last executing test programs: 1.300141194s ago: executing program 4 (id=5): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r2 = openat$pci(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$PCIOCREAD(r2, 0xc0107002, &(0x7f0000000100)) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000780)={'tap', 0x0}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) syz_emit_ethernet(0x206, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000001d03aff78042000000014000001000000086500ff02000000000000000000000000000186"]) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000080)={0x0, [{}, {0x0, 0x20000}, {0x0, 0x200}, {0x0, 0xfffffff7}, {}, {}, {0x1}, {0x2}, {0x0, 0x1}, {0x2}, {}, {0x3, 0x3}, {0x3}, {0x0, 0xfffffffa}, {}, {}, {0x2, 0x3}, {0x1}, {0x0, 0x20000}, {0x0, 0x35}, {0x0, 0x9}, {0x1, 0x7}, {}, {0x3}, {0x1}, {0x2, 0x1d}, {0x3, 0x800000}, {}, {}, {0x1}, {}, {0x3, 0x1824}]}) sysctl$kern(&(0x7f0000000000)={0x1, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket(0x2, 0x3, 0x1) connect$unix(r4, &(0x7f0000000000), 0x10) write(r4, &(0x7f0000000180)="39f29fff56576a8d", 0x8) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) closefrom(r0) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f00000005c0)="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", 0x1b1, 0x804, 0x0, 0x0) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x8000, 0xb, 0xc, 0x1}, {0x0, 0x7, 0x7, 0x8}]}) 1.082776294s ago: executing program 4 (id=9): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x47ff, 0x8015, 0x2000007, 0x101, 0x80000001, 0x81ac, 0x4, 0x10, [{0x0, 0x9, 0x2, 0x71002}, {0x2, 0xfff, 0x8, 0xfffffff7}, {0x110, 0xfffff4a1, 0x3ff, 0x9}, {0x1, 0x803, 0x8007, 0xffff}, {0xa, 0x200727, 0x9f7, 0x800007}, {0x1, 0x650, 0x5, 0xcb}, {0xce1, 0xffffffff, 0x1, 0x6d}, {0xffe, 0x7ff, 0x14, 0xc}, {0x2, 0x200083, 0x8000006, 0x5}, {0x6a76, 0x8003, 0x8001, 0x4}, {0xc, 0x10003, 0xe, 0x3}, {0x8, 0x9, 0x8, 0x7}, {0xb8b, 0x555981a7, 0x3, 0x6}, {0x29a71717, 0xfffffff6, 0x2, 0x7}, {0xd, 0x3, 0x15, 0x10000000}, {0x4, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b40)="00000000c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b1400000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x2) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000002a40), 0x80, 0x0) ioctl$TIOCSETA(r4, 0xc4504449, &(0x7f0000000740)={0x0, 0x4000, 0x2f00, 0xf, "3901224200", 0x2007, 0x10}) closefrom(r3) socket(0x1, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt(r5, 0x0, 0x1f, 0x0, 0x0) mmap(&(0x7f0000a77000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0xffffffffffffffff) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x2}, {0x0, 0xfffffffb}, {}, {0x0, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x3, 0x2}, {0x0, 0xc8}, {0x5, 0x2}, {0x1, 0xff}, {0x2}, {0x3}, {0x3, 0xfffffffd}, {}, {0x0, 0x3b6}, {0x2, 0x1ff}, {0x1, 0x8}, {0x2, 0xfffeffff}, {}, {0x0, 0x3}, {}, {0x1, 0xfffffffc}, {0x2}, {}, {}, {0x2}, {0x0, 0x3}, {0x0, 0x4}, {}, {}, {}, {0x1, 0x57fd}]}) sysctl$kern(&(0x7f0000000080)={0x1, 0x31}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x2, 0x3, 0x0) r7 = dup(r6) setsockopt$inet_opts(r7, 0x0, 0x15, &(0x7f0000000080), 0x0) fchdir(r6) ioctl$DIOCXROLLBACK(r1, 