last executing test programs: 3.268485403s ago: executing program 7 (id=154): syz_open_pts() mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x6000, 0x1) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000280)={0xe, &(0x7f0000000200)=[{0x24, 0x9, 0x2, 0x40000002}, {0x40, 0x3, 0xe4, 0x100}, {0x9, 0xa, 0x87, 0x6}]}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd}) ioctl$WSMOUSEIO_GETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000040)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0xa8) r1 = socket(0x24, 0x2, 0x0) getsockopt(r1, 0x6, 0x0, 0x0, 0x0) unveil(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)='r\x00') ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x7d) open(0x0, 0x75f493fec6515f78, 0x0) setrlimit(0x1, &(0x7f0000000000)) ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x40001438, 0x0) r2 = syz_open_pts() ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x7e, 0x85, 0x0, 0xa}]}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000040)={0x5, 0x6, 0xa88, 0x0, "4efa439223d41c01b65ac2b2ad3dc70c1066aa00", 0x5, 0x7}) poll(&(0x7f0000000240)=[{r2, 0x941e72fb1b6b2233}], 0x1, 0x7ff) syz_open_pts() 2.907381185s ago: executing program 3 (id=170): r0 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8020697a, &(0x7f00000001c0)) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc) sysctl$kern(0x0, 0x4000000000000157, &(0x7f0000000080)="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", 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x80) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = semget(0x0, 0x1, 0x281) semctl$GETALL(r4, 0x0, 0x6, 0x0) r5 = geteuid() mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) open(0x0, 0x20, 0x190) open(&(0x7f0000000140)='./file0\x00', 0x200, 0x3a) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000684000/0x2000)=nil}, {&(0x7f00006ac000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {&(0x7f00007a8000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, &(0x7f00001d3000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f00001d6000/0x4000)=nil, &(0x7f0000203000/0x4000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil, 0x2}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x1ff}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8000000}, {0x0, &(0x7f0000ffc000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, 0x0, 0x4}, {0x0, &(0x7f00006ae000/0x2000)=nil}], './file0\x00'}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xd3b2}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x8100000000b936}, {&(0x7f0000418000/0x1000)=nil, &(0x7f00004ac000/0x1000)=nil, 0x4000000007fff}, {&(0x7f000052e000/0x1000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000298000/0x2000)=nil, 0x4}, {&(0x7f000025e000/0x4000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x81}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000551000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f00002d0000/0x4000)=nil}, {&(0x7f000069e000/0x2000)=nil, &(0x7f00003f2000/0x2000)=nil, 0x8}, {&(0x7f0000002000/0x1000)=nil, &(0x7f000038f000/0x4000)=nil, 0x812b}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000688000/0x4000)=nil, 0x5}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00003e4000/0x2000)=nil, 0xe}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f00001f9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x1000039f7}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8b83}], './file0\x00', 0x2}) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSETA(r6, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0xc, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000500)={{0x0, r2, r3, r5, r3, 0x81, 0x6a94}, 0x5, 0x8, 0x9}) r7 = accept$unix(r0, &(0x7f0000000240)=@file={0x0, ""/520}, &(0x7f0000000480)=0x20a) setsockopt$sock_cred(r7, 0xffff, 0x1022, &(0x7f00000004c0)={r1, r2, r3}, 0xc) r8 = socket(0x2, 0x3, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x4b}, 0x2, 0x0, 0x0, 0x0, 0x16) ioctl$FIONREAD(r8, 0x801169ac, &(0x7f00000001c0)) 2.841542619s ago: executing program 2 (id=173): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x5b, 0x0, 0xa}, {0x16, 0x3, 0x1, 0x48a6}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="d3b6e8e656ffffffffffffff5e0000000000000000001c158100000011000000006e7c056199b8bc470000000000000069f73a0ef5cdd53e108529894390854b6ef5e7f1ae", 0x45}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000004c0)="766b84e07a8f14f74ad13c601b0b001e9df2a52cbc02284fc157cbbd", &(0x7f0000000080)=0x1c, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7960) chmod(&(0x7f00000001c0)='./file0\x00', 0x37b) setuid(0xee01) rename(&(0x7f00000007c0)='./file0\x00', 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) writev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="d3b6e8e656ffffffffffffff5e0000000000000000001c158100000011000040006e7c056199b8bc4700000000", 0x2d}], 0x1) select(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x8000000000000001}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8f5f84cf71b59c7a00c37082", &(0x7f0000000080)=0x3d, 0x0, 0xffffffffffffff57) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil) setuid(0xffffffffffffffff) shmat(r3, &(0x7f0000001000/0x3000)=nil, 0x1000) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) ioctl$VT_RELDISP(r0, 0x20007604, &(0x7f0000000000)) ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f00000000c0)={0x742, 0xffffffff, 0xd, 0x3, "c9f75500000000003b0bca8f00075a6b47c0d100", 0xfffffffd, 0xe06}) 2.841208276s ago: executing program 3 (id=174): select(0x40, &(0x7f0000000000)={0x1b, 0x1, 0x1, 0x92a8, 0x3ff, 0xfbfffffffffffff9, 0x0, 0xdf2}, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x1, 0x0) getsockopt(r0, 0x0, 0x25, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x0) 2.840733949s ago: executing program 3 (id=175): writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)="017da6f476613e3de2d324715e3a2c6d80181cafe1f144ab27f8465f5962cbdc2f2aedd5b33ddce0488960dd55317fb8e3394814afabc8b33e128d7e5b42d285b2ed25f620caad167804938c5344799d9ec12729f9b60e42dfff4ecc9f2acbb9f7de5c15b7bd2e30c029d99dbceb9d4d7095e5279238330620577d31c75821bc82d587a531192789de7f5033374af884d01b784da898cc010fd2ba31864e412e1d130bda43e9b3eca5ab8d1853e57c75aafb603b6474d74aa0da6c6d71246a769fefe832d56f0f121d782f8bfbba6282d23530978d4fe85f020a9a72577a", 0xde}], 0x1) open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x14}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000180)={0x3, 0xb}) ioctl$WSMUXIO_REMOVE_DEVICE(r0, 0x80085762, &(0x7f0000000280)={0x1}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd}) 2.839975468s ago: executing program 2 (id=176): open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) r0 = getpid() ktrace(&(0x7f00000001c0)='./file0\x00', 0x0, 0x40000534, r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x70c3, 0x7, 0x7, 0x106, 0x80000001, 0x33a, 0x10002, 0x10, [{0x0, 0x4, 0x4, 0x71004}, {0x7, 0x4, 0x8, 0xfffffff8}, {0x8, 0x20f86, 0x0, 0xaf9}, {0x1, 0x800, 0x7}, {0x10001, 0x1, 0xd, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0x1cdf, 0x1, 0x4f8, 0x6d}, {0xa, 0x3, 0x14, 0x9}, {0x2, 0x81, 0x1, 0x9}, {0x6, 0x8001, 0xc7, 0x8c}, {0xf88, 0x10001, 0x6, 0xaeb}, {0x7ff, 0x9, 0x8, 0x5}, {0xb8c, 0x4, 0x2, 0x6}, {0x1009, 0x7, 0x1, 0x6}, {0x4, 0x7, 0x2006, 0x400}, {0x200, 0x1, 0x4, 0x2fffd}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x8000, 0x100) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x7, 0x101, 0x80000001, 0x80000001, 0x7, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x4, 0x8, 0x40000003}, {0x6, 0xf88, 0x0, 0x2}, {0x1, 0x800, 0x2}, {0x1, 0x7fffffff, 0xe, 0x7}, {0x2, 0x1, 0x3, 0x9c}, {0x80000cdf, 0xfffffffd, 0x3, 0x6d}, {0xa, 0x803, 0x14, 0x8}, {0x2, 0x81, 0x1, 0xfff}, {0x6, 0x8001, 0xc7, 0x88}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0xa, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x7}, {0x0, 0x1, 0x4, 0x30000}]}) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000080)={0x2, 0x0, 0xfffffffffffffff8, 0x20002fffffff9}) 2.681367045s ago: executing program 6 (id=181): writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="2e06b5a54fdc15d0e5ba5cd619e395d842161263a5bcf8d360b109113dd229c0dd47d6ff4f038bc8f40206bf8a1ef55ba04d8d4e4174e29e744d8606170795a2edaf3456112807f6d55fd9c3815257c10e07e8f0be3a7366f8123a42cb43f4302bf6b149e9b9bab6116b11b8ae693250f7fa8080cd8a2fc7c7e4ebf5c106c80fd386c7786c0421183de7b10dbde8040d96f51522423ca8e0f70989e1530cd2eaf7faaad41584384bf407ed7bed944e099fd18b59c86af22bb45fe92b05087191e530bc83a9e0975fc2a0f5988e9ae663b4fe25f69d661eb4ad0842a7be35dbe21e8911da844c7dce8d80f66713e13d96b30d5b4a13fb15282cf2a61a24880049b94a6e46bce752ff3230cd36789c42b37db904fd77060a84ca071839da23ef66bb45a18c9face3b3982d2edef1234405ec89e3ac812208780a2866cf52a8bbbe80b77e07f53d751ea0da7185414c403df8282d22a45b8a5ee7dc9b534106d98bb65aea3af32dea9a7a9881e7fdfbb46801408f1b94018abf7d5816d4e0344ab9dd8a6d43a2503180582f6d553e1a81fe4e8d68fafcd095560e83feda2fcd68d73fc71d7ff20511859f1b895d1a3f42970f1fb4dd61487901de9d5efcb92d63466e92bbe485aaf63988e255cbb607ac7ff9ee30732dd2482be6280b8946e32cf0ec48fc7c89e53c4aecb4af7af69e0dc04dd17405ce02898adf547f851e885964f836ec6b04d77f14d85025e415a01553d6b7e5dd946be3ea735515a624f74e2c09b863881e4412135ecbdd1f1ec73762d2b1bcb0f04f0bd1369f9c374d73fb9cc7465bbdb5e77078870423340ea32c9f49980888427f49eb9d4daf99a87d6d6e44aecd7dfeba2c6f1844b2b537d6de1ba1c8bd90f7ec014b4c84a9bfba26bb92b0d740de1e20c97ec18417a1f3d68fea076ad9aeb884efa6cedf35845dd4bc6eae82e37a2304c76ab6e7467f2d868e76df28b7dbba656b0998da5d54a00e706e8dc0699e961bfe8b6cef550c66eb7e5a40ef12896fb571be1d73d817d17e177f06c0679c784feb85129836c8724bf0c3e6026a3eb831c5335475950287c988059987", 0x302}], 0x1) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async, rerun: 32) r0 = syz_open_pts() (rerun: 32) close(r0) (async, rerun: 32) syz_open_pts() (async, rerun: 32) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async, rerun: 32) r1 = open(&(0x7f0000000000)='./file0\x00', 0x78d, 0xc7) (rerun: 32) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r1, 0x0) 2.681115272s ago: executing program 2 (id=182): r0 = getuid() r1 = getgid() msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, 0x0, 0x0, r1, 0x22, 0x4}, 0x1, 0x6a, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x44, 0x4}) (async) r2 = socket(0x18, 0x1, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setgroups(0x6, &(0x7f0000000000)=[r1, r1, r1, r1, r1, r1]) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x3) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 2.680169577s ago: executing program 3 (id=184): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x40) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9b, 0x0) setuid(0xffffffffffffffff) stat(&(0x7f0000000040)='.\x00', &(0x7f0000000380)) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0xc, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x80, 0xffff, 0x1, 0x21, 0xd, 0x4000001, 0x2, 0x1, 0x1, 0xf1e}) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) openat$pci(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r1) 2.620216718s ago: executing program 4 (id=185): symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='c\x00') unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') r0 = openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000080)="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", 0x1bb}], 0x1) execve(0x0, 0x0, 0x0) socket(0x6, 0x8000, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0xfffffffd}) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r2 = syz_open_pts() close(r2) syz_open_pts() accept(0xffffffffffffffff, 0x0, 0x0) ioctl$FIOASYNC(r2, 0x80047469, &(0x7f0000000040)=0xfffffffc) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000bc0)="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", 