last executing test programs: 999.905077ms ago: executing program 6 (id=631): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) sendto(r0, 0x0, 0x0, 0x400, 0x0, 0x0) 900.915983ms ago: executing program 4 (id=640): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0xe, 0x85, 0x2}, {0x4, 0x0, 0xfb, 0x4}, {0x16, 0x7f, 0xe, 0x7}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="25a7bea75e9eeae4e632e80033ac030000007a63f2a8bf0027f6dce6dbc6cb5fc7181c3be3", &(0x7f0000000000)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 848.967154ms ago: executing program 4 (id=643): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000480)={0x2df57366, 0x8, 0x2005, 0xfffffff4, "1a6400b728607c47e77c00d49846840082e100", 0xfffffffe, 0x100000c}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000300)="468cac6f0d21ad30ea06a66da6e35ca1", 0x10}], 0x1) 762.303855ms ago: executing program 4 (id=650): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0x11, 0x3, 0xfffffff5}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="a7a6d61de4a16809d26255c61b4f0919d7aacd6865959cb3e86fff46c0fb2b63a099a1ce37c6891e74eaaf1aa6caad332ccacbb5cdb6de82e4fb2194ea0700000000000000801b43b96e7d6558", &(0x7f0000000000)=0x4d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[]) 761.740817ms ago: executing program 4 (id=653): mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0x8001, 0x0}) 738.649825ms ago: executing program 4 (id=657): socket(0x11, 0x3, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7, 0x17, 0x2000007, 0x104, 0x80000001, 0x80000081, 0x4, 0x10, [{0x0, 0x101, 0x3, 0x71000}, {0x7, 0x88, 0x1, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0x12}, {0x401, 0x200326, 0x2800, 0x7}, {0x82, 0x27f6, 0x3, 0x99}, {0x7, 0x4, 0x4f8, 0x6d}, {0xc, 0x3, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x7fe, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x2}, {0x29a7171a, 0x3, 0x1, 0x5}, {0xc, 0x7, 0x4, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30003}]}) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x9, 0x0, 0x0) 698.857882ms ago: executing program 4 (id=659): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$inet(r0, &(0x7f00000002c0)="46ae1fcf53f23e099d54ec007f03c90f6f952c23a42624c95b16d8f6c5", 0x1d, 0x400, 0x0, 0x0) 430.778354ms ago: executing program 1 (id=689): open(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x615, 0xb2) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0xf9) setitimer(0x0, &(0x7f0000000140)={{0xb, 0x100800000000009}, {0xc0, 0x4001a}}, 0x0) open(0x0, 0x78e, 0x8) setrlimit(0x1, 0x0) r2 = getpid() setreuid(0xee00, 0x0) ktrace(0x0, 0x0, 0x1518, r2) mknod(0x0, 0x2000, 0x205310) ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100)) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) ioctl$FIONREAD(r1, 0x8080691a, 0x0) 387.50749ms ago: executing program 1 (id=695): close(0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8000, 0x80) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000480)={0x3, 0xb3f, {[0xfffffbfffffffff8, 0x0, 0x2, 0x6000, 0x9, 0x0, 0xdf60, 0x8, 0x0, 0x2f01, 0xfffffffffffffffe, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x400000000002, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe, 0x5, 0x6], [0xc45, 0x3, 0xfd, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x100, 0x1ffffffffff, 0x7ffffffffffffffc, 0x2, 0xfffffffffffffffe, 0x8], [{0x1, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x9, 0x51}, {0x4, 0x0, 0xfffffffc, 0x20000080}, {0xffff, 0x5, 0x6, 0x2}, {0x0, 0x6000002, 0x3, 0x8}, {0x7, 0x4, 0x3, 0x2000000000000001}, {}, {0x2, 0x100, 0x31, 0x8}], {0x7, 0x5, 0x8}, {0xfffe, 0x80000000, 0x6d5, 0x81}}}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) close(r0) 353.547645ms ago: executing program 3 (id=696): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919d7aacdfaffffffffffffff46c0fbde0346df012e786031d4b86fc1f36e5250f6d2b982fd3883a8b58c1af70800000000000000b5fe1448533302cf7069ee14085a11c77d5527f60000000000", &(0x7f0000000000)=0x64, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[]) 352.936924ms ago: executing program 2 (id=697): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x82, 0x11, 0xb, 0xfffffff5}, {0x60, 0xf0, 0xff}, {0x6, 0x80, 0x3, 0x2}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="840cbf3e87c006a62a075a37308e7bd3403e6b8bc8bf2c2db10fa8389d9c479d", 0x20}], 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004745f, &(0x7f0000000000)=0x1d) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f00000001c0)=ANY=[]) 