0xc0104453, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000180)=[{0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2}, {0x0, './file0\x00', 0x80}, {0x1, './file0\x00', 0x1082}, {0x0, './file0\x00', 0x1}, {0x0, './file0\x00'}, {0x1, './file0\x00', 0x1}, {0x0, './file0\x00', 0xe}, {0x0, './file0\x00', 0x3734}, {0x1, './file0\x00', 0x2}, {0xf7a47f653b61fa5e, './file0\x00', 0x81}]}) futimens(r1, &(0x7f0000002a00)=[{0x0, 0x10001}, {0xf9, 0x10}]) 1.08223526s ago: executing program 4 (id=10): ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x18, 0x2, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x18, 0x0, 0x26}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc018696c, &(0x7f00000001c0)) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffd4c96b7235fc20dbfeaf73089078ac1400bb85cc000294040001110090780200000000000000e65ff13bc4a4f8503d5765ad8dc761ba9c77c482d46973e66e51a88a569e95491c2bad07000000000000009e7b6344996122eb11132ef36e61eedac50baa05b8c9e5257d6235dfd3ce02"]) 1.082020081s ago: executing program 4 (id=11): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0x102) fcntl$setstatus(r1, 0x4, 0x40) closefrom(r0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x811, r2, 0x0) 1.081318488s ago: executing program 0 (id=1): ioctl$DIOCRADDADDRS(0xffffffffffffff9c, 0xc4504443, &(0x7f0000000300)={{'./file0\x00', './file0\x00', 0x7, 0x5}, &(0x7f0000000100)=[{@local={0xac, 0x14, 0x0}, '\x00', '\x00', 0x80, 0x5, 0x0, 0x2, 0x10, 0x2, 0xf}, {@loopback, '\x00', './file0\x00', 0x100, 0x2, 0x2, 0xe, 0x1, 0x0, 0xff}, {@empty, '\x00', './file0\x00', 0x2, 0x1000, 0x18, 0xf6, 0x7f, 0x0, 0x4}, {@local={0xac, 0x14, 0x0}, '\x00', './file0/file0\x00', 0x0, 0x6d, 0x1a, 0x1, 0x80, 0x2, 0xfd}, {@loopback, '\x00', './file0\x00', 0x0, 0x9, 0x0, 0x3, 0x0, 0x3, 0xb}, {@multicast1, '\x00', './file0\x00', 0x0, 0x11, 0x18, 0x85, 0x2, 0x4, 0x1b}, {@empty, '\x00', './file0\x00', 0x7, 0x8, 0x32, 0x10, 0x9, 0xbc, 0x5}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xb, 0x4, 0x30, 0xc, 0xf, 0x3, 0x5}, {@local={0xac, 0x14, 0x0}, '\x00', './file0/file0\x00', 0x8, 0x3, 0x2, 0x8, 0xfb, 0x8, 0x4}], 0x10, 0x9, 0x5, 0x8000, 0x8001, 0x9, 0x18, 0x1ff}) r0 = openat$klog(0xffffffffffffff9c, &(0x7f0000000080), 0x8, 0x0) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f00000000c0)=0xffffff1b) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x64c8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x0) pread(r0, &(0x7f0000000780)="84d6a0a31cb4e89cb26d158ecd5464da22b4fffc8d84e6b8d7fbd675fe981f797ab137f2755627000fe8ef2a5d6824ef39ab96de7d8d5e453b7f89d4a164", 0x3e, 0x8000) 1.079957591s ago: executing program 2 (id=3): ioctl$BIOCSDLT(0xffffffffffffff9c, 0x8004427a, &(0x7f0000000000)=0x4) openat$vmm(0xffffffffffffff9c, &(0x7f0000000500), 0x8, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff], [], [], [0x0, 0x0, 0xffffffffffffffff], [{}, {}, {0x0, 0x0, 0x0, 0x800000000000}]}}) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) kevent(r0, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) r1 = socket$inet(0x2, 0x1, 0xf1) getsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000040)=""/135, &(0x7f0000000100)=0x87) 1.076594581s ago: executing program 4 (id=12): r0 = socket(0x18, 