 0x14) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0xb, 0x0, 0x36}) r5 = socket(0x18, 0x2, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r6 = socket(0x18, 0xc003, 0x3a) setsockopt(r6, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0x66, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f0000000000)={{0x18, 0x2, 0xfffff001, 0x4}, {0x18, 0x2, 0x8, 0x400004}, 0x1005, [0x4, 0x9, 0x24a, 0xc, 0x1, 0x1, 0x9, 0x1]}, 0x3c) close(r6) setsockopt(r5, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) 725.303283ms ago: executing program 7 (id=96): sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b100050160000000004b366f08c7debac03900000007", 0x16, 0x1, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x8) unveil(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='r\x00') execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) select(0x40, &(0x7f0000000100)={0xfffffffffffffffd, 0x8000000044809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x770, 0x8, 0x9}, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r1, 0x4) r2 = socket$unix(0x1, 0x5, 0x0) connect$unix(r2, &(0x7f0000000040)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) accept$unix(r1, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 675.295376ms ago: executing program 0 (id=98): mknod(&(0x7f0000000400)='./file1\x00', 0x100, 0x5c4a) open(0x0, 0x0, 0x0) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) syz_emit_ethernet(0x93, &(0x7f00000001c0)=ANY=[@ANYBLOB="e727dc3523e090aaaaaaaabb8100000086dd609907a600592c03cb697a653e336f000000500000000000ff02000000000000000000000000000106080005"]) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) 621.794585ms ago: executing program 0 (id=100): r0 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 64) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) (async, rerun: 64) mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0x0) (async) r1 = open$dir(&(0x7f00000001c0)='.\x00', 0x0, 0x8) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0x2, &(0x7f0000000000), 0x4) (async) mkdirat(r1, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, &(0x7f0000000340), 0x0) (async) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x8000, 0x0, 0xfffc, {[@nop, @nop, @timestamp={0x8, 0xa, 0x7, 0x8}]}}}}}}}) (async) mknod(&(0x7f0000000400)='./file1\x00', 0x2000, 0x0) (async) unlink(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000a40)='./file0\x00') (async, rerun: 32) rename(&(0x7f0000000e80)='./file1\x00', &(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (rerun: 32) 619.336508ms ago: executing program 0 (id=101): mprotect(&(0x7f0000085000/0x3000)=nil, 0x3000, 0x2) 610.068343ms ago: executing program 6 (id=102): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000680)="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", 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x9) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) getdents(r0, &(0x7f0000000e80)=""/4091, 0xffaa) getdents(r0, &(0x7f0000001e80)=""/4096, 0x1000) 603.459384ms ago: executing program 0 (id=103): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x5, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil}, {&(0x7f0000ff0000/0xf000)=nil, &(0x7f0000159000/0x2000)=nil, 0x2}, {&(0x7f00004e5000/0x3000)=nil, &(0x7f00007f8000/0x6000)=nil, 0xfffffffffffffffc}, {&(0x7f00004c6000/0x2000)=nil, &(0x7f0000234000/0x2000)=nil, 0x7fffffffc}, {&(0x7f00000c2000/0x4000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xffffffffffe}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x23c}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2911}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000750000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00004f6000/0x3000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00003f7000/0x1000)=nil}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000366000/0x2000)=nil, 0x3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000064000/0x2000)=nil}, {&(0x7f00003f2000/0x2000)=nil, &(0x7f00005e4000/0x1000)=nil, 0x1}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000da9000/0x2000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x2}], './file0/file0\x00', 0x1}) (async) r0 = socket$inet(0x2, 0x1, 0x80) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) (async) fsync(0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, 