last executing test programs: 255.25703ms ago: executing program 5 (id=6): recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x1880, 0x0, 0xfffffffffffffe10) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r1, 0xc1126939, &(0x7f00000001c0)) r2 = socket$inet6(0x18, 0x5, 0x7) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCLOCK(r3, 0x20004276) ioctl$BIOCVERSION(r3, 0x2000427e, 0x0) readv(r2, &(0x7f00000034c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/135, 0x87}, {&(0x7f00000010c0)=""/250, 0xfa}, {&(0x7f00000011c0)=""/111, 0x6f}, {&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000003400)=""/175, 0xba}, {&(0x7f0000002300)=""/67, 0xdd1}, {&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000002240)=""/28, 0x1c}], 0x9) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setuid(0xee01) ioctl$TIOCSETA(r4, 0x20004109, 0x0) clock_gettime(0x73ff2be0c210c004, 0x0) 247.186304ms ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/file0\x00', 0xa7210e10bc3c9de9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r0) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, r1, 0x0) r2 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000040)='#!', 0x2}], 0x1) write(r2, &(0x7f00000003c0)="1a20", 0x2) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x5, &(0x7f0000000340)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x4}, {0x19, 0x81, 0x0, 0x800ee68}, {0x1000, 0x1, 0xfe, 0x5bdd}, {0x6, 0xa, 0x7, 0xa226}]}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)="840cbf3e87c006a6572c5109b0b054d8072a076a58bfbcc1dc79556b8bc8bf2c2db10fa8", 0x24}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000001a40)="a71de4a16809d26655c61b4f0919d7aa04fdff00", &(0x7f0000000000)=0x14, 0x0, 0x0) setgid(0xffffffffffffffff) setregid(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[]) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x8a, 0x80, 0x0, 0x1000}]}) r4 = open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) fchmod(r4, 0xf3) setuid(0xffffffffffffffff) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0xdd, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0/..\x00') 239.634026ms ago: executing program 6 (id=7): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x2, 0xffff63db, 0x4, 0x2, 0xb, 0x6, 0x9, 0x10, [{0x1200000, 0x3, 0xfffff115, 0x80000001}, {0xffffffff, 0xffffffff, 0x6, 0x9512}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0xf, 0x100}, {0x0, 0x7, 0xf15, 0x1000084}, {0x788c, 0xa, 0x8, 0x2}, {0x4, 0x60c60fbc, 0x3, 0xfffffffe}, {0xff, 0xffffffff, 0x28000, 0xffffe2eb}, {0x4, 0x1000, 0x6, 0x20008001}, {0x3, 0x5, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10010000, 0x0, 0x800000, 0x1}, {0x401, 0x4, 0x9, 0x3ff}, {0x3, 0x6e2, 0x5, 0x1}, {0x3, 0x80, 0x3}, {0x9be2, 0x1, 0x1000004, 0x8e}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3, 0x0, 0x2e) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) close(0xffffffffffffffff) r0 = syz_open_pts() write(0xffffffffffffffff, &(0x7f00000003c0)="b0", 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x80, 0xf3, 0x80, 0xffffffff}, {0x5, 0x81, 0x4, 0x1}, {0x16, 0x7e, 0x0, 0x800ee68}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000003c0)="3b2aa7b976647c6cb381fe18923c1efec059c43c8ee163a1fa740232a8cc1a695e55255ea971d63c", 0x28}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="c2a6d6000000005ae39d800f00ecfea428afda1d00806809d26243003b4785d7", &(0x7f0000000000)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000180)={0x13, 0x8, 0x8, 0xfffffe4f, "200000b39b00ffffffffa66f3b32a9d863f0ff00"}) poll(&(0x7f0000000240)=[{r0, 0x68}], 0x1, 0x2) 15.56192ms ago: executing