0x20b}, {&(0x7f00000006c0)="e05f5c584860b8df53096f0d9bc0f0f2a9140dd203de6de567a4d29ba3f9463f14e5e8bdded4b78901b53bc0c14b2fa666d8ede1d898aa8539ae3201783ae7960697338e188f93d7f080045b1dc217c0943d1db416b182776c7d1f60730f88a76d29825f192176ab516d4a21b8724df4e14f6b4774041113ac91d8d09d9ce729034277a1d0048073b3426eb2aaa434d6dac8053420f9664f5b017be71d950f2995a635126626345ba049b189073901026c07665aaf2ceb6d4034677eee89446a6b549b4637a305a5acdb04957d96f27b0892bbdd995f", 0xd6}, {&(0x7f0000000a40)="4c103bce35d630237268daa79026869c25f037f00138628064cbb2744ec13cf26508caccbf37ae7b8e5c2fd04dc11d8f0d53493c75b9f4264c78d61c3a66d787f1eb06e1829007fbf427d5278a0719a493b154f8719f61d7e9b6d827bbc47e4e3b89f371f9f91e98110521638e3030379e080f09239a722c92bdf9c1286c84e7d65246714933d7189f53b075e134bf6c0c06f228a22f5f835363882c0db2db948c12b82515d1422cf1fabe0316f51ac43ff9ac3a4559f3d00f47ab55d95b9a9a375e2ac893320805ff00da2daa7e9dc4f46aabd9a8f455fb3c8e02ecc3ccaffe3d5a36461fae175b25fb7018ed285cc9f0cd447e7a2fb79ee05216a869c37dad4799810112f226f5046dd78071b957e7a0660558e84a5d6f80bdfb89377bb1da0300000000000000263f32880ade03c2eed44fc29a99632d98a059d3887f1c625b5fbbcd", 0x144}, {&(0x7f0000000400)="2dd125d0a98f388c6367d493910e47ae4d453803a9d199031d35cbe2b902ab3b005faed037bf3d23aff78c995b0bb575ce05db417d98b96509767219f9ddc11c1d387f2a86701844c7cf97ee60c5e205ae1e2273828dd4f033dbda9ece19d676fca68ea06a9d4ca3d70a6949f6af0556f42ca9faa02e0fb0ef32f257440bb94bdce5f079b06cf662d9451f48618213f35984dcc4e67ba4b6fa01872c4f977b0516bde75ce58a50e383e78099e36793c17ecb6000"/208, 0xd0}, {&(0x7f0000000140)="2950c2aa09a08ef7d785151f9ef4d95f25d8ea11c5e0899cb6825cc6d2de2ec3670551c41c49c27ce5ca5926d7e57d", 0x2f}, {&(0x7f00000007c0)="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", 0x108}, {&(0x7f0000000280)="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", 0x141}], 0x7) link(&(0x7f00000001c0)='./file0/file0/../file0\x00', 0x0) 2.619226229s ago: executing program 3 (id=187): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000080)={0x3, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0xc14}, {0x1, 0xe7, 0x3}, {0x6, 0x5, 0x0, 0x5600}]}) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 32) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0xa, &(0x7f0000000300)=[{&(0x7f00000000c0)="8eab802cf20e98b046a216350b86110c5116b8c9cf4ccc5c978f959298433634ec4854130fced58c4b42f70b9062e8c9518c3a2d445b19be29ad63dc8d608fde4f0ec38c9422f51e49f51499a0c9253a021e6e22a61d7a23d2089522c05c4bad18b9cedb1b1cf90980233908aea92868335eb9a0f0f858abbc7fa2c7ef286ae322c77f53a6b84c83a3e553bd40bea63bd3365526a7f1aabd25780514d69441d03b16b2087dde31eff203c45ce1a8b478cdf664c098aade1c19f82eb7d44672213ca93bc5bcba8074b16b8851d93b66acd06058feb8e034454ae52c036ba16ad9717009e91bccf22c", 0xe8}], 0x100000000000019e, &(0x7f0000000480)=[@cred, @rights={0x18, 0xffff, 0x1, [0xffffffffffffffff]}, @rights={0x30}, @rights={0x0, 0xffff, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}], 0x98, 0x402}, 0x2) (async) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0x8020691f, &(0x7f00000001c0)) 2.618140782s ago: executing program 4 (id=188): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a", 0x4e, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYRES32=0x41424344]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x10004, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6000fe000000010000ff80d1440000200000fe8000000000000000000000000000aa"]) 1.544145455s ago: executing program 6 (id=190): sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$ddb(0x0, 0x0, &(0x7f0000000040)="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", &(0x7f0000001040)=0x1000, &(0x7f0000001080)="a1f374285b26dd20ff704990bd36276133a9a49877006a04f0f88e8c79b99765b220944e3f7845b8ec04e321b1669b2203e85c382e0394df53156fda7a91f32e1b3cdb3a619dd80746976d4a443031636bb4abd99dfb6f22f7fa7b7a87f351feaa8da4d88c301d77d0a6ab5933ead9acde657d1ca8c86ece96da3edf42299280c20069c6c00caf169c936b89f7de8f586a0f567b4c3416e132bf152b1e743d79a6c05d3404cf30dcce0c4d54e3ccb65b32bda4225bd77cfd255b3d5d6d5b5afc", 0xc0) 1.543818533s ago: executing program 2 (id=191): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x1, 0x0) sysctl$hw(&(0x7f0000000040)={0x7, 0xf}, 0x2, &(0x7f00000003c0), 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x1a8) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000300)=@in6, 0xc, &(0x7f0000000440)=[{&(0x7f00000003c0)}, {&(0x7f0000000400)=""/55, 0x37}], 0x2, &(0x7f0000000480)=""/73, 0x49}, 0x3) r4 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x800000) r5 = accept(r2, &(0x7f0000000140)=@in6, &(0x7f0000000180)=0xc) kevent(r1, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffffd, 0x34, 0x40, 0xffffffffffffffa3, 0x528e}, {{r1}, 0xfffffffffffffffd, 0xb9, 0x2, 0x1, 0x9}, {{r3}, 0xfffffffffffffff8, 0x18, 0x1, 0x218, 0xfffffffffffffffb}, {{r4}, 0xffffffffffffffff, 0x10, 0x20, 0xfffffffffffff933}], 0x4, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffc, 0x38, 0x20000000, 0x6, 0x29cc}, {{r2}, 0xfffffffffffffff8, 0xc2, 0x10, 0x1, 0x10000}], 0x9, &(0x7f0000000200)={0x3}) socket$unix(0x1, 0x1, 0x0) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/232, 0xe8}, 0x0) r6 = open$dir(&(0x7f0000000240)='./file0\x00', 0x200, 0x140) getdents(r6, &(0x7f0000000280)=""/47, 0x2f) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 1.541086427s ago: executing program 4 (id=192): socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffe) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x120) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/232, 0xe8}, 0x0) chroot(&(0x7f0000000740)='.