last executing test programs: 3.68931969s ago: executing program 3 (id=112): msgget(0x1, 0x23e) r0 = msgget(0x1, 0x41) setrlimit(0xa, &(0x7f0000000380)={0xb, 0x4e}) msgrcv(r0, &(0x7f00000005c0)={0x0, ""/19}, 0x1b, 0x1, 0x800) r1 = syz_open_pts() close(r1) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x100900000000009}, {0xffffffff, 0x1f50}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="673bb5b8cc0c16ed08db75817fc8add3cec4ec48a2e92e98e17c03ce4801ef1d47e6abbbdabb26a5a12af0f460032b34b7", 0x31}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000040)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18"], 0x20}, 0x4) r3 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x47) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/49, 0x26}], 0x1000000000000274) sysctl$net_inet_ip(&(0x7f0000000340)={0x4, 0x2, 0x0, 0x18}, 0x4000000000000046, 0x0, 0x0, 0x0, 0x63) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5", 0x1) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="22be145f0cac489fb4", 0x9}], 0x1) sysctl$net_inet_ip(&(0x7f00000003c0)={0x4, 0x2, 0x0, 0xd}, 0x4, &(0x7f0000000400)="f9b60e832e75f251f1f0689ea757612e917c683eddcd364dfbe2c69b228d42de8bafba9b5cad2d577c46c543eeb824dc70d8d9a008d47ee02fd07f1a80f38c81798058d4775a674e46218dbcf2f421ae8ff4e5f5b73223c146b2918b3b7ea9fb3a8ed1131935ea2b0258db69f844c1986475a9f79bcb4499f02059ac3a6ac475e1bb230c7a2d28b0", &(0x7f00000004c0)=0x88, &(0x7f0000000500)="49ef4f9eadf0d757801fc8bdd4178d4f2de243c35f33a15dc7844f06b81805e61b75e78f8239f7d30446b0635d85a53a723a44705eaf6751cbd4acb9560642f09a7b89afc5a391990abf2cad96ecc754ed2f498a6ebac29bc712b4204759878e21b5d626d25f8979fead054bfe4707ebfdae10d9a176f17465abe00942b23d980768a9d3479f82c825b663b637799126f0", 0x91) sysctl$net_inet_ip(&(0x7f00000001c0)={0x4, 0x2, 0x0, 0x11}, 0x4, &(0x7f0000000200)="a287eec3e588a0be510e3d9968eb73892f754aaa77d8e18ec885e0d110e5de9ee848e89e4dba4806a62413bcd4556b6f8ce685da01a0981a33b187028fc8c01f08760162de558ef09eccd32028dfe62b54eb720eafddc7dc28e5868d6a9b62be4f7dec2a10e522c225059103ec2c500fb87c50c42a80f9c7656427893e8c921b6dced5e4e8680e54628acd4f6616f5935734e832f7eba3b50cf09f672b2799d0752be4a63d56aebc236eed2700694bd99c07fe5105956e7f2362", &(0x7f00000002c0)=0xba, &(0x7f0000000300)="aa3b0951", 0x4) 3.554598637s ago: executing program 3 (id=122): madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x93, 0x400) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async, rerun: 32) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x21, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async, rerun: 32) write(r2, &(0x7f0000000280)="f81ad2e4004800009db6a1cb4973", 0xe) (async, rerun: 32) closefrom(r2) (async) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', r1, 0x1}) (async) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) (async, rerun: 32) sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000)="0000e65bc39e76ecc9ddb3c3cc6bbc2506870300ec", &(0x7f0000000240)=0x15, 0x0, 0x0) (async, rerun: 32) execve(0x0, 0x0, 0x0) (async, rerun: 64) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async, rerun: 64) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x139) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) (async, rerun: 64) open(0x0, 0x10000, 0x34) (async, rerun: 64) sysctl$kern(0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) r5 = socket(0x2, 0x8002, 0x0) truncate(&(0x7f00000001c0)='./file0\x00', 0x2) (async, rerun: 64) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) (rerun: 64) closefrom(r6) 3.463963586s ago: executing program 3 (id=124): sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) r0 = socket(0x2, 0x1, 0x0) r1 = dup(r0) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2, 0x0, 0x7}, 0x10) connect(r0, &(0x7f0000000380)=@in={0x10, 0x2, 0x2, 0x8}, 0x10) r2 = socket(0x18, 0x3, 0x6) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000080)) getsockopt(r2, 0x29, 0x3e, 0x0, 0x0) getsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000000), &(0x7f0000000040)=0x4) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) (async) socket(0x2, 0x1, 0x0) (async) dup(r0) (async) connect$inet(r1, &(0x7f0000000040)={0x10, 0x2, 0x0, 0x7}, 0x10) (async) connect(r0, &(0x7f0000000380)=@in={0x10, 0x2, 0x2, 0x8}, 0x10) (async) socket(0x18, 0x3, 0x6) (async) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) ioctl$FIOGETOWN(r0, 0x4004667b, &(0x7f0000000080)) (async) getsockopt(r2, 0x29, 0x3e, 0x0, 0x0) (async) getsockopt$sock_int(r2, 0xffff, 0x1001, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 3.462651737s ago: executing program 3 (id=126): r0 = socket$inet(0x2, 0x3, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8000, 0x20) utimensat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x5, 0x4}, {0x4, 0x2}}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x67, &(0x7f0000000200), 0x0) getsockname(r0, &(0x7f0000000000)=@un=@abs, &(0x7f0000000040)=0x8) 3.461758208s ago: executing program 3 (id=127): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000180)=""/192, 0xc0}, {&(0x7f00000002c0)=""/229, 0xe5}], 0x3, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4, 0x10, r0, 0x8) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 3.265919322s ago: executing program 3 (id=132): r0 = socket(0x18, 0x1, 0x0) listen(r0, 0x0) select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x8}, 0x0, 0x0, 0x0) shutdown(r0, 0x0) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x7) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0x10000001, 0x34d, 0xfb46, 0xe, "bb260985210009000000000000000000e200", 0x802, 0x800ffff}) writev(r1, &(0x7f0000000500)=[{&(0x7f00000009c0)="9c69ae81f143be07f8bce16f7c5f869c2ba7336594f6c7db7e5cf2ba38754e7d33ee9a9df2cfea154ddeccebada1973dc07c6857c1526464b0d07c02da662f383f87714ff032fc3fc9c39fb94b359ad9383db992072267fc5d1b2cf06296a08f0b08921d3f587761c23c2bcf3b75bb71bf93be4a8214d6285cc12dd2d632088e540360e6bd2da9190ac2427c660e6fa2d62eedb65e95705820dddf0d3447d7ee40badd14b29c67df745d5ccfd6d7c027be6d2d5885645ffea5a88dc96fa75e4e80b5eb1227c9ccf9d24278136a9810be54445857b58db226a96c0e3b9701c8cc9e44c258c955392d56b661dd2f1d6599d59f4c09e782", 0xf6}], 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) open$dir(&(0x7f00000000c0)='./file1\x00', 0x2, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x800, 0x7}, 0x0, 0x0, 0x0) 2.589336932s ago: executing program 4 (id=154): r0 = shmget$private(0x0, 0x4000, 0x520, &(0x7f0000038000/0x4000)=nil) setuid(0xffffffffffffffff) shmctl$IPC_RMID(r0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) poll(&(0x7f0000000200)=[{r1, 0x1}], 0x1, 0xfff) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_extract_tcp_res(0x0, 0x3, 0x5a) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2000000000000125, &(0x7f0000000380)=[{0x7, 0x6, 0x7, 0x2d2c}, {0x7, 0xa, 0x9, 0xffffffff}, {0x6, 0x7, 0x40}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ff71505a5bff000000004000f6ff0101", 0x3}, 0x1c) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f00000000c0)={0x4, 0x4000805c, 0x4, 0xa, "d53fe9000000001000000000e5ffffffe80100", 0x3db, 0x7}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x90, 0x40, 0x7, 0x3}]}) recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/190, 0xbe, 0x800, &(0x7f0000000300)=@un=@abs={0x80, 0x1, 0x0, 0x3}, 0x8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x2, &(0x7f0000000340)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x33, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) kill(r5, 0xd) syz_extract_tcp_res$synack(&(0x7f00000003c0), 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) ioctl$FIONREAD(r4, 0x80206932, &(0x7f00000001c0)) syz_emit_ethernet(0x1f, &(0x7f0000000400)={@random="74d4be20368a", @random="fc33e6e22fd6", [], {@generic={0x817d, "fcb1e44a5e127968f8c5c015f81a995fc3"}}}) mprotect(&(0x7f00007c4000/0x1000)=nil, 0x1000, 0x0) r6 = socket(0x18, 0x3, 0x80) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) munlock(&(0x7f00007c4000/0x4000)=nil, 0x4000) sendto(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, '\x00', 0xffffffc0}, 0x1c) 1.929901504s ago: executing program 7 (id=183): mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) (async, rerun: 64) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x4d) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x10000) poll(&(0x7f0000000040)=[{r0, 0x10}], 0x1, 0x3) open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x91) r2 = socket(0x18, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x4, 0x101, 0xffff7fff, 0x1, 0x3, 0x10, [{0x3ff, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0xa}, {0x6, 0xffffffff, 0x4, 0x2}, {0x2, 0x0, 0x200, 0x6}, {0x8, 0x3, 0x80000000, 0x807}, {0x2, 0x48001, 0x14000009, 0xa}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfcf0, 0xb}, {0x0, 0x7, 0x31, 0x8b}, {0x5, 0x7, 0x8002, 0x1}, {0xa44f, 0x0, 0xa38c000, 0xe1}, {0xf, 0x2, 0x0, 0x8}, {0x2000df, 0x9, 0x15, 0x400}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x1, 0x5, 0x3, 0x4}, {0xd15, 0xd655, 0x400003, 0x6}]}) (async) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0x2800c1, 0xf, 0x0, 0x80000001, 0x50001, 0x0, 0x1, 0x0, 0x8000000000000008, 0xbf}) (async, rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 64) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) (async, rerun: 64) ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0xd27d43220c7ff9d, 