352.203069ms ago: executing program 0 (id=699): sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92b", 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x840, 0x0) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0}, 0x40) dup2(r0, r1) setegid(0xffffffffffffffff) r2 = getegid() setregid(r2, 0x0) mknod(0x0, 0x2000, 0x1e5f) setgroups(0x0, 0x0) sysctl$net_inet_icmp(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(0x0, 0x10, 0x8) getsockname(r3, 0x0, 0x0) r4 = socket(0x18, 0x3, 0x7) getsockopt(r4, 0x29, 0x23, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000001500), &(0x7f0000000000)=0x1, 0x0, 0x20) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r5 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$BIOCSRTIMEOUT(r5, 0xc0307004, 0x0) fcntl$lock(0xffffffffffffffff, 0x9, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r6, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) 348.135411ms ago: executing program 2 (id=700): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0xf2, 0xff}, {0x84, 0x11, 0x3, 0x49}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="a7a6d61de4a16809d26255c61b4f0919d7aacd68", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 347.134672ms ago: executing program 3 (id=701): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0xf0, 0xff}, {0x84, 0x11, 0x3, 0x49}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500)="721d729f4c11f3b601b206360f00000000000000362ca57efc8972c56d43f5935ee412a6897ff106a0203552e3", 0x2d}], 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 342.592026ms ago: executing program 1 (id=702): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff06000000aa"]) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) r5 = socket(0x2, 0x2, 0x0) bind(r5, &(0x7f0000000000), 0x10) connect$unix(r5, &(0x7f0000000000), 0x10) write(r4, 0x0, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) write(r1, 0x0, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) 304.919806ms ago: executing program 3 (id=704): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x81, 0x94, 0xab, 0x4d}, {0x30, 0x7, 0xe0, 0x6}, {0xfffe, 0xa, 0x5, 0x4}]}) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="a7a6d61de4a16809d262c61b4f0919d7aacd6865060000006fff46c0fb2beaa9ed00f0682b", &(0x7f0000000000)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[]) 304.482786ms ago: executing program 2 (id=706): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x84, 0x11, 0x3, 0x48}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000280)='#!', 0x2}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7a6d61de4a10909926243003b47915d8156c41f1b4f0919d7aacdfaffffffffffffff46c0fbde0346df012e786031d4b86fc1f36e5250f6d2b982fd3883a8b58c1af70800000000000000b5fe1448533302cf7069ee14085a11c77d5527f60000", &(0x7f0000000000)=0x61, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 304.248594ms ago: executing program 1 (id=707): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x11, 0x3, 0x47}, {0x40, 0x9, 0xff}, {0x6, 0x80, 0x12, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="c049a0996aa91cb63226358db21eb0f13540f064a255bde140d544b78bd82ec5b0f64813059e62da2a3df406e620e5b35bc00d4d1a803e8fb9882cf4d94745c30f919107f1016b7d0afcfd3f9c7540f3df65a45bc215c5cc44751f204322221f77ece0d79885996e02d05a01000000e02fd5f142bdc8733200"/135, &(0x7f0000000000)=0x87, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 251.086729ms ago: executing program 0 (id=708): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0xf2, 0xff}, {0x84, 0x11, 0x3, 0x49}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="840cbf3e87c006a62a075a37308e7bd3403e6b8bc8bf2c2db10fa8389d9c479df600cc9f9fb133cc4e654e22a11ffbe84cf292ab28", 0x35}], 0x1) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 250.824739ms ago: executing program 3 (id=709): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x80, 0x45, 0x1}, {0xe79, 0x0, 0x10, 0x5}, {0x931e, 0x2, 0xd, 0x5}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000b, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="a7a6d61de4a16809d26255c61b4f0919d7aacd6865959cb3e86fff46c0fb2b63a099a1ce37c6891e74eaaf1aa6caad332ccacbb5cdb6de82e4fb2194eae8f4d9470129f2b5801b43b96e7d6558", &(0x7f0000000000)=0x4d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 250.551026ms ago: executing program 5 (id=710): pwritev(0xffffffffffffff9c, &(0x7f0000000000)=[{0x0}], 0x1, 0x1) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x98631bd0feb9f72b, 