last executing test programs: 7.960827055s ago: executing program 5 (id=5983): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x50, 0x0, 0xc, 0x6}, {0x28, 0xe, 0xfe, 0xb}, {0x9e, 0x9, 0x0, 0x5}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf74ab9d77bd0b4692d9664413a8ee516bd6379c693f782a54e8bd0e038b", &(0x7f0000000080)=0x31, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 7.959848363s ago: executing program 5 (id=5984): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x6}, 0x80000002000007, 0x7, 0x0, 0x0, 0x3, 0x2, 0xfa5, 0x100}) r0 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000280)=0xcf04, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) setsockopt(r0, 0x1000000000029, 0x1b, &(0x7f0000000000)="c04a1190", 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x2}, {0x1d, 0x0, 0xf1, 0x80}, {0x6, 0x80}]}) 7.7402979s ago: executing program 5 (id=5985): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x5, 0x1, 0x3c, 0x6}], 0x1, &(0x7f0000000100), 0x5, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = socket(0x18, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{r3}, 0xfffffffffffffffc, 0x45, 0xf0000000, 0x2ef5, 0x6}], 0x1005, 0x0, 0x37, 0x0) kevent(r1, &(0x7f00000000c0), 0x3fd, 0x0, 0x8000800, 0x0) acct(0x0) acct(&(0x7f0000000080)='./file0\x00') kqueue() (async) kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x5, 0x1, 0x3c, 0x6}], 0x1, &(0x7f0000000100), 0x5, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) socket(0x18, 0x1, 0x0) (async) fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) (async) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{r3}, 0xfffffffffffffffc, 0x45, 0xf0000000, 0x2ef5, 0x6}], 0x1005, 0x0, 0x37, 0x0) (async) kevent(r1, &(0x7f00000000c0), 0x3fd, 0x0, 0x8000800, 0x0) (async) acct(0x0) (async) acct(&(0x7f0000000080)='./file0\x00') (async) 6.987833037s ago: executing program 5 (id=6011): semop(0x0, &(0x7f00000000c0)=[{0x0, 0x3}, {0x4, 0x1ff}], 0x27fd) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x1, 0x0) close(r0) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0/file0/../file0\x00') (async) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') (async) r1 = semget(0x2, 0x1, 0x350) semctl$GETVAL(r1, 0x2, 0x5, &(0x7f0000000100)=""/100) (async) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x2) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x0) minherit(&(0x7f00003ce000/0x10000)=nil, 0x10000, 0x1) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 6.952836s ago: executing program 5 (id=6015): msgctl$IPC_SET(0x0, 0x1, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x4, 0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0xc0) poll(&(0x7f0000000040)=[{r2, 0x4}], 0x1, 0xffffffff) close(r1) close(r0) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) (async) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x18, 0x1, 0x0) (async) pipe(&(0x7f0000000100)) (async) fcntl$setstatus(r1, 0x4, 0xc0) (async) poll(&(0x7f0000000040)=[{r2, 0x4}], 0x1, 0xffffffff) (async) close(r1) (async) close(r0) (async) socket(0x18, 0x1, 0x0) (async) setsockopt(r3, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) (async) execve(0x0, 0x0, 0x0) (async) 6.947302656s ago: executing program 5 (id=6018): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x3}) (async) syz_open_pts() r0 = syz_open_pts() close(r0) (async) syz_open_pts() (async) open(0x0, 0x80, 0x29) (async) open(0x0, 0x2, 0xfa) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000002d40)="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", 0x46f}], 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000180)={0xf66d, 0xfff, 0xffff8001, 0x5ffbfb58, "428f67177c7cfc4dff0000803d0dcc2e00", 0x8, 0x3}) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r1 = syz_open_pts() close(r1) (async) r2 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f00000009c0)="f284547ec87ae3ad1aad0ee27ee88eacb67a08038280f2a01ae7a48358ae16e2fba4ee0ddad57fa2b502658b5723516552c4349404b4", 0x36}], 0x1) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r4 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r4, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r3, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000009f0500070107000000211c13fecea70500fef96ecfc72fd3007ae30200fdef3044d2d236acf20bf404be01000000f7c8cf5f8823297be1aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71dc0", 0x95, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r7 = socket(0x11, 0x3, 0x0) sendto$unix(r7, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001040)="bdd2b7a0", 0x4}], 0x1) write(r5, &(0x7f00000000c0)="c3", 0xffffffed) (async) close(r6) 6.328069314s ago: executing program 7 (id=6055): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000280)={0x5, 0x0, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000", 0x40, 0x3effd}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x64, 0x6, 0xbe, 0xd}, {0x40, 0x0, 0x4, 0x6}, {0x9e, 0xfe, 0x0, 0x6}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r1, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x0, "296438fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff}) write(r0, 0x0, 0x0) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f00000000c0)={0x1, 0x81, 0x8d3d, 0x5, "d6d63303a3c0b65c62b8e5c7d8f59d64122c2097", 0x6, 0x400}) syz_open_pts() r2 = socket$inet(0x2, 0x1, 0x0) getsockopt(r2, 0x0, 0x24, 0x0, 0x0) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000780)=0x7) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x80) readv(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x7c, 0xe, 0x60, 0x4}, {0x2c, 0x2, 0x4, 0x6}, {0x6, 0x6, 0x10, 0x5}]}) write(r4, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) kqueue() writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3", 0x4}], 0x1) 3.301590906s ago: executing program 4 (id=6174): r0 = socket(0x18, 0x4000, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000240)=[{0x3, 0x25, 0x1, 0x6}, {0xfffe, 0x10, 0x5, 0xc}, {0x9e, 0x88, 0x6, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x2, 0x101, 0x80000001, 0x80000001, 0x7, 0x10, [{0xfffffffc, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x2007}, {0x6, 0xf86, 0x0, 0x4}, {0x9, 0x800, 0x7}, {0x6, 0x80000003, 0x80e, 0x7}, {0x2, 0x1, 0xefffffff, 0x800009c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0xa, 0x8803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0xb}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0x8, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffe, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="7f5769e67f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x1, 0x0) bind(r2, &(0x7f00000002c0)=@un=@abs={0x1, 0x0, 0x1}, 0x8) r3 = dup(r2) listen(r3, 0x0) r4 = socket(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) sendto$inet(r4, &(0x7f0000000080)="9713", 0x2, 0x195a05e282d6165, 0x0, 0x0) accept$unix(r2, 0x0, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x1000, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) poll(0x0, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) close(r0) socket(0x24, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0284457, &(0x7f0000000280)={0x0, 0x1, 0xfeffffff, 0x9, "0a00140000fffbf6edf3d5b1b1ad00c2e300", 0x0, 0x9}) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) write(r5, &(0x7f00000001c0)="fe7e4ba676023eb1ff61e7fc6b4dec91d09cc5a3ed587a9ec4c314392e8fa04ceaf8b3df6ba533eec6c920cbd75c10", 0x2f) 2.411552121s ago: executing program 3 (id=6198): r0 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) fcntl$setstatus(r1, 0x4, 0x8) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x2, &(0x7f00000005c0)="e48beed8", &(0x7f0000000540)=0x4, &(0x7f0000000580)="096c62d9", 0x4) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r3 