0x0) (async, rerun: 64) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(r4, 0xc1084413, &(0x7f0000000040)={{0x4, './file0\x00', [{[@v6=@mcast2, @v6=@empty], [0xd, 0x40], 0x1, 0x2}, {[@v4=@rand_addr=0x3, @v6=@local={0xfe, 0x80, '\x00', 0x0}], [0xa6, 0x800], 0x2004, 0x18}], {{0x246, 0x48, 0xfa, 0x7ff}, 0x6543, 0x409, 0xfff00000, 0x7b3f, 0x800, 0x17, 0x7}, {{0x0, 0x7, 0x1, 0x85}, 0x8001, 0xc85, 0x10007, 0x6, 0x3fd, 0xf0}, @v6=@ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, 0x6, 0xffffffff, 0x2, 0x100f23b, 0x5, [[0x8, 0xd], [0x3, 0x834c]], [[0xfc000002, 0xf], [0xfffffff7, 0x3]], 0x9, [0x1d9, 0x79], 0x1, 0x18, 0x6, 0x1, 0x0, 0x3, 0xc, 0x83, 0x5, 0x5, 0x1, 0x7}}) (async, rerun: 64) ioctl$TIOCSETA(r4, 0xc1084425, &(0x7f0000000040)={0x1, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe}) (rerun: 64) 1.914858447s ago: executing program 4 (id=154): r0 = shmget$private(0x0, 0x4000, 0x520, &(0x7f0000038000/0x4000)=nil) setuid(0xffffffffffffffff) shmctl$IPC_RMID(r0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) poll(&(0x7f0000000200)=[{r1, 0x1}], 0x1, 0xfff) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_extract_tcp_res(0x0, 0x3, 0x5a) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2000000000000125, &(0x7f0000000380)=[{0x7, 0x6, 0x7, 0x2d2c}, {0x7, 0xa, 0x9, 0xffffffff}, {0x6, 0x7, 0x40}]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "ff71505a5bff000000004000f6ff0101", 0x3}, 0x1c) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504446, &(0x7f00000000c0)={0x4, 0x4000805c, 0x4, 0xa, "d53fe9000000001000000000e5ffffffe80100", 0x3db, 0x7}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x90, 0x40, 0x7, 0x3}]}) recvfrom(0xffffffffffffffff, &(0x7f0000000240)=""/190, 0xbe, 0x800, &(0x7f0000000300)=@un=@abs={0x80, 0x1, 0x0, 0x3}, 0x8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x2, &(0x7f0000000340)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x33, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) kill(r5, 0xd) syz_extract_tcp_res$synack(&(0x7f00000003c0), 0x1, 0x0) msgctl$IPC_RMID(0x0, 0x0) ioctl$FIONREAD(r4, 0x80206932, &(0x7f00000001c0)) syz_emit_ethernet(0x1f, &(0x7f0000000400)={@random="74d4be20368a", @random="fc33e6e22fd6", [], {@generic={0x817d, "fcb1e44a5e127968f8c5c015f81a995fc3"}}}) mprotect(&(0x7f00007c4000/0x1000)=nil, 0x1000, 0x0) r6 = socket(0x18, 0x3, 0x80) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) munlock(&(0x7f00007c4000/0x4000)=nil, 0x4000) sendto(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, '\x00', 0xffffffc0}, 0x1c) 1.393257956s ago: executing program 1 (id=211): r0 = open(&(0x7f0000000140)='./file0\x00', 0x400, 0x108) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000100)) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x66) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809ea1, 0xffffffffffffffff, 0xfffffffffffffffd, 0x94, 0x181c, 0xa, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9c) r2 = kqueue1(0x10000) kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x13, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x3) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) ioctl$BIOCSRTIMEOUT(r0, 0xc0307004, &(0x7f00000000c0)={0x8}) getitimer(0x0, &(0x7f0000000000)) 1.081291985s ago: executing program 2 (id=218): r0 = open(&(0x7f0000000080)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5, 0x8010, r0, 0x8000) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) 1.080898805s ago: executing program 2 (id=219): r0 = kqueue() kevent(r0, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffffa, 0x23, 0x1, 0x3c, 0x8}], 0x1, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffff9, 0x1, 0x10, 0xfffffffffffffffc, 0x1dfb}], 0x5, 0x0) kevent(r0, &(0x7f0000000080)=[{{r0}, 0xffffffffffffffff, 0x1, 0x80, 0x80, 0x7ff}], 0x20e97, 0x0, 0xfffffffe, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xa, 0x3, 0x3, 0x8}, {0x9b1e, 0x22, 0xb, 0x4}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000340)="c2a650000001935e8e47c7dc8b0e68822445d3be05a9b9695e0acf8d1ba3ee29d441ab6083c8c70600001c700c5a1f3fd11b33fcdf93141219d726a83dbe14a6669cdd8e306a1bab63559f0fb0e9fa064a9eff186d5ccda6d0182c4b1d1365df7d24bffb4f4aa3e00718", &(0x7f0000000000)=0x4d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000080)='\t\x00\x00\x00', 0x4) connect(r2, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x2, 0x0, "ffe54a09470300261febf2fc8dc83304", 0x1}, 0x1c) getpeername$unix(r2, 0x0, &(0x7f00000000c0)=0x4d) syz_emit_ethernet(0x1000e, &(0x7f0000000100)=ANY=[@ANYRES64=r2]) 1.075687538s ago: executing program 1 (id=221): r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r0, 0x40000000007) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000300)={{0x0, 0x6347}, {0x0, 0xffffffffffffffff}}, 0x2f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000300)="00000001", 0xffffff0a}], 0x1) truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000002) 1.069657502s ago: executing program 0 (id=224): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000040)) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$DIOCRGETADDRS(r1, 0xc4504446, &(0x7f0000000240)={{'./file0\x00', './file0\x00', 0x0, 0xb}, &(0x7f00000000c0)=[{@multicast1, '\x00', './file0\x00', 0x3c000, 0x2344, 0x2, 0x7, 0x5, 0xe, 0xa6}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x5, 0xa390, 0x18, 0x0, 0xf, 0x8, 0x7}, {@multicast2, '\x00', './file0\x00', 0x3, 0x2, 0x18, 0x10, 0xa3, 0x8, 0xb}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x4c7, 0x4145, 0x0, 0x3, 0xc4, 0x5, 0x34}, {@multicast2, '\x00', './file0\x00', 0x9, 0x1, 0x18, 0xe1, 0xe, 0x7f, 0x8}, {@multicast1, '\x00', './file0\x00', 0x7, 0x8, 0x1a, 0x2, 0xfd, 0x3, 0x2}, {@rand_addr=0x81, '\x00', './file0\x00', 0x6a, 0x11, 0x18, 0xe7, 0x6c, 0x2, 0x7}], 0x400, 0x7, 0x100, 0x434e9079, 0xb36, 0x8, 0x30, 0x3}) chflags(&(0x7f00000006c0)='./file0\x00', 0x0) ioctl$WSMOUSEIO_SRES(r1, 0x80045721, &(0x7f0000000700)=0x6) ioctl$WSKBDIO_SETKEYREPEAT(r0, 0x800c5707, &(0x7f0000000740)={0x4, 0x8, 0xffff}) fstat(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000800)={0x8df, 0xf, 0x100, 0x2, "2fdfd639d72ddcb644c6761d4121ec7ce4b2765e", 0x7100, 0x3}) ioctl$WSKBDIO_GETBACKLIGHT(r0, 0x400c5711, &(0x7f0000000840)) r5 = openat$klog(0xffffffffffffff9c, &(0x7f0000000880), 0x10000, 0x0) r6 = getpgid(0xffffffffffffffff) fcntl$lock(r5, 0x9, &(0x7f00000008c0)={0x3, 0x1, 0x7fff, 0x4, r6}) r7 = accept$unix(0xffffffffffffff9c, &(0x7f0000000900)=@file={0x0, 0x0, ""/249}, &(0x7f0000000a00)=0xfb) getsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f0000000a40)={0x0, 0x0, 0x0}, &(0x7f0000000a80)=0xc) ioctl$TIOCCLRVERAUTH(r4, 0x2000741d) r11 = openat$dri(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/dri/renderD128\x00', 0x80, 0x0) readv(r11, &(0x7f0000000c00)=[{&(0x7f0000000b00)=""/38, 0x26}, {&(0x7f0000000b40)=""/101, 0x65}, {&(0x7f0000000bc0)=""/53, 0x35}], 0x3) utimes(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={{0x8, 0x9}, {0x7fff, 0x10}}) r12 = msgget(0x0, 0x200) fstat(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getsid(r8) msgctl$IPC_SET(r12, 0x1, &(0x7f0000000d40)={{r9, r10, r13, r3, 0x100, 0x6, 0x0, 0x0, 0x2236}, 0x0, 0x0, 0x3b368006, 0xe6ee, 0x7fff, r15, r8, 0xfb, 0x0, 0x2a, 0x0, 0xffffffffc0000000}) r16 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000e00), 0x20000, 0x0) ioctl$VT_GETMODE(r16, 0x40087603, &(0x7f0000000e40)) ktrace(&(0x7f0000000e80)='./file0/file0\x00', 0x2, 0x200, r15) sendmsg$unix(r7, &(0x7f0000001140)={&(0x7f0000000ec0)=@abs={0x2, 0x0, 0x0, 0x2}, 0x8, &(0x7f0000001080)=[{&(0x7f0000000f00)="47202dd84a30a53a970958eab242aa7b8c2a56f35fec573f0bbb60f56d8f3160cce1cb60181282f7eba6589598d361353c6714cd3b99da14ac1ea83cea694740c7b490175676ae848b5a2d77793e2248c43488121cf8f7fb5cc95fbf94d59d5ba4e9ca00d12f2e11ebfde0478b74abd9dca4", 0x72}, {&(0x7f0000000f80)="653ba9d441d53bf4bbf82d57", 0xc}, {&(0x7f0000000fc0)="ded6e1f2a886cee3d239f00305623f9237819579a6afee90ebea746f8aee86ae0dd82d00ae731a24c9c796e7172660b8636459b65562", 0x36}, {&(0x7f0000001000)="152acc414cd720a06634d32568f1a0c33ad7a4efd85d10d2a2c1e299b062c36a2eac0c31d80ed1dd4970159bcfd65a2ec81df2b0a7342135237201ca248fc5585acb439252a94110852b55434c8d8f22bc4c3fbb013e61f4d45294c238a43957b4ed72cab173cb941766c179d9d9417819fe8cef", 0x74}], 0x4, &(0x7f00000010c0)=[@cred={0x18, 0xffff, 0x0, r15, r13, r10}, @cred={0x18, 0xffff, 0x0, r15, r2, r14}, @cred={0x18, 0xffff, 0x0, r8, r9, r10}, @cred={0x18, 0xffff, 0x0, r6, r13, r3}], 0x60, 0x1}, 0x3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r11, 0xc00c642d, &(0x7f0000001180)={0xe2a, 0x81, r7}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r17, 0xc01064b3, &(0x7f00000011c0)) 867.295914ms ago: executing program 7 (id=225): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r0 = getppid() ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x40001306, r0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x10) pwrite(r1, 0x0, 0x0, 0xb30e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) msgget(0x1, 0x8) write(r2, &(0x7f0000000180)="917d8f9c47c7aa2edd84b0335df2d66b9e81b988e179ce769878eb4486058ffe8209a76735afa1765e0201ce643d430a8a1021704e8e85fb1aefc9e23b0a1f463c3f66174b3289b30e716f215f67cb8adff20b26cc90fb9414e69b038dfa795f7e3dbdf03119057b11176c0ab0ea3fdae4591a3586b4d5a24a962fdcd5789f4f9fd8ec2c7662a38f58107378061109f533c1", 