\x00') unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='x\x00') rmdir(&(0x7f00000000c0)='./file0\x00') sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r4 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$sock_int(r4, 0xffff, 0x10, &(0x7f0000000080)=0x8, 0x4) 1.54089442s ago: executing program 3 (id=193): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0xcb, 0x2, 0x1, 0x440}, {0x84, 0x0, 0x0, 0xfffffffc}]}) (async) syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e706f2ffff1f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "c46dea", 0x6, 0x6, 0x8, @rand_addr="26651f52e2840a3a68632730c0fc4357", @mcast2}}}}}}}) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 1.504332627s ago: executing program 7 (id=194): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaad0b5049f6b6386dd6036ea0700083a00feffffffff00000000000000000000aa0000e0ffffff00000d4ad3af0000000081"]) writev(r0, &(0x7f0000000200)=[{&(0x7f00000007c0)="192c", 0x2}], 0x1) 1.50400101s ago: executing program 7 (id=195): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x1204, 0xffffffffffffffff) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) (async) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000000)=0x9) 1.503805187s ago: executing program 6 (id=196): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kqueue() r0 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x4e6c) close(r0) kevent(r0, 0x0, 0x80000000, 0x0, 0x9, &(0x7f0000000240)={0x1, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) kqueue() (async) open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) (async) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000000)=0x4e6c) (async) close(r0) (async) kevent(r0, 0x0, 0x80000000, 0x0, 0x9, &(0x7f0000000240)={0x1, 0x8}) (async) 1.503522032s ago: executing program 5 (id=197): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x61}) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) r0 = socket(0x6, 0x3, 0xe) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) r2 = syz_open_pts() r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) kevent(r3, &(0x7f0000000d40)=[{{}, 0x0, 0x44, 0xfffff, 0xfff, 0x5}, {{}, 0xfffffffffffffff8, 0xb1, 0x4, 0x0, 0xcb1b}, {{}, 0xfffffffffffffffb, 0x0, 0x40, 0xfffffffffffffffa, 0x2}], 0x9, 0x0, 0x3, 0x0) ioctl$TIOCSETA(r3, 0xcd504404, &(0x7f0000000080)={0x1fff, 0x2, 0x9, 0x0, "cd002200002181baab4c8c6d09b975390a000004", 0x7fff, 0x8}) close(r2) r4 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047470, &(0x7f0000000000)=0x1) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000040)=""/36, 0x24}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIOASYNC(r4, 0x80047460, &(0x7f00000000c0)=0x4) 1.423371917s ago: executing program 2 (id=198): mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x6381) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) r2 = socket$inet(0x2, 0x0, 0x3) r3 = openat$pci(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x9}, {r1, 0x10}, {r2, 0x2}, {r3, 0x4}], 0x4, 0x1) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffe) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f00000000c0)="66d478df", 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x6381) (async) accept$inet6(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async) openat$tty(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) (async) socket$inet(0x2, 0x0, 0x3) (async) openat$pci(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) (async) poll(&(0x7f00000002c0)=[{r0, 0x9}, {r1, 0x10}, {r2, 0x2}, {r3, 0x4}], 0x4, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, 0xfffffffffffffffe) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x6}, {0x3, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) (async) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r4, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) (async) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f00000000c0)="66d478df", 0x4) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) ioctl$VNDIOCSET(r5, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) (async) 1.422308757s ago: executing program 5 (id=199): kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0x1, 0x2, 0x2, 0x1000000000000005}], 0x0, 0x0, 0xffffffff, 0x0) (async) r0 = syz_open_pts() ioctl$TIOCCONS(r0, 0x80047462, &(0x7f00000000c0)) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) 1.419125916s ago: executing program 7 (id=200): r0 = socket(0x18, 0x2, 0x0) (async) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f0000692000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x1cea4997}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x400}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x1}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x8}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f00004e6000/0x3000)=nil, 0x40003}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f00005e4000/0x1000)=nil, 0x10000000000}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}], './file0/file0\x00', 0x3}) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x10000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r2, 0xc028698d, &(0x7f0000000100)) setsockopt(r0, 0x1000000000029, 0x3c, &(0x7f0000000040)="84ae975e", 0x4) 1.418906718s ago: executing program 4 (id=201): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async) r0 = open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x80, 0x123) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) (async) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x0, 0x3) (async) chdir(&(0x7f00000001c0)='./file0\x00') setuid(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x64, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) (async) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0/file0/file0\x00'}, 0x16) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') 1.418287745s ago: executing program 5 (id=202): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x1, 0xb24e0bfa50b7aa1a, 0x200000000000000, 0x9f9e}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000480)={0x1, &(0x7f0000000080)=[{0x9, 0x9, 0xdc, 0x401}]}) r1 = socket(0x18, 0x1, 0x0) r2 = socket(0x11, 0x3, 0x0) shutdown(r2, 0x2) close(r1) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) r5 