0x0, 0x0) r1 = syz_open_pts() (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x400}, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa5fbb8af09d4886dd66e2294500243308fe8000000000000000000000000000aa0000000000eb"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) recvmmsg(r2, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10, 0x2000, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) (async) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x2010, r5, 0x0) (async) ioctl$WSDISPLAYIO_GETEMULTYPE(r5, 0xc014575e, &(0x7f00000002c0)={0xffffffff, './file1\x00'}) (async) r6 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r6) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0xffffffffffffffff}, 0x1008402}) (async) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) r7 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) fcntl$setown(r7, 0x6, 0x0) (async) ioctl$VT_OPENQRY(r7, 0x40047601, &(0x7f0000000300)) (async) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r8 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r8, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) (async) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x7fff}, {0x7, 0x4}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5, 0x10, r4, 0x0) (async) writev(r1, &(0x7f0000000140)=[{0x0}], 0x1) 602.50511ms ago: executing program 6 (id=105): mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450a) (async) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f00000001c0)={0x3}) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) r1 = open(0x0, 0x100, 0xa8) (async) clock_getres(0x8, 0x0) setreuid(0xee00, 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x8026d4) (async) open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x2c, 0x80, 0xfc, 0x4}, {0x40, 0x1, 0x1, 0x2}, {0x400e, 0xff, 0x53, 0x7}]}) (async) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000000)) faccessat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2, 0x0) ioctl$VT_GETMODE(r1, 0x40087603, &(0x7f0000000080)) 601.916052ms ago: executing program 2 (id=106): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="ed", 0x0) (async) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000140)=""/188, 0xbc}], 0x1, 0x0}, 0x372fafff}, 0x10, 0x2040, 0x0) recvmmsg(r1, &(0x7f00000009c0)={0x0, 0x800}, 0x10, 0x40, 0x0) (async, rerun: 32) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="ebffff132f", 0x5) (rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) (async, rerun: 32) r2 = dup(0xffffffffffffffff) (rerun: 32) r3 = dup(r2) setsockopt$inet_opts(r3, 0x0, 0x16, &(0x7f0000000080)="fd0cc085", 0x4) sendmsg$unix(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000280)="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", 0x13e, 0x404, 0x0, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x4}, {0x4, 0x6}}, 0x0) (async) sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) (rerun: 32) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r5, 0x8010570e, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, 0x3}, {}]}) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) (rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r6) (async) r7 = socket(0x2, 0x2, 0x0) ioctl$BIOCSRTIMEOUT(0xffffffffffffff9c, 0x8010426d, &(0x7f0000000200)={0xfffffffffffffffa}) (async) bind(r7, &(0x7f0000000000), 0x10) (async, rerun: 64) connect$unix(r7, &(0x7f0000000000), 0x10) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 494.623448ms ago: executing program 2 (id=107): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005010000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c12519", 0x70, 0x404, 0x0, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x4}, {0x4, 0x6}}, 0x0) mknod(&(0x7f00000001c0)='./file1\x00', 0x2000, 0x285b9a) r0 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) kevent(0xffffffffffffffff, 0x0, 0xffeffff1, &(0x7f00000002c0)=[{{}, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x5}, {{}, 0xfffffffffffffffa, 0xc0, 0x20000000, 0x7fffffffffffffff, 0x46ad}, {{}, 0xfffffffffffffff9, 0x1, 0xf0000000, 0x1, 0x8}, {{}, 0xfffffffffffffffc, 0x20, 0x4, 0xffffffff, 0xc3d}, {{}, 0xfffffffffffffffb, 0x37, 0xf0000000, 0x9, 0x3}, {{}, 0xffffffffffffffff, 0x6, 0x2, 0xe, 0x10000}, {{}, 0xfffffffffffffffd, 0x14, 0x10, 0x2, 0x100000001}, {{}, 0x0, 0x80, 0x1, 0x1f70, 0x5}], 