0x92) sendto$unix(r2, 0x0, 0x0, 0x40c, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x20, 0x124) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x806378, 0x80800208, 0x8000, 0x3fc, 'H\x00\x00\x00\x00\x00e\x00! \x00', 0x200081, 0x12}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='w\x00') recvfrom(r3, &(0x7f0000000b40)=""/220, 0xdc, 0x1800, 0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x10, r0) 866.714403ms ago: executing program 0 (id=226): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) (async) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f0000000140)={{0x1c, 0x18, 0x1, 0x200, "28d4638cfd07cd8776a1a20289936dfc", 0xffff79fe}, {0x1c, 0x18, 0x0, 0x8, "104cdfcd6a9fc7a67f6824552fc31316", 0xfffffe01}, 0x1ff, [0xfffffffc, 0x3, 0x6000, 0x9, 0x5, 0x8001, 0x6, 0xbb]}, 0x5c) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x4287e) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x60) r2 = setsid() fcntl$setown(r1, 0x6, r2) (async) r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) closefrom(r4) 866.39049ms ago: executing program 0 (id=227): ioctl$TIOCSETA(0xffffffffffffffff, 0xcd60441a, &(0x7f0000000080)={0x1, 0x2, 0x7, 0x2f, "2000030100010000000000000068a95a010400", 0x6}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x82f, 0x91, 0x0, 0x400, "22ef0600000000fda92be2f9000000007f007600", 0x1, 0x8}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504", 0x4, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) accept4(0xffffffffffffff9c, 0x0, 0x0, 0x4000) 660.514401ms ago: executing program 0 (id=228): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x8, 0x2, 0x4}, {0x4c, 0x9, 0xf7, 0x100}, {0x1b0e, 0xff, 0xf4, 0xc000800}]}) sysctl$kern(0x0, 0x3c, &(0x7f0000000140)="c2a0a235180000000000005e0a045c451655adda8ad822e4ce082135a4", &(0x7f0000000000)=0x1d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[]) unveil(&(0x7f00000002c0)='./bus/\x00', &(0x7f0000000240)='x\x00') 660.142736ms ago: executing program 0 (id=229): syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@local, @broadcast, [], {@arp={0x8035, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @multicast1, @random="a9658df5182d", @rand_addr=0x7}}}}) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x782, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setuid(0xee01) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) execve(0x0, 0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$BIOCSETF(r2, 0x80104267, 0x0) r3 = socket(0x18, 0x2, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FIONREAD(r3, 0x8020697a, &(0x7f0000000000)) syz_emit_ethernet(0x4e, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) 659.492376ms ago: executing program 0 (id=230): pselect(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) close(0xffffffffffffff9c) (async, rerun: 32) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (rerun: 32) preadv(r0, &(0x7f0000000080), 0x0, 0xfffffffffffffffc) (async) r1 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r1, 0x0, 0x7, &(0x7f0000000340)="15337ac0", 0x4) (async) r2 = socket$inet(0x2, 0x3, 0x40) sendto$inet(r2, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) (async) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCRCLRTABLES(r3, 0xc450443c, &(0x7f00000001c0)={{'\x00', './file0\x00', 0x18, 0x3}, 0x2f, 0x0, 0x0, 0x2, 0xce, 0x401, 0x481, 0x2, 0x5}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4c) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x80) read(r4, &(0x7f0000000040)=""/30, 0x1e) execve(0x0, 0x0, 0x0) (async, rerun: 64) minherit(&(0x7f0000705000/0x1000)=nil, 0x1000, 0x1) (rerun: 64) 567.693622ms ago: executing program 4 (id=232): syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00004000000086dd6036d2b500383af500000000000000000000000000000000ff020000000000000000000000000001040190780000000867247885"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) chdir(&(0x7f0000000240)='./file0\x00') getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getgroups(0x7, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) setresgid(r1, 0x0, r2) setresgid(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') 562.22767ms ago: executing program 4 (id=235): socket$inet(0x18, 0x3, 0x102) 561.556247ms ago: executing program 6 (id=236): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f0000ffd000/0x1000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f00004c2000/0x1000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000463000/0x3000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000057e000/0x1000)=nil, 0xd}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x749, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f0000001900)={{'./file0\x00', './file0\x00', 0x20, 0x2}, &(0x7f0000001840)=[{@empty, '\x00', './file0\x00', 0x2, 0x40, 0x18, 0x3, 0x1, 0x9, 0x1}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x9, 0x9, 0x2, 0xc0, 0x1, 0x7, 0xb4}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x0, 0x2, 0x2, 0x5, 0xfe, 0x7f, 0x40}], 0x5a83b90b, 0x3, 0x1, 0x1c, 0x0, 0xffff7fff, 0x40, 0x4}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000140)=[{0x82, 0x803}, {0x26, 0x8807}, {0x45, 0x8}, {0x100, 0x200}, {0x24, 0x5}, {0x22, 0x6}, {0x20, 0x6}], 0x7}) syz_emit_ethernet(0x105e, &(0x7f0000000780)=ANY=[@ANYBLOB="e702f2ffef1f97b0ae1a006b86dd609907a610282c03cb697a653e336f000000500000000000ff02000000000000000000000000000102009078000000036900de000006010826651f52e2840a3a68632730c0fc4357ff01000000000000000000000000000111ea0000000000005753199d97193064ece0a593eac37f10621be02f5ed9db398c546dd5c1e7533241a0e544928d9e3384a8fc744b56066b075a41f85a2fd6ef9faeb8b45ce20f21110a150a95cadc4b5f2b71c4c4fee5cb80c89559c41a0594fb1908b630db91ddae43ee44954febd21ce3c635799b29947f7036f4396cda674e35fed048f5b638e912565e7028b7d77b93fe3e105f8b000d70f34205e311e723fe02ca848b5cf13dbb13c467367813cb9f832cfba6abe6ca9feee4dad80797880c71ba7ad439caddfad794c51dc44648d0685fc3ea4c0ec5ecb2f51c8dd5f57046d39cf872c67d781ed46361797069929b868d5d2b580fc2e8915d1fe18b42fbea6c061f2461ab7612cc5c05c909ae034a9006c952f4268ce97fc69dda0b7c253d0b71f2f297dc889690d9653aa7474669520781d6564344cc151204c2fec044ad1d302954be1dfdf9e360fb064515ad84debee540c6e780b9260b91e532e734995f9eebe9a6eceea12a48a365ad80037dbd40570f267ecb9e2f7428f0305e7b378bc7e4676daaaa964a171b2b0f6b97906251def9a08a1a8ee0a24cff22eeea6659f59bc83ec2d90381d280fcfd7c57602e3c56a025470008cdbc5449c61acea7104a5a1cf0f475368b0640a4611336ade7f5cff7b89b25a3552015437bebc89647319c03ae18414c44464d74e302c1900ab739d7f5c0cff708f5523a37f16871bbf5fe9385823058d11af9945bc3f3da9dafe25c1cc2b7101a6cfc1d538626fce6128a3c372dbd73296d90efd504b1ae8d1ff91748040aecf438b8ee8ee2558b5c1eda9b67736a00f9cafdb477fb9333649709e923939e5a4810fd3a05e965f06d774d664269eb9957bd24c2491ec7d92c4a626af90807ced088227f9e3ad470527f27ab41681fb1e2c201c723b50777acd71dead37504eb8ea547f11baf195045bf34ed1bb2942f98766c284a82195c2a1ef38093be8b6e5c46ec8691f89660165f17e77dd38aef4d630b401ce3fe95dd8ae683b06f64ab2bc4721a0caf48347e30eb8530a1ad7c02c649cd1bf67fc6d458902703bb89358f4a2a5e5c0601c35b8e4296c8327ce2bc6f2ccb4d0290ec9eb69baa7a4f221f3dabf3012ce4cf649517831b26f9bc8fa5df89c0639b578f5ba9fcd74afd1a706845fb65e4454b854a8591c095c123de4f55b22957207ddb18ba4a33ab295cfb5e18ab88f672e5ff3983bc6a9499a56ab64ed906e90834f5f637ca418dce536b60f4982f3f6f5cd24a1f3cf947829e98a735c2c9c7e5a32778d4557dee863434c3e785ff87676325a8d52cdb08d06ee84c8aac8c06c933f70e2a00fad49c6cbb3b2a5b9f107f1c79fa1607996c825fb5b700ab9a06947654a06e6e3e664972b96376533c9f971a8a5dc1f2542e5a05aec346ef8285a340ab865c298b0f4a2f8e1e4ec56cbc055dd8bb6f20ceeadcbf0b070f4628dab4663000b12f68ddc93b4a9f10b9f3e51caaa137f8d38b9eef86ad257d5054156292b75a640f3cb74b9d12afbb2305ac2b319ec0f7acabf08b4a5fb7b6bade68a6d6553c845d878164b92bd4a28fe91bc09238d0174dcfb5db812e1658ad074be94d83af1bdfd82d4caabfd7b26b2c8d0f041a078173026f4a427cd9f0e36e34f01de9f2443785fd516e93d1602450ab1c700045526fbcf158862dfec19bfcfb1b9ac7bcb1bf4f6ea62ab7f949c5b1766bb9a06f5b914264c036c3785feda5bdd85849c35c8001a17450303dd97f4ad4db04c9d3c819b0a785fa557c643d76f1a70fc7617aacc5c9334694530a370a319ff3866bbb4a443da47ac8048b7710eed66188f6afefb48d754b1c51f496d82171147d8f1899ac3c68b889adab51d5d6e3b2882b1e7c84fb029bb17298975c045e9710e745e93fdd65c89fd8f8893efc2bf206f6511eb06779c0d9a9e21416e5696a31e47f1a26b9fd47759b016dddecacad30ef6cc2c71fd8fabfd9095ad9ec1b4ee39a333706d2eadb509f6073cec8e49f5fc40458bd0089bbabc2d456c8b47f76686f8304cc462030bde8838a7c7128f789ba90851be54d54e546aa4a916fe01bd44b791c53e91411e105d24faeb9ab61b0d8399d1e11b72b96b7108f2c151aaba368ff56c883400df86600a2462f78037d9d28450736dbbabe3c0164c5de54ccb79c8d56b595381b921e00973ed3649701b16bb51fe0a95fb5f3602a88900a4f5c9efe485c36ed2a021cfc8f9d6c97c5b5ebfe57fff6ae221bff01e7f06cf06d0f4a1d72aadf00b15ef7611a1d00440a1d6d11d0f98a0df3e6ee9e6445445904ae751720098d2684c8e9f00aefca4b996be313e8f8eff547e78654f452f9964de429c2f760b7a685203c2a5e6f3b7fd3a847aa6fef516ffc8a0bc2661ffafa825f5771af48494ae872617db3be6f8ad5b2eccc0b8531004c045f776da53d0460c8a0085f3bf7677b6a3df3b2967bbc63caf02b524aa094d4e89470ffdcbebec569314c3b0d69543405869b7fc41d32039de7a0845419f2d3df588a514d629f7948cf0de4365fbd09b880d8fd5fe0781c89695cddc55bc0ef14dbe3b10eaa8d05065d42ad19df166dd815e106e860e85312b91effead1871d68dc9c4764797160987d04aefe85f1049e803c77d9977cb7cf8af7e33cdd259505692f6c4cbdf4ca75d8b7560e9d04d5f87265af531ba5e1fa5d65ccad7ed942d5bc80c82c60dfc929837cc02560a87ef