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) close(r5) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) recvmsg(r2, &(0x7f0000000880)={&(0x7f0000000640)=@in6, 0xc, &(0x7f0000000780)=[{&(0x7f0000000680)=""/239, 0xef}], 0x1, &(0x7f00000007c0)=""/131, 0x83}, 0x40) close(r3) setuid(0xffffffffffffffff) syz_emit_ethernet(0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa1f5a688e7"]) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[]) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket(0x2, 0x4001, 0x0) r7 = fcntl$dupfd(r6, 0x2, r6) close(r7) 1.417895923s ago: executing program 6 (id=203): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$WSKBDIO_GETBACKLIGHT(r0, 0x400c5711, &(0x7f0000000040)) r1 = fcntl$getown(r0, 0x5) fcntl$setown(r0, 0x6, r1) r2 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TIOCGETA(r2, 0x402c7413, &(0x7f00000000c0)) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$WSDISPLAYIO_LSFONT(r3, 0xc058574e, &(0x7f0000000140)) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x3}, 0x8) mknod(&(0x7f0000000200)='./file0\x00', 0x1, 0x9) flock(r3, 0x2) ioctl$TIOCGETA(r2, 0x402c7413, &(0x7f0000000240)) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000280)=0x9) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r0, 0x400c570a, &(0x7f00000002c0)) fcntl$setown(r0, 0x6, r1) open$dir(&(0x7f0000000300)='./file0\x00', 0x40, 0x8) r4 = accept$unix(0xffffffffffffff9c, &(0x7f0000000340)=@file={0x0, ""/85}, &(0x7f00000003c0)=0x57) ftruncate(r4, 0xffffffffffffffff) flock(r0, 0x2) ioctl$WSKBDIO_SETENCODING(r0, 0x80045710, &(0x7f0000000400)=0x7b) ioctl$TIOCSPGRP(r2, 0x40047477, &(0x7f0000000440)) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000480)) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(r0, 0x800c5709, &(0x7f00000004c0)={0xff, 0xe, 0x4}) r5 = syz_open_pts() ioctl$TIOCCHKVERAUTH(r5, 0x2000741e) r6 = semget(0x3, 0x4, 0x102) semctl$GETNCNT(r6, 0x3, 0x3, &(0x7f0000000500)=""/88) ioctl$WSDISPLAYIO_GVIDEO(r3, 0x40045744, &(0x7f0000000580)) ioctl$TIOCCLRVERAUTH(r2, 0x2000741d) sendmmsg(r4, &(0x7f0000001840)={&(0x7f0000001800)={&(0x7f00000005c0)=@in={0x2, 0x2}, 0xc, &(0x7f0000001600)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000001640)=[{0x88, 0xffff, 0x4, "6724894e6a1fa2a73d1ca1006dc47991138d1f78fa86f23f99006f9dfc3f2c395635e9ad38bf567327557a6109317fa04026a67e6e16d1b03e48dd60b2883f657a92e05fa9449444caa9fc77880d5b8afd61bb5ca198db72ba2918021193817db6fa8053d0145c8b48485ef8cd5d40ad07"}, {0x110, 0xffff, 0x4, "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"}], 0x198}, 0x1}, 0x10, 0x800) 363.67831ms ago: executing program 7 (id=204): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x20, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0xbd5, 0xfffffffa}}}}}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{}, {0x1}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x20, 0x0, 0x0, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @multicast1}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x1, 0x0, 0xffffffff, 0xbd5, 0xfffffffa}}}}}) (async) 280.719151ms ago: executing program 2 (id=205): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0xfffffffffffffe8e, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/173, 0xad}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/164, 0xa4}], 0x1) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0xfd9, 0x8, 0x71, 0x828a, 0x10, [{0xfffffffd, 0x3, 0x4, 0xa25}, {0xc5c, 0xb, 0x3, 0xfffffffd}, {0x3, 0x20f85, 0x6, 0x9}, {0x7ffffffe, 0x800, 0x10003, 0x1}, {0x3fc, 0x87ff, 0x1002802, 0x4d8a}, {0x400003, 0x2, 0x3, 0x8f}, {0x8000008, 0xd16e, 0x81ec, 0x6}, {0x2, 0x836, 0x17, 0x5}, {0x2, 0x87e, 0x5, 0x9}, {0x8, 0x90, 0xd1b, 0x88}, {0x1c4, 0x8000405, 0x2, 0x452c8391}, {0x3, 0x6, 0x20004, 0xc}, {0xb8d, 0x4, 0x8}, {0x29a71720, 0xffffdffa, 0x1, 0x6}, {0x2, 0x7, 0xfffffff9, 0xffffff7f}, {0x2, 0x8, 0x1002}]}) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='W\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) close(r0) socket$inet(0x2, 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xc008441d, &(0x7f0000000000)={0x22, 0x8, 0x2, 0x0, "cd0001f0ffff81baab4c8c6d09b975390a000004", 0x8000, 0x6}) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r5 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x1) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, &(0x7f0000000140)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIONBIO(r4, 0xc0307004, &(0x7f0000000140)=0x1) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x1000000029, 0x32, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0xfffffffffffffdb0) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) 280.008826ms ago: executing program 5 (id=206): mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1490403e87825048, 0x10, 0xffffffffffffffff, 0x7) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000040)) 279.475199ms ago: executing program 7 (id=207): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000340), 0xd4e688a67930cd) openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3}, {0x0, 0xc8}, {0x5, 0x2}, {0x0, 0xff}, {0x2}, {0x1}, {0x3, 0xfffffffd}, {}, {}, {0x0, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x3}, {}, {0x1, 0xfffffffc}, {0x2, 0xc3f}, {}, {}, {0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0x1}, {}, {}, {0x1, 0x57fd}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) execve(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000280)="b1000501600000000000000007000000201c13fecea10500fef96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc2576b9a5f139b672f4d335d223e7d026ba8af63003728211e000000720fd38bfbb770c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c500002002fb00000000008abfba09000000ec1d89e000040781e4b2fff040ff00"/177, 0xb1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) kevent(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0, &(0x7f0000000240)={0x80000000, 