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r3, 0x821869de, &(0x7f00000001c0)) setsockopt(r0, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) syz_emit_ethernet(0x351, &(0x7f0000000600)={@remote, @broadcast, [], {@ipv6={0x86dd, {0x3, 0x6, "10b767", 0x31b, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts={0x70, 0x2f, '\x00', [@padn={0x1, 0x1, [0x0]}, @generic={0xe, 0xc4, "7334dca457e5efd7f05bf27803c7f010be7800e22a722622cf88f2c090e294f4abd80d4c43360be6534c90cd6295ad432f79cf9587b1609c5efac3f3e80523f15999a879dd34064ca36ee771773bf5c4dd765df7be0d00eb95aa3d902a30d81b35445fa8519026b7ba0a1f2974a5b2b572d1ae6d06d13f32ef61e59331b1506d7a6124866b3d5984cae6812f6a5a117fddaa8e30a1d17c351e930c6a3b28a4af12574f0be2afd30601f1894754df1ce0200e1afe195c1249614859288a74137d459e8bec"}, @enc_lim={0x4, 0x1, 0x9}, @generic={0x1, 0x95, "63f3c41260794305ddfef401562e2ddd693043e984a50ca5a85c24d46a93bf472ea0afa9c48fb7ce4eb38a49887877e5d3044dc9789fe7e8d4fa13c0ab307fa57b37bb54a715fc6f23e490e90539200c6ee7c68dec23a7c1347a1a4d9b145b0efec43d99e6fdb2510dafa0b748c170f1c9c862e0a8d259e4c95571a74a5b078170ceaa622e70d9104608f0db9aca80ec6ef3627188"}, @jumbo, @ra={0x5, 0x2, 0x91dc}, @enc_lim={0x4, 0x1, 0xbd}, @ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x8}]}, @dstopts={0x0, 0x2, '\x00', [@pad1, @pad1, @pad1, @ra={0x5, 0x2, 0x9}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x32, 0x20, '\x00', [@generic={0x2, 0xed, "126e8a32f83dcdb9a4c63b1e6f732427b517fc8a853fe06e7b1c207015951fb306cb15d4fbce670980418f694931d1a7842007968148c455a2570e8817f87511cb45cd85dbb5b269eff5355360870c911ad3e843fccffe9eb6ee21d1f278dd2999ebeaa73718769fd595cac0e34f76ecd47e0ebb04a934c847a1a47166fb67b014dd9e4c7f5301e8413bcfcdcb98edb7789cdb51c3cc646410b9a9eff991d685c853a12964a9476c6220e5e9469eda6805ecc1266cbd8fe425c7b49a3a1ecccb894ad0e0eb584380ce986688935768e192bd55213e8ca3012c3622dd8958ce9a9ce6e69fdd3dc68421a8c8bf68"}, @jumbo={0xc2, 0x4, 0x1e1c871c}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}, @dstopts={0x0, 0x2, '\x00', [@ra={0x5, 0x2, 0x1ed}, @enc_lim={0x4, 0x1, 0xc2}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0xf5}, @pad1, @ra={0x5, 0x2, 0x4}]}, @fragment={0xff, 0x0, 0x6f, 0x1, 0x0, 0x4, 0x67}, @dstopts={0x3a, 0x2, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x6}, @pad1]}, @fragment={0x2b, 0x0, 0x1, 0x1, 0x0, 0x13, 0x65}], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x1, 0x1, 0x7, 0x8, [{0x4, 0x0, 'D'}]}}}}}}) setsockopt(r0, 0x1000000029, 0xd, 0x0, 0x0) 2.273877449s ago: executing program 4 (id=6200): mquery(&(0x7f0000ff4000/0x1000)=nil, 0x7f7fffffc000, 0x0, 0xfe, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, [], {@ipv6={0x86dd, {0x3, 0x6, 'IC\x00', 0x3c, 0x2b, 0x9a, @local={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, {[@dstopts={0x1d}], @udp={{0x2, 0x1, 0x8}, {"88872dc5e0d56dd2c0b7d5136a533c4c46b83d38ec921647a1c3a52106bca2aab2b9371e5a9e025ef4dcb4ad"}}}}}}}) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf794d) ioctl$VNDIOCCLR(r0, 0xc0a86b02, &(0x7f0000000200)={0x0, 0x10000, 0x0}) openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000000c0), 0x10a0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000080)={0x2, 0x200}) 2.272314109s ago: executing program 3 (id=6201): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) r1 = getpid() ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x0, r1) 2.235213373s ago: executing program 3 (id=6205): nanosleep(&(0x7f0000000040)={0x0, 0x7}, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x900, 0x0) clock_gettime(0x4, &(0x7f0000000040)) sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x3, &(0x7f0000000180)="3bf2925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a7622c5788f7a4af1ce34c908cb8c57d076fb138c3b9bd02fb94adfa5ce78730d11c294f53adf325dffdebeba8dde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951d16adff26aa2e48b4", &(0x7f0000000080)=0xa0, &(0x7f0000000240)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa30200000042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe97b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba300000000000000014557f61ad238a7317e73650b8b125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98606e472b70b560f7021f567adf4d", 0xfffffffffffffe9d) r1 = syz_open_pts() r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0xc, 0x7, 0x2, 0x807}, {0xc, 0x2, 0x48, 0x400020}, {0x6, 0x4, 0xfe, 0x1001}]}) write(r2, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) readv(r1, &(0x7f00000012c0)=[{&(0x7f0000001200)=""/1, 0x1}], 0x1) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x80, 0x4, 0xfbfffffe, 0xfffffffe, "d76c1f46000000ef1f0160fbff2000404b00", 0x800}) syz_open_pts() getsockname(r0, &(0x7f0000000000)=@in6, &(0x7f0000000100)=0xc) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x20009, "59a6a348c00e00000000000000000000000100", 0x6, 0x9}) ioctl$TIOCSETVERAUTH(r0, 0x8004741c, &(0x7f0000000340)=0x3) 2.234791877s ago: executing program 4 (id=6206): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x50, 0x0, 0xc, 0x6}, {0x28, 0xe, 0xfe, 0xb}, {0x9e, 0x9, 0x0, 0x5}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf74ab9d77bd0b4692d9664413a8ee516bd6379c693f782a54e8bd0e038bf0ee0f98b14cd9da44e390cd1788af1e628be2bd22a6823c81d4c4a291bce86609e3ea7a", &(0x7f0000000080)=0x55, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 2.22160531s ago: executing program 4 (id=6208): unveil(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='c\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) acct(&(0x7f0000000140)='./file0/file1\x00') 2.097998439s ago: executing program 4 (id=6209): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x8140, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000002c0)={0x3, &(0x7f0000000080)=[{0x30, 0x9, 0xc4, 0x8}, {0x2, 0xbf, 0x0, 0x6}, {0x6, 0x9, 0x1, 0x40005}]}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[]) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) fsync(r1) close(r1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0xfffffffe) 1.853011174s ago: executing program 2 (id=6224): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, &(0x7f0000000000)={0x2, 0x4491}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e5000000", 0x4) 1.768786641s ago: executing program 3 (id=6228): open(&(0x7f0000000180)='./file0\x00', 0x615, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x11, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000040)={0x3, 0x0, 0x20400, 0x9, 0xffffffffffffffff}) 1.768266552s ago: executing program 3 (id=6230): pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) (async) ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r1 = getgid() fchownat(r0, &(0x7f0000000000)='./file0\x00', 0x0, r1, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000140)="b100050300000400000000b307000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b67404d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002022fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d1889e000040700000000130000", 0xb1, 0xc, 0x0, 0x0) 1.767946069s ago: executing program 3 (id=6231): setrlimit(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x4) setitimer(0x2, 0xfffffffffffffffe, 0x0) shmat(0xffffffffffffffff, &(0x7f0000ffe000/0x2000)=nil, 0x2000) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000180)={&(0x7f00000000c0)=[{0x7}], 0x1}) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, &(0x7f0000000100)="5f2a9acb4d5b5580cded0875c0081ff1", &(0x7f00000000c0)=0x10, &(0x7f00000001c0)="778b9d6a4b957ab6f3a62cf552865cf2ab6560764cb213336ff3af2198b556bb95915b9d3c5ac2b9b1b3882a5880985a7ab6fdad2ee6c1ecca7b68dac8ebd2280305442a50144bbaa924d6736b6030cacf7d83079d2eee30a2a34a6df97ae54ccfff160dc16965c326b3973d5153d381de3f363a67d0d7264cc9612d5b760b994aebc26cd448a67c834551126ec3af4330", 