last executing test programs: 3.987854466s ago: executing program 0 (id=1): setrlimit(0xa, &(0x7f0000000040)={0xff, 0x6}) r0 = msgget$private(0x0, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000300)=""/245) r1 = syz_open_pts() close(r1) ioctl$TIOCMGET(r1, 0x4004746a, &(0x7f0000000180)) r2 = syz_open_pts() r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000380), 0x8, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='o', 0x1}], 0x1) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unveil(0x0, &(0x7f0000000140)='r\x00') r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r4, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x8, "210d0000000200000006000000000200", 0x2000000, 0x5}) getrlimit(0x8, &(0x7f0000000540)) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x0, 0xffffffff841212aa, 0x2, 0x8001, 0x0, 0x6, 0xffffffffffffffff, 0x80000001, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x400000000000000, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff9, 0x2, 0x0, 0x7b98, 0x1fe, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x3ffffffe, 0x0, 0xfffffffffffffffb, 0x11003, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x5f25, 0xfffffffffffffffa, 0x3], [{0x3, 0x4, 0x0, 0x7d06}, {0x10, 0x6, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4b72, 0xffffffff, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7, 0x0, 0xffffffff}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x2b9ce9b4}, {0x29, 0x6, 0x6, 0x2}}}) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="e702f2ffef1f97b0ae1a006b86dd609907a600302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102009078000000036900de000006010800000000000000000000000000000000ff010000000000000000000000000001234ea2"]) r5 = kqueue() kevent(r5, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f0000000040)={0x8, 0x2, 0x87a, 0x1002b, "28000800800600002300000800", 0x6, 0x5f1f}) sysctl$kern(&(0x7f0000000040)={0x1, 0x20}, 0x2, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0xa1, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xee) sysctl$net_inet_etherip(&(0x7f0000000400), 0x1, 0x0, 0x0, &(0x7f00000004c0)="9b649b8f", 0x4) readv(r3, &(0x7f0000000080), 0x31) r6 = kqueue() kevent(r6, &(0x7f0000000480)=[{{r2}, 0xfffffffffffffff8, 0x99, 0xf0000000, 0x4, 0x80}], 0x9, 0x0, 0x9, 0x0) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x1aa) 3.118770494s ago: executing program 3 (id=48): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000140)=ANY=[]) kqueue() ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x80009, 0x80000001, 0x7, 0xd7, "0000000000000000000000000000000500", 0x5, 0x3}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x9, 0x3}, 0xc0b) munmap(&(0x7f0000000000/0xa000)=nil, 0xa000) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 3.053175185s ago: executing program 3 (id=50): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r1, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x2010, r1, 0x0) ppoll(0x0, 0x48, &(0x7f0000000580)={0xfffffffffffdfffb, 0x44}, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') unveil(&(0x7f0000000400)='./file0/file1\x00', &(0x7f00000000c0)='r\x00') (async) unveil(&(0x7f0000000400)='./file0/file1\x00', &(0x7f00000000c0)='r\x00') mknod(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x6000, 0x7) (async) mknod(&(0x7f0000000080)='./file0/file0/../file0\x00', 0x6000, 0x7) socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) r3 = kqueue() r4 = socket(0x2, 0x3, 0xfe) semget(0x0, 0x1, 0x12) (async) semget(0x0, 0x1, 0x12) bind(r4, &(0x7f0000000000), 0x2) (async) bind(r4, &(0x7f0000000000), 0x2) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYRESOCT=r3, @ANYBLOB="5b97985a6f68db00000000af7b78d73deb45599539cafb95cb44ca08fc3a19818d60323816e9f4f9c5359e388085375799d28b3263a608f429d235055240cde95192537b18569e71ff01e2fb578ed3e949f9df6e8e4a95a9f8ce745340aaf5ce94f952", @ANYBLOB="3cb13cadd26faa02e241c6a4d7e91141437cf34b", @ANYRES16=r4, @ANYRESOCT=0x0], 0x308}, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg(r5, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x454}, 0x4008}, 0x38, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x50000802) r6 = open(&(0x7f0000000740)='./bus\x00', 0x800, 0x0) kevent(r3, &(0x7f00000000c0)=[{{r6}, 0xfffffffffffffffc, 0x1, 0x40000000, 0xb}], 0x20007ffc, 0x0, 0xfffb4961, 0x0) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0xfffffd4d}, 0x5) 2.793806585s ago: executing program 4 (id=58): r0 = openat$wsmuxmouse(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x8e, 0xcccccccc}) (async) pledge(&(0x7f0000000700)='tty V\xef\x86\b3|#\xcbQ8\x19\xce\x89K\x1f\xeb\x11]\xafZ\x13\x12\xe0\x19\x9c\xe6\x98\x0f \x01\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kGS\x00\x00K\x00\x00\x00\x00\x00\x10\xeb\x91vr)\\\x9el\x03(rut\xd4\x9a\xbak\x04\x88J\x19\x9aU8\xee\xcf\xb4B\x95\x15\xb6\r^o\xfa\x03\x8bgI\xbdf\xc0\x9ffXo\x95\xad\x1f\x88\xd5\x95\xd9?!`\xbf\x8a\xeb5&\xdf\xeb\x04rN\\\x10\x18\xc3Unm\x84\vg\xef\xe8\xe3\xb1\x01\xdfZ\xfe\xd0\xa3\xa9E?\xa0\xcc\xd8\x8f\xff\x1e\xcd\x87_\xb9\xc2I0xffffffffffffffff}) ioctl$VT_ACTIVATE(r0, 0x20007605, &(0x7f0000000480)=0x5) (async) ioctl$VT_ACTIVATE(r0, 0x20007605, &(0x7f0000000480)=0x5) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) ioctl$WSKBDIO_SETMODE(r1, 0x80045713, &(0x7f00000004c0)=0x1) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) (async) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r4 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r4, 0x80105727, &(0x7f0000000580)={&(0x7f0000000540)=[{0x84, 0x6}, {0x45, 0x3}, {0x0, 0x5f6}], 0x3}) (async) ioctl$WSMOUSEIO_GETPARAMS(r4, 0x80105727, &(0x7f0000000580)={&(0x7f0000000540)=[{0x84, 0x6}, {0x45, 0x3}, {0x0, 0x5f6}], 0x3}) ioctl$WSMOUSEIO_GETPARAMS(r4, 0x80105727, &(0x7f0000000600)={&(0x7f00000005c0)=[{0x42, 0x4}, {0x80, 0xfff}, {0x8, 0xc}, {0x87, 0x6}, {0x43, 0x3}], 0x5}) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000640)={0x3, 0x7}) (async) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000640)={0x3, 0x7}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4011, r0, 0x7fffffff) (async) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4011, r0, 0x7fffffff) mknod$loop(&(0x7f0000000680)='./file0\x00', 0x46, 0x0) write(r0, &(0x7f00000006c0)="1ad7dd6c8e4dd95bf55ad561f9f343942ad6dba2934ad68ac37dd5bb6e352e0bdd169503f92a023db3b64e9584a97ba10caee8ffacb41d4fc2691303b5ec39d889947fcf107ec1f876fe44a319aa514f9c85f1932b3e7887", 0x58) ioctl$WSKBDIO_SETMODE(0xffffffffffffff9c, 0x80045713, &(0x7f0000000740)=0x1) (async) ioctl$WSKBDIO_SETMODE(0xffffffffffffff9c, 0x80045713, &(0x7f0000000740)=0x1) r5 = accept$unix(r3, 0x0, &(0x7f0000000780)) recvfrom$unix(r5, &(0x7f00000007c0)=""/4096, 0x1000, 0x40, 0x0, 0x0) 2.496241982s ago: executing program 7 (id=69): r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f00005fc000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="0d92936f9b8ba4c5ac12c9ff4748e9053dd9481dadbe67db95bb6d7394", 0x1d}], 0x1) execve(0x0, 0x0, 0x0) ioctl$DIOCXBEGIN(r1, 0xc0104451, &(0x7f0000000300)={0x3d, 0x408, &(0x7f0000000c00)=[{0x1, './file0\x00', 0xe27}, {0x1, './file0\x00', 0x80200000}, {0x0, './bus\x00', 0xff}, {0x1, './file0\x00', 0x101}, {0x0, './file0\x00', 0x1}, {0x0, './bus\x00', 0x5}, {0x1, './bus\x00', 0x310000}]}) 2.491999737s ago: executing program 5 (id=71): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x7) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000500)={&(0x7f0000000540)='./file0\x00', 0x2, 0x0}) r2 = socket$inet(0x2, 0x3, 0x2) ioctl$FIONREAD(r2, 0xc0406938, &(0x7f0000000100)) write(r0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) execve(0x0, 0x0, 0x0) 2.490484741s ago: executing program 1 (id=72): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x10, 0x81, 0x3, 0x48}, {0x1, 0x8, 0xff, 0x1}, {0x6, 0xa3, 0xec, 0xfffff805}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6d6000000005ae49d73988d800f00ecfe746fb8112b2ed765f7793296ac25e009881c34e8fc54cdb8550ee7e08be888e2c09d1bf2d4858793ddd20000000000000000000000000000c85cfc", &(0x7f0000000000)=0x4d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000700)=ANY=[]) r1 = syz_open_pts() ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) close(r1) r2 = syz_open_pts() dup(r1) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0x8018, 0x2000007, 0x101, 0x3ff, 0x81b0, 0x10201, 0x10, [{0xffffffff, 0x2890, 0x4, 0x71002}, {0xa, 0x9, 0x7, 0xfffffffd}, {0x0, 0xf88, 0x0, 0x4}, {0x4, 0x800, 0x8003, 0x83}, {0x8, 0x3, 0x2800, 0x7}, {0xc, 0x650, 0x3, 0x199}, {0xd, 0x4, 0x1, 0x6d}, {0x3, 0x80d, 0x14, 0x800008}, {0x2, 0x80000000, 0x5, 0x5}, {0x20006a75, 0x8001, 0x1, 0x4}, {0x1cc, 0x6, 0x8}, {0x8, 0x9, 0x610, 0x2}, {0xb94, 0x7, 0x2, 0x1}, {0x29a71717, 0xfffffffa, 0x2001, 0x7}, {0x9, 0x5, 0x5}, {0x0, 0x1, 0xf, 0x10000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VNDIOCSET(r3, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) pwrite(r4, 0x0, 0x0, 0x40007) read(r4, &(0x7f0000000000)=""/135, 0x87) ioctl$FIOASYNC(r1, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCCBRK(r2, 0x2000747a) 2.490113336s ago: executing program 6 (id=73): r0 = socket(0x2, 0x1, 0x0) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) connect$unix(r0, &(0x7f0000000000), 0x10) (async) getsockopt(r0, 0x6, 0x9, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) 2.2449188s ago: executing program 6 (id=74): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x3, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f000036c000/0x1000)=nil, 0x2}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x80000002}, {&(0x7f000055e000/0x4000)=nil, &(0x7f000032f000/0x2000)=nil, 0xa}, {&(0x7f0000613000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f0000251000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f000043b000/0x1000)=nil, &(0x7f000076c000/0x4000)=nil, 0xffff}, {&(0x7f00000a5000/0x1000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f0000576000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101]}) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x1, 0x2, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000480)='./bus\x00', 0x8001, 0x0, 0x33}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x8) preadv(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1}, {0x3}, {0x4e37090a2f492414, 0x302}, {0x0, 0xa}, {}, {0x2, 0x907b}, {0x0, 0xfe}, {0x2, 0x5}, {}, {0x1, 0x50b2}, {0x1, 0x400000}, {0x1}, {0x0, 0x9a3}, {0x0, 0x9}, {}, {0x1, 0x7ff}, {0x2}, {0x0, 0xb4}, {0x2}, {0x3}, {0x1}, {0x3, 0x2000004}, {0x2}, {0x3}, {0x2, 0x573df6f5}, {0x0, 0x5}, {0x0, 0xaf43}, {0x0, 0x5}, {0x1, 0x80000000}, {0x1, 0x7}, {0x4, 0x1}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x4001, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000b00), 0x80, 0x0) ioctl$BIOCPROMISC(r4, 0x20004269) r5 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r5) r6 = socket(0x2, 0x4001, 0x0) connect$unix(r6, &(0x7f0000000000), 0x10) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000ac0)) ioctl$FIONREAD(r1, 0xc0286988, &(0x7f00000001c0)) 2.24357271s ago: executing program 1 (id=75): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = semget$private(0x0, 0x3, 0x9b) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000080)=[0x1]) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg(r2, &(0x7f0000000680)={&(0x7f0000000080)=@un=@abs={0x1}, 0x8, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000"], 0x18}, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) ioctl$TIOCSETA(r0, 0xc444443a, &(0x7f0000000040)={0xfffffffd, 0x2f, 0x7, 0xe6b, "a2a481001000f4060044000e010000000000002f", 0xfffffffc, 0x7ffffffe}) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xc8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r5 = kqueue() kevent(r5, &(0x7f0000000340), 0xe4a, 0x0, 0x4000a9fa, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) sendmsg$unix(r6, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002980)=[@rights={0x10, 0xffff, 0x1, [0xffffffffffffffff]}], 0x10, 0x2}, 0x7) r8 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) readv(r8, &(0x7f00000003c0)=[{0x0}], 0x1) 1.554754072s ago: executing program 7 (id=76): r0 = socket(0x1, 0x5, 0x0) close(r0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) open(0x0, 0x10001, 0x10) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f00000000c0)=0x7) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) open(0x0, 0x712, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [], [0x0, 0x0, 0xffffffffffffffff], [{}, {}, {0x0, 0x0, 0x0, 0x800000000000}]}}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) kevent(r2, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x1, 0x0) r4 = syz_open_pts() ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000500)=0x7) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000000)=0x3) connect$unix(r3, &(0x7f0000000000), 0x10) setsockopt$sock_int(r3, 0xffff, 0x1001, 0x0, 0x0) syz_emit_ethernet(0x121d, &(0x7f0000001500)=ANY=[@ANYBLOB="000000000000aaaaaaaaaaaa86dd6551f6a211e71d0000000000000000000000000000000000fe8000000000000000000000000000bb010002306800000004019078000001ff69123960fff78909fe8000000000000000000000000000bbff020000000000000000000000000001d70c000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffac1400aaff020000000000000000000000000001fe8000000000000000000000000000aa29080015000000000000000000000000000000000000000100000000000000000000ffffac1400bbff010000000000000000000000000001fe8000000000000000000000000000aa32001029670000002e00acf96700000061030000000000000401fb00000005020004010a000000000000000000000b00dbb63e882ed6fda0c6d57adb72b9819aaf243078442ee47875a4ad0d4d55727043112652eed92839d6745b9d80b8762a6cc5321887fb4be632df302e4b3f5d972f29bdfa597d926ad1808afa1c85e5487d4e478bfe84b53fcfd9dc886a4616b36d8a5b1656231e96f03e0e0d9671ac3f07df9b068749d74bfe8fc4b82c78ebb8cedde03ae68d462306c48fec66ea96a89b7cd7076f14dd7c89b3b2390a33c986d04294672ab9511ccbd11a1ad345a5a461698908fce9e966a85f1be8c0ee3040381692c2cb2a26bba1998dff484a48d9c162429c5145f1393a2b09010cad9f87daa8197daed74500197798f923f0fadf7769d9e257eaa0060666b7b5aa27317b8ea9f724c840f3d0accfea593f724eec1614158d3a278ad4f0e347c0a1948c797c5de333cc415a2c4d0641b9e3156bdcf04d28c7afbdf0fd719f8ee9a9395f51b87ba86d01e619a1914cf80428965bd481094d45174c2ab2d89a223b716320058fb019aa52873607357119f8af141a2a663076a347ffe67f397ad4bb289e327eba2a7256fece3567fc6b35f2e722b315d9f9258edeff942e3a49b5055fa66282815693c1d89282b6fabdc5ec997708cd21736d903ea8a2688fc0143e059bfb978e62e5506f0d33736be1b228e1a02e7740c97eb3e232770b4ff143e66d72fa55394753ed0ca7105986f730119177a13a921721bd4987ce92fd31a24a35111f2dec0ac4a581df1b8605fdf360bac25ed28d733aa359ad4b0146c4c81271c2fdbf1a714f5f5849ad05d4506e24b1b2826adcd4857a224ee05b5a854bfd57ac81131a27640d67a0eed917585f6a55cf66491073089ef31f38e34505f