592d72aca36ac1f7903a546f3635257f7b9d48762ced28fbbed31e94c541a0fd5839400624bec0079b0762116c20924925576939828dabcb93207f3c4837976e805cc545952ea354f3462cf7f13f126557497cc9fb2ca9ffefd273125347be47349073fc7c05d1e896e8a093b9624fff7d9dd643343939b7221eb6ccb0300000062e307c3765a2933d95428ca84b4a25063ca6a6d40fc4d680285afc6da6da2f5e72b926bb90b3dde40fa60bed10bac24e8a50e1b020b8cbc120fe7832adf7f84687ee276dc7ceefdc1c30ce4da3faf409fe502552e6433545ce1ac7974f9b7b305006e40b155f67ce08ed637b8fcb9c8599ced3f5d6a027ff9a6c2039ba9dc5fd24c1d34c32595b427db7cb7d383c37df67ac897bba3bc6996754f25f314b14f59d4f287a7d9f0fcccbe2b73594800fd73e7d944bb4f9b7691d17faf3d47d20d825f655ee4c2459fcd1affe3baca60fc3dfa1f4eefa0cf5e112bc3872598126380d307081e8572e7a86c1783943106ef35af2739c243bd75fa1ed353867f9761748c9cd4bd1946873f2c719ecbc14e1033cf8844c7d622ca3b398f1f32001edf441660e629a3c63d9455cf505aae553665e60750297f756f2a7c07ca12061033c068692b4e05a9735c97640076febed80fbacc451655c5bd0ba6f96ca1e4f830199c44e2ce4aed9cb039a60739640e9397b60e18ceb75b53be8ea8b54d25d4cfaa5f844e28b17dbb9ef990948ab911b8fb19b096a624be13b9d5d901a8d72144ba6e536013737246607ab22d4a891a1a7ec620af7b724fc9b423cdc8782f417263233af5ea9c4af9dc5d7ffd887f1c8e8e4a8cc53eadebc91b8d3f608b38c0f2d467c555fb0e19d203581e26d97c90cb370735d6dbad40601992b96b9da406898435117225c2bd6eeb1c35955daa11ecd70824c5ae79d2798e32f1f41741a954dd8828db2efc26562d0bb8a3115956937711b512b0c9a2c465c67a04cb3e219f3ea4aec8ae4708e4f934b89eee12fdea11249bacbfe978cb5fc962d94a26ba21bb167d42a03f899e1233717d2043345cfa830a84df1cb3f02260008174dc59f5be2921c8240b959c4e1f4c79c1fa4abd74b87a875ab46e90cb857dbb740a3d7a37de908c1294217fd6c5bab3415818c029bcc482c446c8cf270cf32726023c201bec06d10471ee30578a5a85c532f89a0f5062985fec1c439f9e601aa664dfefdaac7f4fead36212a4984413e34fb6b66d9dfe80f9b778b048537d123b8bccea9f298eddafccaa0d1e440613b49ea27a715e7acdc1c1384e3f6acb72dc2fb8944b3d660987f419a0948e15acbf773ee64ffcd7187bfd5a3882f092de3b23bcd6667e19d39822b14b317c4a0f35d22e574f65de700c6cbc0302cd873e1e85747176adf958c50670b7f7d0682e9a9936edf0445a4519c209c5d7a253a37e3f2378725b693428a5594745f2b05a2fca13bfdcc67a4b47997bbf1855e95f7fd22e0b25dde4c88c0327cb272f86f3b932e24c340324a6e2d8522d25cf315b983a88325d6e9f93ccb2e37909ce132c8b3495d4d72905d48960c5acbeff40a8ab9a01a2f9949f8b4adda8bb3d3033ebd3b81cda098b432573a8e61be87d9aedeb05937024c0fd11f46bfdd82afa81c89c56a64bb0c0d80a4ffe955e30eb0c7e43f511059eac53656a0bba14abbe6853f2f9be46ded802a4b673bd352dd4efa1e47f6a134e1452d22794d05e90a1176c5bcceff4dd9c54f580d882cadeeae8e8b33c5cb28d61d80333c9dac4203762e4e930714c799b73a7d2987fffeae9c57f7044ee1376191f88413f1837d0904564fdd4d29a8a276d19fdcb6abe0dbff77c99516a51648a8e2992507d74f3d1f4d7727cbc4030c18aa3b104ce87948a08d11a74539e62b246c4e66c766460964d529fcd9682b567f27eaf80a206da094f8809e52a54fdf9f229e01efc13cc0b7901a3f658755b731bf93fb86d7340baeba7f5113254b9991856ba9528bce1a231db4504c6bd2de843c258bd3b25e41d22a7cad976c137b792dd7c3d2eede98b71d2b03b8f20560144b351864f59b30cd90fb7d1e999f25e27ed78188662cd72e8d3f09b35d7b04c954b8a9f4518b20eb453f727b68f1d6c7a03c12be6a10ee4fe9c8655b7cd11082e99c56c171a13eba93f13a1c4bd89e0a4fa9beb38138eff9584f6ae2b3e104d329a869c779b28636e8188baaa3918a3fa053caf169b3b58ce2c4fc7a9b9b742fb9a954f5380417b0f125de6ee33ee291950aa22bcc657fcb8a36b516144e2bcf75f87f0314d06b33acb91c34608dd1f9b1b2408c8e7f88b647f531ca5061a774439c35bdd1568b56af9d4d2017e533f3ca7fd678395a2c6aea5dad85d6757dd40fa2e0cc24d8c13feca15cd36232bcc7b10753b3644f3f84aaedc60ad4deb3d8c1b3d41eaeced29331d6cb2de89b4f58c8f91fa418c89e6f8acc7d4abf22435849b965e346ee0675fd3d9830c5a98ae5e89b687786f1333d650a99d72674ff676c902578a178d1b634192975b557a646d99a57f81c3d97b3f9b39d2e8a3958b855b6d592166e77da17a0460c2795262205a2f56fb083c3fcfc94d78ae88d66d997bdebf79f48623408269ab7a361b8f462f6470f874b7a45ff842ce3368cf61d0ece92921a6b01d7c28e75965d85e0145389f9f2701dd4c1837a0645dd0304b3999e68ec7d5a7ef08fdd1be6e0a91a9a0d78941d0d1e65d8ddc769012313fdee3eeacccee181fab98c8192d76c01a9ea22667a47123e3da659e97ac50ec8b1e4b2a901742104d4381539307b5aa46dd666d393a54b7f7662bd614c52839fdd0ee0000005000000500000000cdc7d5f435179c8a3a2c30b63fae67cf8a5370c9ff870a9bff7e06613f148d95c9c8a454451e63dae9ce7126b5130fb4e1c3e21832e515326477ca06a0e8bbabfdf38dfc2e6660e36d9cb7101af879ae96ee100e71deed49ea8a28886533da262df047b4a9b7d02f78abc0501c467a88c312d39b559acac8dce47ce4246496e7503b3d21d328e9db2943ebe15f303f4e"]) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000001d80), 0x20000, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001dc0)={0x3, 0x8, 0xd9b, 0x4, "c1022da64a37468ff9ce339a4749cd98167bee31", 0x8, 0xa}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) setitimer(0x2, &(0x7f0000000380)={{0x0, 0x3}, {0x0, 0x8}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380), 0x1123, 0xf009) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONREAD(r2, 0xc028698d, &(0x7f0000000000)) sysctl$net_inet_tcp(&(0x7f0000000280)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000000000), 0x0, 0x0, 0x0) 555.970911ms ago: executing program 4 (id=237): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200100000001d, &(0x7f0000000000), 0x4) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f0000000080)=0x2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x4, 0x7, 0x8, 0x262}, {0x16, 0x2, 0x8, 0xffffffff}]}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d420000000000000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0xf8d, &(0x7f0000000100)="01185a228110aa2d99eecad0", 0xc) r3 = socket$inet(0x2, 0x1, 0x6) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r2, 0xc4504449, &(0x7f0000000740)={0x9, 0x4001, 0x80000000, 0x11, "3901224200000040000000002f00", 0x80006, 0x18}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) write(r4, &(0x7f0000000c80)="9b628f538457cbe72b00001d4700c32ca65754024a0c0e9905000000720f9c830100000000000000000a00000054c772051a5e4d09ec054b3e1719f6505edc1b49b731c7bd23edc717e18e5c72a3", 0x4e) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) 433.286739ms ago: executing program 5 (id=238): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x190) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0x18, 0x5, 0x7) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r5 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) r6 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) kevent(r0, &(0x7f0000000080)=[{{}, 0xfffffffffffffffd, 0x7, 0x88, 0x2, 0x200}, {{0xffffffffffffff9c}, 0xfffffffffffffff6, 0x24, 0x40000000, 0xcbdf}, {{r2}, 0xfffffffffffffffd, 0x58, 0x4, 0x4, 0x9}, {{}, 0xfffffffffffffff8, 0x0, 0x20, 0xa}], 0x59c, &(0x7f0000000200)=[{{r3}, 0xfffffffffffffffc, 0x20, 0xf0000000, 0x9d70, 0x7}, {{r4}, 0xfffffffffffffffb, 0x72, 0x4, 0x6}, {{r5}, 0xfffffffffffffffd, 0x6, 0xf0000000, 0x2, 0x7f}, {{r6}, 0xfffffffffffffff8, 0x40, 0x20000000, 0xf, 0x3}, {{r8}, 0xfffffffffffffffd, 0x0, 0x8, 0x7, 0x1}], 0xffffffff, &(0x7f00000002c0)={0x6, 0x30cd}) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000480)=[&(0x7f0000000380)=',!){(\xb9\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='/dev/wsmouse0\x00', &(0x7f0000000440)='.!\x00'], &(0x7f00000004c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0xf, 0x3, r1}) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) accept$inet6(r8, &(0x7f0000000580), &(0x7f00000005c0)=0x1c) ioctl$DIOCSETTIMEOUT(r1, 0xc008441d, &(0x7f0000000600)={0x9, 0xfffffffc}) r10 = accept$inet6(r7, &(0x7f0000000640), &(0x7f0000000680)=0x1c) poll(&(0x7f00000006c0)=[{r10, 0x4}, {r2, 0x2}, {r8, 0x4}], 0x3, 0x2) r11 = accept4(r9, &(0x7f0000000700)=@in6, &(0x7f0000000740)=0x1c, 0x8000) fsync(r11) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r12, &(0x7f0000000d40)={&(0x7f00000007c0)=@in6={0x1c, 0x18, 0x1, 0xfffffff8, "0c09580e984b091263d2d4f2a38367a2", 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000800)="ae55bcb16e67e96fb8ab9f36a347a2cfc5efaf1c6b98cb41f77c13c2c1556808361132574401b56b7c02db34866f1704186fe685c0a8b6ff0d78e1fe0083dde69d5ff44418c9e7213b142dcce156fba786819367f216f0e113c3e153f48349e50b7fd8a5fbf3b554e01bbc65709366034ab2b2e0eb874c5b0120028dc1f65e3e875bc6b62819c1ccca65ec927b24ed50269f3d70b7e0e7b5074e9a", 0x9b}, {&(0x7f00000008c0)="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", 0xfa}, {&(0x7f00000009c0)="45beaaca4c6958b328ee223bad0a53c2a0bd9d5c48f00948268ea865ebddbe06d3ec1aedaf625e9718cdbd8f7debd58ba4b1d3c7b3787721a30cbf0d28656f35d5f029586f98899702a3db4b2b42885e9cfec2ff9f7b4258e21bba2aebf1ee425f1cc6239fa127335b1a7b33bf0924f34c6e18a842ea6f7b664d23006ec858cb421c1eaba2029f409f2d09705f3f66c9a9d9bb6c0c93f7c490da5fb334b7b50221c2b7568715bfad7525d2624cbc5a3305f906f3213d064c260edc65622b3acad6d7ef749c5af06fc80f051d372f366bce", 0xd1}], 0x3, &(0x7f0000000b00)=[{0x78, 0x1, 0x800, "8041825297484116a9903d927c7a1e6602cae5c5988dcab8ec97d7b24d6e0542eca1d98f115c79a584078d545334e22dcfb29cb95151cefdc0a53edf044f71eba7b723068367c7c8ae441944fc460699237766521d3761153e829f1919919eed624c9b0f124f0f3f2d4abd"}, {0xe4, 0x1, 0xb54, "f94fe38b905279dd59d596ce81dd03d2db8b4aa7b7fd04c541c38eb8a058d8974ea64c0552f5f640d833dbaade43fc3dbed38d705176a4402d8c437d212040a1553d45d7b378b10eb630a04fe967a7af0841ab378a4325d86a487788921ef1e2b1cc4cc930c95fa8db1f78f1273bc27422cb648639d33beb275891070eca56e3f948c38e4157c7b1b2108ee897aa3327c31c319aa2658cfdd576fa20c3f32743562fe580f6c715d856f65a342dac366d5e263a072a49b37fb4307ac794451ad34da0b60dd8ea690ddf80e6a6fe2a26e03603c506ab"}, {0x10, 0x1, 0x33, "8b551760"}, {0xac, 