0x91) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 1.645774309s ago: executing program 2 (id=6234): syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x8000, 0x0, 0xfffc, {[@nop, @timestamp={0x8, 0xa, 0x3, 0x8}]}}}}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x3b, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {0x2}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0xaa19}, {0x2}, {0x1, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0x3}, {}, {0x0, 0x6}, {0x2, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0xffffffff}, {0x0, 0x7ff}, {0x1}, {0x2}, {0x5}, {0x3}, {}, {0x2, 0x1}, {}, {0x0, 0x10000200}, {0x2}, {0x0, 0xfffffffd}, {0x2, 0xa}, {0x2, 0x100000}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000140)='./file0\x00') unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') unveil(&(0x7f0000000340)='./file1\x00', &(0x7f0000000380)='r\x00') r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x4, 0x2, 0x42, 0x401}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 1.644344535s ago: executing program 2 (id=6236): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x9, 0x2, 0x8, 0x80, "9e18d6a77447ea4fba5853f44d4134761067b28f", 0x8000, 0x81}) (async) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) (async) r1 = socket(0x18, 0x3, 0x0) getsockopt(r1, 0x29, 0xe, 0x0, 0x0) (async) mprotect(&(0x7f00004ce000/0x4000)=nil, 0x4000, 0x4) (async) syz_emit_ethernet(0x32, &(0x7f00000000c0)={@random="c19836b93afd", @broadcast, [{[], {0x8100, 0x1, 0x1}}], {@generic={0x8044, "a3184984016c61af7a0dcc4d9a1a4c46cd9fbebef63337159f72a5feb6dc2e09"}}}) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) select(0x40, &(0x7f0000000000)={0x28bc34c3, 0x8000000006, 0x2, 0x0, 0x5, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) (async, rerun: 32) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x12b) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x5, 0x17, 0x9, 0x101, 0x80000004, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0x9}, {0x8, 0xd86, 0xdf06}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x5}, {0x2, 0x6, 0x1003, 0x99}, {0xce3, 0x7, 0x6, 0x9}, {0x6, 0xfff, 0x80000018, 0x8}, {0x6, 0x1082, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x4, 0xffff, 0x9, 0x3}, {0x7ff, 0x9, 0x8, 0x9}, {0xb8c, 0x4, 0xf, 0x4}, {0x29a71717, 0xfffffffa, 0x985, 0x6}, {0xc, 0x7, 0x5}, {0x0, 0x1, 0x1002, 0x30004}]}) mlock(&(0x7f00004c2000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1010, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000000000)={@random="eb7500", @random="82e792a9a69c", [], {@ipv4={0x800, {{0x8, 0x4, 0x1, 0x27, 0x28, 0x67, 0x9, 0x0, 0x3c, 0x0, @remote={0xac, 0x14, 0x0}, @multicast2, {[@generic={0x89, 0x7, "1b1988bec3"}, @noop, @lsrr={0x83, 0x3}]}}, @udp={{0x0, 0x0, 0x8}}}}}}) (rerun: 64) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt(r3, 0x11, 0x2, &(0x7f0000000500), 0x0) (async) r4 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1004, 0x0, 0x0) (async) r5 = socket(0x2, 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) 1.579329092s ago: executing program 2 (id=6240): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000500), 0x80, 0x0) r1 = kqueue() ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000380)=ANY=[@ANYBLOB="932e55ca478edb6d49ec921b08f7440000140000000000ff9078974f634eac14ffff"]) (async) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000040)="e2f404ff", 0x4) kevent(r1, &(0x7f00000023c0)=[{{r0}, 0xffffffffffffffff, 0x21, 0x6c74491dde91caa2, 0x1, 0x2}], 0x1, 0x0, 0x7fffffff, 0x0) (async, rerun: 32) socketpair(0x10, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) r5 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r5, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r4, 0x2}) (async, rerun: 32) close(r4) (async, rerun: 32) r6 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r6, 0x0, 0x0) (async) ioctl$TIOCSETAW(0xffffffffffffff9c, 0x802c7415, &(0x7f00000000c0)={0x8, 0xffffffff, 0x40d4, 0x3, "4fd5314b10428442e325b6865df7515fb3d88b41", 0x7fff, 0x7}) r7 = accept$inet(r3, &(0x7f0000000040), &(0x7f0000000100)=0xc) (async, rerun: 64) r8 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (rerun: 64) ioctl$TIOCSETA(r8, 0xcd50441a, &(0x7f0000000180)={0x3, 0x2, 0x4, 0x2f, "1800e6234f5d7a0000005409456200", 0x3, 0x7}) (async, rerun: 32) ioctl$VT_WAITACTIVE(r8, 0x20007606, &(0x7f0000000000)=0x3) (async, rerun: 32) ioctl$TIOCSCTTY(r8, 0x20007461) close(r7) 1.57880406s ago: executing program 2 (id=6241): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) r0 = socket(0x18, 0x3, 0x50) setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000), 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) r3 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x3, 0xe661, 0x2, 0x6, 0x7ffb, 0xffffffffffff8001}, 0x0, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x4, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x200000000000008, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) (async) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) (async) socket(0x18, 0x3, 0x50) (async) setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000), 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) (async) open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) (async) fcntl$lock(r3, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) socket$inet(0x2, 0x1, 0x0) (async) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) (async) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x3, 0xe661, 0x2, 0x6, 0x7ffb, 0xffffffffffff8001}, 0x0, 0x0, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x4, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x200000000000008, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) (async) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) (async) kqueue() (async) kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) 1.300928104s ago: executing program 6 (id=6250): ioctl$WSKBDIO_SETBELL(0xffffffffffffffff, 0x80105703, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x7}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) 1.300144307s ago: executing program 6 (id=6251): syz_open_pts() msgctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/171) r0 = msgget$private(0x0, 0x8) r1 = getgid() r2 = socket(0x18, 0x3, 0x1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xe5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x4004}, 0xb3d83f2, 0x200000000000, 0xffffffffffffffff, 0x0, 0x1ff, 0x204000000000, 0x6, 0x5}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockopt(r2, 0x29, 0x2c, 0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0xa, 0x0, r1, 0xffffffffffffffff, 0x0, 0x100, 0x3}, 0xdfaf, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0x9, 0x1}) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/16}, 0x18, 0x3, 0x0) 1.299907524s ago: executing program 6 (id=6252): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x5, 0x1, 0x3c, 0x6}], 0x1, &(0x7f0000000100), 0x5, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r1 = socket(0x18, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r2}, 0xfffffffffffffffb, 0x55, 0x20000000, 0x2ef5, 0x7}], 0xffffffff, 0x0, 0x37, 0x0) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) acct(0x0) acct(&(0x7f0000000080)='./file0\x00') 1.011033511s ago: executing program 1 (id=6259): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x2, 0x2) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0xc1206949, &(0x7f0000000100)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000240)=@file={0x1, './bus\x00'}, 0x8, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) socket(0x18, 0x3, 