4cec788ad378bc0917c1c14edf088537695f4f2fdcf29c0285dd83600acabe37f664e22855d3c8d83657d6f38bcf3941855739fc99fe69a42fa5249b468462d9a803145b9e23f96f37e0c716a65aec543d28b45efe0d1c8e191468dd25290d6453032af2a76587d89c3b45d3e92a69eceabb0b1da027629696c9a465831022f99dfa1cc59fc542103644028557dd0dfddaad0041a96d2114ec302e924990d39313b455afe727c277e4c769aa49963184c768fdbb681977613c18e6a45c3e520e5b34eeb0397e8203606ce7f68ec9bd3c3115db99bbe215c0da0a54a83e731de527ad151395d12f6513451674ef9d2f37f6eee528bf87cf40abcf708a6f540ce0d0a92874af5f30798d0dee7efe4b2305f34411575c44ca04dcca4a7e9ddd4d0131729816b7a2d0df3f59f33634db3ed9d627cbafe75ab645432236d6caa5c817ec18ed3f0821a8f0844e06beb46b43e31c3178d193beb8cdc0bcb37234300d100b435ab4a7f91ea7333197c9408c4a9cff5454cda90a6ce21d1c39adc770d7b59f64ae3d2422ce980673ad0ad559d3821810154e232f679b0e164d45690c785e43d5133879bec65d3265584a01e56d225cab24d2820e5eab7bcf41802335a785651118a7244e47dc682cec1ddb1a49849c6547c63436066d31838458ab7dedfb93184570fd405744a1948b5a30adf61f0e3f2738bcc7434b39abb1ff94c2b753db57f0e80780241998b9b128fabf2332ec8ccf059d7692dabf17d29e836a97b42d0f63ed48f359b00a61651acbe2d43f4c5c9aceb484eb38716437f8fbdd3feeaf40efdcd199c1071bbd311478402bcecd490f51c00f5232dfc64184e314ba90cf84bc5c4a5fc7d08f820b827ac967666f4a6337a7440b9484b691a2840eb43101e17caaa161d29349e41fb56cf0c25d0cd951382b9dd6fe3d2b1ef38f38337b953c6bb3721c9eaf8bd52cf3a05550b57708241135864cef719b327d730f59c035779dcc4809d6fae6b1a32aba8d128230603ec8de96e4de961c827f3e0e03e77ea93ad79b76564cb14418ec35b96bb898a369eeee1e553384c036c4fb043109c353ef1e608f3f28029345fb95c6577ebcd90368f18ee150227f6e1d574ccd8e77db4cf8841f8a0337971e61683096d8d9f8a92fcf5ec423ca5f09938dd9d7fbec6160309fe3e9fe7d87d927961b0526cd94699f64a0da6cd69c37906875210c67e5bdbea0f088df40be453fd0161abdd4d0ec08911464a49aca00996fc7caa8d907512ada88134aee77fcc67db2d88a58cd8163f557b725c570baea6b2518ae75ea186959d48e5b3c43e9c35ec32b4fad0e0e0f723ada5f5c4f476123ad755c08d1bcdc1a542d8011195482f9bdac59148a4536d6a4fbf417106f6a9b9242b1f6de9d62eb9d3eeb42431767c901802bf793e76e06f3115452fe8971e8ae17bf9dabdbd3adb47b87a8dd1a38ba58368da4e836711ccf2abaf7442369313d4bbc9fc58037a7495b598d1e9d4927a0c159f3cfa1713e9a8cbb96cbffb9df462c39e11f79966026a365c845a94a4173f8d63b03aa2cf7e33f23aa2f876dfa4d7ee08ece7c611f98ba632697b5325f9bb81d8936fb4b3543db47f7235cc8aa77da37bd48ce350beac46f05ffd4cc7c43f7170563c615afb5b084af2660e8a3bda187db48aa52fdb65ed2d2f685232a86f3d5f7853be878bc175e217dc8dcd81953fad4696a585f3a0b69e157d1c22a9b03e4967c09641015e8a236b2bbe881adeeae3a9124f6a8b93835d836c5dc6b5def4f9b4816c900c29b7c16613696a00c8d25585347597a95a2ad298fe239d739639eb7b1cd1169fa93fd12db4a9d4804286c0542b47e7af3ca017c9a7eedf653cf8c2cde8e5ede9c17e1660f8dcb473b984ff33ea73ce784d74dffafa825734b0ec4ed5b0e67b4c56a2835ff0a945e728dbc3a2a220aac270b31c6e02b1d3441cc2bb982377df000f8dce294a51c7f2d2a2ff8c63f7f6abf5712ef0584c5094140b43066688d83c01e9ebe1f9362a6544fd3887594560989b42e1c885e0703b8e46f1c34d80ef3d823256f1a96fda85b935bbba533ece9019b581c66bda8f2f2c738dbb0720b6cb3ee9623e1f14189f533ecebf796d3ec3360d72a3389399b6a38476bcc051a4e5fdefdb693112101740c6539a3b170ad8f1dc7b000348569db4c3a236662c99454f4feec70e115d74c856c60649dd765977aa516776e444ae46d4cf65a798b2376e7d111dbf50a704905b66aca3179fc0d876a348d7756dcd7678fe3ea9cae3008e92a4c892190d38afa9c70c93eac1c205d03055027b4fc850022a4609b4ec9c6d20285ea596c5a800e5bf139c9deb74b5a75eb7fdddccd40772dff9a376e19f76afdeedecf540b357b31d3b9fcd8b43735d6e46769d4e6af2a8ae722929c3938bd5e5d93e6484472a9633d98a5f7a7be4b59bd244cf68950791c82b6f06930c449827b793f6810dd3a848199e57df63122e49608be7d85710c4950a21d3699acc8000d9b1c3cf74ce20380162ef2d0ad32a1f43bc63bb7f55a03ea758c2a2cb4ed4f4588dd1caebdc610939dbeb1f39fbee656be331ba0db212bd879d8bded5e49b167d25fefe2298297de1b4112345bbcc007e7a860686f88a10e7193323c87899dcb6b14175359fccfe33b441743d2a612ba3eb308ca3719a25e3dda98a6a02d7fee4fed6fc914f1056558ef163283d85e9cf4d85fb02a0c2b2a7f88a87acf3cc085794b251855906a5c96d72ef2e1355a9d8704329f0a0a688cd211a1ae1e6f6bd5ef0bb847646b54a5093d4eb3446a744e88b12a9a009e52f5650695f8a08b2dee6230cc13b38061e2b2365b1887e73887f03e48a961816aeafa27794e04cfe104297b64c1d54494bef50816c05dcad4885b922ff5ebbc0e48682512db03c291cc8b296e974b4115a92e52752bb80d09a60321d00f65f6a1d115991b75d225e2d847ffbd00e4c81d236f4dc4e15e3563e4e10bfb4a2a70fe63d3358f72135963532918a9d474c4c244bff240c15a5f39adfff08de29f84202655f4d86c48d192839b448a555f938a16fc054020115533f74c8428442651e75feee4028d2a64fa2a920f4898c5d076f56bf984b5f239614dfcc0180c7fe57454f9450737ec1b71e3cf17e7bd99a67b21cb8e2dd20b2164cc0da4084d47970fc53047f7159556f05ea7e51baa986c9f9ccf43cde1531676adcc4efe1c8ad17ffc2a204598b96a6186a23eda2748cbf0428375c6075754398e24935524e7d2ebb073ebb4586dfe5203ec502bb75181314f7dbc18687ea3d6929f4ee9a6ee5fccd1166d8fb61981b2bf0067d3cca9879339754a8872d56b42ad39fa784bc6838f5ca8c6cbfb86c5852e1d3e18bf30a5e761a96e32ff012e03383c2df10482d6163ca4b54d9f1954d09f3e78bf37d0ea1ef5bea994c28b0c9f3bb8b027bdd517f8682b2f3840b6b6f565868b7bf3efa9f2ae69d2cd06472c7651d6ce3002a101286e39fa7cd1d30267b82166def888ae360c3f9ff4dc62141371f94fc8bf991098e9ddfec5a096c7e21ed73c04b90c6424ddff7b0fb4a96d7d2d3e5d0c68b4568a8aede3e3e536f7a535b6b3870f2567be9d1e13abefe8e15753acf53e16c359233187ee134d1b89f343888d2037369970fa1fefc193642645c66f40f534e4904485b9e1fa9129a93de730f2445ead84486d6c445bf1f6d595763f625a95f2f4a02b10add278b12e04a43ea4d572734fd1942c89dae566fb875a72a1ed0db75766352c7df69e913113eee44a665929a5b12a0f4681d8c877ec2be04421dd9a4615d702b84f97f45b0c05326a913d56f08dca9e1df7804063c7da2d93aeeb41a48b40d3ddc7ae124276a0d2c522134830733bb7ad4d95fa7cd6ec8ce3bb9eeac96f905b793df4cce006b2f629662ea4617cd1cb707260f5211d31b25152f0be4c84462333624c48d1b1a38f25bcfb4cc6d3b4ffd81e85f47f906b163db8f308aa1db0c67f61a8bff0edd739214a275bda810f4cf9c1e264f3478cfa03aefbb5647b7c2b84bbcf476c639d6d7f16357ceba5d9dcba40a2864553c643c09f03a27b65ab83d2e21830e4e22047bf5e84b643473390d6b529dceaac294793c9cd455ef0557fd0d248e3c90f73aaae694e8ef8a6e3e144e6753277c3b32ddde154a8f676c7978efc9b5a8b36fc83b400cb652d8f8b118b3b2503370845ffbaa657c0d65d26915a098e45d591d5083642ef81290634bf16dcd8dc158ab2cec3c9a4f96e6d27f1053c66facb1c05553c1b8c78f9cf2e39e03bb8f15c2bcf732de74b369cd9a7f0f3b12917ea8693cd3e45329ab0fafe18e039b978cf339861bf385dfc65251daf6cb9e1886c37b1d1f52631913ea65d40bb4bd3bcd362e71701d0e337e4b46efe12aa68aa57122ec8febcab5fda327af72b49653cc489a1ea69e7da8bf76693cdc0af77aa2b7b1a89dadfb46b610873cf3fc2cb0998389f2575c611ddd974df21b423d0b3c03e24b677caf056c65910354174366f299f7ec4afd35deec37e60d5ebe6101e705f04a5623c9ed8f153d30be380e360fff1665eee4a03c01548a038f403ec4307eb36eac52d1997a27a79b07c4f7089cd201486f5340a46f76e32b2a5a56e09eff46efd352cf35aaa986c6e72ee04dee6e70c598709a5d28ed0d1d6798820140d616e2a046b3e4bb46767b5f874019cdfc4b4377c1986e72531cecbe09e4bfbff60065d93d2808e7fa0ea0bdb6f94c6b33384a58d84010b00df01c68eb018b3c39669108d208544b4c68fdf70739f89c798d4701bff7af7d42065ae69778236fe6808c7975524916fac667bdc5693f73a96914842dde85e8911cef320d872cbf76f71c07fad21fc6ee8c1c8e39698d40b5d382855637054d23274a4f100cba2c2b6fceddad5503994ad5b1b269e6c556246a2d53475df0a4eace7b0004925ad6300000611200400000000000000000000000000000000000000001fe8000000000000000000000000000aaff020000000000000000000000000001ff0200000000000000000000000000010000000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000000000000100000000000000000000ffffe00000012fdeb5f77a91ae7d5dda3224cde99d5e9c1722ffb6b0e489005d36ab05a427ed36219f25d11ae8b671c435118d06c2"]) setsockopt$inet_opts(r3, 