program 1 (id=9): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x15}, 0xa7, 0xfffe, 0x0, 0x0, 0x5, 0x4, 0x1}) write(r1, &(0x7f00000002c0)="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", 0xfffffdaf) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x800, 0xfe) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd6, 0x6, 0x7, 0x17ffe, 0x10, [{0x0, 0xb1, 0x4, 0xa24}, {0xc5c, 0xb, 0x8, 0xfffffff9}, {0x800008, 0x20f05, 0x200, 0x9}, {0x7ffffffe, 0x800, 0xba2, 0x1}, {0x3fe, 0x20007ff, 0x1002802, 0x4d8a}, {0x3, 0x20000101, 0x3, 0xb4}, {0x8000008, 0xfffffffd, 0x81e8, 0xa}, {0x4, 0x836, 0x1, 0x6}, {0x2, 0x87e, 0x5, 0x9}, {0x1000002, 0x90, 0xd1b, 0x88}, {0x1c5, 0xc, 0x4, 0x41ac8391}, {0x100003, 0x6, 0x20004, 0x4000000c}, {0xb8d, 0x7, 0x8, 0x2}, {0x69a71720, 0xffffdffa, 0xfffffffe, 0x6}, {0x2, 0x7, 0xfffffff9, 0x100}, {0xfffffffe, 0x8, 0x40004, 0xc}]}) ioctl$WSDISPLAYIO_GETSCREENTYPE(r1, 0xc028575d, &(0x7f0000000000)={0xff, 0x4, './file0\x00', 0x5, 0x3, 0x7, 0x3}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) close(r0) 15.103046ms ago: executing program 5 (id=10): r0 = socket(0x18, 0x2, 0x0) socket(0x18, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x10401, 0x0) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000140)="d1caed12f35d7c96bd63031fd87967307e47666bbe4490516cc21a408ea8751448aa2ac1d3ed154e8c657be94d146f", 0x2f}], 0x1) execve(0x0, 0x0, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000280)="938f813e422d6146cddb2c327062b384ccf457827025bd8e647f2a8ed181b9579d0c10", 0x23}], 0x1) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000580)='<', 0x1}], 0x1) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f0000000080)=0x4) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1c5) r4 = syz_open_pts() fcntl$lock(r4, 0x9, 0x0) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000240), 0xc) kqueue() accept$inet6(0xffffffffffffff9c, &(0x7f0000000380), &(0x7f00000003c0)=0xc) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x1, 0x2, 0x81, 0x100000007}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0xac, 0x8, 0x5d, 0x61b0d}, {0x4, 0x6, 0x7, 0x400006}, {0x6, 0x2, 0x5, 0x5}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) setsockopt(r0, 0x1000000029, 0x33, &(0x7f0000000080)="031000e56841e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08028542ff6a56ed10c81a19096dc2baca0179cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39bd20000", 0x88) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x4) open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) close(r5) clock_settime(0x100000000000000, &(0x7f0000000000)={0xfe1ecc7f}) r6 = semget$private(0x0, 0x1, 0x100) semctl$GETNCNT(r6, 0x3, 0x3, &(0x7f0000000180)=""/90) 13.952905ms ago: executing program 4 (id=5): r0 = open(&(0x7f0000000080)='./file0\x00', 0x18289, 0x190) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x10401, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000040)='L9', 0x2}], 0x1) ftruncate(r0, 0x10000) fcntl$getflags(r0, 0x3) close(r1) r2 = open(&(0x7f0000000200)='./file0/file0\x00', 0x80, 0x48) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) ktrace(&(0x7f0000000240)='./bus\x00', 0x0, 0x28, 0xffffffffffffffff) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd504404, &(0x7f0000000040)={0x9, 0x2, 0x1, 0x2, "cd00220004000000000000000000000000008000", 0x40048003, 0x6}) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001380)="01000000", 0x4) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r3 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2950, 0x13d4) r4 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ioctl$WSKBDIO_SETDEFAULTBELL(r4, 