0xb19, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)=""/62, 0x3e}], 0x1) ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x3) sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x0, 0xfffd}, {}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) r3 = socket(0x2, 0x2, 0x0) bind(r3, &(0x7f0000000000), 0x10) connect$unix(r3, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmmsg(r2, &(0x7f0000000380)={0x0, 0x8}, 0xa66f1f68c3106312, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000000029, 0xa, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r4, 0x1000000000029, 0x5, &(0x7f0000000000)="07001b00", 0x4) 491.563627ms ago: executing program 6 (id=108): r0 = open(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x201, 0x80) pwritev(r1, &(0x7f0000002740)=[{&(0x7f0000000000)="370aea", 0x3}], 0x1, 0x3fffe) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 490.658995ms ago: executing program 1 (id=109): r0 = syz_open_pts() ioctl$TIOCOUTQ(r0, 0x40047473, &(0x7f0000000100)=0x81) r1 = syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0x80084904, &(0x7f0000000180)={0x400, './file0\x00'}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x17) ioctl$BIOCSETIF(r3, 0x40384900, 0x0) poll(&(0x7f0000000340)=[{r2, 0x1}], 0x1, 0x9) poll(&(0x7f00000011c0)=[{r1, 0x4}], 0x1, 0x8000007) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000040)=0x1) 490.267093ms ago: executing program 1 (id=110): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1800, &(0x7f0000001640)={0x3, 0x6}) (async, rerun: 32) setrlimit(0x8, &(0x7f00000008c0)={0x42, 0x61}) (async, rerun: 32) open(&(0x7f0000000140)='./file0\x00', 0x80000000000206, 0xd4) (async, rerun: 32) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) (async, rerun: 32) clock_getres(0x4, &(0x7f0000000040)) (async) r0 = socket(0x18, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) r1 = syz_open_pts() sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000100)="c5acaae9e0cc0cb8540f89b44023cd6501649c291454782a230768ca35330e3fd52841f4efcaf577e56e4093bcdb7306f29c949279517e50a6c6e71154ad6f80507a21e9aed716ed9d04d1477ac25ad6a446fda9a30ddfa1d4f3588ae31afb485a2b66ba731d048f6bbeb107478e7acb8625b90d1aac9a011a06fb95ac121e39cde0c3f32c1aedebd028b25efac01d60ddfd10503acdf6387e114c7ce80aa83604fde4d3044dbf8ae286f42000ac35024e39b74d9e985752919e", &(0x7f0000000040)=0xba, &(0x7f0000000080)="db8a1d31cfb01af425f50801df88bac0e6396d4d77f0", 0x16) (async) close(r1) (async) connect$unix(r0, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0xa) setrlimit(0x8, &(0x7f00000001c0)={0x2, 0x9}) (async) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001340)={0xfffffff6, 0xfffffffa, 0x405, 0xfffffff7, "22ff0318087bf533e2942b0203001e0000000058", 0x5, 0x91c}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x54e}], 0x1) 170.309338ms ago: executing program 1 (id=111): syz_emit_ethernet(0x3e, &(0x7f0000000540)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @udp={{0x0, 0x2, 0x8}}}}}}}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000100)='./file0\x00', 0x3ff, 0x0, 0xfffffffffffffe63}) (async, rerun: 64) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x1}, {0x2, 0x3}, {}, {0x1}, {0x3}, {0x2, 0x20000000}, {0x1, 0xffffffff}, {}, {0x6}, {}, {0x1}, {0x0, 0x3b6}, {0x3, 0x400000}, {}, {0x2, 0x3}, {0x3, 0x800}, {0x1}, {0x0, 0x7ff}, {0x5}, {0x0, 0x7}, {0x3}, {0x3, 0x400}, {}, {0x2, 0x3}, {0x0, 0xfffffffd}, {}, {0x3}, {}, {0x1, 0xa}, {0x1}]}) (rerun: 64) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff}) (async) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$VMM_IOC_INTR(r1, 0xca605601, &(0x7f0000000040)={0x5, 0x0, 0x200d}) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) execve(0x0, 0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) r2 = syz_open_pts() (async) r3 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async, rerun: 64) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) (rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r4, 0x0) ktrace(&(0x7f0000000000)='./file1\x00', 0x1, 0x28, 0x0) (async) r5 = kqueue() kevent(r5, &(0x7f0000000080), 0xe4a, 0x0, 0x4000a9fa, 0x0) close(r2) syz_open_pts() mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x287e) (async) r6 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f0000000000)=0x4e6c) (async, rerun: 64) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x200, 0x5, 0xffffdfa2, 