0x0, 0x1, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000280)='u{', 0x2, 0x21, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x6, 0x8, 0x0, 0x0) socket(0x800000018, 0x3, 0x0) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) 1.538597829s ago: executing program 6 (id=77): r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1021, 0x0, 0x0) r1 = socket(0x18, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f0000000000)={0x0, 0x1, 0x10, 0x1}, 0xc) r2 = semget(0x0, 0x1, 0x281) semop(r2, &(0x7f0000000000), 0x23) (async, rerun: 32) semctl$SETALL(r2, 0x0, 0x9, &(0x7f00000000c0)) (rerun: 32) r3 = socket(0x2, 0x2, 0x0) (async) r4 = socket(0x2, 0x2, 0x4a) setsockopt(r4, 0x0, 0x7, &(0x7f0000000080)="c5", 0x1) r5 = dup2(r4, r3) setsockopt$sock_int(r5, 0xffff, 0x1002, &(0x7f0000000040)=0x9, 0x4) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x7, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) (rerun: 32) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x68, 0x11, 0x3, 0xfffffff5}, {0x50, 0xed, 0x9, 0x8}, {0x0, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919d7aacdfaffffffffffffff46c0fbde0346df012e786031d4", &(0x7f0000000000)=0x30, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async) write(r6, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async) setuid(0xee01) (async, rerun: 32) socket(0x1, 0x5, 0x3) (rerun: 32) setegid(0xffffffffffffffff) (async) r7 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r7, &(0x7f0000000000), 0x10) (async) write(r7, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0001000000000800450000380067000000069078e0000001ac1400aa4e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9002800090780002080aff05ff875b2ed9ff000000040506"]) (rerun: 32) 1.538155495s ago: executing program 1 (id=78): ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000200)={&(0x7f0000000180)='./file0\x00', 0x5, &(0x7f00000001c0)='./file0\x00', 0x8}) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x14}, 0x4, 0x0, 0x0, &(0x7f0000000040)="be0673a8", 0x4) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SPKRTONE(0xffffffffffffffff, 0x80085301, &(0x7f0000000080)={0x1ff, 0x6}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$DIOCRCLRTABLES(r2, 0xc450443c, &(0x7f0000003380)={{'./file0\x00', './file1\x00', 0x14}, 0x0, 0x0, 0x0, 0x1, 0x4, 0x9, 0x6, 0x42, 0x200}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSETA(r3, 0xc450444a, &(0x7f0000000040)={0xffffffff, 0x6, 0x10000000, 0x1, "01d04b0a0047c1d1fff100", 0xf, 0x100b}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000100)={0xe487, 0x0, r0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x10, 0x81, 0xfc, 0x4000048}, {0x4b, 0x8, 0xff}, {0x6, 0x80, 0x46, 0xfffff805}]}) fchmod(r1, 0x1) pipe(&(0x7f00000000c0)) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="c2a6d6000000005ae49d73988d800f00ecfe746fb8112b2ed765f779", &(0x7f0000000000)=0x1c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0x1, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r5, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r5, 0x1000000029, 0xd, &(0x7f00000000c0)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) 1.505831254s ago: executing program 1 (id=79): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffff9, 0x101, 0x3, 0xffffffff80000001}], 0x1, 0x0, 0x0, 0x0) setreuid(0xee00, 0x0) r1 = getuid() setuid(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0xffffffffffffffff, 0x0, r3) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$BIOCGRSIG(r4, 0x40044273, &(0x7f0000000080)) sysctl$net_inet6_icmp6(&(0x7f0000000a00)={0x4, 0x18, 0x3a, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000000b40)="65eb6834", 0x4) r5 = syz_open_pts() ioctl$TIOCNXCL(r5, 0x2000740e) rename(&(0x7f0000000100)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') setrlimit(0x8, &(0x7f0000000400)={0x7, 0x54}) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r6, 0xc4504442, &(0x7f0000000000)={0x32, 0xffffffff, 0x0, 0x4000, "97a2224ff1c14a06ebb178926cc9795a6b47c1d1", 0x1, 0xfffffffe}) mmap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x4, 0x10, r6, 0x3) open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x143) 1.502777978s ago: executing program 4 (id=80): madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6c, 0x11, 0x3, 0xfffffff7}]}) close(0xffffffffffffffff) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x0, 0x2, 0x4, 0x0, "fc686b340da1e4795af94547bd1305d65c21963c"}) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f0000001180), 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r3, 0x6e}], 0x1, 0x0) poll(&(0x7f0000000080)=[{r3, 0x7d}], 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0x802069db, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f0000003d40)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x3}, 0x38, 0x1040, &(0x7f0000003d80)={0x6}) write(r0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x9) preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000a40)=""/198, 0xc6}], 0x1, 0x1000) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500001c0000944008009078ac1400bbfff5ffff4e214e0200089078d2ce556b1c4558a3eb99127f"]) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6015f2ff00000100000000000058053bfe8000000000000000000000000000aa0000"]) fchown(r6, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0xc000, 0x4) ioctl$FIOASYNC(r6, 0x8004667d, &(0x7f0000000080)=0x7) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) 1.492361446s ago: executing program 3 (id=81): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$WSKBDIO_GETDEFAULTBELL(r0, 0x40105706, &(0x7f0000000600)) r1 = socket(0x800000018, 0x3, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7, 0x1}, 0x8) r2 = socket(0x2, 0x4001, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) write(r3, &(0x7f0000000240)="a32c2aa3085e1749abedbfe5", 0xc) ioctl$DIOCSETREASS(r3, 0xc004445c, &(0x7f00000002c0)) r4 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0xffffffffffffffff, 0x0, r6) setresgid(0x0, r6, 0x0) close(r4) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000300)="62ad28d441a63a02f56a88d102f289d6c11a85cb04409a34d8fc78d0771052e063a385809ed68c00355fc3c9ac751db2914a2ed32331143dba9e16ae8acc6acf72e6d779ae9b33e187226a326df23df9b97455775e7542c41ff6d01a345fbffdcbdae6a3f740b560d97b43ec986267a27dc31749bf700609023e7c1b1d6e540ddfec153353024aea5066f11b7ca6948c2a652af1623ecece271c0e0a3a0e4890c1", 0xa1}, {&(0x7f00000003c0)="253ef5fd3b5bf4243a977706390251538d9ce70a7155c4fa7b7d604dfb24a52921b0113e1be5c3b27d7d627713f79c4a53570c877822368ffa4a9d406f085702a8b9d4202b1b27de9e12ded083e68fca458f960709cbfa77848c74c8195e0215a38bf5b248a3dea80f5003ebf6680676ec4987dde504011e999f322f782bc8352483e83a16456c0947066b81b644ad760ab2f489e71e2c9fdde3458098a67857a4ada6974780f4cb8f5e31ad0a673a21ebbca99c082d34bde3cc341bbbc38760f331024406e6f483becf364476d5ffba6d69676d818f51c2e98d57", 0xdb}, {&(0x7f00000004c0)="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", 0xfc}], 0x3) r7 = socket(0x24, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x0) recvmsg(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x42) setsockopt(r7, 0x6, 0x46, 0x0, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) sysctl$hw(&(0x7f0000000000)={0x6, 0x9}, 0x2, &(0x7f00000001c0), 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r10 = syz_open_pts() close(r10) syz_open_pts() writev(r10, &(0x7f0000000180)=[{0x0}], 0x1) ioctl$VMM_IOC_RESETCPU(r4, 0x82405605, &(0x7f0000000080)={0x7, 0x21c3, {[0xa512, 0x10000, 0x7fffffffffffffff, 0x400, 0xb, 0x9, 0xfffffffffffffeff, 0xc1, 0x7f, 0x1, 0x1, 0x0, 0x6, 0x1, 0x300000, 0x8000000000000001, 0x7, 0x4], [0xfff, 0x7, 0x4, 0x1000, 0x7fffffff, 0x2, 0x2, 0x2, 0x4, 0x4], [0xfffffffffffffffb, 0x401, 0x0, 0x12b7, 0x400, 0x6, 0xa1], [0x7, 0x6, 0x231, 0x0, 0xff, 0x1], [{0x1, 0x6, 0x51, 0x7fffffffffffffff}, {0x10, 0xffffff80, 0x4}, {0x6, 0x5, 0x7fff, 0x8}, {0x5, 0x8, 0xf57e, 0x7fffffffffffffff}, {0x401, 0x5, 0x6, 0x1}, {0x7, 0xfffffffe, 0x1, 0xffff}, {0xffff, 0xaa3, 0x1, 0x1e9}, {0xdcee, 0x7, 0x10, 0x8}], {0x1, 0x3, 0x2, 0x13}, {0x0, 0x40, 0x1, 0x6}}}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd66fd412c000833042a818a724ac0f75111e18e2967fc6b8dfe8000000000000000000000f1ffffba0600000000000000"]) 1.482881139s ago: executing program 5 (id=82): mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x1e, 0x3, 0x0) r1 = shmget(0x1, 0x3000, 0x604, &(0x7f0000ffd000/0x3000)=nil) fstatat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)) r5 = fcntl$getown(r0, 0x5) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000340)={{0x0, r2, r3, r4, 0x108, 0xfff, 0x0, 0x0, 0x80000000}, 0x10, r5, r6, 0x6, 0x0, 0xbf, 0xf, 0x2, 0x6, 0xfff, 0x8e49}) r7 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$unix(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d420000000000000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0x0) ioctl$TIOCSETA(r7, 0xc4504446, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x6, 0x6}) getpeername(r0, 0x0, &(0x7f0000000200)) r8 = socket(0x18, 0x1, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) setsockopt(r8, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) 446.306294ms ago: executing program 5 (id=83): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f00001d0000/0x4000)=nil, &(0x7f0000663000/0x4000)=nil, 0x5}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f0000826000/0x4000)=nil}, {&(0x7f00006dc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0x9}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f000000d000/0x4000)=nil, &(0x7f00001d3000/0x2000)=nil, 0x40}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f00000c6000/0x3000)=nil, 0x16}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x100000000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x9bbf}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000573000/0x2000)=nil, &(0x7f0000358000/0x2000)=nil}], './file2\x00', 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x69bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12b, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setresgid(0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000b00)='./file0\x00', r1, 0x0) r2 = getpid() setpgid(r2, 0x0) getuid() socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$FIONREAD(r3, 0x80206919, &(0x7f00000001c0)) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) ioctl$TIOCSETA(r4, 0xcd60441a, &(0x7f0000000040)={0x1, 0x2, 0xe6, 0x10000, "5e0800008a00000f000000b0f0338a6b4fc6d780", 0x6, 0x9}) openat$wskbd(0xffffffffffffff9c, 0x0, 0x1, 0x0) fstatat(0xffffffffffffffff, &(0x7f0000000c40)='./file2\x00', &(0x7f0000000bc0), 0x0) sendmsg$unix(r0, &(0x7f0000002240)={&(0x7f0000001900)=@file={0x0, 0x0, './file0\x00'}, 0xa, &(0x7f0000002000), 0x0, &(0x7f0000002480)=ANY=[], 0xd8, 0x404}, 0x9) getgroups(0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0]) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r5 = socket(0x18, 0x3, 0x0) chroot(&(0x7f0000000a00)='./file0\x00') setuid(0xee01) socket$inet(0x2, 0x3, 0x102) ioctl$FIONREAD(r5, 0xc028698a, &(0x7f0000000100)) unveil(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='r\x00') r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000b40), 0x20000, 0x0) ioctl$DIOCGETRULES(r6, 0xcd604406, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) link(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='./file0\x00') unlink(&(0x7f0000000040)='./bus\x00') 148.207614ms ago: executing program 6 (id=84): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x110) open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) 146.339311ms ago: executing program 2 (id=85): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_cred(r0, 0xffff, 0x1022, 0x0, 0x0) setreuid(0x0, 0xee01) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) 144.249313ms ago: executing program 3 (id=86): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x2000000000000257, &(0x7f0000000000)=[{0x7c, 0xc3, 0x83, 0xfffffff5}, {0x40, 0xf0, 0x49, 0x10}, {0x6, 0x1, 0x12, 0x4}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919531ea87c5676231dd7aacdfaffffffffffffff46", &(0x7f0000000000)=0x2c, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000500)="cc884b3260b2fb9363d9a8213a1d4ca3233adeb4e29e0df8e7a9839533128111c5a3f7dbfba037be2867d1b80531d7f9bf157df612351537f2548cf2b56d857ddfd8cd5e1d427f448bc7ebf206f7e70d3a2981c078023379242ddb3d2de3511a8f39204601a1a91f1e18b452defbc2f91c0f05ca3afe7fa9577830bbcd152c8284afd878718e039c41ecd8d7467fd214f9c963a4b1cdca4bbdb2836fb3fa495059e386aab34b7fce70e9e08e788fbaaa539c107c3f45be7d6685f390439445ef9d5b926a29004cc2899b6e9163b47eb10af4e8e151cd02c418a740060a04dab37a2da743e8bef5de2f9f3cd936f070a977b9084da701b70a8855517c3b4c909c3b3e77fd9e95df71f42ec5eaafd7397b090fa0d8a28736462461415cf94a03a7a785eca55fb56095581f81cf0837a66dfe743cd0c1acbe60eedb828a2b54f35617d2fd07246bd579d39d9c8f22c4218248839345c77bd859758bee11fc14df8a0b62d520ab17de9011259ef6697c4920aeca4ded76cc9f20e7fdfd640668f42446b8f08dbf115a56f38e28f1a10b4b5323d829840dbc0a5869ba7889a31da1248170a1b717a0ffe3749c3d2ce6ccbeed19f42804b163a71670046f2ad9713b45fd68f6b4d20c73ec7be42e0f257693723ad998932b49a3ec8675ea1c9e5ac8b586a19f64691a8b191c3aad414715c7e8d6b7923d6ade2c9c2e931ac09820fe0accb72287fc96facb37b96f5367ac7b7629b28baa2c8e4639e369d4c04c89a48e4415d894553c9321c406f87f8c7f1ca9c2a56d7a993a5c0db9d1f244c19a420c436ecb6350fd6655a7568dc8daade85f83f676f2912acf3601ee408395c719ee0b94b5f4f8c20f3b331dad282f48b703c5e916b7bfb910c63994bad208eb8e0fc3a6a6488ead8bc888b9b60396de62b339c4af03c2d5484dab7f81dd5f26882b2bf13647c78d01961f54ac7e808b2adc4e03301aba4a1924114fda6b1037e74e26393b29a55a82c52f24564e259c6b5755033331b351b6ca65aba0fc2452f9172212510a212fe5e5d85e4d309c706ec17fea455132336549cc9fa9603c906520cc5c624688eaac9d850e21935053ca52a6dd3462ccba1460512b49b3e7ad9b18d2bc1cb5aa7850cfd552fa3775ca3baf832cf72a625801acc9040d0283663396d669e856398f188cadf6ab28353143bac54cbb72650707eeaaf9d2c8156b4a249dfbf31488719cc464c7d8f05acf4223feac6d577b2f", 0x376) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f00000001c0)={0x10000000, 0x2, 0x878, 0x2f, "2800180000020002000000000068ab5ade800600", 0x6, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[]) 115.773958ms ago: executing program 2 (id=87): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f0000000180)=0x2) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@remote, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x1c, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0xffffffff, @local={0xac, 0x14, 0x0}}, @udp={{0x2, 0x3, 0x8}}}}}}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) ioctl$DIOCGETSTATES(r1, 0xc0104419, &(0x7f0000000580)={0x1, &(0x7f0000001600)=[{0x0, ""/16, [{[@v6=@mcast1, @v6=@remote]}, {[@v6=@mcast2, @v6=@remote]}], {}, {}, @v4=@remote}]}) socket(0x2, 0x2, 0x0) pipe(&(0x7f0000000380)) socket(0x1, 0x2, 0x0) socket(0x18, 0x1, 0x0) socket(0x2, 0x2, 0x0) r2 = syz_open_pts() closefrom(r2) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) pipe2(0x0, 0x10004) syz_emit_ethernet(0x3f, &(0x7f0000000040)={@broadcast, @random="00000c00c92e", [{[{0x88a8, 0x7, 0x0, 0x3}], {0x8100, 0x6, 0x0, 0x1}}], {@arp={0x806, @generic={0x9, 0x8582, 0x6, 0x5, 0x1, @broadcast, "165c182af1", @remote, "b63aef59e90e33902e8d8fc25acbadfb"}}}}) 113.680229ms ago: executing program 3 (id=88): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r0 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x80, 0x20) preadv(r0, &(0x7f00000004c0)=[{0x0}], 0x1, 0x0) chmod(&(0x7f00000000c0)='.