0x3}) mknod(&(0x7f0000000080)='./file0\x00', 0x6000, 0x202) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) link(&(0x7f00000005c0)='./bus\x00', &(0x7f0000000600)='./file0\x00') open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x2, 0x1, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) r5 = dup2(r4, r3) fcntl$dupfd(r1, 0xa, r5) sendmsg$unix(r3, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x8) mkdir(0x0, 0x10) 208.135295ms ago: executing program 4 (id=208): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x110, 0x48e}, 0x6, 0x9, 0x0, 0x0, 0x100000004, 0xb000000000000000, 0x9, 0xb}) r0 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x310, 0x4000}, 0x100000000006, 0x861, 0xffffffffffffffff, 0x0, 0x80000000000000, 0xfffffffe, 0xb, 0x7}) r1 = socket(0x800000018, 0x1, 0x0) getuid() setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0xb, 0x4) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000080)={0x7, 0x3b6e0000, 0xffffffff, 0x7, "0f6b3a747332e64674b02cf8d57e92617f75a3d6", 0x7, 0x4}) r2 = socket(0x800000018, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0}, 0x1842) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r3, &(0x7f0000000240)="b10086af5b360400000000003501042283c4b6b43b95f6f0e30200004991f7aacf5f882b295dbdaa0500000051e2f0ad3ebbc257699a1f4548996b82e6f0ac84fb9f139b67304d335c223e7d0c132bfa896443a42102000000720fd18bfb695564b67000000080040000000000000000002002fbfe0c2300008abfb71d89e000040502000001000000003e4b45a827dde6070000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000b6", 0xc2, 0x0, 0x0, 0x0) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) 202.163292ms ago: executing program 5 (id=209): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x7, 0x8, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x765f}, {0x7, 0x6, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0xafd}, {0x1, 0x800, 0x7}, {0x10401, 0x7fffffff, 0xe, 0x7}, {0x2, 0x5, 0x10003, 0x99}, {0xcdf, 0x1, 0x4f4, 0x6f}, {0x7, 0x6, 0x14, 0xb}, {0x2, 0x2, 0x4, 0x9}, {0x6, 0x8001, 0x4, 0x88}, {0xffffffc9, 0x10001, 0x9, 0xaeb}, {0x2, 0x9, 0x4, 0x5}, {0xb8c, 0x4004, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x7, 0x6}, {0x7, 0x205, 0x1}, {0xffffffff, 0x1, 0x4, 0x30000}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r0, 0x80047476, &(0x7f00000003c0)) r1 = socket(0x18, 0x3, 0x50) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000080)=0x4) ioctl$FIONREAD(r1, 0x8020699f, &(0x7f00000001c0)) 201.520409ms ago: executing program 6 (id=210): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x4f64, {0x0, 0x10000000000002}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000000), 0x10) connect$unix(r2, &(0x7f0000000000), 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) r3 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080)=0x83, 0x4) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r6, 0x4) ioctl$FIONBIO(r6, 0x8004667e, &(0x7f00000000c0)=0x2) accept$unix(r6, 0x0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r5, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000100)=[{0x4, 0x8}, {0x22, 0x5}], 0x2}) 729.566µs ago: executing program 6 (id=211): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x6, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x4, 0x40, 0x1, 0x800440}, {0x80, 0x85, 0x0, 0xa}, {0x16, 0x3, 0x0, 0x48a6}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) writev(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)="d3b6e8e656ffffffffffffff5e0000000000000000001c158100000011000000006e7c056199b8bc470000000000000069f73a0ef5cdd53e1085298943", 0x3d}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f00000004c0)="766b84e07a8f14f74ad13c601b0b001e9df2a52cbc02284fc157cbbd3f2c9772f90a6f320364b78b49186b36fc", &(0x7f0000000080)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0xe977, 0x81, 0x4, 0x1, 0x802, 0xffffffe8, 0x80000e4c, 0x1, 0x0, 0x3, 0xfffffffffffffffa}) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047466, &(0x7f0000000200)=0x5) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000240)=""/241, 0xf1}], 0x1) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) unveil(0x0, &(0x7f0000000300)='c\x00') ioctl$TIOCSBRK(r3, 0x2000747b) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000140)={0x10001, 0x6, 0xf, 0x3, "6c82b3502478102007a5b997c0466674dcca9ce6", 0x9, 0x6}) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) close(r4) 338.462µs ago: executing program 4 (id=212): r0 = socket(0x2, 0x4001, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/185, 0x4000}], 0x1) writev(r2, &(0x7f0000000080), 0x1000000000000014) r3 = fcntl$dupfd(r0, 0x2, r0) clock_settime(0x2, &(0x7f00000001c0)={0x9, 0x1}) close(r3) r4 = socket(0x2, 0x1, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x24, 0x9, 0x2, 0x2}, {0xb1, 0x10, 0xe4, 0x100}, {0x6, 0xa, 0x83, 0x400f}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000840)="a612165d53", &(0x7f0000000080)=0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@random="91a6e34dd8bb", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x80, 0x1, 0x0, 0x16, 0x0, @rand_addr=0x7, @loopback}, @udp={{0x1, 0x0, 0x8}}}}}}) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x7f, 0x1, 0x0, 0x2}]}) shutdown(r3, 0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f00000000c0)=[{r4, 0x40}], 0x1, 0x9) 0s ago: executing program 5 (id=213): lseek(0xffffffffffffffff, 0x2, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2, @multicast1}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0xb, 0x300, {0x5, 0x4, 0x1, 0x2, 0x2, 0x68, 0x1, 0xed, 0x11, 0x61a, @broadcast}}}}}}) rename(&(0x7f0000000040)='./file2\x00', &(0x7f0000000140)='./file0\x00') chdir(&(0x7f00000001c0)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x64, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) mkdir(&(0x7f0000000080)='./file0\x00', 