0xffffff8a, "0806000800000000000000ae16999b00f9ff00", 0x41ad, 0x20008}) (rerun: 64) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r7 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x80, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r3, 0x80085762, &(0x7f0000000180)={0x1, 0x8}) (async, rerun: 64) ioctl$VNDIOCGET(r7, 0xc4104603, &(0x7f00000003c0)={'./file0\x00', 0x5b8, 0x1a50, 0xfffffffffffffff7}) (async, rerun: 64) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 169.274366ms ago: executing program 6 (id=112): socket$inet6(0x18, 0x8000, 0x0) (async) r0 = socket$inet6(0x18, 0x8000, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000000)={0x9, 0x1, 0x9, 0xd2b1, 0xfffffffa}, 0xc) syz_emit_ethernet(0x109, &(0x7f0000000080)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x9, 0xfb, 0x0, 0x0, 0x0, 0x33, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2}, @generic="33323604823b50669067437187fc220f25a52f6ed95ab32bf599622bfd468170326ebf2bd3619227f09dfb1c66f9678b662e647c39634ff859e53f1b22de2b9051319b9169eff8c792dcdcef306ba09638e26f445a28d5032c1de09ff482147b1cfb0b165ce8c6d2f7c39aeea293b28ac56d389309c0985f037c1a44d0aee2c9bc2d01bb4b0111f77c65c257f34bab79aaa56b3ef1147316eefdaf0cc1f026a7da9cd7c7739fab252fdc184be90000001e9e79203557216d51701f213a9fcab1442a7d9a471ae03e9f2cb5ca50cdaaf2e828214c510668e83e6cbcbc1cdc4600cfc56a4e36ed56"}}}}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) 166.847895ms ago: executing program 1 (id=113): setitimer(0x2, &(0x7f0000000080)={{0xfffffffffffffffd, 0x2}, {0x4, 0x8}}, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x5, &(0x7f00000005c0)=[{0x9, 0x9, 0x6, 0x5}, {0x8, 0x60, 0xda, 0x352b}, {0x7, 0x7, 0xf8, 0x400}, {0x3, 0x8, 0x7, 0x6}, {0x3f34, 0x5, 0x9c}]}) 164.876908ms ago: executing program 3 (id=114): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x2, 0x0}, 0x8) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) socket$inet(0x18, 0x3, 0x102) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) minherit(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2) madvise(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) 146.783173ms ago: executing program 6 (id=115): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x31, &(0x7f00000000c0)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) sendmsg(r0, &(0x7f0000000500)={&(0x7f0000000080)=@in={0x2, 0x3}, 0xc, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0xa0}, 0x2) 145.816875ms ago: executing program 3 (id=116): r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x6, 0x0, 0x0) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x10, 0x4, 0x1) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) sysctl$kern(&(0x7f0000000040)={0x1, 0x30}, 0x2, 0xffffffffffffffff, &(0x7f00000000c0)=0xfffffffffffffd0b, 0x0, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x126, 0x411}, 0x4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x9, 0x100000000e61}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = socket(0x800000018, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x4, &(0x7f0000001180), 0x4) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 145.20498ms ago: executing program 1 (id=117): ioctl$BIOCIMMEDIATE(0xffffffffffffff9c, 0x80044270, &(0x7f00000000c0)=0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000280)=0x6) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x0}, 0x8) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) r3 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, r3) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x18}, 0x4, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETD(r4, 0x8004741b, 0x0) ioctl$TIOCSETAF(r4, 0x802c7416, 0x0) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb", 0x2}], 0x1) ioctl$TIOCDRAIN(r4, 0x2000745e) unveil(0x0, &(0x7f00000002c0)='W\x00') sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005136000009f050000002010000000000934ed0a0500fef96ecfc727d3357ae302b37b67ca1f2d61db7f4d0800000000000000f7c8cf5f882b297be1aa5b23edeb51e2f0ac3ebbc257699a1f139b671f4d335d223e7db3009b95665b00e32118", 0x62, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x4000, 0xd3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000df710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f00000001c0)={0x4, 0x2, 0x0, 0x27}, 