0x3a) sendmsg$unix(r1, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r2, 0x80085761, &(0x7f0000000100)={0x2, 0x6}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getpeername$unix(r0, &(0x7f00000002c0)=@file={0x0, ""/54}, &(0x7f0000000300)=0x38) getpgid(0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) open(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r4, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0x0, 0x71002}, {0x2, 0x9, 0x8, 0x34}, {0x100, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0x400, 0x4f8, 0x6d}, {0xfff, 0x7ff, 0x1, 0x8}, {0x40002, 0x82, 0x8000005, 0x5}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1cf, 0x10001, 0x0, 0x3}, {0x8, 0x9, 0x8, 0x8000002}, {0xb89, 0x555981a8, 0x8, 0x112b}, {0x29a71717, 0x8, 0xfffffffd, 0x6}, {0xc, 0x2000005, 0x5, 0x848}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x278, 0x8, 0x80000000, 0x9, 0x48, 0x10001, 0x0, 0x10, [{0x40000005, 0x465, 0xfffff115, 0x7fffffff}, {0x3, 0xffff7ffb, 0x2, 0xfff}, {0xfff, 0x74, 0x5, 0x4}, {0x1004, 0xe2, 0x8, 0x9}, {0x3, 0x7, 0x5, 0x3}, {0xffff7fff, 0xffff, 0x6, 0x5}, {0x5, 0x7, 0x2, 0x2}, {0x4f, 0x100040c, 0x100, 0xffffe2e9}, {0x9, 0x5400, 0x7, 0x9}, {0x2, 0x7051, 0x6, 0x408bfd}, {0x2, 0xb, 0x8, 0x6}, {0x10000, 0x40, 0x800000, 0x6}, {0x401, 0x6, 0x5, 0xa1}, {0x2, 0x6e2, 0x5, 0x6f5fc48f}, {0xfffffffb, 0x101, 0x3, 0x9}, {0x5a11, 0xe, 0x2, 0x69}]}) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x5) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000380)={0x2, &(0x7f0000000340)=[{0x4, 0x4, 0x7, 0xfff}, {0xd802, 0x87, 0x1, 0x1}]}) 1.009588301s ago: executing program 1 (id=6261): openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x8000}, 0x4, 0x2, 0x0, 0x0, 0x60000000000002, 0xfb5f, 0x5, 0x8000008000000e5f}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) close(r0) flock(r0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket(0x11, 0x3, 0x0) sendto$unix(r1, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x2, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000c68000/0x4000)=nil, &(0x7f0000260000/0x12000)=nil, 0x7}, {&(0x7f00005eb000/0x1000)=nil, &(0x7f00007aa000/0x5000)=nil, 0x7}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000507000/0x3000)=nil, 0x20000005}, {&(0x7f0000318000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f00000d4000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x2000000000009}, {&(0x7f000027f000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil}, {&(0x7f000055d000/0x4000)=nil, &(0x7f0000eee000/0x4000)=nil, 0x4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f00004de000/0x2000)=nil, 0x4}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000243000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x51}, {&(0x7f00004f7000/0x9000)=nil, &(0x7f00000e1000/0x1000)=nil, 0x7}, {&(0x7f0000008000/0x3000)=nil, &(0x7f00001c0000/0x4000)=nil, 0x5}, {&(0x7f0000691000/0x2000)=nil, &(0x7f0000042000/0x3000)=nil, 0xfffffffffffffffb}, {&(0x7f0000334000/0x1000)=nil, &(0x7f000053a000/0x1000)=nil, 0x6}, {&(0x7f0000b39000/0x2000)=nil, &(0x7f0000022000/0x2000)=nil, 0x1000039f8}, {&(0x7f0000652000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x500ffffffe}], './bus\x00', 0x3ff}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) semop(0x0, 0x0, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) pwrite(r3, &(0x7f00000003c0)="030500", 0x3, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES16, @ANYRES32=r3], 0xfffffffffffffead}, 0x808) close(0xffffffffffffffff) chflagsat(r3, &(0x7f0000000380)='./file1\x00', 0x0, 0x2) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r4, 0x0) shmget$private(0x0, 0x4000, 0x440, &(0x7f0000385000/0x4000)=nil) ftruncate(r4, 0x8531) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x9, 0xfd, 0x2, 0x6, "0004000000000000000000008400001000000200", 0x0, 0xffffff00}) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa22f3c25db0070162e0086dd60f6190000180600fe8000000000000000000000000000aaff001fb2f810e2853a17d600000001004e204e"]) 858.141203ms ago: executing program 2 (id=6241): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) r0 = socket(0x18, 0x3, 0x50) setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000), 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) r3 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x3, 0xe661, 0x2, 0x6, 0x7ffb, 0xffffffffffff8001}, 0x0, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x4, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x200000000000008, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) r5 = kqueue() kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) (async) open(&(0x7f0000000180)='./file0\x00', 0x1, 0x13f) (async) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) (async) socket(0x18, 0x3, 0x50) (async) setsockopt(r0, 0x1000000029, 0x25, &(0x7f0000000000), 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) (async) open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) (async) fcntl$lock(r3, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff}) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) socket$inet(0x2, 0x1, 0x0) (async) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) (async) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x3, 0xe661, 0x2, 0x6, 0x7ffb, 0xffffffffffff8001}, 0x0, 0x0, 0x0) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x80000000000001fe], [0x100000001, 0x8000, 0x4, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x200000000000008, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x6}}}) (async) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) (async) kqueue() (async) kevent(r5, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) (async) 857.881905ms ago: executing program 0 (id=6263): writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r0, 0x0, 0x6e, 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) close(r1) r2 = socket(0x2, 0x2, 0x0) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000080)={0xff, 0x6, 0x8, 0xd, 0x27ec0000, 0x10000, 0x1, 0x10, [{0xb, 0x4382, 0xffff8f2f, 0xfe}, {0x4, 0x6, 0x2, 0x1c000}, {0x0, 0x248, 0x14, 0x10000}, {0x1, 0x8b, 0x2339, 0x7aa12dfe}, {0x3, 0xf4c, 0x9, 0x80000000}, {0x8, 0x2, 0x9, 0x9}, {0x14f2, 0xa, 0x7, 0xe}, {0x6, 0xff, 0x3ff, 0x3}, {0x0, 0x8000, 0x5, 0x7}, {0x66, 0xe, 0x0, 0x4}, {0x9e, 0x0, 0x79, 0x9}, {0xc, 0x6, 0x6, 0x2}, {0x0, 0x5b18, 0x7fff, 0x1}, {0x7, 0x4, 0x1000, 0x81}, {0x10, 0x2, 0x5, 0x7}, {0x8806, 0xff, 0x3, 0x9}]}) connect$unix(r2, &(0x7f0000000000), 0x10) connect$unix(r1, &(0x7f0000000000), 0x10) 856.957251ms ago: executing program 0 (id=6264): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f0000000200)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x50, 0x0) fcntl$dupfd(r0, 0xa, r0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KDSETMODE(r1, 0x20004b0a, &(0x7f00000000c0)=0x1) madvise(&(0x7f00003e0000/0x12000)=nil, 0x12000, 0x6) 557.15249ms ago: executing program 0 (id=6265): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x32, &(0x7f00000000c0)="b211d7170d816685c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e180e9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) sendmsg(r0, &(0x7f0000001700)={&(0x7f0000000040)=@in6={0x18, 0x0}, 0xc, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x438}, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r1, 0x8004667d, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002bc0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r2, 0xffff, 0x80, &(0x7f0000002c00)={0x7f, 0x7}, 0x8) close(r2) sysctl$net_inet_udp(&(0x7f0000000140)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f0000000180), 0x0, 0x0, 0x0) 555.396519ms ago: executing program 1 (id=6266): getuid() sysctl$net_inet_udp(&(0x7f0000000240)={0x4, 0x2, 0x11, 0x5}, 0x4, 0x0, 