0x4047}, 0xffffffff, 0x3, 0x0, 0xffffffffffffffff, 0x800000001ff, 0x20000000000008, 0x2, 0x8}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0xfffffffffffffe9b) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x406) 250.398266ms ago: executing program 1 (id=711): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0xf0, 0xff}, {0x84, 0x11, 0x3, 0x49}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500)="721d729f4c11f3b601b206360f00000000000000362ca57efc8972c56d43f5935ee412a6897ff106a0203552e3d1ce483d1a97d0c8bd1f1cdc4cdc356789a87c09ee763c", 0x44}], 0x1) sysctl$kern(&(0x7f0000000000)={0x1, 0xa}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 250.272762ms ago: executing program 0 (id=712): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0xf0, 0xff}, {0x84, 0x11, 0x3, 0x49}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="84", 0x1}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="a7a6d61de4a16809d26255c61b4f0919d7aacd68", &(0x7f0000000000)=0x14, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 214.914389ms ago: executing program 5 (id=713): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000001540)='~', 0x1}], 0x1) execve(0x0, 0x0, 0x0) 214.572252ms ago: executing program 3 (id=714): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x5, 0xa, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x0, 0x6cb9, 0x8, 0x9}, {0x104, 0xf88, 0xfffffffd, 0xd}, {0x6, 0x802, 0x800b, 0x5}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0xe}, {0xce1, 0xffffffff, 0x4f4, 0x6d}, {0x6, 0xd78d, 0x14, 0x2}, {0x2, 0x82, 0x1000001, 0x5}, {0x6a75, 0x8001, 0x1003, 0xb}, {0x2, 0x10001, 0x6, 0x3}, {0x200008, 0x0, 0x8, 0x2}, {0x10b94, 0x1000006, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x4000, 0x1, 0xffe, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) open(&(0x7f0000000000)='./file0\x00', 0x4, 0x0) r1 = syz_open_pts() fcntl$lock(r1, 0x8, &(0x7f0000000000)={0x0, 0x0, 0x6, 0x1000300000000}) flock(r1, 0x1) flock(r1, 0x2) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x100000001}) 214.447969ms ago: executing program 0 (id=715): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1840, 0x0) poll(0x0, 0x0, 0xffffffff) execve(0x0, 0x0, 0x0) 214.178603ms ago: executing program 1 (id=716): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x81, 0xf0, 0xff}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffffc, 0xb, 0x0, 0x9, 0x2000000000000000, 0x210, 0x0, 0x3}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x80, 0x4) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x56}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$inet(0x2, 0x2, 0x0) r3 = dup(r2) setsockopt$inet_opts(r3, 0x0, 0x22, &(0x7f0000000040)="fd0cc085", 0x4) r4 = dup(r3) dup2(r4, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f0000000000), 0x10) sendto(r3, &(0x7f0000000080)="e7ff520000000000", 0x2c, 0x2, 0x0, 0x6) 213.904037ms ago: executing program 7 (id=717): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0xf0, 0xff}, {0x84, 0x11, 0x3, 0x49}, {0x6, 0x80, 0x12, 0xfffff802}]}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x0, &(0x7f0000000080)}) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="a7a6d61de4a16809d26255c61b4f0919d7aacd6865", &(0x7f0000000000)=0x15, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 212.727742ms ago: executing program 2 (id=718): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x4}, {0x16, 0x7e, 0x0, 0x800ee68}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000000)={&(0x7f00000000c0)='./file0\x00', r1}) open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[]) 143.009349ms ago: executing program 6 (id=719): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0x0, 0x80000000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x2, 0x100], [0x8, 0x5, 0xfffffffffffffff8, 0x0, 0xffffffffffffffff, 0x80000000, 0x0, 0x0, 0x0, 0xb81], [0x8, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x0, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0x0, 0xfff7fffe, 0x1000}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x6, 0x4}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x200, 0x8}], {0x0, 0x5, 0x0, 0x849}, {0x213, 0x10, 0x4, 0x2}}}) r0 = kqueue() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f00000003c0)='./file0\x00', 0x0, 0x189) kevent(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x19, 0x0) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0) mknod(0x0, 0x2000, 0x285b9a) kevent(r0, &(0x7f0000000140), 