0x4, &(0x7f0000000200)="609cab1fcfb9269f84", &(0x7f0000000240)=0x9, &(0x7f0000000300)="3e22276344b8827bb5436f2c03c93280ac113be314f1fd92173e5f2ded6673b5c85a41b8703153f0b42be47f78df67543009494588fbb9f04594824c6c03ec4b537811624c6ae81f9511d0d828caf59e0b9dc813439d0bc80ce4ad37fd13b6e783c1211007a175c890a3b47fe5f2ccdb3cb6d391176de461651f438c1064ce8b9ee7163525c2cd47de3566bf62e2fbf1bfd9a78f599f7867dbeeb81d510ffe99fea31f753787bfe6ea5b7e4f718ac75299d791ece70f5198c5b92258103d53c554f2a0f375d2b9eff125bfbb6387dcbc7d32653c4c6e35cfa88b462109e1d258405eb9", 0xe3) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x12, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x7}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) 21.861604ms ago: executing program 3 (id=118): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, &(0x7f0000000180)}) r1 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) setitimer(0x1, &(0x7f0000000140)={{0x4002, 0x7}, {0x8f8c, 0x1}}, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write(r0, &(0x7f0000000100)="0fa24d3a09a7c927b780b8fa7a86d6992c5c5eb606f3f133b9f21bd8b3494c88641b3725dd34ff07442817a742f4e5e5942d55321813c055c174c1e10bc54f3bf813843a044930824ea95e767cc0ff7b68b405ae51f537c6ef789d471ccbb0f26ba92b2d1e3e2dc6ceba3939e6ac543fe644", 0x72) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x19, &(0x7f00000000c0)=ANY=[@ANYBLOB="8aaaaaaaaa4f9376e4c4fb48"]) 20.58012ms ago: executing program 1 (id=119): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0x6, 0x2000003, 0xeffffff9, 0x1, 0x5, 0x8, 0x6, 0x1, 0x2, 0x4001, 0x7f}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r2 = syz_open_pts() r3 = syz_open_pts() poll(&(0x7f0000000140)=[{r2, 0x80}, {r2, 0x10}, {r2, 0x40}, {r3, 0x2}, {r2, 0x2}], 0x5, 0x4) r4 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x7, 0xd4, 0x9, 0xffffffff, 0xd7ed, 0x10, [{0xfe5, 0x7, 0x0, 0x71000}, {0x7, 0x4, 0x6, 0x4}, {0x10000006, 0xf86, 0x0, 0x40004}, {0x5, 0x800, 0x7, 0x1000000}, {0x6, 0x10000002, 0x80e, 0x7}, {0x6, 0x1, 0x0, 0x800009c}, {0x8, 0xffffffff, 0x1003, 0x71}, {0xa, 0x10000803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x800000b}, {0x4, 0xfffb, 0x2, 0xaeb}, {0x803, 0x40, 0x8, 0x4}, {0xe0, 0x4, 0x5, 0x3}, {0xffff0354, 0xfffffffa, 0x4, 0x100006}, {0x0, 0x6, 0x7, 0x1ffffffd}, {0x0, 0x1, 0x4, 0x4}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x7, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) syz_emit_ethernet(0x4de, &(0x7f0000000300)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "6d9efb", 0x4a8, 0x67, 0x0, @rand_addr="00000000010000000000000afffffffe", @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x88, 0xc, 0x0, 0x0, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @rand_addr="95a8e3f69261b11bfb779408877c5d94", @mcast1, @loopback]}, @hopopts={0x32}, @routing={0xc, 0x4, 0x0, 0x9, 0x0, [@mcast2, @mcast2]}, @dstopts={0x2e, 0x21, '\x00', [@pad1, @generic={0x5, 0xe4, "af20e4b21154e61fbb43d551c50b7bec06f120fe504d4df35619925b72a6b1656feb28597a452998fa7670c7e96a891d6ffe777cb844100410886327f4331b6b7014666b21692ac200f83283494936a2e78e688b24a12df0663b29bf2e8d3ccbab810b49c1ef16b67262e6271040c842f03cde08a1a439e382f0920b9d06cf2a5bbbf68f7e27c398dab6a1feba46ece491f2e3afc9dd415f72d449774cb6d7531708f6d0e12b3c1a52dbbd75db6ecc1ca45fe9dec04ea9d29642012029d0a721f39288cb0be11b5d12fc1fb0cad4845a210fbb369574dfe4b35dfd15d19d936c7f56a1b7"}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x80}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0xb8}, @padn]}, @hopopts={0x67, 0x13, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3}, @pad1, @jumbo={0xc2, 0x4, 0x7f}, @enc_lim={0x4, 0x1, 0x40}, @ra={0x5, 0x2, 0x8}, @generic={0x1, 0x73, "485ef589ae491e68524633c1d0d8b9b16c7a49fd77a612bef454c846a0e56fe547fe46198730b78c95e2f8da38bbac04d0394ca876316682bdcb4dade7960f19f7ec1d283a8cacfe2b5edf71cb26178d6fb0eaa29ab58c0bc6b7c0a2ce310174f74e257afbea621ab288fa61ebc0bc56c035cd"}]}, @dstopts={0x3, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0xfffffff8}, @ra={0x5, 0x2, 0x9}, @generic={0x0, 0x80, "139f7bdba31b4a5e93023b8fc36d75eb99294a01240d8d93df8e842372115a66321e8559af964182efdc5c1c42035f1dacb5cfefae59062602d7000031235090f999e023e796ae0c084c7a65992d759a2a357dd30328b755302b358b43c15cfb3e146f129b33bd0a9287a013f9de1ed95bfb0f4b11b3f6bd61d29e6bb929945c"}, @generic={0x1e, 0x73, "002d95038bacfc870265357cf9d9b44755e58d1228f9192ddaeebcc20f28903b8619baf08f03d4680c085762bacde2a3a204bda891ea364524e81d880651682d9bec27c4437abc40b43144a2a4b59409c7c6b274deeb61edf3087469372888c8ffc397fa87825cc8aae7c3c3ac9e73d0cdffb2"}]}, @routing={0x3b, 