0x2, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffdff86dd6036ea0700fe8000000000000000000000000000aaff", @ANYRES16, @ANYRES8]) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r1 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0x29) (async) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r2, 0x80045710, &(0x7f00000000c0)=0x200) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x0, 0x0, 0x80000001, 0xa1b0, 0x40010001, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x101, 0x6, 0xfffffffc, 0x9}, {0x4, 0x800, 0x8007, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4f4, 0x9}, {0x6, 0x0, 0x14, 0x8}, {0x2000002, 0x82, 0x5, 0x2}, {0x3, 0x8009, 0x1000, 0x4}, {0x1ca, 0x800, 0xc, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x8}, {0x1100c, 0x5, 0x5, 0x4}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) setreuid(0x0, 0xee01) (async) setresuid(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1}, {0x1, 0xfffffffc}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0xaa59}, {0x2, 0xfffffe00}, {0x3, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x7fff}, {0x2, 0x4}, {0x1, 0x1}, {0x2}, {0x0, 0xffffffff}, {0x3, 0x7ff}, {0x1}, {0x2}, {0x3}, {0x3, 0xfffffffd}, {}, {0x2, 0x1}, {}, {0x0, 0x200}, {0x2}, {0x1, 0xfff7fffd}, {0x1, 0xa}, {0x2}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 1.071874512s ago: executing program 6 (id=7): socket$unix(0x1, 0x5, 0x0) (async) select(0x40, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x40000, 0x100, 0x3560000000000, 0x0, 0x80000000000000}, &(0x7f0000000200)={0xcea, 0x20010, 0x80000002, 0x1, 0x1, 0x3, 0x80000000000001, 0xfffffffffffffffe}, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb"]) (async) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b180bc3eb987ab7fe", 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$WSMUXIO_INJECTEVENT(r2, 0x80185760, &(0x7f0000000080)={0x0, 0x6, {0x7, 0x5}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000001480)=[{0x0}], 0x1) (async) shutdown(r3, 0x2) 248.392µs ago: executing program 4 (id=13): mprotect(&(0x7f00000ac000/0x3000)=nil, 0x3000, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1100) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x24, 0x2, 0x0) (async) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) (async) listen(r2, 0x7fff) sysctl$kern(&(0x7f0000000080)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0xfffc}}}}}}) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x8, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x40000000000, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x161b, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0x10000, 0x200000000210, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x3], [{0x5ad, 0x7, 0xfffffffb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0x8, 0xffffffff, 0x2, 0x1}, {0x4, 0x3, 0x2, 0x6}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0xfffffffd, 0x8}, {0xfffb, 0xffffbfc0, 0x4}}}) (async) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$DIOCRGETADDRS(r3, 0xc4504446, &(0x7f00000003c0)={{'./file0\x00', './file0\x00', 0xc, 0x6}, &(0x7f0000000300)=[{@multicast1, '\x00', './file0\x00', 0x6, 0x8000, 0x2, 0x7, 0x9, 0xd, 0xb}, {@broadcast, '\x00', './file0\x00', 0x7, 0x4, 