0x80105705, &(0x7f0000000180)={0x620, 0x2, 0x80000001, 0x5}) preadv(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192, 0x100000}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) 10.70302ms ago: executing program 2 (id=3): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffff9c, 0xc1045763, &(0x7f0000000040)={0x1, [{0x2, 0xfffffeff}, {0x2}, {0x3, 0x7fff}, {0x1, 0xd}, {}, {0x0, 0x9}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x10000000}, {0x0, 0x6}, {0x3, 0x2}, {0x3}, {0x0, 0x20}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x4}, {0x1, 0x1}, {}, {}, {}, {0x0, 0xfffffc00}, {0x0, 0x9}, {0x0, 0x3}, {0x3, 0x800}, {0x3}, {0x1}, {0x2, 0xfffffffd}, {0x1}, {0x2, 0x8001}, {0x1, 0x200060}]}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x401, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x81000002000007, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0, 0xfffffffffffffa8b, 0x3, 0x100000000, 0x4700}) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) (async) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1, 0x3}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffe53) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 2.513292ms ago: executing program 7 (id=8): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) chmod(&(0x7f0000000040)='.\x00', 0x35f) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') r0 = syz_open_pts() r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0804467, &(0x7f00000000c0)={0x72e, 0x1, 0x5, 0x9, "c9f7d246000000023b0bca8f00875a6e80f775d2", 0xfffffffc, 0x8}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74, 0x0, 0x37) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x40, 0xf2, 0xff}, {0x84, 0x11, 0x3, 0x49}, {0x6, 0x80, 0x12, 0xfffff802}]}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r2 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe], [0x100000001, 0x2, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x100, 0x1ffffffffff, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x5, 0x6, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x2}}}) r3 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100200004, 0x6, 0x7, 0xf, 0xfffffffffffffffe, 0x0, 0x2f01, 0x91, 0x4, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0xf0, 0xfffefffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x6, 0x0, 0x3], [0x100000001, 0x8000, 0x8, 0x0, 0xb, 0x11000, 0xf7ffffff00000000], [0x8, 0x1fffffffefc, 0x4, 0x100000000, 0xfffffffffffffffe, 0x8], [{0x40, 0x0, 0x0, 0x4000000000007d0a}, {0xfffc, 0x22, 0x5}, {0x4, 0x0, 0xfffffffe, 0x7}, {0x3, 0x7, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x0, 0x0, 0xfffffff9}, {0x0, 0xfd, 0x0, 0x7}], {0x1, 0x5, 0x6, 0x3}, {0xfffe, 0x3, 0x6d5, 0x7}}}) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r4, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) r5 = socket(0x18, 0x3, 0x0) getsockopt(r5, 0x29, 0x69, 0x0, 0x0) kevent(r3, &(0x7f0000000000), 0x96, &(0x7f00000001c0), 0xfffb4161, 0x0) write(0xffffffffffffffff, 0x0, 0x0) kevent(r2, &(0x7f0000000140), 0xe4a, 0x0, 0xa9f9, 0x0) close(r0) 1.639714ms ago: executing program 2 (id=11): mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0xe02) r0 = open(&(0x7f0000000000)='./bus\x00', 0x10, 0x70) r1 = open(&(0x7f0000000040)='./bus\x00', 0x4, 0x0) close(r0) close(r1) 0s ago: executing program 7 (id=12): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$VT_OPENQRY(r0, 0x40047601, &(0x7f0000000040)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x33, 0xa2f}, 0x80000002000007, 0x2, 0xffffffffffffffff, 0x0, 0x5, 0x400000000009, 0x5, 0x8000000000000001}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r1 = shmget$private(0x0, 0x4000, 0x1e5, &(0x7f00007be000/0x4000)=nil) shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x53, 0x0, 0x0, 0x0, 0x0, 0x1a8, 0x9dc6, 0x8}, 0x3, 0x12e1, 0x0, 0x0, 0x400000120000000, 0x8, 0xfffd}) shmat(r1, &(0x7f00000c7000/0x1000)=nil, 0x1000) r2 = getuid() r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000501600000041600000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000000000000000000000000000000000000000000001f00000000000000", 0xb1, 0x808, 0x0, 0x0) setsockopt$sock_int(r3, 0xffff, 0x100, &(0x7f0000000140)=0x3, 0x4) chown(0x0, r2, 0x0) r4 = socket$inet(0x2, 0x5, 0xfe) getsockopt$sock_cred(r4, 0xffff, 0x1022, 0x0, 0x0) seteuid(r2) r5 = getegid() r6 = getuid() r7 = getegid() r8 = getpgrp() shmctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0x8, r2, r5, r6, r7, 0x41, 0x4}, 0x2, 0x3, 0x0, r8, 0x7, 0x1, 0x80}) lchown(&(0x7f0000000180)='./file0\x00', r6, r5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.34' (ED25519) to the list of known hosts. uvm_fault(0xffffffff83899940, 0xffff8000015a000a, 0, 1) -> e kernel: page fault trap, code=0 Stopped at arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx TID PID UID PRFLAGS PFLAGS CPU COMMAND *211405 82946 0 0 0x4000000 0 syz-executor arp_rtrequest(ffff8000002a2058,1,fffffd8068746810) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c956de0,0,ffff80003c956d50,16) at rtrequest+0xdc1 rtm_output(ffff80000159e500,ffff80003c956e88,ffff80003c956de0,0,16) at rtm_output+0x91a route_output(fffffd80775dde00,ffff8000015915a0) at route_output+0xa2b route_send(ffff8000015915a0,fffffd80775dde00,0,0) at route_send+0xd7 sosend(ffff8000015915a0,0,ffff80003c957038,0,0,808) at sosend+0x804 sendit(ffff80002a7bc7e0,3,ffff80003c957130,808,ffff80003c9571d0) at sendit+0x5a5 sys_sendto(ffff80002a7bc7e0,ffff80003c957280,ffff80003c9571d0) at sys_sendto+0x8d syscall(ffff80003c957280) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd0f13842440, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff83899940, 0xffff8000015a000a, 0, 1) -> e ddb> trace arp_rtrequest(ffff8000002a2058,1,fffffd8068746810) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c956de0,0,ffff80003c956d50,16) at rtrequest+0xdc1 rtm_output(ffff80000159e500,ffff80003c956e88,ffff80003c956de0,0,16) at rtm_output+0x91a route_output(fffffd80775dde00,ffff8000015915a0) at route_output+0xa2b route_send(ffff8000015915a0,fffffd80775dde00,0,0) at route_send+0xd7 sosend(ffff8000015915a0,0,ffff80003c957038,0,0,808) at sosend+0x804 sendit(ffff80002a7bc7e0,3,ffff80003c957130,808,ffff80003c9571d0) at sendit+0x5a5 sys_sendto(ffff80002a7bc7e0,ffff80003c957280,ffff80003c9571d0) at sys_sendto+0x8d syscall(ffff80003c957280) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd0f13842440, count: -10 ddb> show registers rdi 0xffff80003a510000 rsi 0x95d rbp 0xffff80003c956c30 rbx 0xde rdx 0xffff80003a510000 rcx 0xffff80000159ff20 rax 0xfffffd80775dd9e0 r8 0x1000 __ALIGN_SIZE r9 0 r10 0x5576ef006af2ec45 r11 0xcb380eaf9108123b r12 0x1c r13 0xfffffd80775dd900 r14 0xfffffd8068746810 r15 0xffff8000002a2058 rip 0xffffffff8139bd24 arp_rtrequest+0x6a4 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c956bb0 ss 0x10 arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx ddb> show proc PROC (syz-executor) tid=211405 pid=82946 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a7bc2b0,0xffffffff83887148 process=0xffff8000ffffb618 user=0xffff80003c952000, vmspace=0xfffffd806b4d4468 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 82946 418348 60298 0 2 0 syz-executor *82946 211405 60298 0 7 0x4000000 syz-executor 23253 371351 