0xffff, 0x5, "38453ad000a57a7f3f4413785a2ac390fe049a7cb69c8cdb5f97bf5cc42ae3d8c2fee8721f389ba63c7d1673f31672e74cf86a33b09294bb0a992ede7c6803b66fb01b64dc823dca81e58a07a35e57bb1de0cb939a99b6e6da161db59cecbaa9d8a4f8189003f60010aab4f39fee65a9009224fbd5227c316737870e9b283445253ecc4780883aee53f44937203412aa3ddb6fee65f4022b072d44773ca9"}], 0x218}, 0x400) r13 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000, 0x0) r14 = getegid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0xc) setgroups(0x4, &(0x7f0000000e00)=[0x0, r14, 0xffffffffffffffff, r15]) accept$unix(r0, &(0x7f0000000e40)=@abs, &(0x7f0000000e80)=0x8) fchmodat(r8, &(0x7f0000000ec0)='./file0\x00', 0xb0, 0x6) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000000f00)={'./file1\x00', 0x9, 0x2, 0x2800000, 0x0, 0x3, 0x8001, 0x2, 0x3, 0x1, 0x6}) ioctl$AUDIO_START(r7, 0x20004126) ioctl$DIOCCHANGERULE(r13, 0xcd60441a, &(0x7f0000000f80)={0xb, 0x58, 0x8, './file0\x00', './file0\x00', 0x0, "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"}) ioctl$WSMOUSEIO_SETPARAMS(r7, 0x80105728, &(0x7f0000001d40)={&(0x7f0000001d00)=[{0x1, 0x2}, {0x88}, {0x87, 0x4}, {0x86, 0xa30}, {0x0, 0x101}, {0x42, 0x3}], 0x6}) 430.370768ms ago: executing program 1 (id=239): setuid(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt(r2, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffe8d) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9c) open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb6) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x10, 0x100) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, 0x0) (async) ioctl$WSMUXIO_REMOVE_DEVICE(r3, 0x80085762, 0x0) (async) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) (async) pwritev(r3, &(0x7f0000000580)=[{&(0x7f00000002c0)="20c6db6978ca309eb4e8736c8ce798c657990a8e81f47e88e08d981cfbde9d35f03dcced7ef221799621c194649a0ba5952895456b5270b2f71aeedaf8e89dd3d81f710ec27bf31fc0821ffbe004e094fbe01c1f1b988022f85756387a225af9e13608319c189e6e7bb5c48bcfe938b3cb027b6dee70e2aab47293c707072fa8161d6fca6079ae4435a8d4493444fa5027837ddcc9dbd122b00f06114f305db1fbe39d83404c61c397eb889728760b7e5a5095f5faf55ca0c152fd82", 0xbc}, {&(0x7f0000000380)="f81ddf2eed06da70cbfa69716abc4786fe79f0b8cf89ea56b9557651322ebe384d0292a683d68daae92551364f46c3af9a461e3aa1305cc4d05d9ab4a81bdf", 0x3f}, {&(0x7f00000003c0)="feaefa5011c26dd211f47b3faaca3505610540c5ec97c0b74f6fc4fc60da47ff28e41495a8228de8f0b693040e8cb60fe37f7205c6b3bc1d9080b5b73bcf60d26c813ebfa33a71cf9a310e5879a9c21b1bab5e6f53839904a315d5654fcb833a3c130ab36b78de7b112a764a5a1bc584213e61502e26fb85e92b5e11f022f0174d72f1cd2aecfb07d164ecf901faec87f86ddb67d079dbf631fe873b388bed71ceb4b49d12bed91055d74841e8580464b7d7f1e8ba6c50edc960330243a7faf37c3a", 0xc2}, {&(0x7f00000004c0)="8b48e42662a21a43feac84fabcbc66384883107d127d73", 0x17}, {&(0x7f0000000500)="4c197242df1a9f6ab58862592614e91b0b3b5d2e3351cb4b2a7aee29a662dd2b127a174c688eac3615d950", 0x2b}, {&(0x7f0000000540)="7b3e0b8e610dd48a4670216c36e196ff9412891ff1a07bb6802030f1695d", 0x1e}], 0x6, 0x7ff) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) (async) setresuid(r1, r1, r1) 429.483038ms ago: executing program 1 (id=240): sysctl$kern(0x0, 0x0, &(0x7f0000000100)='q', &(0x7f0000000080)=0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1) getsockname(r1, &(0x7f0000000040)=@un=@file={0x0, 0x0, ""/47}, &(0x7f0000000140)=0x31) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffb, 0x1000300000080}) 427.802969ms ago: executing program 6 (id=241): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./bus\x00', 0x152, 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000200)="6fdb311590c277618194da8e4ce8d9fedb6bdfaa98d720a72e84892159bfeefb43f9c99e1fdb08d9b25e26e4b8bb961057ed9e9e52a4863cf821e570948ab5a8e4ecd8d98ae0ca8e0daa1f5f082131cb98ff751bf7b2c29fa9bf853966e505a6fe2c06b401622d3c724574bbb4be9429d260f36e98afeecac4760747e02ac6e4686bc5b3ed3fd23a893551b0154ad65ab796eac43adee5cf3112775c86c220ad6c6e95f974365fd249e2ed7fb6ac847bd36de5591007a23587be904b3151ca593a00a6cf43e6289908d20ca255a93d30976d6c0e86238165c38bb3d221f366be5c8f", 0xe2}], 0x1, 0x2) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) ioctl$BIOCSFILDROP(r2, 0x80044279, &(0x7f00000001c0)=0x2) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa05aaaaaaaaaaaaaaaabb86dd69df34b300003a4000000000000000000000ffffac1400bbfe8000004000000000000000000000bb87ac9836a4a754a48b804af52553eae813050aef22f6d929d4b58136be6834248d5039d1fa0f0bc587bec713161d506983e4fdedf4bc8f7637931bf3d64152f5931bad85a189341e1f223fe8"]) 426.840628ms ago: executing program 5 (id=242): r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) (async) r1 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x1004, "00000000000000005216f0585ff84483", 0x10401}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0x1c, 0x18, 0x1, 0x4, "0000000000000000000085e387560600", 0x31}, 0x1c) 418.095352ms ago: executing program 2 (id=243): r0 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x1, 0x1, 0x820351a, "090e4de6d30aa692318c7e0002f9ffffff00"}) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x9}, 0x4, &(0x7f0000001540)="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", &(0x7f00000002c0)=0x210, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, &(0x7f0000000100)='q', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setuid(0xee01) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000005) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x10001, "fe80b362000000000000008e000200", 0xa}, 0x1c) setsockopt(r0, 0x1000000029, 0x3e, &(0x7f0000000000)="03000000", 0x4) writev(r0, &(0x7f0000001140)=[{&(0x7f0000000040)="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", 0x5ad}], 0x1) sysctl$net_inet_divert(&(0x7f0000000000)={0x4, 0x22, 0x102, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) 341.135397ms ago: executing program 2 (id=244): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x65b3) mknod(&(0x7f0000000280)='./file0\x00', 0x6000, 0x400) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x400) open$dir(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) sysctl$vm(&(0x7f0000000040)={0x2, 0x8}, 0x2, &(0x7f0000000000)="0000040c", &(0x7f0000000540)=0x4, &(0x7f0000000580)="096c4b1a", 0x4) 339.338711ms ago: executing program 6 (id=245): setrlimit(0x7, &(0x7f0000000000)={0x7, 0xed2}) getrlimit(0x6, &(0x7f0000000040)) getrlimit(0x3, &(0x7f0000000080)) setrlimit(0x9860d02638b12bfe, &(0x7f00000000c0)={0xffffffffffffffff, 0x8}) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r1 = dup(r0) setrlimit(0x8, &(0x7f0000000140)={0x2, 0x80}) close(r1) getrlimit(0x1, &(0x7f0000000180)) closefrom(r1) readv(r0, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000002c0)=""/74, 0x4a}, {&(0x7f0000000340)=""/4096, 0x1000}], 0x3) getrlimit(0x7, &(0x7f0000001380)) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000013c0)={0x0, 0x0}, 0xc) seteuid(r2) r3 = setsid() getrlimit(0x8, &(0x7f0000001400)) writev(0xffffffffffffff9c, &(0x7f0000001640)=[{&(0x7f0000001440)="b64cdfdcbf6686b062899feca0a62240bfbdeaa84482cb9316bcc8fc30033221106c3bd8789b7f82ffefade66313b8d2019ac86661922cc36d7bec684e3e5f4c8dbe130f3f02546c392de37da215c33d0335b17255f023bcd14e422c9a53f995cb0ba8f4ac2c830d60ce4b9fe8276a184622bab8a19b3c878c196c0661c1d282a8959b95ae2eae9ddb71c4b220f0db8480c31c50fb", 0x95}, {&(0x7f0000001500)="a3fc72a6bb827f409087589370c150493b3aa2fecb78e74a3f2c13d8c4d1342c1246d6affbe6edba41ab4e3f7ef92b84cc51a15bc4252fde7ab58d6936d842efa9b4ec51c55378cc0465fd2973c8496317193e12cd57b3bdc93739351cd8ed4bcbfbfd34f4ef51035992c8aa5f6232eb85b57cdecf4c0b7b8a467556f5a0461fb2a98b7bed6863266b0e2e51b6735f", 0x8f}, {&(0x7f00000015c0)="bc36ad556ffe5b2cfb75f9e45590fc793719a9e1f67812d9bcbba7906b0893e017eb8831a5b741caf83c20ec31f429eaa83da7529e4d959065834226bf16cff61ce3756f4546626b", 0x48}], 0x3) fcntl$getown(r0, 0x5) getrlimit(0xb, &(0x7f0000001680)) ioctl$KDENABIO(r0, 0x20004b3c) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000016c0)="759942a938920a642b035f22b45e131ed8cdd08cbd22d551415abc3d3c90d467ae13b778d81d34c798c188587f309a9ce92bcb8412afc30918f711475b82e0f8185cc6a08803e27c013dc2f7ab85937c17dc0e358c7d46fa8f76124417a3aec5d49b31cfbf8e2476afc0c85962b0772e899449e9ed4d7b908347a6f367e4d9ea9f21bf4c01dc5205cdd337cc815ccb4fb390614e0ee0f085a862136231521eee4006523d5976edf407b5673288b0662e16fd3965af290178dbc22c6d2daa5287c75b0320a6b7a3a79c937dc9d749e4ca925d", 0xd2) unlink(&(0x7f00000017c0)='./file0\x00') ioctl$VT_WAITACTIVE(r0, 0x20007606, &(0x7f0000001800)=0x7) fcntl$setown(r1, 0x6, r3) open(&(0x7f0000001840)='./file0\x00', 0x1, 0x20) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) getrlimit(0x1, &(0x7f0000001880)) ppoll(&(0x7f00000018c0)=[{r1, 0x100}, {r0, 0x4}, {r0, 0x40}, {r0, 0x4}], 0x4, &(0x7f0000001900)={0x1, 0x1800000000000000}, 0x0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001940)={0x4, 0x0, 0x1000, 0x9, "e31c960f13c845a8846058a3c2069f095d9665e8", 0x9, 0x9}) setrlimit(0x4, &(0x7f0000001980)={0x1, 0x6}) 338.995135ms ago: executing program 5 (id=246): r0 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x9, 0x6e, 0x40000007}, {0x80, 0x81, 0x6, 0x7}, {0x6, 0x6, 0x4, 0xc27}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) r2 = kqueue() kevent(r2, &(0x7f0000000240)=[{{r0}, 0xfffffffffffffffc, 0x9, 0x4, 0xfffffffffffffffc, 0x5}], 0x1, 0x0, 0x5, 