0x18, 0x16, 0x8e, 0x1, 0x4}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7, 0x5, 0x2, 0x2, 0x7, 0x1, 0x4}], 0x8, 0x3, 0x6d75dff3, 0xcbd8, 0xffff8000, 0x90ab, 0x2, 0x3}) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (rerun: 32) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0x80206913, &(0x7f00000001c0)) connect$unix(r1, &(0x7f0000002a00)=@file={0x1}, 0xe0) (async) sysctl$kern(&(0x7f0000000100)={0x1, 0xa}, 0x2, &(0x7f00000011c0)="71f91e30", &(0x7f0000000000)=0x4, 0x0, 0x0) 0s ago: executing program 5 (id=6): munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) utimes(0x0, &(0x7f0000000100)={{0x8000000000007, 0x9020000}, {0xb, 0x2}}) openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCRGETASTATS(0xffffffffffffffff, 0xc4504447, &(0x7f0000000280)={{'./file0\x00', './file0\x00', 0x6a}, &(0x7f0000000140)=[{@empty, '\x00', './file0\x00', 0x6, 0x1, 0x1a, 0x4, 0x40, 0xc, 0x5}, {@multicast2, '\x00', './file0\x00', 0x5, 0x7, 0x0, 0x8, 0xd, 0x4, 0x3}, {@multicast1, '\x00', './file0\x00', 0x5, 0x7, 0x2, 0x5, 0xa1, 0xef, 0x43}, {@multicast1, '\x00', './file0aaaaaaaaa', 0x2, 0x4, 0x18, 0xb, 0x10, 0x6, 0x3}, {@empty, '\x00', './file0\x00', 0x9, 0x402, 0x2, 0x6, 0x6, 0xfd, 0x9}, {@rand_addr=0x7, '\x00', './file0\x00', 0x6, 0x9, 0x18, 0x4d, 0x4, 0xe8, 0xb}], 0x3, 0x6, 0x6, 0x29bd, 0x200, 0x4, 0x40, 0x4}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. panic: ffs2_balloc: unwind failed Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 60333 72267 0 0 0 0 syz-executor *440451 72267 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff833d72da) at panic+0x1e5 ffs2_balloc(fffffd806a0f8270,40000000006,1,fffffd80097fd270,1,ffff80003c47b360) at ffs2_balloc+0x1961 ffs_truncate(fffffd806a0f8270,40000000007,0,fffffd80097fd270) at ffs_truncate+0x410 ufs_setattr(ffff80003c47b480) at ufs_setattr+0x8e9 VOP_SETATTR(fffffd8066c8ab00,ffff80003c47b508,fffffd80097fd270,ffff80003c4682c8) at VOP_SETATTR+0x11b dotruncate(ffff80003c4682c8,fffffd8066c8ab00,40000000007) at dotruncate+0x1da sys_ftruncate(ffff80003c4682c8,ffff80003c47b730,ffff80003c47b680) at sys_ftruncate+0x20a syscall(ffff80003c47b730) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9dff4dddcd0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: ffs2_balloc: unwind failed ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833d72da) at panic+0x1e5 ffs2_balloc(fffffd806a0f8270,40000000006,1,fffffd80097fd270,1,ffff80003c47b360) at ffs2_balloc+0x1961 ffs_truncate(fffffd806a0f8270,40000000007,0,fffffd80097fd270) at ffs_truncate+0x410 ufs_setattr(ffff80003c47b480) at ufs_setattr+0x8e9 VOP_SETATTR(fffffd8066c8ab00,ffff80003c47b508,fffffd80097fd270,ffff80003c4682c8) at VOP_SETATTR+0x11b dotruncate(ffff80003c4682c8,fffffd8066c8ab00,40000000007) at dotruncate+0x1da sys_ftruncate(ffff80003c4682c8,ffff80003c47b730,ffff80003c47b680) at sys_ftruncate+0x20a syscall(ffff80003c47b730) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9dff4dddcd0, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c47afc0 rbx 0xffff8000299bee07 rdx 0 rcx 0xffff80003c4682c8 rax 0xffff8000299bdff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x5e55a24b0599fbc0 r11 0x9fd5ee69eabbc3af r12 0xffff8000299bec08 r13 0 r14 0 r15 0x1 