0x6, 0x0, 0x3, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, @mcast1]}, @dstopts={0x3b, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0xfffffffb}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x6, 0x4, "7f2f6066"}, @generic={0x4, 0xb6, "c434ce0964f6f448087dccd18f338ee73b9918980cfb6e10485a5374564a79e158b738cb44ef1f505e5fb1a0aa956d67c99527f7b6628136f30ad298f4e60d1133d0e4558287c61c9a8fe2befbc04a14228a66af4a4aeb6055850654dd8bf30a12e2c764e9ee173d0c80bf3db9e1944070c45810cff0101731dc8ba4def1139a8ee2150488e54537eba88cead8e3981d809fbd7d913aeda2c6c46a15023b69db83a1c4448dd171d6bca4829368fbd89a8baff87c778a"}]}, @dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2, 0x3}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x61}], @udp={{0x2, 0x3, 0x8}}}}}}}) 20.08887ms ago: executing program 6 (id=120): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1, 0x3}) close(r1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r0, 0x0) setgroups(0x1, &(0x7f0000000180)=[0x0]) 0s ago: executing program 3 (id=121): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) select(0x40, &(0x7f0000000000)={0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa74}, &(0x7f0000001140)={0x0, 0x5, 0x4, 0x408, 0x0, 0x800000000000006}, &(0x7f0000000080)={0x3, 0x0, 0xb, 0x0, 0x18ae, 0x9, 0x0, 0x2}, &(0x7f0000000100)) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) (async) select(0x40, &(0x7f0000000000)={0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa74}, &(0x7f0000001140)={0x0, 0x5, 0x4, 0x408, 0x0, 0x800000000000006}, &(0x7f0000000080)={0x3, 0x0, 0xb, 0x0, 0x18ae, 0x9, 0x0, 0x2}, &(0x7f0000000100)) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pppx: unable to set addresses for pppx2, error=17 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806e0b9590,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd806e0b9578,1) at rw_do_enter_write+0xba rrw_enter(fffffd806e0b9578,1) at rrw_enter+0xc6 VOP_LOCK(fffffd806e0bc630,2001) at VOP_LOCK+0xa3 vn_lock(fffffd806e0bc630,2001) at vn_lock+0xa4 vn_closefile(fffffd806a5b5870,ffff8000fffe7ca8) at vn_closefile+0x111 fdrop(fffffd806a5b5870,ffff8000fffe7ca8) at fdrop+0x121 knote_drop(fffffd806a810d38,ffff8000fffe7ca8) at knote_drop+0x1a1 knote_remove(ffff8000fffe7ca8,fffffd80752181c0,fffffd8075218250,4,0) at knote_remove+0x2f6 knote_fdclose(ffff8000fffe7ca8,4) at knote_fdclose+0xf9 fdrelease(ffff8000fffe7ca8,4) at fdrelease+0xf9 syscall(ffff80003c41aae0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc3c8010aad0, count: -14 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003c41a5b0 rbx 0 rdx 0xffff800001471680 rcx 0xffff8000fffe7ca8 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003c41a490 r9 0x8080808080808080 r10 0xf6bfdac385383a4 r11 0xbed45167c709ec48 r12 0xfffffd8003f20d00 r13 0xfffffd800470d2c8 r14 0x3 r15 0xffffffff833fdcbe substchar+0xc512 rip 0xffffffff82a865d5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c41a5a0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=73976 pid=82987 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffe67e8,0xffff800038beda28 process=0xffff80003c4c9838 user=0xffff80003c415000, vmspace=0xfffffd8075ef2b88 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 87087 62602 58353 0 7 0 syz-executor 87087 322134 58353 0 3 0x4000080 fsleep syz-executor 63345 55760 86527 0 3 0x3000 suspend syz-executor 63345 103198 86527 0 2 0x4081000 syz-executor 82987 257083 50002 0 2 0 syz-executor *82987 73976 50002 0 7 0x4000000 syz-executor 69550 152814 66892 0 3 0x80 nanoslp syz-executor 69550 369578 66892 0 3 0x4000080 sbwait syz-executor 69550 209786 66892 0 3 0x4000080 fsleep syz-executor 96783 401350 98398 0 3 0x80 nanoslp syz-executor 96783 9408 98398 0 3 0x4000080 kqsel syz-executor 96783 91022 98398 0 3 0x4000080 fsleep syz-executor 32455 291037 0 0 3 0x14280 nfsidl nfsio 56025 417259 0 0 3 0x14280 nfsidl nfsio 83363 428760 0 0 3 0x14280 nfsidl nfsio 70699 100873 0 0 3 0x14280 nfsidl nfsio 48897 240293 0 0 3 0x14280 nfsidl nfsio 29495 91288 0 0 3 0x14280 nfsidl nfsio 36078 297969 0 0 3 0x14280 nfsidl nfsio 51991 250077 0 0 3 0x14280 nfsidl nfsio 52173 365962 0 0 3 0x14280 nfsidl nfsio 80600 153525 0 0 3 0x14280 nfsidl nfsio 85015 387666 0 0 3 0x14280 nfsidl nfsio 40677 