0xe4a, 0x0, 0xa9f9, 0x0) 134.536084ms ago: executing program 7 (id=720): sysctl$hw(&(0x7f0000000280)={0x6, 0x14}, 0x2, 0x0, &(0x7f00000002c0), 0x0, 0x0) mknod(0x0, 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xa) sysctl$kern(&(0x7f0000000000)={0x1, 0x55}, 0x2, &(0x7f0000000140)="71f91e3471ac0066bc5a91090094a34b8e5f84cf71b59c7afec3708204ca0123e0561a3a2c4b25374c41bc0df13114b400cfb527d3bb7d7f090e73c3ff6768b28fc4020ac185660c8f43076c12e36ccdb0fc47e3d1a181b069cbdda675ef145fa2e01a25941be95bcfa452aab9e32382df7b22336d4c52f2483aecf8ea097cb3c67b28702cd006ddce0fcef35bc7ea6318652e18a8737035e09f23e9869bd3503a8158e14cd7b5467da9e6ec0bf2e18b83fc0dfb5e186bf5f1165d226585a8b53c46cece377f6aa2e735989c80aaab0281beef8c41be2ca9e2695c42c6528119fb4b5392d173a097148be27a823c52d1471de6bd36ba44703c5ac11078612dd2", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r0, 0x80184404, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, 0x0) sysctl$hw(&(0x7f0000000000)={0x6, 0x18}, 0x2, &(0x7f0000000040), &(0x7f00000000c0), 0x0, 0x0) 133.029932ms ago: executing program 5 (id=721): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x4}, {0x16, 0x7e, 0x0, 0x800ee68}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="840cbf3e87c006a6572c5109b0b054d8072a076a58bfbcc1dc79556b8bc8bf2c2db10fa8389d9c479df600cc9f9fb133cc4e654e22bd1ffbe84cf292ab289e0028b43b158fff49a341dff8b210cf9d7d94297047691776c5f1681e6ce8f2d74c", 0x60}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000540)="c0000000fc868c2d72790708f914b44ce92df9a9339bc8deecdb6be6f0efb2df4e1030f0b535bce34299f4a07beca4bda8c4a45cd9cc177c369dcb0cd0b10e90ebe276ea10be2facb872b02bd2dcc4398099cb98245e13b7306fb183000000f7c38f95a40b8a4358c89faa85387c48dc75e4a0b5", &(0x7f0000000000)=0x74, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd604406, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[]) 131.793227ms ago: executing program 2 (id=722): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0xf0, 0xff, 0x1}, {0x84, 0x11, 0x3, 0x49}, {0xfffe, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500)="721d729f4c11f3b601b206360f0000000000000036", 0x15}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="a7a6d61de4a16809d26255c61b4f0919d7aa", &(0x7f0000000000)=0x12, 0x0, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005", 0x3, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 72.425679ms ago: executing program 7 (id=723): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) shutdown(r0, 0x1) 72.129615ms ago: executing program 6 (id=724): ioctl$VNDIOCGET(0xffffffffffffffff, 0xc4104603, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea009c20eb01000a", 0x8) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 71.846439ms ago: executing program 5 (id=725): mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x103, 0x80800001, 0x10081b0, 0x10001, 0x10, [{0x0, 0x2893, 0x6, 0x71002}, {0x7fffffff, 0x9, 0x5, 0xfffffff9}, {0x104, 0xf88, 0x16, 0xa}, {0x4, 0x800, 0x0, 0x7}, {0x401, 0x3, 0x3, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xfffffffb, 0x80, 0x6d}, {0x2, 0x803, 0x14, 0x8}, {0x2, 0x93, 0x5, 0x4}, {0x6a76, 0x8001, 0x6, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x0, 0x1}, {0x1000000, 0xfffffffa, 0xffffffff, 0x6}, {0x1000c, 0x5, 0x1, 0x10000000}, {0x0, 0x4, 0xfff, 0x2}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x0, 0x1d, 0x0, 0x7d}, {0x3, 0x0, 0x0, 0x49}, {0x81, 0x0, 0x0, 0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) 71.632095ms ago: executing program 6 (id=726): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x400004}, {0x16, 0x7e, 0x0, 0x29}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x84, 0xf3, 0xfb, 0x7}, {0xa4, 0x21, 0x8d, 0x4b}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000280)="a7cf63d7a4fddc780fc403bf4470187c76e0a168f50000000008000087776c9a50d10a668b9b89f584231a4cada02c05e3292d0d90eaf3b6bed43e8091d72b86c33216f72f404270", &(0x7f0000000000)=0x48, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[]) 71.347658ms ago: executing program 0 (id=727): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x1}, {0x16, 0x7e, 0x0, 0x800ee68}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000003c0)="3b2aa7b976647c6cb381fe18923c1efec059c43c8ee163a1fa740232a8cc1a695e55255ea971d63c", 0x28}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="c2a6d6000000005ae39d800f00ecfea428afda1d00806809d26243003b4785d7", &(0x7f0000000000)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f00000000c0)=ANY=[]) 38.580595ms