\x00', 0x35e) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') 113.38721ms ago: executing program 4 (id=89): r0 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r0, 0xf3) setuid(0xffffffffffffffff) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='c\x00') 83.635073ms ago: executing program 4 (id=90): sysctl$net_inet6_icmp6(&(0x7f00000002c0)={0x4, 0x18, 0x3a, 0x9}, 0x4, &(0x7f0000000040)="5a0f00"/13, &(0x7f0000000000)=0xd, 0x0, 0x0) 81.519068ms ago: executing program 5 (id=91): r0 = socket(0x800000018, 0x1, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000000)=0x9) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d420000000000000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r1, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x7fffffff, 0x6}) listen(r0, 0x1) accept$unix(r0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240), 0x0) setuid(0xee01) r2 = socket(0x18, 0x1, 0x0) getsockopt(r2, 0x6, 0x9, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$DIOCGETSYNFLWATS(0xffffffffffffff9c, 0xc0084463, &(0x7f0000000000)) kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0x0, 0x0, 0x0, 0x1, 0x5}], 0x0, 0x0, 0x1000, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00070100000000", 0xc) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0x8) 81.026222ms ago: executing program 3 (id=92): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x6, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$audioctl(0xffffffffffffff9c, &(0x7f00000001c0), 0x10, 0x0) ioctl$AUDIO_MIXER_READ(r0, 0xc0144d00, &(0x7f0000000200)=@value_ctrl={0x4, 0x3, 0x1, "11bc69657cd6702f"}) (async, rerun: 64) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x20}, 0x4, &(0x7f00000000c0)="3f360afe4cf215660012650708c5048d926f59e3bb8a8c1a5a531b4dd27e3c7d9bd6337f7aad6e2e0da9c4a8ae8cc67efbb93db6e76bccf2d88696bca5dabc75e96db30f001816b25d89025551386843b63361faa23f2b10f76953c4b82f60489bfdf70f20ec024d455ef096f24b16797c1e404faf921278389c24b3fbd3f893e81401", &(0x7f0000000000)=0x83, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff71f89adf44c086dd64125fd700083a08fe80"]) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (rerun: 32) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async, rerun: 64) connect$unix(r1, &(0x7f0000000240)=@file={0x1, 0x1, './file0\x00'}, 0xa) (async, rerun: 64) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async, rerun: 64) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) (async, rerun: 64) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xfff, 0xbe, 0xfff4, 0x1, 0x7ff, 0xefffffff, 0x1, 0x1, 0x1, 0x0, 0x101}) (async) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) (async, rerun: 32) close(r3) (async, rerun: 32) select(0x40, &(0x7f0000000180)={0xb, 0x2761, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x80}, 0x0, 0x0, 0x0) (async, rerun: 64) r4 = kqueue() (rerun: 64) kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0xf0, 0xff, 0xfffffffe}, {0x7c, 0x11, 0x3, 0x48}, {0x6, 0x80, 0x12, 0xe5d}]}) (async, rerun: 32) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="c2a6d6000000ffffffffffffffff9edce6d21a5baff90f10ecfe740b0001d00a007c5eb027fb0e4bacfc51fef71617add8710100adbca516f24f4a13654124d8e378f9607f5bf7bfd2cb290f04226c53288c56726942496d9c36e7e163337f5e4966317724e2f56aa5b1fef7b0e66d63821d29a2a09e256d729e96949dcb7584ecccab8c4f0a02179f67fc7405d1478a5cde63eb2f8de45c14d707ce08d8f7b5", &(0x7f0000000000)=0xa0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) ioctl$BIOCSETWF(r5, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async, rerun: 64) write(r5, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 77.515267ms ago: executing program 1 (id=93): setreuid(0x0, 0xee01) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0x80206918, &(0x7f00000001c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4804) socket$inet(0x2, 0x1, 0x0) socket(0x11, 0x3, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x4, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6, 0x0, 0x3], [0x100000001, 0x8000, 0x8, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x8, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x0, 0x0, 0x0, 0x7d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0xfd04, 0x6d5, 0x6}}}) r1 = kqueue() kevent(r1, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) 70.580221ms ago: executing program 4 (id=94): ftruncate(0xffffffffffffffff, 0x8531) (async, rerun: 64) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (rerun: 64) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async, rerun: 64) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64) fcntl$lock(r1, 0x9, &(0x7f0000000040)={0x2, 0x2, 0xfffffffffffffffc, 0x1000300000004}) (async) ioctl$BIOCSETF(0xffffffffffffff9c, 0x80104267, 0x0) (async) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) (async) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x800, 0x122) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000180)=[{0x2, 0xc9, 0x59, 0x3}, {0x60, 0x9, 0x0, 0x5}, {0x806, 0x0, 0x4, 0x43356c79}]}) r3 = socket(0x1, 0x2, 0x0) getsockopt$sock_int(r3, 0xffff, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_emit_ethernet(0x1000e, &(0x7f00000000c0)=ANY=[]) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) setuid(0xffffffffffffffff) (async) r4 = getuid() (async) r5 = semget(0x0, 0x1, 0x281) semop(r5, &(0x7f0000000180)=[{0x0, 0x7, 0x1000}], 0x1) (async) semctl$SETVAL(r5, 0x0, 0x8, 0x0) chown(&(0x7f0000000040)='./file0\x00', r4, 0xffffffffffffffff) (async) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x412dff) (async, rerun: 64) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x82, 0x0) (rerun: 64) write(r6, &(0x7f0000000500)="d5d32207", 0x4) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f00000001c0)={0x0, 0xa, 0x3, 0x5, 0x3, 0x7, 0x6, 0x10, [{0x3, 0x950, 0x7, 0x4}, {0x7ff, 0x8001, 0x7, 0x8}, {0x800, 0x8, 0x7, 0x63}, {0x0, 0xfffffffd, 0xf5f4, 0xb000}, {0xd, 0xffff, 0x8, 0x10000}, {0x0, 0xfffffff9, 0x7, 0x5}, {0x7147a3a3, 0x5, 0x1, 0x6}, {0x479135c0, 0x9c0d287f, 0x0, 0x7}, {0x3, 0x9, 0x4af, 0x9}, {0x9, 0x7, 0x3, 0x3}, {0x22, 0x350, 0x3, 0x3}, {0xd3, 0x3, 0x6, 0x7}, {0x4, 0x1000, 0x2, 0x4}, {0xffff6b15, 0xc6e, 0x1, 0x3}, {0x401, 0x4, 0x21846605, 0x981a}, {0x1, 0x8, 0x7, 0xc0}]}) 8.423484ms ago: executing program 5 (id=95): setrlimit(0x8, &(0x7f0000000040)={0xa, 0x50}) syz_emit_ethernet(0xd2, &(0x7f0000000140)={@empty, @broadcast, [], {@ipv6={0x86dd, {0x3, 0x6, "83bc93", 0x9c, 0x29, 0x6, @rand_addr="9814e9dfa4dc86a3a293bcea3f9db0d3", @loopback, {[@dstopts={0x0, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0xe}, @jumbo, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @enc_lim={0x4, 