116847 0 0 3 0x14280 nfsidl nfsio 83047 192253 0 0 3 0x14280 nfsidl nfsio 22752 480191 0 0 3 0x14280 nfsidl nfsio 7666 244181 0 0 3 0x14280 nfsidl nfsio 2110 518229 0 0 3 0x14280 nfsidl nfsio 63406 474644 0 0 3 0x14280 nfsidl nfsio 61289 1255 0 0 3 0x14280 nfsidl nfsio 81685 355694 0 0 3 0x14280 nfsidl nfsio 97448 481811 0 0 3 0x14280 nfsidl nfsio 72014 3419 96036 0 3 0x3000 suspend syz-executor 72014 18007 96036 0 2 0x4081000 syz-executor 98398 2672 79552 0 3 0x82 nanoslp syz-executor 50002 336381 79552 0 3 0x82 nanoslp syz-executor 16532 126230 79552 0 3 0x82 wait syz-executor 96036 340382 79552 0 3 0x82 wait syz-executor 86527 183796 79552 0 3 0x82 nanoslp syz-executor 58353 213981 79552 0 3 0x82 nanoslp syz-executor 85091 259016 79552 0 3 0x82 nanoslp syz-executor 66892 452842 79552 0 3 0x82 nanoslp syz-executor 79552 469335 7867 0 3 0x82 kqread syz-executor 7867 464943 95623 0 3 0x10008a sigsusp ksh 95623 13933 61448 0 3 0x98 kqread sshd-session 61448 327284 13350 0 3 0x92 kqread sshd-session 16206 5022 1 0 3 0x100083 ttyin getty 13350 143063 1 0 3 0x88 kqread sshd 52633 518059 44970 74 3 0x1100092 bpf pflogd 44970 297516 1 0 3 0x80 sbwait pflogd 5843 325868 41713 73 3 0x1100090 kqread syslogd 41713 189796 1 0 3 0x100082 sbwait syslogd 61644 162123 1 0 3 0x100080 kqread resolvd 19290 56543 5359 77 3 0x100092 kqread dhcpleased 2332 424476 5359 77 3 0x100092 kqread dhcpleased 5359 273493 1 0 3 0x80 kqread dhcpleased 43605 125984 0 0 3 0x14200 bored smr 14192 385463 0 0 2 0x14200 zerothread 78647 363587 0 0 3 0x14200 aiodoned aiodoned 39025 215163 0 0 3 0x14200 syncer update 43768 391543 0 0 3 0x14200 cleaner cleaner 77178 305539 0 0 3 0x14200 reaper reaper 69790 173615 0 0 3 0x14200 pgdaemon pagedaemon 4405 11796 0 0 3 0x14200 bored viomb 46547 515417 0 0 3 0x40014200 acpi0 acpi0 69135 518384 0 0 3 0x40014200 idle1 61722 517314 0 0 3 0x14200 bored softnet1 10537 14497 0 0 3 0x14200 bored softnet0 63848 146770 0 0 3 0x14200 bored systqmp 1588 223373 0 0 3 0x14200 bored systq 73494 63330 0 0 3 0x14200 tmoslp softclockmp 15539 506898 0 0 3 0x40014200 tmoslp softclock 85642 306154 0 0 3 0x40014200 idle0 1 453834 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 87087 (syz-executor) thread 0xffff800038bec2c0 (62602) exclusive rwlock uobjlk r = 0 (0xfffffd806c1f6c18) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault+0x1e5 #3 upageflttrap+0xa9 #4 usertrap+0x42f #5 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd8075ef28b8) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x42f #7 recall_trap+0x8 Process 82987 (syz-executor) thread 0xffff8000fffe7ca8 (73976) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8393fee8) #0 witness_lock+0x5f1 #1 vn_closefile+0x41 #2 fdrop+0x121 #3 knote_drop+0x1a1 #4 knote_remove+0x2f6 #5 knote_fdclose+0xf9 #6 fdrelease+0xf9 #7 syscall+0xbd4 #8 Xsyscall+0x128 exclusive rwlock fdlock r = 0 (0xffff8000fffedd50) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sys_close+0xd0 #3 syscall+0xbd4 #4 Xsyscall+0x128 Process 72014 (syz-executor) thread 0xffff8000fffe7a10 (18007) exclusive rrwlock inode r = 0 (0xfffffd806bf448f8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10194 11031K 11198K 166960K 11419 0 pcb 17 12K 12K 166960K 45 0 rtable 243 11K 11K 166960K 401 0 pf 34 17K 18K 166960K 68 0 ifaddr 40 6K 7K 166960K 61 0 ifgroup 53 2K 2K 166960K 84 0 sysctl 1 1K 9K 166960K 7 0 counters 72 37K 38K 166960K 122 0 ioctlops 0 0K 4K 166960K 1511 0 iov 0 0K 4K 166960K 8 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1342 84K 85K 166960K 1443 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 97K 166960K 253 0 proc 73 131K 164K 166960K 538 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 22 0 in_multi 88 6K 7K 166960K 108 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 383 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 267 168K 182K 166960K 4258 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 43 86K 106K 166960K 1390 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 8 0 NDP 12 0K 1K 166960K 39 0 temp 45 8652K 8719K 166960K 10464 0 kqueue 14 22K 26K 166960K 48 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 44 0 40 1 0 1 1 0 8 0 rtentry 176 116 0 15 6 0 6 6 0 8 0 unpcb 144 113 0 92 2 0 2 2 0 8 0 syncache 336 5 0 5 1 1 0 1 0 8 0 tcpqe 32 1 0 1 1 1 0 1 0 8 0 tcpcb 736 142 0 137 7 6 1 7 