71590 0 2 0x100000 sh 40305 506176 68322 0 2 0 syz-executor 40305 244071 68322 0 3 0x4000080 fsleep syz-executor 35212 102991 17556 0 2 0x2 ndp 30528 246122 74977 0 2 0 syz-executor 30528 435731 74977 0 3 0x4000080 fsleep syz-executor 30528 232075 74977 0 2 0x4000000 syz-executor 27652 111882 780 0 2 0 syz-executor 27652 58282 780 0 3 0x4000080 fsleep syz-executor 51682 359112 41880 0 2 0 syz-executor 51682 216498 41880 0 3 0x4000080 fsleep syz-executor 85294 47022 44494 0 2 0 syz-executor 85294 155849 44494 0 3 0x4000080 fsleep syz-executor 71590 396525 83757 0 3 0x10008a sigsusp sh 17556 97644 98192 0 3 0x10008a sigsusp sh 60298 15275 79208 0 2 0xc82 syz-executor 44494 151611 79208 0 3 0x82 nanoslp syz-executor 780 467093 79208 0 2 0xc82 syz-executor 74977 134619 79208 0 3 0x82 nanoslp syz-executor 98192 413909 79208 0 3 0x82 wait syz-executor 68322 118039 79208 0 3 0x82 nanoslp syz-executor 41880 145555 79208 0 2 0xc82 syz-executor 83757 189545 79208 0 3 0x82 wait syz-executor 79208 508177 66468 0 3 0x82 kqread syz-executor 66468 8530 334 0 3 0x10008a sigsusp ksh 334 469596 96141 0 3 0x98 kqread sshd-session 96141 325027 65114 0 3 0x92 kqread sshd-session 11415 447394 1 0 3 0x100083 ttyin getty 65114 113459 1 0 3 0x88 kqread sshd 86571 389080 27388 73 3 0x1100090 kqread syslogd 27388 110667 1 0 3 0x100082 sbwait syslogd 83224 169222 1 0 3 0x100080 kqread resolvd 97935 296691 48639 77 3 0x100092 kqread dhcpleased 46035 66919 48639 77 3 0x100092 kqread dhcpleased 48639 295403 1 0 3 0x80 kqread dhcpleased 8211 5267 0 0 3 0x14200 bored smr 86080 310316 0 0 2 0x14200 zerothread 91005 420350 0 0 3 0x14200 aiodoned aiodoned 67798 105787 0 0 3 0x14200 syncer update 47105 329478 0 0 3 0x14200 cleaner cleaner 74071 94524 0 0 3 0x14200 reaper reaper 50649 430889 0 0 3 0x14200 pgdaemon pagedaemon 92637 5113 0 0 3 0x14200 bored viomb 23130 134416 0 0 3 0x40014200 acpi0 acpi0 70807 232243 0 0 3 0x14200 bored softnet0 92319 55967 0 0 3 0x14200 smrbar systqmp 90475 101065 0 0 3 0x14200 bored systq 31554 77172 0 0 3 0x40014200 tmoslp softclock 95019 376113 0 0 3 0x40014200 idle0 1 490744 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11026 12102K 12162K 166960K 12116 0 pcb 17 12K 12K 166960K 17 0 rtable 242 7K 7K 166960K 358 0 pf 30 12K 12K 166960K 30 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 33 17K 17K 166960K 33 0 ioctlops 0 0K 2K 166960K 30 0 iov 0 0K 0K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1336 84K 84K 166960K 1358 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 3 5K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 20 73K 89K 166960K 140 0 proc 59 59K 108K 166960K 473 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 31 148K 148K 166960K 31 0 exec 0 0K 1K 166960K 356 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 222 145K 151K 166960K 2965 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 42 84K 92K 166960K 1205 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 27 2K 2K 166960K 27 0 temp 34 8666K 8730K 166960K 3761 0 kqueue 13 20K 20K 166960K 22 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 35 0 31 1 0 1 1 0 8 0 rtentry 136 110 0 1 4 0 4 4 0 8 0 unpcb 144 32 0 17 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 8 0 4 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 60 0 51 2 0 2 2 0 8 1 nd6 112 22 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 451 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 110 0 9 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1562 0 58 95 0 95 95 0 8 0 ffsino 256 1562 0 58 95 0 95 95 0 8 0 nchpl 144 1757 0 71 63 0 63 63 0 8 0 vnodes 216 1645 0 0 92 0 92 92 0 