0x1, 0x4}]}, @fragment={0xf0, 0x0, 0x6, 0x1, 0x0, 0x8, 0x66}, @dstopts={0x29, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xd}, @enc_lim={0x4, 0x1, 0x5}]}, @fragment={0x2, 0x0, 0xc, 0x1, 0x0, 0x13, 0x67}], @generic="7330c5d71b588af3e444da2fe5919041acf6a0b42bc89d6247e226c1917fdb6a74734327f5339a3846f73a852a22aa3896d4a3c0a9fde1fcb6bf7ba0cd4d0d0387dee1eebf6f4425ffa0df798b828d14055be6de"}}}}}) faccessat(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x3e, 0x0) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0xb, 0x7, 0xe1, 0x543, "22ef0600000000fda92b00", 0x7, 0xffffffff}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) r1 = syz_open_pts() close(r1) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{{r2}, 0xfffffffffffffff9, 0x101, 0x3, 0xffffffff80000001}], 0x1, 0x0, 0x0, 0x0) syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0xfffff234, 0x7f, 0x9, 0xffffffdd, "23030003be0a00817dd8910bb864d3c3a3c900", 0xffdd, 0x6}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000240)="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", 0x529}], 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x57}, 0x2, &(0x7f0000001940), &(0x7f0000000100)=0xfffffffffffffe70, 0x0, 0x0) 4.935406ms ago: executing program 5 (id=96): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket(0x18, 0x3, 0x4) sendto(r2, 0x0, 0x0, 0x8, &(0x7f0000000140)=@in6={0x1c, 0x18, 0x2, 0x5, "00000000c3b0cf3200", 0x1}, 0x1c) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f00000001c0)={&(0x7f0000000000)=[{0x26, 0x202}, {0x23, 0x8}], 0x2}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) setreuid(0xee00, 0x0) r3 = getuid() setreuid(0xee00, r3) chflags(&(0x7f0000000140)='./file0\x00', 0x10001) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f0000000180)='./file0/file0/../file0\x00', &(0x7f0000000000)='x\x00') unveil(&(0x7f0000000400)='./file0/file1\x00', &(0x7f00000000c0)='r\x00') mknod(&(0x7f0000000080)='./bus\x00', 0x2, 0x6) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$WSMUXIO_INJECTEVENT(r4, 0x80185760, &(0x7f0000000200)={0x200, 0x8, {0xe, 0x5}}) write(r0, &(0x7f00000000c0)="ed", 0xfffffe57) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) select(0x40, &(0x7f0000000080)={0x2, 0x9, 0x9, 0xf62, 0xfffffffffffffff7, 0x3, 0x1b92, 0xf}, 0x0, &(0x7f0000000140)={0x100000001, 0x6, 0x8, 0xb22, 0x8000000000000001, 0x9a3, 0x2, 0x6}, 0x0) r5 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x100) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r6 = socket(0x2, 0x4001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) shutdown(r6, 0x0) connect$unix(r6, &(0x7f0000000000), 0x10) sendto$unix(r6, &(0x7f0000000140)="92", 0x1, 0x1, 0x0, 0x0) ioctl$TIOCCONS(r5, 0x80047462, &(0x7f0000000040)=0x80) 4.396255ms ago: executing program 2 (id=97): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276d420000000000000020fafd3493776665d40000f5ff34", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0x409) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$TIOCSETA(r0, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x7fffffff, 0x6}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getpeername$unix(r1, &(0x7f00000001c0)=@file={0x0, 0x0, ""/504}, &(0x7f00000000c0)=0x1fa) (async) setresgid(r4, r4, 0x0) (async) setgid(r4) (async) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000040)={r2, r3, r4}, 0xc) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000040)=0xfffffffffffffed0, 0x0, 0x0) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) (async) getgroups(0x3, &(0x7f0000000080)=[r4, r4, r4]) 494.61µs ago: executing program 6 (id=98): sysctl$net_inet_tcp(&(0x7f0000000200)={0x4, 0x2, 0x6, 0x19}, 0x4, &(0x7f0000000280)="9b1809ffff", &(0x7f0000000040)=0x5, 0x0, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async, rerun: 64) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x881) (rerun: 64) r1 = open(&(0x7f0000000100)='./bus\x00', 0x2, 0xd4) ioctl$TIOCSDTR(r1, 0x20007479) 0s ago: executing program 7 (id=99): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x8000000000000001, 0x564, 0x9ce8, 0x9, 0x0, 0x8}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0xc0285108, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900103a0000000000001000000000000000000000fe8000000000000083802ff0000000aac9"]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.218' (ED25519) to the list of known hosts. wStopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806c48b8e0,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806c48b8c8,1) at rw_do_enter_write+0xba rrw_enter(fffffd806c48b8c8,1) at rrw_enter+0xc6 VOP_LOCK(fffffd806c5f4480,2001) at VOP_LOCK+0xbd vn_lock(fffffd806c5f4480,2001) at vn_lock+0xa4 vfs_getcwd_common(fffffd806c5f4480,fffffd806c5f47e0,0,0,200,0,6a6e16a2dce095e5) at vfs_getcwd_common+0xd1 vn_isunder(fffffd806c5f4480,fffffd806c5f47e0,ffff8000fffe2fc0) at vn_isunder+0x56 unp_externalize(fffffd806f2f0b00,33,0) at unp_externalize+0x26f soreceive(ffff800010fdb798,ffff80003c3e2138,ffff80003c3e20e8,0,ffff80003c3e2120,ffff80003c3e22ac,5d46ef192c219b90) at soreceive+0xc24 recvit(ffff8000fffe2fc0,7,ffff80003c3e2280,0,ffff80003c3e2330) at recvit+0x40b sys_recvmsg(ffff8000fffe2fc0,ffff80003c3e23e0,ffff80003c3e2330) at sys_recvmsg+0x1bf syscall(ffff80003c3e23e0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b6f6e88f20, count: -14 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c3e1bc0 rbx 0 rdx 0 rcx 0xffff8000fffe2fc0 rax 0xffff8000299bdff0 r8 0xffff80003c3e1aa0 r9 0x8080808080808080 r10 0x391e3bbf528236f5 r11 0x5076ba140ce09dfc r12 0xfffffd800403f880 r13 0xfffffd8004827130 r14 0x3 r15 0xffffffff834badeb substchar+0xd9ba rip 0xffffffff810f2625 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c3e1bb0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=89061 pid=8833 tcnt=3 stat=onproc flags process=1000000 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffe3a20,0xffff8000fffe3cc8 process=0xffff8000fffec018 user=0xffff80003c3dd000, vmspace=0xfffffd80721179a0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 85369 242816 62530 0 7 0 syz-executor 3552 355249 25934 0 3 0x80 nanoslp syz-executor 3552 501779 25934 0 2 0x4000000 syz-executor 3552 127935 25934 0 3 0x4000080 fsleep syz-executor 99800 82299 70912 0 2 0 syz-executor 99800 58528 70912 0 3 0x4000080 kqread syz-executor 8833 514555 33420 0 2 0x1000000 syz-executor * 8833 89061 33420 0 7 0x5000000 syz-executor 8833 150921 33420 0 3 0x5000080 fsleep syz-executor 47428 231128 10116 60928 2 0x10 syz-executor 47428 133462 10116 60928 3 0x4000090 sbwait syz-executor 99684 178884 74600 -1 2 0x10 syz-executor 99684 68564 74600 -1 3 0x4000090 fsleep syz-executor 99684 287537 74600 -1 3 0x4000090 fsleep syz-executor 91051 421236 80361 0 2 0x10 syz-executor 91051 480723 80361 0 3 0x4000090 kqread syz-executor 25934 378108 66443 0 3 0x82 nanoslp syz-executor 62530 523567 66443 0 3 0x82 nanoslp syz-executor 10116 44076 66443 0 3 0x82 nanoslp syz-executor 74600 411669 66443 0 3 0x82 nanoslp syz-executor 70912 415740 66443 0 3 0x82 nanoslp syz-executor 33420 234641 66443 0 2 0x2 syz-executor 80361 277137 66443 0 3 0x82 nanoslp syz-executor 76283 387376 66443 0 3 0x82 wait syz-executor 66443 471723 67818 0 3 0x82 kqread syz-executor 67818 199635 18262 0 3 0x10008a sigsusp