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 inpcb 328 342 0 334 7 5 2 7 0 8 0 nd6 152 24 0 3 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 1 0 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 24 0 21 2 1 1 1 0 8 0 pppxif 1504 4 0 4 1 1 0 1 0 8 0 pffrag 232 4 0 1 1 0 1 1 0 482 0 pffrnode 88 4 0 1 1 0 1 1 0 8 0 pffrent 40 6 0 3 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 28 0 0 1 0 1 1 0 8 0 pfstkey 128 28 0 0 1 0 1 1 0 8 0 pfstate 384 28 0 0 3 0 3 3 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 464 0 50 29 2 27 29 0 8 0 art_table 40 467 0 50 5 0 5 5 0 8 0 art_node 32 116 0 24 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semapl 112 4 0 1 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1789 0 275 95 0 95 95 0 8 0 ffsino 296 1789 0 275 117 0 117 117 0 8 0 nchpl 144 2139 0 433 64 0 64 64 0 8 0 rtmask 32 8 0 6 2 1 1 1 0 8 0 vnodes 216 1910 0 0 107 0 107 107 0 8 0 namei 1024 6456 0 6456 3 2 1 2 0 8 1 percpumem 16 76 0 25 1 0 1 1 0 8 0 kstatmem 264 48 0 22 3 1 2 3 0 8 0 scsiplug 72 2 0 2 1 1 0 1 0 8 0 scxspl 216 10358 0 10358 3 2 1 2 1 8 1 plimitpl 152 75 0 57 1 0 1 1 0 8 0 sigapl 424 584 0 516 8 0 8 8 0 8 0 knotepl 120 316 0 0 10 0 10 10 0 8 0 kqueuepl 224 58 0 47 1 0 1 1 0 8 0 pipepl 344 128 0 100 3 0 3 3 0 8 0 fdescpl 528 548 0 516 3 0 3 3 0 8 0 filepl 160 2343 0 2108 13 2 11 13 0 8 0 lockfpl 104 45 0 43 1 0 1 1 0 8 0 lockfspl 48 22 0 20 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 36 0 19 1 0 1 1 0 8 0 ucredpl 104 208 0 195 1 0 1 1 0 8 0 zombiepl 144 520 0 516 1 0 1 1 0 8 0 processpl 1232 584 0 516 6 0 6 6 0 8 0 procpl 664 796 0 720 7 0 7 7 0 8 0 sosppl 176 3 0 3 1 0 1 1 0 8 1 sockpl 752 507 0 474 12 7 5 12 0 8 0 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 120 0 0 15 0 15 15 0 8 0 mcl2k 2048 36 0 0 5 0 5 5 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 1787 0 0 112 0 112 112 0 8 0 bufpl 280 4314 0 126 300 0 300 300 0 8 0 anonpl 32 11515 0 0 93 0 93 93 0 246 0 amapchunkpl 152 12689 0 12126 29 7 22 29 0 158 0 amappl16 200 2549 0 2282 23 8 15 23 0 8 0 amappl15 192 24 0 24 1 1 0 1 0 8 0 amappl14 184 7 0 7 1 1 0 1 0 8 0 amappl13 176 465 0 464 1 0 1 1 0 8 0 amappl12 168 915 0 872 3 0 3 3 0 8 0 amappl11 160 15 0 15 1 1 0 1 0 8 0 amappl10 152 52 0 38 1 0 1 1 0 8 0 amappl9 144 253 0 253 1 1 0 1 0 8 0 amappl8 136 62 0 60 1 0 1 1 0 8 0 amappl7 128 83 0 82 1 0 1 1 0 8 0 amappl6 120 292 0 278 1 0 1 1 0 8 0 amappl5 112 74 0 63 1 0 1 1 0 8 0 amappl4 104 424 0 395 1 0 1 1 0 8 0 amappl3 96 1985 0 1883 4 1 3 3 0 8 0 amappl2 88 670 0 595 2 0 2 2 0 8 0 amappl1 80 10085 0 9486 16 2 14 16 0 8 0 amappl 88 3499 0 3313 5 0 5 5 0 92 0 uvmvnodes 80 1910 0 0 39 0 39 39 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 548 0 516 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 548 0 516 1 0 1 1 0 8 0 vmmpekpl 168 6404 0 6366 3 0 3 3 0 8 0 vmmpepl 168 43832 0 41616 104 2 102 104 0 357 0 vmsppl 488 547 0 516 5 0 5 5 0 8 0 rwobjpl 80 17585 0 14490 65 1 64 64 0 8 0 pdppl 4096 1103 0 1032 99 28 71 87 0 8 0 pvpl 32 18598 0 0 150 0 150 150 0 265 0 pmappl 256 547 0 516 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 381 0 41 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83803ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff8393fce0) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff8393fce0) at __mp_lock+0x192 uvm_fault(fffffd8075ef27b8,4276b9c2000,0,1) at uvm_fault+0x1ea upageflttrap(ffff80003c445310,4276b9c2000) at upageflttrap+0xa9 usertrap(ffff80003c445310) at usertrap+0x42f recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7486e1d7cd70, count: -12 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806e0b9590,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd806e0b9578,1) at rw_do_enter_write+0xba rrw_enter(fffffd806e0b9578,1) at rrw_enter+0xc6 VOP_LOCK(fffffd806e0bc630,2001) at VOP_LOCK+0xa3 vn_lock(fffffd806e0bc630,2001) at vn_lock+0xa4 vn_closefile(fffffd806a5b5870,ffff8000fffe7ca8) at vn_closefile+0x111 fdrop(fffffd806a5b5870,ffff8000fffe7ca8) at fdrop+0x121 knote_drop(fffffd806a810d38,ffff8000fffe7ca8) at knote_drop+0x1a1 knote_remove(ffff8000fffe7ca8,fffffd80752181c0,fffffd8075218250,4,0) at knote_remove+0x2f6 knote_fdclose(ffff8000fffe7ca8,4) at knote_fdclose+0xf9 fdrelease(ffff8000fffe7ca8,4) at fdrelease+0xf9 syscall(ffff80003c41aae0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc3c8010aad0, count: -14