8 0 namei 1024 5044 0 5044 2 0 2 2 0 8 2 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 5636 0 5636 3 0 3 3 1 8 3 plimitpl 152 27 0 11 1 0 1 1 0 8 0 sigapl 424 426 0 381 6 0 6 6 0 8 0 knotepl 120 3028 0 2981 2 0 2 2 0 8 0 kqueuepl 184 20 0 11 1 0 1 1 0 8 0 pipepl 304 113 0 85 3 0 3 3 0 8 0 fdescpl 448 413 0 381 5 0 5 5 0 8 1 filepl 120 1370 0 1160 7 0 7 7 0 8 0 lockfpl 104 8 0 6 1 0 1 1 0 8 0 lockfspl 48 5 0 3 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 29 0 13 1 0 1 1 0 8 0 ucredpl 104 73 0 62 1 0 1 1 0 8 0 zombiepl 144 381 0 381 1 0 1 1 0 8 1 processpl 1152 426 0 381 4 0 4 4 0 8 0 procpl 664 439 0 387 5 0 5 5 0 8 0 sockpl 552 128 0 100 3 0 3 3 0 8 0 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2452 0 2397 15 0 15 15 0 8 6 mcl2k 2048 110 0 110 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 3960 0 3822 9 0 9 9 0 8 0 bufpl 280 2241 0 119 152 0 152 152 0 8 0 anonpl 24 88512 0 85426 30 0 30 30 0 187 10 amapchunkpl 152 8075 0 7633 18 0 18 18 0 158 1 amappl16 200 1401 0 1385 4 0 4 4 0 8 3 amappl15 192 6 0 6 1 0 1 1 0 8 1 amappl14 184 54 0 54 1 0 1 1 0 8 1 amappl13 176 407 0 403 1 0 1 1 0 8 0 amappl12 168 747 0 708 2 0 2 2 0 8 0 amappl11 160 4 0 4 1 0 1 1 0 8 1 amappl10 152 41 0 31 1 0 1 1 0 8 0 amappl9 144 249 0 249 1 0 1 1 0 8 1 amappl8 136 45 0 44 1 0 1 1 0 8 0 amappl7 128 78 0 76 1 0 1 1 0 8 0 amappl6 120 260 0 246 1 0 1 1 0 8 0 amappl5 112 68 0 61 1 0 1 1 0 8 0 amappl4 104 368 0 343 1 0 1 1 0 8 0 amappl3 96 1235 0 1152 3 0 3 3 0 8 0 amappl2 88 531 0 463 2 0 2 2 0 8 0 amappl1 80 8650 0 8086 12 0 12 12 0 8 0 amappl 88 2283 0 2133 4 0 4 4 0 92 0 uvmvnodes 80 96 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 413 0 381 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 413 0 381 1 0 1 1 0 8 0 vmmpekpl 168 5011 0 4984 2 0 2 2 0 8 0 vmmpepl 168 33821 0 32024 79 0 79 79 0 357 0 vmsppl 368 412 0 381 4 0 4 4 0 8 1 rwobjpl 40 12410 0 11467 10 0 10 10 0 8 0 pdppl 4096 832 0 762 92 14 78 78 0 8 8 pvpl 32 203531 0 195162 86 0 86 86 0 265 18 pmappl 216 412 0 381 2 0 2 2 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 358 0 14 10 0 10 10 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace arp_rtrequest(ffff8000002a2058,1,fffffd8068746810) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c956de0,0,ffff80003c956d50,16) at rtrequest+0xdc1 rtm_output(ffff80000159e500,ffff80003c956e88,ffff80003c956de0,0,16) at rtm_output+0x91a route_output(fffffd80775dde00,ffff8000015915a0) at route_output+0xa2b route_send(ffff8000015915a0,fffffd80775dde00,0,0) at route_send+0xd7 sosend(ffff8000015915a0,0,ffff80003c957038,0,0,808) at sosend+0x804 sendit(ffff80002a7bc7e0,3,ffff80003c957130,808,ffff80003c9571d0) at sendit+0x5a5 sys_sendto(ffff80002a7bc7e0,ffff80003c957280,ffff80003c9571d0) at sys_sendto+0x8d syscall(ffff80003c957280) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd0f13842440, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace arp_rtrequest(ffff8000002a2058,1,fffffd8068746810) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c956de0,0,ffff80003c956d50,16) at rtrequest+0xdc1 rtm_output(ffff80000159e500,ffff80003c956e88,ffff80003c956de0,0,16) at rtm_output+0x91a route_output(fffffd80775dde00,ffff8000015915a0) at route_output+0xa2b route_send(ffff8000015915a0,fffffd80775dde00,0,0) at route_send+0xd7 sosend(ffff8000015915a0,0,ffff80003c957038,0,0,808) at sosend+0x804 sendit(ffff80002a7bc7e0,3,ffff80003c957130,808,ffff80003c9571d0) at sendit+0x5a5 sys_sendto(ffff80002a7bc7e0,ffff80003c957280,ffff80003c9571d0) at sys_sendto+0x8d syscall(ffff80003c957280) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xd0f13842440, count: -10