rip 0xffffffff810ba845 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c47afb0 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=440451 pid=72267 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=63, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c4687f8,0xffff80003c469798 process=0xffff8000fffee1c8 user=0xffff80003c476000, vmspace=0xfffffd80687a37c0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 1050 401149 74724 0 2 0 syz-executor 1050 179478 74724 0 3 0x4000080 fsleep syz-executor 72267 60333 43764 0 7 0 syz-executor 72267 24333 43764 0 3 0x4000080 fsleep syz-executor *72267 440451 43764 0 7 0x4000000 syz-executor 72267 136165 43764 0 3 0x4000080 fsleep syz-executor 26616 105157 16277 0 2 0 syz-executor 26616 258824 16277 0 3 0x4000080 kqsel syz-executor 80802 324230 47575 0 3 0x80 nanoslp syz-executor 80802 334246 47575 0 3 0x4000080 fsleep syz-executor 80802 231849 47575 0 3 0x4000080 fsleep syz-executor 80802 207444 47575 0 3 0x4000080 fsleep syz-executor 42740 384353 26074 0 2 0 syz-executor 49197 426350 51282 0 2 0x2 sh 33953 147141 57365 0 2 0 syz-executor 89300 241173 27325 0 2 0 syz-executor 89300 458121 27325 0 3 0x4000080 fsleep syz-executor 60811 63824 0 0 3 0x14280 nfsidl nfsio 28472 484496 0 0 3 0x14280 nfsidl nfsio 20263 355077 0 0 3 0x14280 nfsidl nfsio 62815 162430 0 0 3 0x14280 nfsidl nfsio 23579 260301 0 0 3 0x14280 nfsidl nfsio 62027 133465 0 0 3 0x14280 nfsidl nfsio 32622 147120 0 0 3 0x14280 nfsidl nfsio 89684 272760 0 0 3 0x14280 nfsidl nfsio 90293 113495 0 0 3 0x14280 nfsidl nfsio 65569 180703 0 0 3 0x14280 nfsidl nfsio 3942 16759 0 0 3 0x14280 nfsidl nfsio 43740 349345 0 0 3 0x14280 nfsidl nfsio 16302 399288 0 0 3 0x14280 nfsidl nfsio 18279 362524 0 0 3 0x14280 nfsidl nfsio 94168 215777 0 0 3 0x14280 nfsidl nfsio 317 47364 0 0 3 0x14280 nfsidl nfsio 10637 166801 0 0 3 0x14280 nfsidl nfsio 60467 149879 0 0 3 0x14280 nfsidl nfsio 63249 364118 0 0 3 0x14280 nfsidl nfsio 96336 304081 0 0 3 0x14280 nfsidl nfsio 74724 120985 97965 0 3 0x82 nanoslp syz-executor 57365 34358 97965 0 3 0x82 nanoslp syz-executor 26074 343111 97965 0 3 0x82 nanoslp syz-executor 47575 408806 97965 0 3 0x82 nanoslp syz-executor 43764 373106 97965 0 3 0x82 nanoslp syz-executor 27325 280275 97965 0 3 0x82 nanoslp syz-executor 51282 387085 97965 0 3 0x82 wait syz-executor 16277 5066 97965 0 3 0x82 nanoslp syz-executor 97965 334440 99761 0 3 0x82 kqread syz-executor 99761 245091 72540 0 3 0x10008a sigsusp ksh 72540 398651 21562 0 3 0x98 kqread sshd-session 21562 342629 46034 0 3 0x92 kqread sshd-session 67833 39042 1 0 3 0x100083 ttyin getty 46034 196118 1 0 3 0x88 kqread sshd 17749 262358 65678 74 3 0x1100092 bpf pflogd 65678 58806 1 0 3 0x80 sbwait pflogd 69238 445388 26859 73 3 0x1100090 kqread syslogd 26859 262316 1 0 3 0x100082 sbwait syslogd 42436 446518 1 0 3 0x100080 kqread resolvd 13885 85980 40907 77 3 0x100092 kqread dhcpleased 29480 447927 40907 77 3 0x100092 kqread dhcpleased 40907 236039 1 0 3 0x80 kqread dhcpleased 14688 360924 0 0 3 0x14200 bored smr 44809 162581 0 0 2 0x14200 zerothread 15018 159998 0 0 3 0x14200 aiodoned aiodoned 75525 235806 0 0 3 0x14200 syncer update 67719 405619 0 0 3 0x14200 cleaner cleaner 92178 308244 0 0 3 