0x0) sysctl$net_inet_tcp(&(0x7f0000001900)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, &(0x7f0000001a80)="76da6086", 0x4) socket(0x2, 0x1, 0x0) (async) r3 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x29, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x8, 0x8200, 0x0, 0xfffc}}}}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) 337.985065ms ago: executing program 1 (id=247): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0x9) syz_emit_ethernet(0x36, &(0x7f0000000100)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x8, 0x6, "722db6", 0x0, 0x0, 0x4, @empty, @mcast2}}}}) 337.628031ms ago: executing program 1 (id=248): nanosleep(&(0x7f00000025c0), &(0x7f0000001180)) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) preadv(r0, &(0x7f0000000880)=[{&(0x7f00000001c0)=""/206, 0xce}, {0x0}], 0x2, 0x2) r1 = socket$inet(0x2, 0x1003, 0x9) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x2c65) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) connect(r1, &(0x7f0000000040)=@un=@file={0x7, 0x0, './file0\x00'}, 0xa) nanosleep(&(0x7f0000000000)={0x3, 0x8}, &(0x7f0000000040)) 337.346479ms ago: executing program 5 (id=249): mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, 0x0, 0x0) r1 = getuid() stat(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./bus/file0\x00', r1, r2, 0x1) ioctl$DIOCRGETADDRS(0xffffffffffffffff, 0xc4504446, &(0x7f0000000740)={{'./bus/file0\x00', './bus\x00', 0x50, 0x5}, 0x0, 0xffffffff, 0x0, 0x81, 0x81, 0x7f, 0x0, 0x42, 0x8}) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x139) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104, 0x68}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000400)=""/160, 0xa0}, {&(0x7f0000000000)=""/18, 0x12}], 0x4, 0x0) 170.193478ms ago: executing program 6 (id=250): open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x32, 0x0, 0x0) closefrom(r0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x80, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r2, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x30, 0x0) ioctl$BIOCGRTIMEOUT(r3, 0x4010426e, &(0x7f0000000080)) mmap(&(0x7f0000b6c000/0x1000)=nil, 0x1000, 0x1, 0x2015, r2, 0xbe) 169.812399ms ago: executing program 5 (id=251): ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x3, './file1\x00', [{[@v6=@mcast1, @v4=@broadcast], [0x51, 0x6], 0x5, 0x2}, {[@v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@local={0xfe, 0x80, '\x00', 0x0}], [0xc, 0x400], 0x8, 0x18}], {{0x4, 0x6, 0x5, 0x7f}, 0x46, 0x3, 0x5, 0xc300, 0x4, 0xf8, 0x2}, {{0x8, 0x0, 0x8, 0x80000001}, 0x5, 0x65, 0x1, 0xe, 0x4, 0xf6, 0x8}, @v6=@rand_addr="4ed6d9ab4af27191d8776980c61b0824", 0x2, 0xe, 0x2, 0xc043, 0x2, [[0x9, 0x6a6], [0x3, 0x10000]], [[0x0, 0x1], [0x1, 0x5]], 0x3, [0x6, 0x10], 0x6, 0x16, 0x2, 0x2, 0x7, 0x5, 0x3, 0xc0, 0x2, 0x2d, 0x1, 0x7, "a3d9"}}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) r1 = open(&(0x7f0000000800)='./file1\x00', 0x8, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x9, 0xd4, 0xa, 0xffffffff, 0x0, 0x10, [{0x2, 0x2, 0xfffffffc, 0x7ff}, {0x6, 0x3, 0xffb, 0x3}, {0x10000005, 0xf87}, {0xefe, 0x800, 0xe, 0xffffff}, {0x2040009, 0x3ff, 0x9, 0x8}, {0x3, 0x4, 0x80000000, 0x8000098}, {0x409, 0x9, 0x20181003, 0x7fff0003}, {0x20, 0x7, 0xffff, 0x3ff}, {0x2, 0x81, 0x1, 0x5}, {0x6, 0x8001, 0x10000, 0x800000b}, {0x4, 0x3, 0x3, 0x9e9}, {0x1, 0x40, 0x3, 0x4}, {0xe0, 0xff7ffffd, 0x5, 0x40006}, {0xffff0354, 0xfffffffa, 0x8001, 0xc000000}, {0x7ff, 0x6, 0x4, 0x1ffffffd}, {0x0, 0x2, 0x3, 0xc3}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0x80002000007, 0xffffffff7ffffffd, 0x27ffffffffffffff, 0x181c, 0xc, 0x401}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) r2 = socket(0x18, 0x1, 0x0) getsockopt(r2, 0x29, 0x2e, 0x0, 0x0) ioctl$AUDIO_GETSTATUS(r1, 0x40204128, &(0x7f0000000000)) setuid(0xffffffffffffffff) kill(0x0, 0x20) 169.592138ms ago: executing program 2 (id=252): openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) socket(0x18, 0x4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCGETIF(r1, 0x4020426b, &(0x7f00000000c0)={""/16, @ifru_metric}) close(r1) r2 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r2, 0x20007461) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r3, &(0x7f00000012c0)=[{&(0x7f0000000180)=""/186, 0xba}], 0x1) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f0000000000)=0x45) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) writev(r3, &(0x7f00000004c0)=[{0x0}], 0x1) r4 = socket$unix(0x1, 0x5, 0x0) setsockopt(r4, 0x100, 0x9, &(0x7f0000000280)="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", 0x1ad) 169.053743ms ago: executing program 6 (id=253): mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) r1 = socket(0x2, 0x8002, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x200) closefrom(r2) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) (async) socket(0x2, 0x8002, 0x0) (async) fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) (async) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x200) (async) closefrom(r2) (async) 168.796115ms ago: executing program 7 (id=254): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x18, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x4, 0x121, 0xffff8000, 0x8, 0x3, 0x10, [{0x3ff, 0xfe3, 0x10, 0x71800}, {0xfffffffe, 0x300b7fe, 0x800002, 0xa}, {0x6, 0xfffffffb, 0x0, 0x298}, {0x2, 0x0, 0x200, 0x80006}, {0xb, 0x3, 0x1000, 0x807}, {0x2, 0x7ff, 0x6, 0xa}, {0xb, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0xa, 0xfcf1, 0xb}, {0x0, 0xa, 0x8, 0x8b}, {0x5, 0x7, 0x8002, 0x1}, {0xa44f, 0x0, 0x800, 0xe1}, {0xf, 0x2, 0x0, 0x8}, {0x2000df, 0x9, 0x5, 0x7}, {0x10008, 0xe2, 0xc, 0x2}, {0x1, 0x6, 0x4, 0x4}, {0xd15, 0x5, 0x400003, 0x6}]}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x305, 0x8000, 0x7, 0x0, 0x80000001, 0x50001, 0xfff, 0x1, 0x0, 0x8000000000000008, 0xbf}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xa4, 0x20, 0x4b, 0xb}, {0x4, 0x83, 0xff, 0x3}, {0x6, 0x6, 0x83, 0xfffff804}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) r3 = socket(0x18, 0x8000, 0xfc) setsockopt(r3, 0x1000000029, 0x26, &(0x7f0000000000)="5ab7776a", 0x4) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x4, &(0x7f0000000240)="de25da124c0e60a463f47905d95b7d25a65705c9d44cb92409c0b5ca37555f71d18b05e27a6c57e0a9e357aa7904f808c5a5a594fe8d0006163f9dc60bc4f315db9539d810f2dc2ed96e96181c56cb7d96e2f4bb738f467012bee15b97f6d185aeb66ccd969fab260506ed0a02016e9efe88a017bd78c7e43c19cba155b17bce24109034bac75c3cd672e8b1556664e3b4210aed4febfd365a45eab5ba98db17d7f76450540ba068ee410ab7cd12d92aad141588ac433b2dfb68c53e20ffa8fb8dc69b040f0f5ac0805f4f93b297ac9efa336968948d7759b273ad1fb2d665f6afdbe505cb0bfe66b42f09611cae90d7cf320f", &(0x7f0000000340)=0xf3, &(0x7f0000000380)="05023b693e8cf0763b5103e83b8262e6f1091a1c34c9fd7391e3462250a10c34d1331f729b294f35bff227b8e793ddf021f6db4c5b1e4f1f967f35c5488601c40bdfdc84a9c2824c44a4ad00a1b67ee850f31bd330e750f538c8d3a68b1cedcced1e7731071f7f9ccb8957ca71e20a53e6364eba86f5fe10c18e619977c5c3eb00eaf003428e78f79f24a6cad221d63a83c15848774ab44d21ed4e48ff5a5f08df996352ec988846eeb4f7d4f0b5d987fb5818dc68667f9efb3e1536c5c08811699a8fd589e681189e8658afe698121648b6d5c41c58bf902da85449faa90311ec", 0xe1) 81.207192ms ago: executing program 7 (id=255): r0 = socket(0x2, 0x2, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1023, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r2 = socket(0x18, 0x1, 0x0) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, &(0x7f0000000000)={&(0x7f0000000240)=[{0x5, 0x75}, {0x100}], 0x2}) setsockopt(r2, 0x8, 0x4, &(0x7f0000000100)="1c0f5287ea41472e", 0x8) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6, 0x0, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x200023, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) getsockopt(r2, 0x29, 0x3d, 0x0, 0x0) sysctl$net_inet_ipcomp(&(0x7f0000000140), 0x4, &(0x7f0000000280)="6a28cf7f732fc2d420e4aa2551491cc9a7155d02e280d1da24518e97b876095fd94d47e8b31c0b6a35fc5167bfc6a626f551d0717a11509cd4a7ad822817d976f94c6468def24e1bb1bafda52e317d30e35114d9c3b92bc35fd7b9631bc1635701869961fe00ffd2d7c492e4c505759d66c02b6cad52accf0a31aafb708e73caf292539bf9e4e48542300e804f109f6c8955d92b2ce92169c2af02cbd52c56c0b065ba3e86291f89", &(0x7f0000000340)=0xa8, &(0x7f0000000380)="2adede98973cb40d4460ffd0dc6c80bea10fcc247fb0881c1fd0edded80d857e0c3452cde57cd0", 0x27) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) preadv(r1, &(0x7f0000002540)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1, 0x7fffffff) 80.58665ms ago: executing program 2 (id=256): kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x6b, 0x11, 0xfffffffffdfffffa, 0x8000000000000}], 0x207, 0x0, 0x0, 0x0) r0 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0xfffffffffffffffd, 0xfc, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x80, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x81000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0xfffffffffffffffc, 0xfffffffffffffffe], [0x5ad8, 0x7, 0x40, 0x0, 0xfffffffffffefffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffffa, 0x4], [{0xdb6e, 0x4, 0x0, 0x7d03}, {0xfffc, 0x2, 0xfffffffb, 0x3}, {0x0, 0x0, 0x80000001, 0x100000080}, {0x3, 0x6, 0x7, 0xfffffffffffffffd}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x0, 0x6}, {0x6b7, 0x7, 0x1}, {0x100, 0x965, 0xfffffffc, 0x9}], {0x3, 0x7, 0x5}, {0x29, 0x6, 0x1000b0, 