0x0, &(0x7f0000000300), 0x0) (async) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000002540)="5434b68ff7d3ede1026b2e98b0ee9ccb4a6a6f1ebc82364929c4c817fe4910a168660da8e485db1854a729db40e92ffacc5212953197bb1c5facfeaab2f39a6d210412a78e833044f7a0655dde0a58aed752ef8b0a5ba62219ba8fbeb25802cc30b19d0bca182e2d56e86fe9348ae541a3c9ee3c58bc72816cbc7ab6cf37b3152213c82c7632305739f248a580645d3d3ff269e93d26ac257827f600afad730107ede6b45acf7978ba7642119a76bce17432dab4cd343c5f6e2c380cbfc9659a444d575bba6fa73cfabe63589f51d218f0686474001a3e2c7fdf0c20a0a1a25813fa85f458965ca22c8bc90a64404b38a315afdff252bab2", 0xf8}], 0x1, 0x0) (async) nanosleep(&(0x7f0000000280)={0x0, 0x1e49824d}, 0x0) (async) unveil(0x0, &(0x7f00000008c0)='r\x00') (async) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000640)="65fb228acc0200006207003b0e2500dd29bb941fa44fc0176d4574a0693cb4630853e0173ec71b07806949122bf2ef9cc3a8f651705686c9267307bb0beb323f6dfbbc5b778b4acb1ec1bf7880d815516db060c52be1b8a63ee93efe9c9953584710a8727984e17cf6f00fbd2e297d55b6db118ab94fe6d4b97801795956529a18722fcd079279ae4f249c70e41523eaa90051a877489030f177219c73b79d09b2d1292c47d4be6f2731979f1be8a85c135802e6a74398eb0408e3dd4400a6c3555fb39975e514564a05442b07681444474a4c973838fd24810d70b12ea672b175e303c8840810cf1668bd3a45ac9b4f09071beb504f4e", 0xf7}], 0x1) (async) r1 = kqueue() r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) kevent(r1, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffff8, 0x30, 0x1, 0xf, 0x1}, {{r0}, 0xfffffffffffffffd, 0x20, 0x8, 0x7, 0xd40}, {{r0}, 0xfffffffffffffffd, 0xd0, 0x2, 0x5, 0x1}, {{r0}, 0xfffffffffffffffd, 0x9, 0x80000000, 0x8, 0x9}, {{r0}, 0xfffffffffffffffc, 0x1, 0x2, 0x8000, 0x6}, {{r0}, 0xfffffffffffffff8, 0x4, 0x10, 0x1, 0x81}, {{r0}, 0xfffffffffffffff9, 0x40, 0x1, 0x3, 0x8}, {{r2}, 0xfffffffffffffffc, 0x80, 0x2, 0x4, 0x7}, {{r0}, 0xfffffffffffffffa, 0x91, 0x1, 0x10000, 0x4}, {{r0}, 0xffffffffffffffff, 0x18, 0x1, 0x1, 0xfffffffffffffffd}], 0x5c1, &(0x7f0000000140), 0x7fffffff, &(0x7f0000000180)={0x80000000, 0x5}) (async) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x10, 0x0) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) poll(&(0x7f0000000400)=[{r0, 0x80}, {r3, 0x100}, {r4, 0x13}, {r1, 0x4}, {r1, 0x8}, {r1, 0x5}, {0xffffffffffffff9c, 0x20}, {r1, 0x60}], 0x8, 0x0) r5 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x20, &(0x7f0000000000)=0x9, 0x1) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x8, 0x0) (async) r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) ftruncate(r6, 0x40000000007) unveil(0x0, &(0x7f00000000c0)='W\x00') 548.703558ms ago: executing program 7 (id=6267): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0, 0x2}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x7c, 0x9, 0x0, 0x8}, {0x7, 0xbf, 0xd}, {0x816, 0xa, 0x14, 0x5}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) close(r0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r3, 0x0, 0x0) 546.116936ms ago: executing program 0 (id=6268): r0 = socket(0x18, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000040)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x11, 0x401}, 0xc) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) pipe(&(0x7f0000000640)={0xffffffffffffffff}) close(r1) (async) r2 = socket(0x2, 0x3, 0x7) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) r3 = semget$private(0x0, 0x2, 0x3f0) semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000001f80)=[0x6]) (async) semctl$SETALL(r3, 0x0, 0x9, &(0x7f0000000200)=[0x5, 0x1, 0xffdb, 0x2, 0xfab0, 0x8, 0x200]) r4 = syz_open_pts() close(r4) (async, rerun: 64) ftruncate(r4, 0x2) (async, rerun: 64) setsockopt$sock_int(r1, 0xffff, 0x2000, &(0x7f0000000180)=0xfffffffe, 0x4) (async) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x4c, 0xff, 0x32}, {0x2c, 0x8, 0x0, 0xfffffff9}, {0x86, 0x1, 0x9, 0x5}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r7 = fcntl$dupfd(r6, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r7, 0x8020690c, &(0x7f00000001c0)) (async) connect$unix(r2, &(0x7f0000000000), 0x10) (async) write(r1, &(0x7f00000017c0)="fd77752c6afb5027ec9473975598fd05ef", 0x11) pipe(&(0x7f0000000280)={0xffffffffffffffff}) ftruncate(r8, 0x101) openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ftruncate(r0, 0x7) (async) syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff860c60fccdb80028624000000000000000000000ffff7f000001fe8000000000000000000000000000bb890090780000000000000000000000000000ffff0000000000000000ffffffff0100"]) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) 417.228801ms ago: executing program 1 (id=6269): mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc0205603, &(0x7f0000000040)={0xe64, 0x4, 0x6, 0x80000000, "97f3b45700", 0x2000, 0xffffffff}) open(&(0x7f0000000000)='./file0\x00', 0x2f2, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) (async) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETA(r0, 0xc0205603, &(0x7f0000000040)={0xe64, 0x4, 0x6, 0x80000000, "97f3b45700", 0x2000, 0xffffffff}) (async) open(&(0x7f0000000000)='./file0\x00', 0x2f2, 0x0) (async) 414.42369ms ago: executing program 0 (id=6270): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000001600)={0x1, &(0x7f00000015c0)=[{0x80, 0x8e, 0x9, 0x7}]}) (async) syz_emit_ethernet(0x86, &(0x7f0000000140)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "00ed00", 0x50, 0x89, 0x8, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="00000000ff00", {[@hopopts={0x6, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x2}]}, @hopopts={0x64, 0x4, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn, @generic={0x30, 0x3, "a1166f"}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn, @enc_lim={0x4, 0x1, 0x6}]}], @udp={{0x3, 0x2, 0x8}}}}}}}) 409.677577ms ago: executing program 0 (id=6271): sysctl$hw(&(0x7f0000000000)={0x7, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x2) execve(0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x20, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) setitimer(0x1, &(0x7f0000000140)={{0x2542e2acb, 0x9}, {0x6, 0x9}}, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) ftruncate(r2, 0x40000000007) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x80, 0x50) preadv(r3, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x20, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x16}, 0x4, 0x0, 0x0, 0x0, 0x0) 407.784301ms ago: executing program 1 (id=6272): r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) sysctl$vm(&(0x7f00000000c0)={0x2, 0xc}, 0x2, &(0x7f00000001c0)="482f92e4bf2369a2", &(0x7f0000000240)=0x8, &(0x7f0000000280)="d277826eecd7078a6456ab6308ad8555e613f3424f543be7", 0x18) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x26}, 0x4, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x4301) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0xffff, 0x7a, 0x7, 0x8}, {0x7, 0xe, 0x7, 0x4}, {0xe8, 0x4, 0x5, 0x5de0}, {0x9, 0x80, 0x9}, {0x5, 0x3, 0x1}, {0x5, 0x5, 0x9, 0xffff14c5}]}) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x40000530, 0x0) 406.908025ms ago: executing program 7 (id=6273): sysctl$kern(&(0x7f0000000280)={0x1, 0x47}, 0x3, &(0x7f0000000100)="71f91e3471ac00584dedbc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0xfffffd5c) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0xb1, 0xfc, 0xe, 0x53}, {0x6, 0x5, 0x5, 0x73}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x68, 0x0, 0x0, 0x2, 0x0, @multicast1, @multicast1}}}}}}) sysctl$vm(&(0x7f0000000000)={0x2, 0x7}, 0x2, &(0x7f0000001240)="8d960000", &(0x7f0000000040)=0x4, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x18, 0x0, 0x15}, 0x4, 0x0, 0x0, 0x0, 0x0) 183.924806ms ago: executing program 6 (id=6274): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0xfb5b, 0x6d, 0x4, 