ago: executing program 7 (id=728): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x4}, {0x16, 0x7e, 0x0, 0x800ee68}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="840cbf3e87c006a6572c5109b0b054d8072a076a58bfbcc1dc79556b8bc8bf2c2db10fa8389d9c479df600cc9f9fb133cc4e654e22bd1ffbe84cf292ab289e0028b43b158fff49a341dff8b2", 0x4c}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="a7a6d61de4a16809d26255c61b4f0919d7aacd6865959cb3e86fff46c0fb2b63a099a1ce37c6891e74eaaf1aa6caad332ccacbb5cdb6de82e4fb2194ea0700000000000000801b43b96e7d65", &(0x7f0000000000)=0x4c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000140)=ANY=[]) 38.214904ms ago: executing program 2 (id=729): sysctl$net_inet_ipip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x0) r1 = msgget$private(0x0, 0x0) mkdir(&(0x7f0000000480)='./file0\x00', 0xd5) msgsnd(r1, 0x0, 0x444, 0x800) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) ioctl$VMM_IOC_CREATE(r0, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8000}, {0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x3}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000007000/0x4000)=nil, 0x8001}, {0x0, &(0x7f0000ffd000/0x1000)=nil, 0x8000000000000009}, {0x0, &(0x7f0000fff000/0x1000)=nil, 0x9}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x7b}, {&(0x7f0000000000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x800000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000010000/0x2000)=nil, 0x8}, {0x0, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffdfd}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}], './file0\x00'}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047460, 0x0) ioctl$TIOCSETAW(r3, 0x80047460, 0x0) r4 = dup(0xffffffffffffffff) r5 = syz_open_pts() fcntl$lock(r5, 0x8, 0x0) flock(r5, 0x1) fcntl$lock(r5, 0x8, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x100000401}) ioctl$TIOCSPGRP(r4, 0x40047477, 0x0) ioctl$VMM_IOC_INTR(r0, 0xc0285602, &(0x7f0000000040)={0x1, 0x0, 0x1}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1001, 0x0, 0x0) 37.986198ms ago: executing program 6 (id=730): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x1}, {0x16, 0x7e, 0x0, 0x800ee68}]}) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) sysctl$kern(0x0, 0x0, &(0x7f0000000480)="a7", &(0x7f0000000000)=0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r0, &(0x7f0000000480)="f82ff5010006000000010000ca90", 0xe) 37.777409ms ago: executing program 7 (id=731): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x4001, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x22, &(0x7f0000000300)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x64, 0x5, 0x81, 0x2, 0x0, @rand_addr=0x3, @local={0xac, 0x14, 0x0}}}}}}) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000040)=@in, 0xc, 0x0, 0x0, &(0x7f0000000340)=""/40, 0x28}, 0x40) 37.54254ms ago: executing program 0 (id=732): mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637d) mkdir(&(0x7f0000000240)='./file0\x00', 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1012, 0xffffffffffffffff, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='c\x00') mkdir(&(0x7f0000000000)='./file0/file1\x00', 0x65) chroot(&(0x7f0000000100)='./file0/file1\x00') unveil(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f00000000c0)='r\x00') 992.726µs ago: executing program 3 (id=733): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0xfffffff9, 0x8018, 0xb70, 0x501, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x40, 0x42890, 0x4, 0x71002}, {0x4, 0x9, 0x8, 0xfffffff9}, {0x188, 0xb88, 0xfffffffd, 0x9}, {0x6, 0x4000800, 0x8007, 0x7}, {0x8000, 0x3, 0x2800, 0xd7}, {0x1, 0x7a0, 0x3, 0x109a}, {0xce1, 0x3, 0x4f4, 0x6d}, {0x80000006, 0x803, 0x14, 0x8}, {0xb63, 0x82, 0x80005, 0xf}, {0x6a75, 0x8001, 0x1000, 0x2}, {0x1cc, 0x10001, 0xc, 0x1}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0xb, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x9}, {0x80000001, 0x80, 0x5, 0x10000000}, {0x0, 0x1, 0x6, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r1, 0x8010570e, &(0x7f0000000180)={0x1bd1, &(0x7f0000000040)}) 659.394µs ago: executing program 5 (id=734): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc1", 0x2}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0xfffffffffffffd6f}, 0x404) 504.586µs ago: executing program 6 (id=735): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) setgid(0xffffffffffffffff) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0xf2, 0xff}, {0x84, 