0x14200 reaper reaper 14433 67234 0 0 3 0x14200 pgdaemon pagedaemon 12757 439838 0 0 3 0x14200 bored viomb 90801 257624 0 0 3 0x40014200 acpi0 acpi0 68236 31471 0 0 3 0x40014200 idle1 74941 353129 0 0 3 0x14200 bored softnet1 80581 454842 0 0 3 0x14200 bored softnet0 16032 402425 0 0 3 0x14200 smrbar systqmp 19903 205585 0 0 3 0x14200 bored systq 12196 349983 0 0 3 0x14200 tmoslp softclockmp 9161 341648 0 0 3 0x40014200 tmoslp softclock 78607 370063 0 0 3 0x40014200 idle0 1 428696 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 72267 (syz-executor) thread 0xffff80003c4682c8 (440451) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839dd2c0) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 biowait+0xc6 #4 bwrite+0x2e7 #5 ffs2_balloc+0xc24 #6 ffs_truncate+0x410 #7 ufs_setattr+0x8e9 #8 VOP_SETATTR+0x11b #9 dotruncate+0x1da #10 sys_ftruncate+0x20a #11 syscall+0xb17 #12 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806a0f8310) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 sys_ftruncate+0x1f1 #6 syscall+0xb17 #7 Xsyscall+0x128 Process 16032 (systqmp) thread 0xffff8000ffffea60 (402425) shared rwlock systqmp r = 0 (0xffffffff8389da88) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11053 12084K 12178K 166960K 12156 0 pcb 18 12K 12K 166960K 18 0 rtable 235 6K 6K 166960K 345 0 pf 34 17K 18K 166960K 45 0 ifaddr 43 7K 7K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 1485 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1291 81K 81K 166960K 1370 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 143 0 proc 70 115K 147K 166960K 552 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 25 122K 122K 166960K 25 0 exec 0 0K 1K 166960K 377 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 227 175K 185K 166960K 3046 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 43 86K 104K 166960K 1277 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 13 0K 2K 166960K 28 0 temp 34 9070K 9134K 166960K 4051 0 kqueue 13 20K 20K 166960K 22 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 33 0 30 1 0 1 1 0 8 0 rtentry 176 110 0 1 5 0 5 5 0 8 0 unpcb 144 36 0 19 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 10 0 4 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 79 0 67 1 0 1 1 0 8 0 nd6 152 23 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 19 0 0 1 0 1 1 0 8 0 pfstkey 128 19 0 0 1 0 1 1 0 8 0 pfstate 448 19 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 451 0 0 29 0 29 29 0 8 0 art_table 40 452 0 0 5 0 5 5 0 8 0 art_node 32 110 0 10 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1582 0 115 92 0 92 92 0 8 0 ffsino 296 1582 0 115 113 0 113 113 0 8 0 nchpl 144 1783 0 80 64 0 64 64 0 8 0 vnodes 216 1673 0 0 93 0 93 93 0 8 0 namei 1024 5371 0 5371 1 0 1 1 0 8 1 percpumem 16 50 0 0 1 0 1 1 0 8 0 kstatmem 264 26 0 0 2 0 2 2 0 8 0 scxspl 216 6076 0 6076 4 1 3 3 1 8 3 plimitpl 152 28 0 10 1 0 1 1 0 8 0 sigapl 424 475 0 407 9 0 9 9 0 8 0 knotepl 120 59 0 0 2 0 2 2 0 8 0 kqueuepl 224 19 0 9 1 0 1 1 0 8 0 pipepl 344 122 0 95 3 0 3 3 0 8 0 fdescpl 528 439 0 407 3 0 3 3 0 8 0 filepl 160 1545 0 1329 9 0 9 9 0 8 0 lockfpl 104 11 0 8 1 0 1 1 0 8 0 lockfspl 48 7 0 4 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 30 0 13 