0xa, "01000000100000000000000000000800", 0x93ba, 0xae}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x1}, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffde7) ioctl$TIOCSETA(r0, 0xc450443c, &(0x7f00000000c0)={0x4, 0x4220, 0x7fffffff, 0x9, "c9f7d04675000000002f00", 0x0, 0x8}) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0xaa59}, {0x2}, {0x1, 0xffffffff}, {0x2, 0x9c1}, {0x3, 0x4}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x80000001}, {0x3, 0xffffffff}, {0x2, 0x8000000}, {0x2}, {0x0, 0xffffffff}, {0x3, 0x7ff}, {0x1}, {0x2}, {0x3}, {0x3, 0x20000}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2}, {0x1, 0xfffffffd}, {0x1, 0xa}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 183.272167ms ago: executing program 7 (id=6275): setuid(0xee01) r0 = msgget$private(0x0, 0x127) msgrcv(r0, 0x0, 0x0, 0x0, 0x3000) r1 = socket$inet6(0x18, 0x4, 0x1) preadv(r1, &(0x7f0000000000), 0x0, 0x1004) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x1, 0x800000000000000, 0xffffffffffffffff, 0xffffffffffffffbf, 0x0, 0x3, 0x9}) 43.682444ms ago: executing program 7 (id=6276): r0 = socket(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet_opts(r1, 0x0, 0x24, &(0x7f0000000040)="fd0cc085", 0x9) (async) sendmsg$unix(r0, &(0x7f0000000440)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000003"], 0x18}, 0x0) (async) readv(0xffffffffffffff9c, &(0x7f0000000280)=[{&(0x7f0000000000)=""/139, 0x8b}, {&(0x7f0000000180)=""/205, 0xcd}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x5) (async) mknod(&(0x7f0000000480)='./file0\x00', 0x6000, 0x400) (async) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='W\x00') 43.025173ms ago: executing program 6 (id=6277): setreuid(0xee00, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4b}, 0x2, &(0x7f0000000000), 0x0, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) socket$inet(0x2, 0x4000, 0x7) (async) ioctl$TIOCSETA(r0, 0xc0284414, &(0x7f0000000340)={0x52000, 0x0, 0x4, 0x7f, "561a8ebd00000000050000000000006e00", 0x10000, 0x2e5e}) syz_open_pts() (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) (async) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc) (async) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r4, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r5 = fcntl$getown(r4, 0x5) ktrace(&(0x7f0000000200)='./file0\x00', 0x0, 0xd27d43220c7df9b, r5) (async) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000001c0)={0x0}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000200)={{0x7, r1, r2, 0xffffffffffffffff, r3, 0xd6, 0xffff}, 0xd1c7, 0x6c4, r5, r6, 0x3, 0x2e60f83, 0x1000, 0x4}) 39.84068ms ago: executing program 1 (id=6278): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900403a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078fffffffc6006c33e00000000fe8000000000000000000000000000aaff7602000000000000000000000000000188010000000000000100c2"]) chroot(&(0x7f0000000740)='.\x00') sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r4 = socket(0x2, 0x3, 0x2f) r5 = dup(r4) setsockopt$inet_opts(r5, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) sendmsg$unix(r4, &(0x7f0000002a40)={&(0x7f0000000000), 0x2, 0x0}, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$unix(r4, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) (async) socket(0x18, 0x1, 0x0) (async) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) (async) close(r1) (async) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/240, 0xf0}, 0x0) (async) syz_emit_ethernet(0x76, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900403a0000000000000000000000000000000000fe8000000000000000000000000000aa02009078fffffffc6006c33e00000000fe8000000000000000000000000000aaff7602000000000000000000000000000188010000000000000100c2"]) (async) chroot(&(0x7f0000000740)='.\x00') (async) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) socket(0x2, 0x3, 0x2f) (async) dup(r4) (async) setsockopt$inet_opts(r5, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) (async) sendmsg$unix(r4, &(0x7f0000002a40)={&(0x7f0000000000), 0x2, 0x0}, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sendmsg$unix(r4, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x34}, 0x0) (async) 38.947243ms ago: executing program 6 (id=6279): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8a1, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0xd1, 0x2, 0x4, 0x20005}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, 0x0, 0x0) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', 0x4c, &(0x7f0000000180)='./file0\x00', 0x8}) ioctl$VNDIOCCLR(r2, 0x80384601, &(0x7f00000000c0)={0x0, 0x80, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4", 0x3}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000200)={0x8, 0x2, 0x9, 0x4, 0x3ff, 0xf0000000, 0xb51b, 0x10, [{0x4, 0x4, 0x2, 0x128}, {0x101, 0x5, 0x6, 0x8}, {0x9, 0x7, 0x1b}, {0x7, 0x24c, 0xfffff85c}, {0x7fff, 0x0, 0xb8, 0x8}, {0x1, 0x5, 0x4, 0x800}, {0x80000001, 0xd, 0x1000, 0x8}, {0x3, 0x0, 0x200, 0x6}, {0x2, 0xfffffff9, 0x4, 0x3}, {0x0, 0x15f, 0x20caa221, 0x95}, {0xd2c, 0x1000, 0x0, 0x87}, {0x5, 0x9, 0x8000, 0x3}, {0x3, 0x2, 0x1, 0x4}, {0x75, 0x6, 0x8, 0x3}, {0x5, 0x40}, {0x1, 0x8, 0x6, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) close(r5) r6 = socket(0x2, 0x2, 0x0) connect$unix(r6, &(0x7f0000000000), 0x10) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x40) ftruncate(0xffffffffffffff9c, 0x100000001) 38.252918ms ago: executing program 7 (id=6280): syz_emit_ethernet(0x9d, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x67, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xbd, 0x0, 0x1}, {"49c04d5382f4d62e7f37419a7c65fa1fa39809e2576c3469419f3f5116040c6de03166012923dc806c9dd485a3941ade52f8371b5673497db2f5d4249c138b7cb848148f7a6635b2fa12a0eb3e511732e7874c"}}}}}}}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0xc14}, {}, {0x6, 0x4, 0x2}]}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8020691f, &(0x7f00000001c0)) 0s ago: executing program 4 (id=6281): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) chmod(&(0x7f0000000440)='.\x00', 0x35e) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x35}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000100)={0x6, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x1, &(0x7f0000000000)={0x0, 0x2}) r0 = socket(0x18, 0x3, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCGET(r1, 0x81946467, &(0x7f0000000480)={'./file0\x00', 0xffffffff, 0x8000, 0x63}) setsockopt$sock_int(r0, 0xffff, 0x1021, &(0x7f0000000040)=0x5, 0x4) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) bind$unix(r2, &(0x7f0000000140)=@abs={0x1, 0x0, 0x3}, 0x8) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000540)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error uvn_flush: obj=0xfffffd806b7231f0, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost!    OpenBSD/amd64 (Amnesiac) (tty00) login: pckbd_enable: command error WARNING: thread `nfsio' (228990) exits with status -1 WARNING: thread `nfsio' (350979) exits with status -1 WARNING: thread `nfsio' (211380) exits with status -1 WARNING: thread `nfsio' (504718) exits with status -1 pckbd_enable: command error denied attempt to set clock forward to 7381507745249584175 uvn_flush: obj=0xfffffd8074299348, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Hǘj) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error j|E1\:pckbd_enable: command error OpenBSD/amd64 (Hǘj) (tty00) login: pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error           : 4(2%!$ .&3)/' (241615) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (228341) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (235856) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (197760) %8)43 7)4( 34!453 -1 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 0#+"$%.!",%: #/--!.