0x2}}}) kevent(r0, &(0x7f0000000000), 0x8096, &(0x7f00000003c0), 0xfffa4961, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x285b9c) r1 = open(&(0x7f0000000380)='./file0\x00', 0x400, 0x0) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f00000003c0)={'./file0\x00', 0x0, 0x3, 0x81, 0x0, 0x2, 0x9, 0x767e, 0x1, 0x1, 0x401, 0x7fffffffffffffff}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) r3 = socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580)={0x40000000001, 0x12}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x1, 0x0, 0x2}, 0x8) sendmsg$unix(r3, &(0x7f0000000280)={&(0x7f0000000000)=@file={0xff, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x408}, 0xc) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$AUDIO_START(r5, 0x20004126) dup(0xffffffffffffffff) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffff15"]) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2044, 0x4800) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$TIOCFLUSH(r6, 0xc0187009, &(0x7f0000000080)) r7 = socket(0x18, 0x2, 0x0) r8 = kqueue() kevent(r8, &(0x7f0000000000)=[{{r7}, 0xfffffffffffffffe, 0x2b, 0x1, 0x0, 0x1}, {{r7}, 0xfffffffffffffffe, 0x3e3a5617fb5815ea, 0x1, 0x4, 0xcc4}], 0x8, 0x0, 0x15, 0x0) closefrom(r3) ioctl$TIOCCONS(0xffffffffffffffff, 0x80047462, &(0x7f0000000340)=0x6) sysctl$net_inet_tcp(&(0x7f0000000300)={0x4, 0x2, 0x6, 0x4}, 0x4, &(0x7f0000000040)="9bcc6455822aaa", &(0x7f0000000000)=0x7, 0x0, 0x0) 80.192055ms ago: executing program 4 (id=257): kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}], 0x0, 0x0, 0x7, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) readv(r0, &(0x7f0000002800)=[{&(0x7f0000000240)=""/217, 0xd9}], 0x1) ioctl$TIOCCBRK(r1, 0x2000747a) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x102, 0x6d, 0xff, 0xa, "00103a0000000000000000000000000000000400", 0xfffffffe, 0xae}) sysctl$vm_swapencrypt(&(0x7f0000000080)={0x6, 0xb, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000100)={0x800, 0xdfc6, 0xfffffffe, 0x8f, "ff06000000025853000020d20000000000204900", 0x45, 0x5}) syz_open_pts() ioctl$TIOCSTAT(r3, 0x20007465) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setitimer(0x0, &(0x7f0000000280)={{0xffffffff}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x6dc) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x152, 0x0}) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCGETRULESET(r5, 0xc444443b, &(0x7f0000002840)={0x23fb8146, './file0\x00', './file0\x00'}) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) readv(r3, &(0x7f0000001640)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/82, 0x52}, {&(0x7f0000001340)=""/243, 0xf3}, {&(0x7f0000001440)=""/154, 0x9a}, {&(0x7f0000001500)=""/159, 0x9f}, {&(0x7f00000015c0)=""/117, 0x75}], 0x6) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) getrlimit(0x3, &(0x7f00000000c0)) 3.069706ms ago: executing program 5 (id=258): syz_emit_ethernet(0x6a, &(0x7f0000000240)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x5c, 0x66, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x1, @multicast1}, @icmp=@parameter_prob={0xc, 0x1, 0x0, 0x0, 0xc, 0x0, {0x10, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x1, 0xf0, @multicast1, @multicast1, {[@generic={0x0, 0x4, "67e7"}, @lsrr={0x83, 0xb, 0x4, [@local={0xac, 0x14, 0x0}, @loopback]}, @rr={0x7, 0xf, 0x7, [@empty, @empty, @rand_addr=0x2]}, @lsrr={0x83, 0xb, 0x10, [@broadcast, @multicast2]}]}}}}}}}) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x5200) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x10) read(r0, &(0x7f00000001c0)=""/24, 0x18) unveil(0x0, &(0x7f0000000340)='r\x00') (async) r1 = socket(0x18, 0x2, 0x0) getsockopt(r1, 0x29, 0x37, 0x0, 0x0) (async) syz_emit_ethernet(0x27, &(0x7f0000000300)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x19, 0x0, 0x2000, 0x20, 0x33}, @generic="33957ad462"}}}}) (async) setrlimit(0x0, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) sysctl$kern(&(0x7f0000000000)={0x6, 0xb}, 0x5, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000100)=0x100) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000340)={0x3, &(0x7f00000000c0)=[{0x54, 0x5, 0xa, 0x1002}, {0x64, 0x8, 0x28, 0x2}, {0xbb1e, 0x1, 0xf6, 0x40007fe}]}) (async) syz_emit_ethernet(0x8e, &(0x7f0000001c40)=ANY=[]) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r3 = socket(0x2, 0x1, 0x0) listen(r3, 0x8) accept$inet6(r3, 0x0, 0x0) (async) closefrom(r3) bind(r1, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x2, 0x4, "19e206cac8d21dc95dcb321e621f755e", 0x7}, 0x1c) 2.738205ms ago: executing program 6 (id=259): syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x14, 0x6, 0x30, @rand_addr='\x00\x00\x00\x00\x00\x00\b\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x197}, {[], @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x809, 0x0, 0x2}}}}}}}) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000000800)={{'./file0/file0\x00', './file0\x00', 0x8, 0x7}, 0x0, 0x428, 0x0, 0x7, 0x3, 0x201, 0xd, 0x6, 0x8}) 1.242206ms ago: executing program 7 (id=260): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = syz_open_pts() ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000000)=0x3970) close(r1) fcntl$setflags(r0, 0x2, 0x4) r2 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0xa0) write(r2, &(0x7f0000000180)="b9576a22781d7e4698a3a7eacf09e4d28500ce8c5a00f1e096ccf678a3a4978773615f18ada3589d98f9c645999c230fc8cc42d428f04976c007c4d67bd08c8700000000000000000009", 0x4a) ftruncate(r2, 0x1) ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f0000000040)={{0x0, './file0\x00', [{[@v6=@empty, @v6=@remote={0xfe, 0x80, '\x00', 0x0}], [0x1, 0x3d]}, {[@v6=@mcast1, @v6=@rand_addr="00000000000000f9ffffff00"], [0x46, 0xb87c], 0x8, 0x14}], {{0x246, 0x48, 0xbb, 0x100007ff}, 0x29f7, 0x409, 0xfff00000, 0x8001, 0x8, 0x17, 0x7}, {{0x10, 0x7, 0x1, 0x5}, 0x51fe1b1d, 0xc86, 0x10007, 0x4, 0x3ff, 0xf2}, @v6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x54d5, 0xa, 0x2, 0xf23a, 0x5, [[0x8, 0xfffffffb], [0x3958, 0x6]], [[0xfc000002, 0x4], [0x1, 0x80003]], 0xb, [0x0, 0x79], 0x1, 0x2, 0x6, 0x1, 0x6, 0x3, 0xb, 0x83, 0x6, 0x8, 0x1, 0x1, "0600"}}) 0s ago: executing program 7 (id=261): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) setreuid(0x0, 0xee01) (async) r1 = getpgid(0x0) kill(r1, 0x0) (async) ioctl$BIOCLOCK(r0, 0x20004276) (async) ioctl$BIOCGRSIG(r0, 0x40044273, &(0x7f0000000040)) kernel console output (not intermixed with test programs): kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Thu Aug 20 03:22:50 PDT 2026 OpenBSD/amd64 (ci-openbsd-multicore-4.us-central1-f.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. login: uvn_flush: obj=0xffffee006c972e20, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pppx: unable to set addresses for pppx1, error=17 witness: lock order reversal: 1st 0xffff800001626dc0 sbufsnd (&so->so_snd.sb_lock) 2nd 0xffffee006f6d8b40 inode (&ip->i_lock) lock order [1] sbufsnd (&so->so_snd.sb_lock) -> [2] inode (&ip->i_lock) lock order data 0xffffffff8351f5d2 -> 0xffffffff83494977 is missing lock order [2] inode (&ip->i_lock) -> [3] sbufrcv (&so->so_rcv.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 soreceive+0x27d #3 fifo_read+0x117 #4 VOP_READ+0x101 #5 vn_rdwr+0x15b #6 vndsetcred+0xa1 #7 vndioctl+0xdfc #8 VOP_IOCTL+0xac #9 vn_ioctl+0xf8 #10 sys_ioctl+0x674 #11 syscall+0xbd4 #12 Xsyscall+0x128 lock order [3] sbufrcv (&so->so_rcv.sb_lock) -> [1] sbufsnd (&so->so_snd.sb_lock) #0 rw_do_enter_write+0xba #1 sblock+0xb6 #2 sosplice+0x246 #3 sys_setsockopt+0x2ba #4 syscall+0xbd4 #5 Xsyscall+0x128 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffee006f6d8b40,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffee006f6d8b28,1) at rw_do_enter_write+0xba rrw_enter(ffffee006f6d8b28,1) at rrw_enter+0xc6 VOP_LOCK(ffffee0075e7aea8,2001) at VOP_LOCK+0xbd vn_lock(ffffee0075e7aea8,2001) at vn_lock+0xa4 vfs_lookup(ffff80003339d5d0) at vfs_lookup+0x12b namei(ffff80003339d5d0) at namei+0x7c5 unp_connect(ffff800001626bd8,ffffee00678f5000,ffff80003bbbe2c0) at unp_connect+0x29d uipc_dgram_send(ffff800001626bd8,ffffee00695adc00,ffffee00678f5000,0) at uipc_dgram_send+0x163 sosend(ffff800001626bd8,ffffee00678f5000,ffff80003339d858,0,0,c) at sosend+0x804 sendit(ffff80003bbbe2c0,5,ffff80003339d9d8,c,ffff80003339da90) at sendit+0x5a5 sys_sendmsg(ffff80003bbbe2c0,ffff80003339db40,ffff80003339da90) at sys_sendmsg+0x246 syscall(ffff80003339db40) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb6d53c32060, count: -15 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003339d240 rbx 0 rdx 0xffff80000160f3c0 rcx 0xffff80003bbbe2c0 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003339d120 r9 0x8080808080808080 r10 0x9aa079eb0f25320b r11 0xe5809178dbb0c9fb r12 0xffffee00040cd980 r13 0xffffee00048b5130 r14 0x3 r15 0xffffffff835305d4 substchar+0xacc9 rip 0xffffffff827fe5f5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003339d230 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=304238 pid=41136 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=75, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003bbbe558,0xffffffff83ae7090 process=0xffff80002a37d828 user=0xffff800033398000, vmspace=0xffffee006cee95d0 estcpu=25, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 30648 299869 59714 0 2 0 0 syz-executor 49632 14817 17952 0 2 0 0 syz-executor 49632 