0x11, 0x3, 0x49}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000240)="840cbf3e87c006a62a075a37308e7bd3403e6b8bc8bf2c2db10fa8389d9c479df600cc9f9fb133cc4e654e22a1", 0x2d}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) msgctl$IPC_SET(0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) 204.68µs ago: executing program 7 (id=736): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000680)="24e0a5c43ae6376073699cebcbfa6f7c55799d5c8165f9a36d24f6c6509668604145d63836d051f1fcd7ebc5fd92c1b6ce6d04a107aee78939689eff172ccae39bb6ba20f404d608b1d7f423e98024999babb49d18a20c7099515528926a9ca6ebfe01000100000000000f4b121fa59e9c29e2ab1338629a71acb945a7d1e64d282059bd4fe8b0a40ae9e5d95d70b2f9f600049760cfa91d4766da00000000000000000000e1c4f8772fbed53470dd549ff3693f774fbbf4bb57728f1831194279ccf8482a5326404bd34626296fa9c6ca3e63", 0xd3) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x1, 0x10, 0x3}, 0xc) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x13, 0x2000007, 0x101, 0x80000001, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x0, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0xfffffffe, 0x220326, 0x2800, 0x7}, {0x82, 0x27f3, 0x3, 0x99}, {0xce1, 0x0, 0x4f8, 0x6d}, {0x6, 0x801, 0x8, 0x4}, {0x400002, 0x82, 0x3, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x400008, 0x4}, {0x29a7171a, 0x8, 0x1, 0x4}, {0xc, 0x7, 0x1, 0xfffffffe}, {0x0, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sysctl$net_inet6_ip6(&(0x7f00000000c0)={0x4, 0x18, 0x29, 0x34}, 0x4, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=737): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x7, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x3}, {0x6, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x7}, {0x1, 0x80000003, 0xe, 0x7}, {0x2, 0x1, 0x3, 0x9c}, {0x80000cdf, 0x1, 0x4f8, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x88}, {0x4, 0xfffd, 0x9, 0xaeb}, {0x803, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0x4, 0x7, 0x800007}, {0x0, 0x1, 0x4, 0x30000}]}) poll(0x0, 0x0, 0x0) close(0xffffffffffffffff) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) r0 = socket(0x18, 0x3, 0x0) sysctl$vfs_ffs(0x0, 0x0, &(0x7f0000000080)="06e6a186cf8257197b8d91e7c56e0abd770a63cab73518977eb4e7f3cf84aa05aa7689c8dbe18896a2e8229d32f6e84c8033909c4b569ec9cc4cf6a445c82559ea205149a66ab99c89e4c319f5ced9ad4f702334eeb646b39b919a8d4fde562ba7135f28c86c751ee09b3028f555ae44a521f306ab76d3ef708e7f40d6e5c7cae35bb7622d953d709d8f83a05b80ff08aeb6f1a2537d113aedf5291a08932a64899b6d9e9be1f561e9fbc452ea18", 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.178' (ED25519) to the list of known hosts. uvn_flush: obj=0xfffffd806f4c0e68, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! vcpu_run_vmx: failed vmresume for unknown reason vcpu_run_vmx: error code = 7, VM entry: invalid control field(s) /: bad dir ino 2 at offset 0: mangled entry panic: bad dir Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *358790 655 0 0x1002000 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff832f0825) at panic+0x1cf ufs_lookup() at ufs_lookup+0x1eca VOP_LOOKUP(fffffd8009471798,ffff80002cceac98,ffff80002cceac30) at VOP_LOOKUP+0x6e unveil_find_cover(fffffd8068769da0,ffff80003c938d20) at unveil_find_cover+0x16d unveil_add_vnode(ffff80003c938d20,fffffd8068a7e460) at unveil_add_vnode+0x168 unveil_add(ffff80003c938d20,ffff80002cceae28,ffff80002cceaee3) at unveil_add+0x3e0 sys_unveil(ffff80003c938d20,ffff80002cceb000,ffff80002cceaf50) at sys_unveil+0x61c syscall(ffff80002cceb000) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36c25f87970, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: bad dir ddb> trace db_enter() at db_enter+0x25 panic(ffffffff832f0825) at panic+0x1cf ufs_lookup() at ufs_lookup+0x1eca VOP_LOOKUP(fffffd8009471798,ffff80002cceac98,ffff80002cceac30) at VOP_LOOKUP+0x6e unveil_find_cover(fffffd8068769da0,ffff80003c938d20) at unveil_find_cover+0x16d unveil_add_vnode(ffff80003c938d20,fffffd8068a7e460) at unveil_add_vnode+0x168 unveil_add(ffff80003c938d20,ffff80002cceae28,ffff80002cceaee3) at unveil_add+0x3e0 sys_unveil(ffff80003c938d20,ffff80002cceb000,ffff80002cceaf50) at sys_unveil+0x61c syscall(ffff80002cceb000) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36c25f87970, count: -10 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80002cceaa20 rbx 0 rdx 0xffff800001548e00 rcx 0 rax 0xffff80003c938d20 r8 0x101010101010101 r9 0x8080808080808080 r10 0xef73997335449139 r11 0xd8ab359cb1b1444 r12 0 r13 0 r14 