0x83) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@broadcast, @remote, [], {@generic={0x800, "d3ff78a4d880f79fd2d629682e24793461dd56b12d7447e9490f1fe2e2a5898546aa0d74671a75781caa70fc4cff8949b0d56f79169de91c9d0f39ee93399f3a1b8fd7ce0afdb80db1044a6cff054839e3df24c30235fb1154b76bb01817ff87"}}}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x14, 0x3, 0x27, 0x7}, {0x84, 0x2, 0xff, 0x802}, {0x96, 0x3, 0x80}]}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$BIOCGDLTLIST(r1, 0xc010427b, &(0x7f0000000240)={0x8, &(0x7f0000000200)=[0x9, 0x7, 0x1, 0x71f, 0x6, 0x7, 0x2, 0xfffffff7]}) syz_emit_ethernet(0x10004, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0xc8c8fb6356f239c1, 0x16, 0x0, @rand_addr="fe000000020000ff80d14400002000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000100)=0x6) sysctl$hw(&(0x7f0000005580)={0x6, 0x13}, 0x2, &(0x7f00000055c0), 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error attempt to access user address 0x8a5c3712000 in supervisor mode kernel: page fault trap, code=3 Stopped at copyout+0x57: repe movsq (%rsi),%es:(%rdi) TID PID UID PRFLAGS PFLAGS CPU COMMAND 13278 3033 0 0x40 0 1 syz-executor *500668 41638 0 0x2 0 0K syz-executor copyout() at copyout+0x57 ufs_readdir(ffff80002a396ac0) at ufs_readdir+0x419 VOP_READDIR(fffffd80606905e8,ffff80002a396b40,fffffd80097fb410,ffff80002a396b84) at VOP_READDIR+0x126 sys_getdents(ffff8000ffffca48,ffff80002a396ce0,ffff80002a396c30) at sys_getdents+0x2f2 syscall(ffff80002a396ce0) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x775d308daae0, count: 9 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: attempt to access user address 0x8a5c3712000 in supervisor mode ddb{0}> trace copyout() at copyout+0x57 ufs_readdir(ffff80002a396ac0) at ufs_readdir+0x419 VOP_READDIR(fffffd80606905e8,ffff80002a396b40,fffffd80097fb410,ffff80002a396b84) at VOP_READDIR+0x126 sys_getdents(ffff8000ffffca48,ffff80002a396ce0,ffff80002a396c30) at sys_getdents+0x2f2 syscall(ffff80002a396ce0) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x775d308daae0, count: -6 ddb{0}> show registers rdi 0x8a5c3712000 rsi 0xffff80002a3968e8 rbp 0xffff80002a3968d0 rbx 0xffff80002a396b70 rdx 0xffff80002a391000 rcx 0x4 rax 0x20 r8 0x7f7fffffc000 r9 0 r10 0x2462589bbab94781 r11 0xffffffff82a3e8e0 copy_fault r12 0x8a5c3712000 r13 0x20 r14 0xffff80002a396b40 r15 0 rip 0xffffffff82a3e807 copyout+0x57 cs 0x8 rflags 0x50202 acpi_pdirpa+0x3c073 rsp 0xffff80002a396820 ss 0x10 copyout+0x57: repe movsq (%rsi),%es:(%rdi) ddb{0}> show proc PROC (syz-executor) tid=500668 pid=41638 tcnt=1 stat=onproc flags process=2 proc=0 runpri=50, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002a2bb498,0xffff8000ffffd498 process=0xffff80002a39ba38 user=0xffff80002a391000, vmspace=0xfffffd800b0261e0 estcpu=36, cpticks=1, pctcpu=0.6, user=0, sys=16, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 3033 13278 87658 0 7 0x40 syz-executor 90418 158053 96543 0 2 0 syz-executor 90418 196374 96543 0 2 0x4000000 syz-executor 90418 420798 96543 0 3 0x4000080 fsleep syz-executor 4844 399188 19620 0 2 0 syz-executor 4844 469984 19620 0 3 0x4000080 fsleep syz-executor 4844 178042 19620 0 3 0x4000080 fsleep syz-executor 4844 360874 19620 0 3 0x4000080 fsleep syz-executor 4844 357795 19620 0 3 0x4000080 fsleep syz-executor 11990 147806 24779 0 2 0 syz-executor 11990 481227 24779 0 3 0x4000080 fsleep syz-executor 11990 260452 24779 0 3 0x4000080 fsleep syz-executor 11990 306850 24779 0 3 0x4000080 fsleep syz-executor 11990 471850 24779 0 3 0x4000080 fsleep syz-executor 87658 37193 70511 0 3 0x82 ppwait syz-executor 7803 194920 0 0 3 0x14200 acct acct 44369 132851 0 0 3 0x14200 bored sosplice 62406 382268 54781 0 3 0x100082 sbwait ndp 40966 406537 93409 0 3 0x100082 sbwait ndp 93409 175481 34026 0 3 0x10008a sigsusp sh 54781 229160 30436 0 3 0x10008a sigsusp sh 19620 497712 70511 0 2 0xc82 syz-executor 43281 360452 70511 0 2 0x2 syz-executor *41638 500668 70511 0 7 0x2 syz-executor 96543 9556 70511 0 3 0x82 nanoslp syz-executor 24779 343800 70511 0 3 0x82 nanoslp syz-executor 30436 162242 70511 0 3 0x82 wait syz-executor 34026 459395 70511 0 3 0x82 wait syz-executor 70511 398553 59597 0 2 0x2 syz-executor 59597 499746 93198 0 3 0x10008a sigsusp ksh 93198 278213 84029 0 3 0x98 kqread sshd-session 84029 8957 13864 0 3 0x92 kqread sshd-session 98166 88865 1 0 3 0x100083 ttyin getty 13864 211824 1 0 3 0x88 kqread sshd 46733 86087 32415 74 3 0x1100092 bpf pflogd 32415 289620 1 0 3 0x80 sbwait pflogd 66952 233783 86991 73 3 0x1100090 kqread syslogd 86991 81579 1 0 3 0x100082 sbwait syslogd 22885 350867 1 0 3 0x100080 kqread resolvd 95526 208348 83732 77 3 0x100092 kqread dhcpleased 22978 198113 83732 77 3 0x100092 kqread dhcpleased 83732 418445 1 0 3 0x80 kqread dhcpleased 62570 24 0 0 3 0x14200 bored smr 18141 30340 0 0 2 0x14200 zerothread 69022 324656 0 0 3 0x14200 aiodoned aiodoned 65430 7386 0 0 3 0x14200 syncer update 55013 501687 0 0 3 0x14200 cleaner cleaner 84177 329701 0 0 3 0x14200 reaper reaper 99983 7946 0 0 3 0x14200 pgdaemon pagedaemon 43686 117855 0 0 3 0x14200 bored viomb 15458 111062 0 0 3 0x40014200 acpi0 acpi0 45054 163451 0 0 3 0x40014200 idle1 71899 461855 0 0 3 0x14200 bored softnet3 1473 481587 0 0 3 0x14200 bored softnet2 35371 388528 0 0 3 0x14200 bored softnet1 50626 322644 0 0 2 0x14200 softnet0 84427 149614 0 0 3 0x14200 bored systqmp 23839 516704 0 0 3 0x14200 bored systq 44544 518878 0 0 3 0x14200 tmoslp softclockmp 19932 475463 0 0 2 0x40014200 softclock 63847 470847 0 0 3 0x40014200 idle0 1 348400 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{0}> show all locks Process 43281 (syz-executor) thread 0xffff8000ffffd488 (360452) exclusive rrwlock inode r = 0 (0xfffffd806bff8e20) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xb08 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806bff8be0) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 cache_lookup+0x36e #7 ufs_lookup+0x21b #8 VOP_LOOKUP+0x6e #9 vfs_lookup+0x8fa #10 