$ %22/2 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 0 3%#/.$3 0#+"$%.!",%: #/--!.$ %22/2 0008: 5.!",% 4/ 3%4 !$$2%33%3 &/2 00081, %22/2=17 0#+"$%.!",%: #/--!.$ %22/2 56.&,53(: /"*=08&&&&&$8075275928, /&&3%4=081000. %22/2 $52).' 0!'%/54. 56.&,53(:  : #(!.'%3 4/ 0!'% -!9 "% ,/34!  : 4(2%!$ .&3)/' (343288) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (138625) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (143434) %8)43 7)4( 34!453 -1  : 4(2%!$ .&3)/' (279523) %8)43 7)4( 34!453 -1 0-!05.7)2%: 7)2).' &/2 0-!0 08&&&&&$806"769100 6! 08200000001000 $)$.'4 #(!.'%! $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 52172937113390 pckbd_enable: command error uvn_flush: obj=0xfffffd805d029af8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! denied attempt to set clock back 425722887 seconds pckbd_enable: command error denied attempt to set clock back 11 seconds denied attempt to set clock forward to 52172937113390 pckbd_enable: command error wskbd0: can't attach mux (error=5) malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 4263431311 seconds pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error denied attempt to set clock back 4263431332 seconds + -malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa+ſD7߻./file0./file0./file0./bus./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaj|E1\:./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaload: 11.70 not a controlling terminal malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 67 seconds denied attempt to set clock back 33554501 seconds denied attempt to set clock back 67 seconds denied attempt to set clock back 70 seconds denied attempt to set clock back 70 seconds malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 425722948 seconds pppx: unable to set addresses for pppx1, error=17 uvn_flush: obj=0xfffffd8075275068, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back -9223372032591346468 seconds malloc(): allocation too large, type = 29, size = 16796513700 uvn_flush: obj=0xfffffd807ac66d20, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 4263431400 seconds malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 4263431403 seconds denied attempt to set clock forward to 52172937113390 pppx: unable to set addresses for pppx1, error=17 WARNING: thread `nfsio' (87992) exits with status -1 WARNING: thread `nfsio' (158991) exits with status -1 WARNING: thread `nfsio' (304593) exits with status -1 WARNING: thread `nfsio' (384140) exits with status -1 WARNING: thread `nfsio' (430753) exits with status -1 WARNING: thread `nfsio' (243932) exits with status -1 WARNING: thread `nfsio' (2832) exits with status -1 WARNING: thread `nfsio' (469296) exits with status -1 WARNING: thread `nfsio' (371224) exits with status -1 WARNING: thread `nfsio' (70077) exits with status -1 pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back -9223372032591346441 seconds wStopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd805ce02b58,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd805ce02b40,1) at rw_do_enter_write+0xba rrw_enter(fffffd805ce02b40,1) at rrw_enter+0xc6 VOP_LOCK(fffffd805c560388,2001) at VOP_LOCK+0xa3 vn_lock(fffffd805c560388,2001) at vn_lock+0xa4 vfs_lookup(ffff80003c47b590) at vfs_lookup+0x11c namei(ffff80003c47b590) at namei+0x7ca unp_connect(ffff8000015df248,fffffd806c30b900,ffff80002efd4fd0) at unp_connect+0x29d uipc_dgram_send(ffff8000015df248,fffffd80650e3700,fffffd806c30b900,0) at uipc_dgram_send+0x163 sosend(ffff8000015df248,fffffd806c30b900,ffff80003c47b818,0,0,e) at sosend+0x804 sendit(ffff80002efd4fd0,5,ffff80003c47b998,e,ffff80003c47ba50) at sendit+0x5a5 sys_sendmsg(ffff80002efd4fd0,ffff80003c47bb00,ffff80003c47ba50) at sys_sendmsg+0x246 syscall(ffff80003c47bb00) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbc1f2099550, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c47b210 rbx 0 rdx 0 rcx 0xffff80002efd4fd0 rax 0xffff8000299edff0 r8 0xffff80003c47b0f0 r9 0x8080808080808080 r10 0xc7a788e568e6ea60 r11 0x776efe7f31ab9aa5 r12 0xfffffd8003f07680 r13 0xfffffd80046efac0 r14 0x3 r15 0xffffffff833ddc36 substchar+0x6455 rip 0xffffffff828a25b5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c47b200 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=13984 pid=16869 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=84, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002efd4d38,0xffff80002efd5278 process=0xffff80002a3cc018 user=0xffff80003c476000, vmspace=0xfffffd8072a7a208 estcpu=34, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 28418 267000 31651 0 2 0x40 syz-executor 72141 266793 45307 0 2 0 syz-executor 16869 120605 71641 0 2 0 syz-executor *16869 13984 71641 0 7 0x4000000 syz-executor 39359 420712 58112 0 7 0 syz-executor 39359 379152 58112 0 3 0x4000080 fsleep syz-executor 44198 456819 55199 0 3 0x1000080 nanoslp syz-executor 44198 103854 55199 0 3 0x5000080 sbwait syz-executor 44198 429987 55199 0 3 0x5000080 fsleep syz-executor 31651 109358 30329 0 3 0x82 ppwait syz-executor 79881 515801 90182 0 2 0 syz-executor 79881 187006 90182 0 3 0x4000080 fsleep syz-executor 79881 407935 90182 0 3 0x4000080 fsleep syz-executor 5811 51727 0 0 3 0x14200 acct acct 43928 22294 29065 0 3 0x3000 suspend syz-executor 43928 372191 29065 0 3 0x4081000 biowait syz-executor 58112 370688 30329 0 3 0x82 nanoslp syz-executor 45307 324704 30329 0 3 0x82 nanoslp syz-executor 41892 207687 30329 0 3 0x82 wait syz-executor 29065 306421 30329 0 3 0x82 nanoslp syz-executor 71641 400756 30329 0 3 0x82 nanoslp syz-executor 90182 267140 30329 0 3 0x82 nanoslp syz-executor 6061 503894 1 0 3 0x100083 ttyin getty 55199 62162 30329 0 3 0x82 nanoslp syz-executor 45584 427186 0 0 3 0x14200 bored sosplice 30329 25479 33373 0 3 0x82 kqread syz-executor 33373 15417 88203 0 3 0x10008a sigsusp ksh 88203 180675 97068 0 3 0x98 kqread sshd-session 97068 155277 92658 0 3 0x92 kqread sshd-session 92658 75404 1 0 3 0x88 kqread sshd 50397 159862 26753 74 3 0x1100092 bpf pflogd 26753 122173 1 0 3 0x80 sbwait pflogd 95728 369670 519 73 3 0x1100090 kqread syslogd 519 480909 1 0 3 0x100082 sbwait syslogd 8274 95843 1 0 3 0x100080 kqread resolvd 51969 431224 70803 77 3 0x100092 kqread dhcpleased 51442 467471 70803 77 3 0x100092 kqread dhcpleased 70803 375855 1 0 3 0x80 kqread dhcpleased 13699 235847 0 0 3 0x14200 bored smr 71850 251595 0 0 2 0x14200 zerothread 3794 326683 0 0 3 0x14200 aiodoned aiodoned 8668 400561 0 0 3 0x14200 syncer update 18167 466597 0 0 3 0x14200 cleaner cleaner 71978 10251 0 0 3 0x14200 reaper reaper 43241 436231 0 0 3 0x14200 pgdaemon pagedaemon 80017 198147 0 0 3 0x14200 bored viomb 66671 281748 0 0 3 0x40014200 acpi0 acpi0 40633 77301 0 0 3 0x40014200 idle1 57878 300275 0 0 3 0x14200 bored softnet1 1922 206444 0 0 3 0x14200 bored softnet0 70915 428729 0 0 3 0x14200 bored systqmp 90850 20455 0 0 3 0x14200 bored systq 85809 189615 0 0 3 0x14200 tmoslp softclockmp 389 33332 0 0 3 0x40014200 tmoslp softclock 18082 74430 0 0 3 0x40014200 idle0 1 397784 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 16869 (syz-executor) thread 0xffff80002efd4fd0 (13984) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838b06e8) #0 witness_lock+0x5f1 #1 unp_connect+0x28c #2 uipc_dgram_send+0x163 #3 sosend+0x804 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock sbufsnd r = 0 (0xffff8000015df430) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 sosend+0x2e9 #4 sendit+0x5a5 #5 sys_sendmsg+0x246 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 39359 (syz-executor) thread 0xffff80002efd4570 (420712) exclusive rwlock amaplk r = 0 (0xfffffd800cfa1530) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault_check+0x597 #3 