180953 17952 0 3 0 0x4000080 fsleep syz-executor 49632 353982 17952 0 3 0 0x4000080 fsleep syz-executor 38996 132600 24983 0 2 0 0 syz-executor 38996 86655 24983 0 3 0 0x4000080 fsleep syz-executor 41136 309807 65714 0 2 0 0 syz-executor 41136 483681 65714 0 3 0 0x4000080 kqpoll syz-executor *41136 304238 65714 0 7 0 0x4000000 syz-executor 35367 172189 64866 0 3 0 0x80 nanoslp syz-executor 35367 142440 64866 0 3 0 0x4000080 nanoslp syz-executor 24983 383551 29519 0 3 0x2 0x80 nanoslp syz-executor 59714 351644 29519 0 3 0x2 0x80 nanoslp syz-executor 33829 3705 29519 0 2 0x2 0xc80 syz-executor 17952 305136 29519 0 3 0x2 0x80 nanoslp syz-executor 65683 239319 29519 0 3 0x2 0x80 wait syz-executor 65714 320409 29519 0 3 0x2 0x80 nanoslp syz-executor 64866 248412 29519 0 3 0x2 0x80 nanoslp syz-executor 74182 465123 29519 0 3 0x2 0x80 nanoslp syz-executor 29519 510098 39839 0 3 0x2 0x80 kqread syz-executor 39839 128222 79123 0 3 0x100002 0x88 sigsusp ksh 79123 329039 20885 0 3 0x10 0x88 kqread sshd-session 20885 231211 37569 0 3 0x12 0x80 kqread sshd-session 93638 169362 1 0 3 0x100003 0x80 ttyin getty 37569 111129 1 0 3 0 0x88 kqread sshd 70550 182101 63804 74 3 0x1100012 0x80 bpf pflogd 63804 74277 1 0 3 0 0x80 sbwait pflogd 66276 495141 30844 73 3 0x1100010 0x80 kqread syslogd 30844 484482 1 0 3 0x100002 0x80 sbwait syslogd 85814 487955 1 0 3 0x100000 0x80 kqread resolvd 54064 404614 61089 77 3 0x100012 0x80 kqread dhcpleased 24515 277988 61089 77 3 0x100012 0x80 kqread dhcpleased 61089 48632 1 0 3 0 0x80 kqread dhcpleased 48845 443566 0 0 3 0x14000 0x200 pause smr 79124 442682 0 0 2 0x14000 0x200 zerothread 24694 45661 0 0 3 0x14000 0x200 aiodoned aiodoned 6334 20674 0 0 3 0x14000 0x200 syncer update 72499 475255 0 0 3 0x14000 0x200 cleaner cleaner 31010 427573 0 0 3 0x14000 0x200 reaper reaper 48407 423130 0 0 3 0x14000 0x200 pgdaemon pagedaemon 98702 210879 0 0 3 0x14000 0x200 bored viomb 96630 360344 0 0 3 0x14000 0x40000200 acpi0 acpi0 88284 370893 0 0 3 0x14000 0x40000200 idle1 7811 311905 0 0 3 0x14000 0x200 bored softnet1 8615 366259 0 0 2 0x14000 0x200 softnet0 97371 291686 0 0 3 0x14000 0x200 smrbar systqmp 51296 98671 0 0 3 0x14000 0x200 bored systq 27328 168749 0 0 2 0x14000 0x200 softclockmp 45640 402323 0 0 3 0x14000 0x40000200 tmoslp softclock 76401 135542 0 0 3 0x14000 0x40000200 idle0 1 271708 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 41136 (syz-executor) thread 0xffff80003bbbe2c0 (304238) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a6eb80) #0 witness_lock+0x5f1 #1 unp_connect+0x28c #2 uipc_dgram_send+0x163 #3 sosend+0x804 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff800001626dc0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 sosend+0x2e9 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 97371 (systqmp) thread 0xffff800045ffea60 (291686) shared rwlock systqmp r = 0 (0xffffffff839d9eb8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11064 12156K 12415K 166960K 12468 0 pcb 17 12K 12K 166960K 70 0 rtable 252 12K 13K 166960K 449 0 pf 38 18K 24K 166960K 89 0 ifaddr 44 7K 8K 166960K 65 0 ifgroup 59 2K 2K 166960K 100 0 sysctl 4 1K 9K 166960K 8 0 counters 72 37K 38K 166960K 110 0 ioctlops 0 0K 4K 166960K 1667 0 iov 0 0K 32K 166960K 8 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1353 85K 85K 166960K 1623 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 9 0K 0K 166960K 14 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 17 61K 240K 166960K 422 0 sigio 0 0K 0K 166960K 6 0 proc 72 115K 196K 166960K 614 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 53 0 in_multi 99 6K 7K 166960K 128 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 17 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 492 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 245 161K 169K 166960K 5593 0 UVM aobj 10 2K 2K 166960K 10 0 pinsyscall 42 84K 103K 166960K 1631 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 11 0 NDP 13 0K 1K 166960K 42 0 temp 73 9131K 9195K 166960K 19730 0 kqueue 16 22K 26K 166960K 72 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 53 0 50 1 0 1 1 0 8 0 rtentry 176 138 0 27 6 0 6 6 0 8 0 unpcb 144 159 0 140 2 0 2 2 0 8 1 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 77 0 73 1 0 1 1 0 8 0 arp 136 22 0 4 1 0 1 1 0 8 0 inpcb 328 291 0 282 2 0 2 2 0 8 0 nd6 152 32 0 7 2 0 2 2 0 8 0 pkpcb 40 3 0 3 1 0 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1192 12 0 12 1 0 1 1 0 8 1 pppxif 1576 3 0 3 1 0 1 1 0 8 1 pfstscr 40 130 0 128 2 0 2 2 0 8 1 pffrag 232 4 0 0 1 0 1 1 0 482 0 pffrnode 88 4 0 0 1 0 1 1 0 8 0 pffrent 40 6 0 2 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 0 1 0 1 1 0 8 0 pfsrclim 320 2 0 1 1 0 1 1 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pfstitem 24 177 0 128 1 0 1 1 0 8 0 pfstkey 128 177 0 128 4 0 4 4 0 8 1 pfstate 448 112 0 64 13 0 13 13 0 8 6 pfrule 1360 23 0 17 2 0 2 2 0 8 0 rttmr 136 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 601 0 131 33 0 33 33 0 8 1 art_table 40 602 0 131 6 0 6 6 0 8 0 art_node 32 138 0 38 1 0 1 1 0 8 0 sysvmsgpl 40 40 0 0 1 0 1 1 0 8 0 semapl 72 12 0 5 1 0 1 1 0 8 0 shmpl 112 7 0 0 1 0 1 1 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 2035 0 569 93 0 93 93 0 8 0 ffsino 296 2035 0 569 114 0 114 114 0 8 0 nchpl 144 2582 0 868 64 0 64 64 0 8 0 rtmask 32 2 0 2 1 0 1 1 0 8 1 vnodes 216 2304 0 0 128 0 128 128 0 8 0 namei 1024 8475 0 8474 1 0 1 1 0 8 0 percpumem 16 71 0 19 1 0 1 1 0 8 0 kstatmem 264 51 0 22 3 0 3 3 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 12771 0 12771 10 2 8 8 1 8 8 plimitpl 152 192 0 173 1 0 1 1 0 8 0 sigapl 424 736 0 688 7 0 7 7 0 8 1 knotepl 120 547 0 0 17 0 17 17 0 8 0 kqueuepl 224 161 0 150 5 0 5 5 0 8 4 pipepl 344 145 0 118 3 0 3 3 0 8 0 fdescpl 528 720 0 689 3 0 3 3 0 8 0 filepl 160 3435 0 3215 13 0 13 13 0 8 2 lockfpl 104 228 0 225 2 0 2 2 0 8 1 lockfspl 48 110 0 107 1 0 1 1 0 8 0 sessionpl 144 103 0 94 1 0 1 1 0 8 0 pgrppl 48 112 0 95 1 0 1 1 0 8 0 ucredpl 104 346 0 333 1 0 1 1 0 8 0 zombiepl 144 691 0 688 1 0 1 1 0 8 0 processpl 1232 736 0 688 5 0 5 5 0 8 1 procpl 664 1182 0 1128 6 0 6 6 0 8 0 sockpl 752 518 0 487 5 0 5 5 0 8 1 mcl64k 65536 5 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 123 0 0 16 0 16 16 0 8 0 mcl2k 2048 25 0 0 4 0 4 4 0 8 0 mextrefs 64 19 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 297 0 0 19 0 19 19 0 8 0 bufpl 272 5089 0 113 332 0 332 332 0 8 0 anonpl 32 10571 0 0 87 1 86 86 0 247 0 amapchunkpl 152 16935 0 16218 33 0 33 33 0 158 4 amappl16 200 2669 0 2589 24 4 20 20 0 8 11 amappl15 192 8 0 8 2 2 0 1 0 8 0 amappl14 184 453 0 452 1 0 1 1 0 8 0 amappl13 176 139 0 127 1 0 1 1 0 8 0 amappl12 168 982 0 953 2 0 2 2 0 8 0 amappl11 160 18 0 18 1 1 0 1 0 8 0 amappl10 152 72 0 57 1 0 1 1 0 8 0 amappl9 144 294 0 294 1 1 0 1 0 8 0 amappl8 136 133 0 130 1 0 1 1 0 8 0 amappl7 128 156 0 143 1 0 1 1 0 8 0 amappl6 120 165 0 164 1 0 1 1 0 8 0 amappl5 112 129 0 118 1 0 1 1 0 8 0 amappl4 104 391 0 370 1 0 1 1 0 8 0 amappl3 96 3038 0 2940 3 0 3 3 0 8 0 amappl2 88 870 0 792 2 0 2 2 0 8 0 amappl1 80 11897 0 11287 15 1 14 15 0 8 1 amappl 88 4774 0 4600 5 0 5 5 0 92 0 uvmvnodes 80 105 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 9 0 0 1 0 1 1 0 8 0 uaddrrnd 24 720 0 689 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 720 0 689 1 0 1 1 0 8 0 vmmpekpl 168 7750 0 7709 3 0 3 3 0 8 1 vmmpepl 168 55705 0 53717 103 0 103 103 0 357 6 vmsppl 488 719 0 688 5 0 5 5 0 8 0 rwobjpl 80 18583 0 17463 30 0 30 30 0 8 0 pdppl 4096 1447 0 1376 101 30 71 85 0 8 0 pvpl 32 20339 0 0 165 0 165 165 0 265 0 pmappl 256 719 0 688 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 629 0 32 18 0 18 18 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83958ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a6e380) at __mp_lock+0x192 intr_handler(ffff80003c3fefd0,ffff80000006e200) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff83a6e380) at __mp_lock+0x192 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 uvm_anfree(ffffee0069eb50e0) at uvm_anfree+0xe9 amap_wipeout(ffffee006f605d18) at amap_wipeout+0x1d6 uvm_unmap_detach(ffff80003c3ff2d0,0) at uvm_unmap_detach+0x8a uvm_map_teardown(ffffee006cee99a0) at uvm_map_teardown+0x360 exit1(ffff80003bbbe7f0,b,0,1) at exit1+0x71b sys_exit(ffff80003bbbe7f0,ffff80003c3ff4a0,ffff80003c3ff3f0) at sys_exit+0x1a syscall(ffff80003c3ff4a0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x711c6537a3d0, count: -18 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffee006f6d8b40,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffee006f6d8b28,1) at rw_do_enter_write+0xba rrw_enter(ffffee006f6d8b28,1) at rrw_enter+0xc6 VOP_LOCK(ffffee0075e7aea8,2001) at VOP_LOCK+0xbd vn_lock(ffffee0075e7aea8,2001) at vn_lock+0xa4 vfs_lookup(ffff80003339d5d0) at vfs_lookup+0x12b namei(ffff80003339d5d0) at namei+0x7c5 unp_connect(ffff800001626bd8,ffffee00678f5000,ffff80003bbbe2c0) at unp_connect+0x29d uipc_dgram_send(ffff800001626bd8,ffffee00695adc00,ffffee00678f5000,0) at uipc_dgram_send+0x163 sosend(ffff800001626bd8,ffffee00678f5000,ffff80003339d858,0,0,c) at sosend+0x804 sendit(ffff80003bbbe2c0,5,ffff80003339d9d8,c,ffff80003339da90) at sendit+0x5a5 sys_sendmsg(ffff80003bbbe2c0,ffff80003339db40,ffff80003339da90) at sys_sendmsg+0x246 syscall(ffff80003339db40) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb6d53c32060, count: -15