1 0 1 1 0 8 0 ucredpl 104 69 0 56 1 0 1 1 0 8 0 zombiepl 144 407 0 407 1 0 1 1 0 8 1 processpl 1232 475 0 407 6 0 6 6 0 8 0 procpl 664 494 0 417 7 0 7 7 0 8 0 sockpl 752 149 0 116 4 0 4 4 0 8 0 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 121 0 0 16 0 16 16 0 8 0 mcl2k 2048 8 0 0 1 0 1 1 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 133 0 0 9 0 9 9 0 8 0 bufpl 280 2291 0 105 157 0 157 157 0 8 0 anonpl 32 3859 0 0 32 0 32 32 0 246 0 amapchunkpl 152 8435 0 7973 18 0 18 18 0 158 0 amappl16 200 1789 0 1775 5 1 4 5 0 8 3 amappl15 192 64 0 64 1 1 0 1 0 8 0 amappl14 184 432 0 429 1 0 1 1 0 8 0 amappl13 176 122 0 109 1 0 1 1 0 8 0 amappl12 168 684 0 656 2 0 2 2 0 8 0 amappl11 160 8 0 8 1 1 0 1 0 8 0 amappl10 152 81 0 67 1 0 1 1 0 8 0 amappl9 144 266 0 265 1 0 1 1 0 8 0 amappl8 136 112 0 110 1 0 1 1 0 8 0 amappl7 128 142 0 129 1 0 1 1 0 8 0 amappl6 120 165 0 163 1 0 1 1 0 8 0 amappl5 112 91 0 81 1 0 1 1 0 8 0 amappl4 104 285 0 265 1 0 1 1 0 8 0 amappl3 96 1461 0 1357 3 0 3 3 0 8 0 amappl2 88 509 0 451 2 0 2 2 0 8 0 amappl1 80 9309 0 8699 15 0 15 15 0 8 0 amappl 88 2337 0 2183 4 0 4 4 0 92 0 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 439 0 407 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 439 0 407 1 0 1 1 0 8 0 vmmpekpl 168 5379 0 5348 2 0 2 2 0 8 0 vmmpepl 168 36341 0 34456 86 0 86 86 0 357 4 vmsppl 488 438 0 407 5 0 5 5 0 8 0 rwobjpl 80 13595 0 12584 24 0 24 24 0 8 1 pdppl 4096 885 0 814 97 18 79 85 0 8 8 pvpl 32 9135 0 0 75 1 74 75 0 265 0 pmappl 256 438 0 407 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 264 0 21 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff838d7ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x744b6a0a1020, count: 12 ddb{0}> trace x86_ipi_db(ffffffff838d7ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 end of kernel end trace frame: 0x744b6a0a1020, count: -3 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833d72da) at panic+0x1e5 ffs2_balloc(fffffd806a0f8270,40000000006,1,fffffd80097fd270,1,ffff80003c47b360) at ffs2_balloc+0x1961 ffs_truncate(fffffd806a0f8270,40000000007,0,fffffd80097fd270) at ffs_truncate+0x410 ufs_setattr(ffff80003c47b480) at ufs_setattr+0x8e9 VOP_SETATTR(fffffd8066c8ab00,ffff80003c47b508,fffffd80097fd270,ffff80003c4682c8) at VOP_SETATTR+0x11b dotruncate(ffff80003c4682c8,fffffd8066c8ab00,40000000007) at dotruncate+0x1da sys_ftruncate(ffff80003c4682c8,ffff80003c47b730,ffff80003c47b680) at sys_ftruncate+0x20a syscall(ffff80003c47b730) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9dff4dddcd0, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833d72da) at panic+0x1e5 ffs2_balloc(fffffd806a0f8270,40000000006,1,fffffd80097fd270,1,ffff80003c47b360) at ffs2_balloc+0x1961 ffs_truncate(fffffd806a0f8270,40000000007,0,fffffd80097fd270) at ffs_truncate+0x410 ufs_setattr(ffff80003c47b480) at ufs_setattr+0x8e9 VOP_SETATTR(fffffd8066c8ab00,ffff80003c47b508,fffffd80097fd270,ffff80003c4682c8) at VOP_SETATTR+0x11b dotruncate(ffff80003c4682c8,fffffd8066c8ab00,40000000007) at dotruncate+0x1da sys_ftruncate(ffff80003c4682c8,ffff80003c47b730,ffff80003c47b680) at sys_ftruncate+0x20a syscall(ffff80003c47b730) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x9dff4dddcd0, count: -10