0 r15 0x1 rip 0xffffffff827f40f5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002cceaa10 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=358790 pid=655 tcnt=2 stat=onproc flags process=1002000 proc=4000000 runpri=17, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80003c938d20 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c938558,0xffff80003c939a28 process=0xffff8000318f8d98 user=0xffff80002cce6000, vmspace=0xfffffd806c94b018 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 35317 265278 79595 0 2 0 syz-executor 35317 367034 79595 0 2 0x4000000 syz-executor 655 37074 91714 0 4 0x1082000 syz-executor * 655 358790 91714 0 7 0x5002000 syz-executor 1699 514850 63425 0 2 0 syz-executor 1699 351751 63425 0 3 0x4000080 fsleep syz-executor 19886 443874 41703 0 2 0 syz-executor 19886 440682 41703 0 3 0x4000080 fsleep syz-executor 21335 75293 29193 0 2 0xc80 syz-executor 21335 91476 29193 0 3 0x4000080 netcon syz-executor 21335 186909 29193 0 3 0x4000080 fsleep syz-executor 35386 222998 0 0 3 0x14200 acct acct 79595 113008 41652 0 3 0x82 nanoslp syz-executor 95783 486880 41652 0 2 0x10000882 syz-executor 9235 304959 41652 0 2 0x2 syz-executor 29193 498522 41652 0 2 0xc82 syz-executor 9859 76089 41652 0 3 0x82 nanoslp syz-executor 63425 17432 41652 0 3 0x82 nanoslp syz-executor 41703 520063 41652 0 2 0xc82 syz-executor 91714 492469 41652 0 2 0xc82 syz-executor 41652 118549 8695 0 3 0x82 kqread syz-executor 8695 352802 48704 0 3 0x10008a sigsusp ksh 48704 60007 80252 0 3 0x98 kqread sshd-session 80252 270693 81717 0 3 0x92 kqread sshd-session 48834 476257 1 0 3 0x100083 ttyopn getty 81717 301333 1 0 3 0x88 kqread sshd 25580 57852 89502 73 3 0x1100090 kqread syslogd 89502 18803 1 0 3 0x100082 sbwait syslogd 95056 319687 1 0 3 0x100080 kqread resolvd 21532 380724 18518 77 3 0x100092 kqread dhcpleased 66238 125549 18518 77 3 0x100092 kqread dhcpleased 18518 282124 1 0 3 0x80 kqread dhcpleased 35182 489818 0 0 3 0x14200 bored smr 35430 408439 0 0 2 0x14200 zerothread 49474 477337 0 0 3 0x14200 aiodoned aiodoned 93181 5602 0 0 3 0x14200 syncer update 31922 9214 0 0 3 0x14200 cleaner cleaner 5926 370963 0 0 3 0x14200 reaper reaper 18534 501680 0 0 3 0x14200 pgdaemon pagedaemon 62402 399495 0 0 3 0x14200 bored viomb 55535 352914 0 0 3 0x40014200 acpi0 acpi0 64292 385309 0 0 3 0x14200 bored softnet0 22483 340389 0 0 3 0x14200 bored systqmp 85504 309972 0 0 3 0x14200 bored systq 61287 295121 0 0 3 0x40014200 tmoslp softclock 18154 38724 0 0 3 0x40014200 idle0 1 197778 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11050 12319K 12768K 166960K 13357 0 pcb 17 12K 12K 166960K 121 0 rtable 247 10K 12K 166960K 494 0 pf 40 15K 19K 166960K 253 0 ifaddr 44 8K 8K 166960K 94 0 ifgroup 55 2K 2K 166960K 141 0 sysctl 3 1K 9K 166960K 7 0 counters 35 18K 18K 166960K 92 0 ioctlops 0 0K 4K 166960K 224 0 iov 0 0K 16K 166960K 10 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1350 85K 85K 166960K 1932 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 22 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 27 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 97K 166960K 866 0 sigio 0 0K 0K 166960K 3 0 proc 63 67K 100K 166960K 489 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 51 0 in_multi 96 7K 7K 166960K 147 0 ether_multi 1 0K 0K 166960K 7 0 mrt 1 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 382 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 222 159K 172K 166960K 8893 0 UVM aobj 19 4K 5K 166960K 28 0 pinsyscall 37 74K 94K 166960K 1964 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 64 0 NDP 12 0K 2K 166960K 56 0 temp 42 8668K 8740K 166960K 56313 0 kqueue 14 22K 24K 166960K 68 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 64 0 61 1 0 1 1 0 8 0 rtentry 136 145 0 40 4 0 4 4 0 8 0 unpcb 144 179 0 164 1 0 1 1 0 8 0 syncache 336 9 0 9 1 1 0 1 0 8 0 tcpqe 32 5 0 5 1 1 0 1 0 8 0 tcpcb 736 129 0 119 3 1 2 2 0 8 1 arp 96 20 0 1 1 0 1 1 0 8 0 ipq 40 2 0 0 1 0 1 1 0 8 0 ipqe 40 3 0 1 1 0 1 1 0 8 0 inpcb 328 532 0 513 3 1 2 3 0 8 0 ip6q 72 1 0 1 1 1 0 1 0 8 0 ip6af 40 2 0 2 1 1 0 1 0 8 0 nd6 112 32 0 4 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 48 0 47 1 0 1 1 0 8 0 pppxif 1384 11 0 10 2 1 1 1 0 8 0 pfstscr 40 8 0 8 1 1 0 1 0 8 0 pfrktable 1344 19 0 18 1 0 1 1 0 8 0 pfsrclim 320 5 0 5 1 1 0 1 0 8 0 pfanchor 1288 9 0 5 1 0 1 1 0 8 0 pftag 88 6 0 2 1 0 1 1 0 8 0 pfqueue 320 1 0 1 1 1 0 1 0 8 0 pfstitem 24 15 0 5 1 0 1 1 0 8 0 pfstkey 128 49 0 38 1 0 1 1 