uvm_fault+0x106 #4 upageflttrap+0xa9 #5 usertrap+0x3c6 #6 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd8072a7a6d8) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4a #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x3c6 #7 recall_trap+0x8 Process 43928 (syz-executor) thread 0xffff80002efd5798 (372191) exclusive rrwlock inode r = 0 (0xfffffd806e9ca0d8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vn_write+0x18f #6 dofilewritev+0x242 #7 sys_write+0xa2 #8 syscall+0xbd4 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10248 11117K 12412K 166960K 22421 0 pcb 18 17K 19K 166960K 1429 0 rtable 312 16K 17K 166960K 1430 0 pf 34 17K 18K 166960K 608 0 ifaddr 38 10K 13K 166960K 399 0 ifgroup 55 2K 2K 166960K 802 0 sysctl 4 1K 9K 166960K 53 0 counters 68 36K 38K 166960K 1212 0 ioctlops 0 0K 4K 166960K 3124 0 iov 0 0K 26K 166960K 461 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1507 95K 95K 166960K 7371 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 13K 166960K 40 0 VM map 2 1K 1K 166960K 2 0 sem 25 3K 3K 166960K 233 0 dirhash 12 2K 2K 166960K 111 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 240K 166960K 6764 0 sigio 0 0K 0K 166960K 307 0 proc 74 115K 164K 166960K 1741 0 subproc 72 4K 4K 166960K 236 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1418 0 in_multi 70 5K 7K 166960K 429 0 ether_multi 1 0K 0K 166960K 33 0 mrt 1 0K 0K 166960K 36 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 259 1155K 1155K 166960K 259 0 exec 0 0K 1K 166960K 2090 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 8 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 255 166K 190K 166960K 62650 0 UVM aobj 61 6K 7K 166960K 67 0 pinsyscall 43 86K 104K 166960K 8356 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 548 0 NDP 12 0K 1K 166960K 318 0 temp 88 8652K 8906K 166960K 371197 0 kqueue 13 20K 33K 166960K 1358 0 SYN cache 2 8K 16K 166960K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 948 0 944 9 7 2 3 0 8 1 rtentry 176 431 0 306 9 2 7 7 0 8 0 unpcb 144 5468 0 5445 36 35 1 6 0 8 0 syncache 336 24 0 24 13 12 1 1 0 8 1 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpqe 32 12 0 12 9 9 0 1 0 8 0 tcpcb 736 2671 0 2662 48 41 7 7 0 8 6 arp 136 90 0 38 2 0 2 2 0 8 0 inpcb 328 7535 0 7516 73 66 7 12 0 8 5 nd6 144 69 0 54 1 0 1 1 0 8 0 pkpcb 40 44 0 44 14 13 1 1 0 8 1 kcovpl 48 26 0 18 1 0 1 1 0 8 0 mppekey 1024 2 0 2 2 1 1 1 0 8 1 ppxss 1192 482 0 482 9 8 1 1 0 8 1 pppxif 1504 90 0 90 8 7 1 1 0 8 1 pffrag 232 109 0 95 2 0 2 2 0 482 0 pffrnode 88 34 0 23 1 0 1 1 0 8 0 pffrent 40 239 0 224 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 329 0 237 1 0 1 1 0 8 0 pfstkey 128 329 0 237 4 0 4 4 0 8 0 pfstate 384 329 0 237 12 1 11 11 0 8 0 pfrule 1344 22 0 17 2 1 1 2 0 8 0 rttmr 136 4 0 4 4 4 0 1 0 8 0 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 1597 0 1266 34 10 24 29 0 8 0 art_table 40 1601 0 1266 5 0 5 5 0 8 0 art_node 32 420 0 348 1 0 1 1 0 8 0 sysvmsgpl 40 22 0 8 1 0 1 1 0 8 0 semupl 112 4 0 4 3 3 0 1 0 8 0 semapl 112 225 0 202 1 0 1 1 0 8 0 shmpl 112 64 0 6 2 0 2 2 0 8 0 dirhash 1024 84 0 67 3 0 3 3 0 8 0 dino2pl 256 14314 0 12743 99 0 99 99 0 8 0 ffsino 296 14314 0 12743 123 2 121 121 0 8 0 nchpl 144 23871 0 23288 64 39 25 64 0 8 0 rtmask 32 80 0 80 15 14 1 1 0 8 1 uvmvnodes 80 5954 0 0 122 0 122 122 0 8 0 vnodes 216 5954 0 0 331 0 331 331 0 8 0 namei 1024 87090 0 87089 12 11 1 3 0 8 0 percpumem 16 621 0 572 1 0 1 1 0 8 0 kstatmem 264 538 0 512 5 2 3 3 0 8 1 scsiplug 72 38 0 38 12 11 1 1 0 8 1 scxspl 216 133441 0 133440 35 29 6 8 1 8 5 plimitpl 152 1483 0 1463 1 0 1 1 0 8 0 sigapl 424 7016 0 6966 8 1 7 7 0 8 0 knotepl 120 933 0 0 25 1 24 24 0 8 0 kqueuepl 224 2890 0 2881 32 30 2 5 0 8 1 pipepl 344 1326 0 1299 31 22 9 9 0 8 6 fdescpl 528 6966 0 6934 3 0 3 3 0 8 0 filepl 160 52631 0 52399 58 39 19 20 0 8 7 lockfpl 104 3546 0 3543 6 4 2 2 0 8 1 lockfspl 48 1291 0 1288 1 0 1 1 0 8 0 sessionpl 144 61 0 52 1 0 1 1 0 8 0 pgrppl 48 281 0 264 1 0 1 1 0 8 0 ucredpl 104 9359 0 9344 1 0 1 1 0 8 0 zombiepl 144 8229 0 8227 1 0 1 1 0 8 0 processpl 1232 7016 0 6966 5 0 5 5 0 8 0 procpl 664 18277 0 18220 9 2 7 7 0 8 0 sosppl 168 24 0 24 12 11 1 1 0 8 1 sockpl 752 14232 0 14186 118 107 11 24 0 8 6 mcl64k 65536 18 0 0 3 0 3 3 0 8 0 mcl16k 16384 7 0 0 1 0 1 1 0 8 0 mcl12k 12288 3 0 0 1 0 1 1 0 8 0 mcl9k 9216 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 11 0 0 2 0 2 2 0 8 0 mcl4k 4096 140 0 0 17 1 16 17 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 157 0 0 15 4 11 11 0 8 0 mtagpl 96 134 0 0 4 0 4 4 0 8 0 mbufpl 256 590 0 0 23 0 23 23 0 8 0 bufpl 280 53170 0 47028 440 0 440 440 0 8 0 anonpl 32 23859 0 0 193 2 191 191 0 246 0 amapchunkpl 152 218858 0 218059 102 61 41 43 0 158 7 amappl16 200 21646 0 20935 143 93 50 50 0 8 4 amappl15 192 25 0 24 1 0 1 1 0 8 0 amappl14 184 199 0 186 1 0 1 1 0 8 0 amappl13 176 10 0 9 5 4 1 1 0 8 0 amappl12 168 7918 0 7886 4 2 2 3 0 8 0 amappl11 160 129 0 114 1 0 1 1 0 8 0 amappl10 152 6 0 6 2 2 0 1 0 8 0 amappl9 144 252 0 252 1 1 0 1 0 8 0 amappl8 136 46 0 43 1 0 1 1 0 8 0 amappl7 128 164 0 151 1 0 1 1 0 8 0 amappl6 120 379 0 375 1 0 1 1 0 8 0 amappl5 112 213 0 203 1 0 1 1 0 8 0 amappl4 104 430 0 410 1 0 1 1 0 8 0 amappl3 96 39481 0 39381 5 1 4 4 0 8 0 amappl2 88 7389 0 7306 3 1 2 3 0 8 0 amappl1 80 40379 0 39782 16 1 15 15 0 8 0 amappl 88 60424 0 60243 5 0 5 5 0 92 0 dma32768 32768 2 0 2 2 2 0 1 0 8 0 dma16384 16384 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma512 512 2 0 2 1 1 0 1 0 8 0 dma256 256 10 0 10 5 5 0 1 0 8 0 dma128 128 261 0 261 8 8 0 1 0 8 0 dma64 64 10 0 10 3 3 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 22 0 21 1 0 1 1 0 8 0 aobjpl 72 66 0 6 2 0 2 2 0 8 0 uaddrrnd 24 6966 0 6934 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 6966 0 6934 1 0 1 1 0 8 0 vmmpekpl 168 51438 0 51376 4 0 4 4 0 8 0 vmmpepl 168 437526 0 434752 175 42 133 133 0 357 3 vmsppl 488 6965 0 6934 5 0 5 5 0 8 0 rwobjpl 80 113716 0 106058 175 14 161 161 0 8 0 pdppl 4096 13940 0 13868 168 94 74 84 0 8 2 pvpl 32 33983 0 0 272 1 271 271 0 265 0 pmappl 256 6965 0 6934 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 458 0 184 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83845ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff838b04e0) at __mp_lock+0x192 intr_handler(ffff800037c01010,ffff800000069c00) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f Xspllower() at Xspllower+0x1d pmap_enter(fffffd806b769100,353e7ba2000,61833000,3,21) at pmap_enter+0xd1c uvm_fault_lower(ffff800037c01400,ffff800037c01438,ffff800037c01380) at uvm_fault_lower+0x608 uvm_fault(fffffd8072a7a5d8,353e7ba2000,0,1) at uvm_fault+0x274 upageflttrap(ffff800037c01590,353e7ba2c90) at upageflttrap+0xa9 usertrap(ffff800037c01590) at usertrap+0x3c6 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7c81f2ef9a60, count: -13 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd805ce02b58,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd805ce02b40,1) at rw_do_enter_write+0xba rrw_enter(fffffd805ce02b40,1) at rrw_enter+0xc6 VOP_LOCK(fffffd805c560388,2001) at VOP_LOCK+0xa3 vn_lock(fffffd805c560388,2001) at vn_lock+0xa4 vfs_lookup(ffff80003c47b590) at vfs_lookup+0x11c namei(ffff80003c47b590) at namei+0x7ca unp_connect(ffff8000015df248,fffffd806c30b900,ffff80002efd4fd0) at unp_connect+0x29d uipc_dgram_send(ffff8000015df248,fffffd80650e3700,fffffd806c30b900,0) at uipc_dgram_send+0x163 sosend(ffff8000015df248,fffffd806c30b900,ffff80003c47b818,0,0,e) at sosend+0x804 sendit(ffff80002efd4fd0,5,ffff80003c47b998,e,ffff80003c47ba50) at sendit+0x5a5 sys_sendmsg(ffff80002efd4fd0,ffff80003c47bb00,ffff80003c47ba50) at sys_sendmsg+0x246 syscall(ffff80003c47bb00) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xbc1f2099550, count: -15