namei+0x7aa #11 dounlinkat+0xc1 #12 syscall+0xb08 #13 Xsyscall+0x128 Process 41638 (syz-executor) thread 0xffff8000ffffca48 (500668) exclusive rrwlock inode r = 0 (0xfffffd806bff8880) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x377 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 sys_getdents+0x264 #6 syscall+0xb08 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff838ce1f0) #0 witness_lock+0x5bb #1 syscall+0xae6 #2 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10219 11175K 11303K 166960K 11567 0 pcb 17 12K 12K 166960K 42 0 rtable 219 10K 10K 166960K 487 0 pf 39 18K 22K 166960K 88 0 ifaddr 39 6K 8K 166960K 65 0 ifgroup 59 2K 2K 166960K 98 0 sysctl 2 1K 9K 166960K 6 0 counters 70 37K 38K 166960K 108 0 ioctlops 0 0K 4K 166960K 1514 0 iov 0 0K 12K 166960K 16 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1346 85K 85K 166960K 1532 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 18 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 89K 166960K 352 0 sigio 0 0K 0K 166960K 1 0 proc 72 91K 140K 166960K 577 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 27 0 in_multi 78 5K 7K 166960K 112 0 ether_multi 1 0K 0K 166960K 3 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 447 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 235 163K 169K 166960K 4879 0 UVM aobj 7 2K 4K 166960K 8 0 pinsyscall 45 90K 105K 166960K 1447 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 24 0 NDP 13 0K 1K 166960K 41 0 temp 41 8747K 8747K 166960K 6689 0 kqueue 15 24K 27K 166960K 66 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 53 0 47 1 0 1 1 0 8 0 rtentry 176 123 0 30 6 0 6 6 0 8 0 unpcb 144 266 0 248 6 0 6 6 0 8 5 syncache 336 3 0 3 1 1 0 1 0 8 0 tcpcb 736 68 0 62 1 0 1 1 0 8 0 arp 128 21 0 5 1 0 1 1 0 8 0 inpcb 328 336 0 327 7 0 7 7 0 8 6 nd6 144 23 0 6 1 0 1 1 0 8 0 pkpcb 40 5 0 5 1 0 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1192 13 0 13 1 0 1 1 0 8 1 pppxif 1504 4 0 4 1 0 1 1 0 8 1 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 1 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 5 0 2 1 0 1 1 0 8 0 pfanchor 1288 1 0 0 1 0 1 1 0 8 0 pftag 88 2 0 0 1 0 1 1 0 8 0 pfstitem 24 31 0 1 1 0 1 1 0 8 0 pfstkey 128 31 0 1 1 0 1 1 0 8 0 pfstate 384 31 0 1 3 0 3 3 0 8 0 pfrule 1344 23 0 16 2 0 2 2 0 8 0 art_heap8 4096 3 0 0 3 0 3 3 0 8 0 art_heap4 256 482 0 108 29 0 29 29 0 8 2 art_table 32 485 0 108 4 0 4 4 0 8 0 art_node 16 121 0 36 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semupl 112 3 0 3 1 0 1 1 0 8 1 semapl 112 3 0 1 1 0 1 1 0 8 0 shmpl 112 5 0 1 1 0 1 1 0 8 0 dirhash 1024 21 0 4 3 0 3 3 0 8 0 dino2pl 256 1942 0 435 95 0 95 95 0 8 0 ffsino 288 1942 0 435 109 0 109 109 0 8 0 nchpl 144 2430 0 742 63 0 63 63 0 8 0 uvmvnodes 80 2134 0 0 44 0 44 44 0 8 0 vnodes 216 2134 0 0 119 0 119 119 0 8 0 namei 1024 7896 0 7896 3 1 2 2 0 8 2 percpumem 16 69 0 19 1 0 1 1 0 8 0 pfiaddrpl 120 2 0 1 1 0 1 1 0 8 0 kstatmem 264 54 0 24 3 0 3 3 0 8 1 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 7779 0 7779 4 1 3 3 1 8 3 plimitpl 152 98 0 81 1 0 1 1 0 8 0 sigapl 424 651 0 599 7 0 7 7 0 8 0 knotepl 120 556 0 0 17 0 17 17 0 8 0 kqueuepl 224 97 0 86 2 0 2 2 0 8 1 pipepl 336 124 0 95 3 0 3 3 0 8 0 fdescpl 520 630 0 598 3 0 3 3 0 8 0 filepl 160 3194 0 2969 18 1 17 18 0 8 7 lockfpl 104 67 0 65 1 0 1 1 0 8 0 lockfspl 48 32 0 30 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 33 0 16 1 0 1 1 0 8 0 ucredpl 104 271 0 258 1 0 1 1 0 8 0 zombiepl 144 599 0 599 1 0 1 1 0 8 1 processpl 1240 651 0 599 5 0 5 5 0 8 0 procpl 656 1027 0 965 6 0 6 6 0 8 0 srpgc 96 4 0 4 1 0 1 1 0 8 1 sosppl 168 1 0 1 1 0 1 1 0 8 1 sockpl 728 664 0 630 16 5 11 16 0 8 7 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 116 0 0 15 0 15 15 0 8 0 mcl2k 2048 31 0 0 4 0 4 4 0 8 0 mtagpl 96 8 0 0 1 0 1 1 0 8 0 mbufpl 256 409 0 0 26 0 26 26 0 8 0 bufpl 280 2803 0 123 192 0 192 192 0 8 0 anonpl 32 5678 0 0 46 0 46 46 0 246 0 amapchunkpl 152 14826 0 14388 24 0 24 24 0 158 4 amappl16 200 2287 0 2266 9 3 6 6 0 8 4 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 113 0 99 1 0 1 1 0 8 0 amappl13 176 51 0 50 1 0 1 1 0 8 0 amappl12 168 1280 0 1247 4 1 3 3 0 8 0 amappl11 160 53 0 39 1 0 1 1 0 8 0 amappl10 152 35 0 35 1 1 0 1 0 8 0 amappl9 144 274 0 274 1 1 0 1 0 8 0 amappl8 136 22 0 20 1 0 1 1 0 8 0 amappl7 128 107 0 93 1 0 1 1 0 8 0 amappl6 120 183 0 178 1 0 1 1 0 8 0 amappl5 112 130 0 121 1 0 1 1 0 8 0 amappl4 104 331 0 309 1 0 1 1 0 8 0 amappl3 96 2696 0 2596 4 0 4 4 0 8 0 amappl2 88 638 0 570 2 0 2 2 0 8 0 amappl1 80 9138 0 8482 16 1 15 15 0 8 1 amappl 88 4175 0 4023 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 7 0 1 1 0 1 1 0 8 0 uaddrrnd 24 630 0 598 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 630 0 598 1 0 1 1 0 8 0 vmmpekpl 168 6733 0 6689 3 0 3 3 0 8 0 vmmpepl 168 46062 0 44086 96 0 96 96 0 357 3 vmsppl 480 629 0 598 5 0 5 5 0 8 0 rwobjpl 72 17160 0 14015 60 1 59 59 0 8 0 pdppl 4096 1268 0 1196 100 22 78 86 0 8 6 pvpl 32 13163 0 0 109 2 107 107 0 265 0 pmappl 256 629 0 598 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 400 0 26 11 0 11 11 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace copyout() at copyout+0x57 ufs_readdir(ffff80002a396ac0) at ufs_readdir+0x419 VOP_READDIR(fffffd80606905e8,ffff80002a396b40,fffffd80097fb410,ffff80002a396b84) at VOP_READDIR+0x126 sys_getdents(ffff8000ffffca48,ffff80002a396ce0,ffff80002a396c30) at sys_getdents+0x2f2 syscall(ffff80002a396ce0) at syscall+0xb08 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x775d308daae0, count: -6 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf syscall(ffff80002b3f31c0) at syscall+0xae6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72b41e9fc9e0, count: 9 ddb{1}> trace x86_ipi_db(ffff8000299ddff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0xf syscall(ffff80002b3f31c0) at syscall+0xae6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x72b41e9fc9e0, count: -6