0 8 0 pfstate 384 27 0 21 1 0 1 1 0 8 0 pfrule 1360 37 0 19 2 0 2 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 673 0 242 31 1 30 31 0 8 2 art_table 40 675 0 242 5 0 5 5 0 8 0 art_node 32 145 0 53 1 0 1 1 0 8 0 sysvmsgpl 40 7 0 7 2 1 1 1 0 8 1 semupl 112 4 0 4 1 1 0 1 0 8 0 semapl 112 22 0 12 1 0 1 1 0 8 0 shmpl 112 24 0 9 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2687 0 1175 95 0 95 95 0 8 0 ffsino 256 2687 0 1175 95 0 95 95 0 8 0 nchpl 144 3693 0 2001 63 0 63 63 0 8 0 rtmask 32 14 0 14 2 1 1 1 0 8 1 vnodes 216 3145 0 0 175 0 175 175 0 8 0 namei 1024 10053 0 10050 3 2 1 2 0 8 0 vcpupl 3904 1 0 0 1 0 1 1 0 8 0 vmpool 808 1 0 0 1 0 1 1 0 8 0 pfiaddrpl 120 4 0 4 1 1 0 1 0 8 0 kstatmem 264 80 0 56 2 0 2 2 0 8 0 scsiplug 72 2 0 2 2 1 1 1 0 8 1 scxspl 216 13407 0 13407 3 2 1 3 1 8 1 plimitpl 152 52 0 36 1 0 1 1 0 8 0 sigapl 424 1160 0 1117 6 0 6 6 0 8 0 knotepl 120 820406 0 820358 28 18 10 16 0 8 7 kqueuepl 184 157 0 146 1 0 1 1 0 8 0 pipepl 304 124 0 97 3 0 3 3 0 8 0 fdescpl 448 1146 0 1118 5 1 4 5 0 8 0 filepl 120 3976 0 3764 8 1 7 8 0 8 0 lockfpl 104 352 0 350 1 0 1 1 0 8 0 lockfspl 48 148 0 146 1 0 1 1 0 8 0 sessionpl 144 25 0 17 1 0 1 1 0 8 0 pgrppl 48 33 0 17 1 0 1 1 0 8 0 ucredpl 104 443 0 430 1 0 1 1 0 8 0 zombiepl 144 1119 0 1117 2 1 1 1 0 8 0 processpl 1152 1160 0 1117 4 0 4 4 0 8 0 procpl 664 1964 0 1915 6 0 6 6 0 8 0 sosppl 176 29 0 24 1 0 1 1 0 8 0 sockpl 552 780 0 743 4 0 4 4 0 8 0 mcl64k 65536 147 0 147 2 1 1 1 0 8 1 mcl16k 16384 88 0 88 2 1 1 1 0 8 1 mcl12k 12288 45 0 45 2 1 1 1 0 8 1 mcl9k 9216 11 0 11 1 1 0 1 0 8 0 mcl8k 8192 87 0 87 2 1 1 1 0 8 1 mcl4k 4096 3737 0 3684 16 8 8 15 0 8 0 mcl2k2 2112 8 0 8 1 1 0 1 0 8 0 mcl2k 2048 509 0 509 2 1 1 1 0 8 1 mtagpl 96 62 0 5 2 0 2 2 0 8 0 mbufpl 256 14132 0 13846 75 56 19 74 0 8 0 bufpl 280 4252 0 125 295 0 295 295 0 8 0 anonpl 24 192364 0 180289 101 1 100 101 0 187 1 amapchunkpl 152 28244 0 27709 31 3 28 31 0 158 3 amappl16 200 4473 0 3990 38 0 38 38 0 8 0 amappl14 184 25 0 25 1 1 0 1 0 8 0 amappl13 176 407 0 406 1 0 1 1 0 8 0 amappl12 168 1501 0 1464 2 0 2 2 0 8 0 amappl11 160 1 0 1 1 1 0 1 0 8 0 amappl10 152 45 0 35 1 0 1 1 0 8 0 amappl9 144 249 0 249 1 1 0 1 0 8 0 amappl8 136 35 0 31 1 0 1 1 0 8 0 amappl7 128 77 0 76 1 0 1 1 0 8 0 amappl6 120 273 0 262 1 0 1 1 0 8 0 amappl5 112 76 0 68 1 0 1 1 0 8 0 amappl4 104 407 0 382 1 0 1 1 0 8 0 amappl3 96 5088 0 5013 3 0 3 3 0 8 0 amappl2 88 1283 0 1217 2 0 2 2 0 8 0 amappl1 80 12887 0 12353 13 1 12 13 0 8 0 amappl 88 8110 0 7957 5 0 5 5 0 92 0 uvmvnodes 80 110 0 0 3 0 3 3 0 8 0 dma8192 8192 4 0 4 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 8 0 8 1 1 0 1 0 8 0 dma128 128 254 0 254 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 8 0 8 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 27 0 9 1 0 1 1 0 8 0 uaddrrnd 24 1146 0 1118 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1146 0 1118 1 0 1 1 0 8 0 vmmpekpl 168 9488 0 9455 2 0 2 2 0 8 0 vmmpepl 168 79458 0 77280 114 4 110 114 0 357 4 vmsppl 368 1145 0 1118 4 1 3 4 0 8 0 rwobjpl 40 23162 0 21759 18 0 18 18 0 8 0 pdppl 4096 2300 0 2237 98 31 67 82 0 8 4 pvpl 32 534942 0 517334 195 12 183 195 0 265 3 pmappl 216 1146 0 1118 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 446 0 109 12 0 12 12 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff832f0825) at panic+0x1cf ufs_lookup() at ufs_lookup+0x1eca VOP_LOOKUP(fffffd8009471798,ffff80002cceac98,ffff80002cceac30) at VOP_LOOKUP+0x6e unveil_find_cover(fffffd8068769da0,ffff80003c938d20) at unveil_find_cover+0x16d unveil_add_vnode(ffff80003c938d20,fffffd8068a7e460) at unveil_add_vnode+0x168 unveil_add(ffff80003c938d20,ffff80002cceae28,ffff80002cceaee3) at unveil_add+0x3e0 sys_unveil(ffff80003c938d20,ffff80002cceb000,ffff80002cceaf50) at sys_unveil+0x61c syscall(ffff80002cceb000) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36c25f87970, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff832f0825) at panic+0x1cf ufs_lookup() at ufs_lookup+0x1eca VOP_LOOKUP(fffffd8009471798,ffff80002cceac98,ffff80002cceac30) at VOP_LOOKUP+0x6e unveil_find_cover(fffffd8068769da0,ffff80003c938d20) at unveil_find_cover+0x16d unveil_add_vnode(ffff80003c938d20,fffffd8068a7e460) at unveil_add_vnode+0x168 unveil_add(ffff80003c938d20,ffff80002cceae28,ffff80002cceaee3) at unveil_add+0x3e0 sys_unveil(ffff80003c938d20,ffff80002cceb000,ffff80002cceaf50) at sys_unveil+0x61c syscall(ffff80002cceb000) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x36c25f87970, count: -10