ksh 18262 144485 57788 0 3 0x98 kqread sshd-session 57788 365212 42521 0 3 0x92 kqread sshd-session 43392 416912 1 0 3 0x100083 ttyin getty 42521 22421 1 0 3 0x88 kqread sshd 66883 330653 39114 74 3 0x1100092 bpf pflogd 39114 495949 1 0 3 0x80 sbwait pflogd 84108 211979 3149 73 3 0x1100090 kqread syslogd 3149 302893 1 0 3 0x100082 sbwait syslogd 48937 462549 1 0 3 0x100080 kqread resolvd 6587 235536 88701 77 3 0x100092 kqread dhcpleased 50813 341082 88701 77 3 0x100092 kqread dhcpleased 88701 337060 1 0 3 0x80 kqread dhcpleased 69557 144183 0 0 3 0x14200 bored smr 49332 370318 0 0 2 0x14200 zerothread 64145 248360 0 0 3 0x14200 aiodoned aiodoned 31688 302047 0 0 3 0x14200 syncer update 661 157278 0 0 3 0x14200 cleaner cleaner 66311 76035 0 0 3 0x14200 reaper reaper 35244 176222 0 0 3 0x14200 pgdaemon pagedaemon 9091 502095 0 0 3 0x14200 bored viomb 80256 502447 0 0 3 0x40014200 acpi0 acpi0 44083 91081 0 0 3 0x40014200 idle1 15823 391061 0 0 3 0x14200 bored softnet1 65114 293322 0 0 3 0x14200 bored softnet0 63775 393831 0 0 3 0x14200 bored systqmp 31949 195775 0 0 3 0x14200 bored systq 61334 26391 0 0 3 0x14200 tmoslp softclockmp 12452 34219 0 0 3 0x40014200 tmoslp softclock 70943 491879 0 0 3 0x40014200 idle0 1 283491 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 8833 (syz-executor) thread 0xffff8000fffe2fc0 (89061) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83994bc0) #0 witness_lock+0x5f1 #1 unp_externalize+0x155 #2 soreceive+0xc24 #3 recvit+0x40b #4 sys_recvmsg+0x1bf #5 syscall+0xbd4 #6 Xsyscall+0x128 exclusive rwlock sbufrcv r = 0 (0xffff800010fdb888) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sblock+0xb6 #3 soreceive+0x27d #4 recvit+0x40b #5 sys_recvmsg+0x1bf #6 syscall+0xbd4 #7 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11133 12243K 12363K 166960K 12379 0 pcb 18 15K 17K 166960K 83 0 rtable 246 8K 8K 166960K 376 0 pf 35 17K 81K 166960K 70 0 ifaddr 43 7K 7K 166960K 48 0 ifgroup 55 2K 2K 166960K 61 0 sysctl 3 1K 9K 166960K 8 0 counters 70 37K 37K 166960K 80 0 ioctlops 0 0K 4K 166960K 1502 0 iov 0 0K 16K 166960K 6 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1362 86K 86K 166960K 1600 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 6 0K 0K 166960K 7 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 236K 166960K 246 0 proc 72 115K 180K 166960K 569 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 16 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 8 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 395 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 238 167K 186K 166960K 4109 0 UVM aobj 9 4K 4K 166960K 9 0 pinsyscall 43 86K 100K 166960K 1380 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 12 0K 2K 166960K 31 0 temp 37 9074K 9146K 166960K 6231 0 kqueue 16 24K 36K 166960K 46 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 39 0 35 1 0 1 1 0 8 0 rtentry 176 112 0 2 6 0 6 6 0 8 1 unpcb 144 108 0 84 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 35 0 29 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 275 0 264 10 1 9 10 0 8 7 nd6 152 24 0 0 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 5 0 5 1 0 1 1 0 8 1 pffrag 232 3 0 1 1 0 1 1 0 482 0 pffrnode 88 3 0 1 1 0 1 1 0 8 0 pffrent 40 4 0 2 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 3 0 0 1 0 1 1 0 8 0 pfstitem 24 23 0 0 1 0 1 1 0 8 0 pfstkey 128 24 0 1 1 0 1 1 0 8 0 pfstate 448 24 0 1 3 0 3 3 0 8 0 pfrule 1360 22 0 16 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 112 0 12 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 3 1 0 1 1 0 8 0 semapl 112 4 0 0 1 0 1 1 0 8 0 shmpl 112 6 0 0 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 1810 0 345 93 0 93 93 0 8 0 ffsino 296 1810 0 345 114 0 114 114 0 8 0 nchpl 144 2144 0 438 64 0 64 64 0 8 0 rtmask 32 1 0 1 1 0 1 1 0 8 1 vnodes 216 2050 0 0 114 0 114 114 0 8 0 namei 1024 7031 0 7031 2 0 2 2 0 8 2 percpumem 16 55 0 5 1 0 1 1 0 8 0 kstatmem 264 32 0 6 3 0 3 3 0 8 1 scxspl 216 7440 0 7440 4 1 3 3 1 8 3 plimitpl 152 40 0 23 1 0 1 1 0 8 0 sigapl 424 547 0 499 8 1 7 7 0 8 1 knotepl 120 67 0 0 3 0 3 3 0 8 0 kqueuepl 224 122 0 109 5 0 5 5 0 8 4 pipepl 344 131 0 104 3 0 3 3 0 8 0 fdescpl 528 531 0 499 3 0 3 3 0 8 0 filepl 160 2759 0 2463 21 3 18 21 0 8 4 lockfpl 104 117 0 115 1 0 1 1 0 8 0 lockfspl 48 58 0 56 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 303 0 287 1 0 1 1 0 8 0 zombiepl 144 500 0 499 1 0 1 1 0 8 0 processpl 1232 547 0 499 5 0 5 5 0 8 1 procpl 664 744 0 687 7 1 6 6 0 8 0 sosppl 176 1 0 1 1 0 1 1 0 8 1 sockpl 752 425 0 386 14 3 11 14 0 8 7 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 117 0 0 15 0 15 15 0 8 0 mcl2k 2048 29 0 0 4 0 4 4 0 8 0 mtagpl 96 4 0 0 1 0 1 1 0 8 0 mbufpl 256 185 0 0 12 0 12 12 0 8 0 bufpl 280 2733 0 106 188 0 188 188 0 8 0 anonpl 32 7591 0 0 62 0 62 62 0 246 0 amapchunkpl 152 12410 0 11907 41 0 41 41 0 158 20 amappl16 200 2265 0 2241 6 2 4 5 0 8 1 amappl15 192 9 0 9 1 1 0 1 0 8 0 amappl14 184 428 0 427 1 0 1 1 0 8 0 amappl13 176 119 0 107 1 0 1 1 0 8 0 amappl12 168 785 0 755 2 0 2 2 0 8 0 amappl11 160 9 0 9 1 1 0 1 0 8 0 amappl10 152 66 0 51 1 0 1 1 0 8 0 amappl9 144 265 0 265 1 1 0 1 0 8 0 amappl8 136 104 0 101 1 0 1 1 0 8 0 amappl7 128 145 0 132 1 0 1 1 0 8 0 amappl6 120 175 0 174 1 0 1 1 0 8 0 amappl5 112 102 0 92 1 0 1 1 0 8 0 amappl4 104 330 0 309 1 0 1 1 0 8 0 amappl3 96 2116 0 1999 4 0 4 4 0 8 0 amappl2 88 533 0 472 2 0 2 2 0 8 0 amappl1 80 10167 0 9560 17 0 17 17 0 8 3 amappl 88 3374 0 3207 5 0 5 5 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 7 0 7 2 1 1 1 0 8 1 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 20 0 19 1 0 1 1 0 8 0 aobjpl 72 8 0 0 1 0 1 1 0 8 0 uaddrrnd 24 531 0 499 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 531 0 499 1 0 1 1 0 8 0 vmmpekpl 168 6304 0 6273 2 0 2 2 0 8 0 vmmpepl 168 42843 0 40886 98 0 98 98 0 357 10 vmsppl 488 530 0 499 5 0 5 5 0 8 1 rwobjpl 80 15632 0 14587 26 0 26 26 0 8 3 pdppl 4096 1069 0 998 99 28 71 83 0 8 0 pvpl 32 15223 0 0 123 0 123 123 0 265 0 pmappl 256 530 0 499 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 274 0 31 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff838bdff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 __mp_lock(ffffffff839943c0) at __mp_lock+0x1a3 intr_handler(ffff8000397d6d00,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __mp_lock(ffffffff839943c0) at __mp_lock+0x192 end trace frame: 0x0, count: -8 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806c48b8e0,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(fffffd806c48b8c8,1) at rw_do_enter_write+0xba rrw_enter(fffffd806c48b8c8,1) at rrw_enter+0xc6 VOP_LOCK(fffffd806c5f4480,2001) at VOP_LOCK+0xbd vn_lock(fffffd806c5f4480,2001) at vn_lock+0xa4 vfs_getcwd_common(fffffd806c5f4480,fffffd806c5f47e0,0,0,200,0,6a6e16a2dce095e5) at vfs_getcwd_common+0xd1 vn_isunder(fffffd806c5f4480,fffffd806c5f47e0,ffff8000fffe2fc0) at vn_isunder+0x56 unp_externalize(fffffd806f2f0b00,33,0) at unp_externalize+0x26f soreceive(ffff800010fdb798,ffff80003c3e2138,ffff80003c3e20e8,0,ffff80003c3e2120,ffff80003c3e22ac,5d46ef192c219b90) at soreceive+0xc24 recvit(ffff8000fffe2fc0,7,ffff80003c3e2280,0,ffff80003c3e2330) at recvit+0x40b sys_recvmsg(ffff8000fffe2fc0,ffff80003c3e23e0,ffff80003c3e2330) at sys_recvmsg+0x1bf syscall(ffff80003c3e23e0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b6f6e88f20, count: -14