kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Wed May 6 11:44:43 PDT 2020 OpenBSD/amd64 (ci-openbsd-multicore-2.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.10.15' (ECDSA) to the list of known hosts. 2020/05/06 11:44:53 fuzzer started 2020/05/06 11:44:57 dialing manager at 10.128.15.235:36008 2020/05/06 11:44:57 syscalls: 338 2020/05/06 11:44:57 code coverage: enabled 2020/05/06 11:44:57 comparison tracing: enabled 2020/05/06 11:44:57 extra coverage: support is not implemented in syzkaller 2020/05/06 11:44:57 setuid sandbox: enabled 2020/05/06 11:44:57 namespace sandbox: support is not implemented in syzkaller 2020/05/06 11:44:57 Android sandbox: support is not implemented in syzkaller 2020/05/06 11:44:57 fault injection: support is not implemented in syzkaller 2020/05/06 11:44:57 leak checking: support is not implemented in syzkaller 2020/05/06 11:44:57 net packet injection: enabled 2020/05/06 11:44:57 net device setup: support is not implemented in syzkaller 2020/05/06 11:44:57 concurrency sanitizer: support is not implemented in syzkaller 2020/05/06 11:44:57 devlink PCI setup: support is not implemented in syzkaller 2020/05/06 11:44:57 USB emulation: support is not implemented in syzkaller 11:45:04 executing program 0: chroot(&(0x7f0000000000)='./file0\x00') r0 = shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffe000/0x1000)=nil) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) r4 = getpgrp() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x3, 0xffffffffffffffff, r1, r2, r3, 0x101, 0x200}, 0x5, 0x1, r4, 0xffffffffffffffff, 0xffffffffffff8001, 0x6, 0x2}) chflags(&(0x7f0000000180)='./file0\x00', 0x1) r5 = dup(0xffffffffffffffff) connect$unix(r5, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0xa) r6 = geteuid() r7 = getgid() chown(&(0x7f0000000200)='./file0\x00', r6, r7) select(0x40, &(0x7f0000000240)={0x40, 0x87, 0x9, 0xef6, 0x5, 0x0, 0x0, 0x8}, &(0x7f0000000280)={0x7, 0x2, 0xfffffffffffffbff, 0x6, 0x18fd, 0x4, 0x1ff, 0x5}, &(0x7f00000002c0)={0x1, 0x1ff, 0x94a, 0x5, 0xd8, 0x100000000, 0x100, 0x2}, &(0x7f0000000300)={0x6fd, 0x5}) socket(0x20, 0x2, 0x5) getgid() fchmodat(r5, &(0x7f0000000340)='./file0/file0\x00', 0x8, 0x8) r8 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) ioctl$WSDISPLAYIO_WSMOUSED(r8, 0x80185758, &(0x7f0000000380)={0x2, 0x3e, {0x1000, 0x1}}) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x450e64fa, "9851f3f28071054b0f9bc21e0d2d59957242d8c0", 0x8, 0x7}) 11:45:04 executing program 1: r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000000)=@file={0x0, ""/108}, &(0x7f0000000080)=0x6e) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) r1 = socket$inet(0x2, 0x2, 0xff) bind(r1, &(0x7f0000000100)=@in={0x2, 0x3}, 0xc) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa) socketpair(0x18, 0x5, 0x7f, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f00000001c0)="2a5cb3d0ddf39e514fc732228bb3a04ba6cb786e7cf4e18c723b65aa6d0d9b94b94c74a80d70d5279c3137385c0661ddb7dad4fa8e097ece199a71a3abb819e8b2b2e4d01a4fd56aad473d7f499feca9244bcc4008d662f2549f8af2cace35d440d5ad943ea1c14e82be61318d5601c90cfa0749c223c81abfb2dc1b8b76e761e98aaefab3ac1e0ad929d54380019d2911a488b32055e159faa742a4d5497f5d269c28059108b4eff72a281841f1074afdc55e19ac89a1777976ee9431817940def524fb4ae7d207a3737dc80e", 0xcd) r3 = accept$inet(0xffffffffffffff9c, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340)) fcntl$dupfd(r3, 0xa, r4) r5 = dup(0xffffffffffffff9c) ioctl$TIOCCDTR(r5, 0x20007478) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x2, 0x0) accept$unix(r6, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$WSMUXIO_INJECTEVENT(r8, 0x80185760, &(0x7f0000000480)={0x1ff, 0x2, {0xfffffffffffffffa, 0x6}}) r9 = dup2(r0, r7) dup(r9) ioctl$TIOCSTSTAMP(0xffffffffffffffff, 0x8008745a, &(0x7f0000000500)={0x1ff, 0xf156}) 11:45:04 executing program 0: nanosleep(&(0x7f0000001c40)={0xf0, 0x7feffffc}, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000240), 0x3fc, 0x0, 0x1, 0x0) 11:45:04 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x100000000204f, 0x5900) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) 11:45:04 executing program 1: mknod(&(0x7f0000000140)='./bus\x00', 0x80002006, 0x20659) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f0000000680)=[{0x0}], 0x1) close(r0) open$dir(&(0x7f0000000240)='./file0\x00', 0x400000002c2, 0x0) execve(0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x8000, 0x18) 11:45:04 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r0, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000000)=@abs, 0x8) dup2(r1, r0) write(r1, 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00') r3 = socket(0x10000000002, 0x2, 0x0) r4 = syz_open_pts() fchmod(r4, 0x100) r5 = dup2(r2, r3) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f00000000c0)=0x3, 0x4) r6 = getppid() getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000180), &(0x7f00000001c0)=0x10) getpgid(r6) poll(&(0x7f0000000100), 0x0, 0x4) 11:45:04 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x2) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000480)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f00000001c0)=[{0x87}, {0x15}, {0x8fe}]}) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="0000000000000000000000000000791b3fd95ca2a1787ab172c3a1796eb31e1b4b9031c53ef345e95ec3840d6c8a23129914f21283863dc0cd9e718159eed83d1b68a66f5b8fe34b75b28ffb1f4446972aa6121e0c2493e9daadeaed555c9edc0241ee75c1921abc23241d8e172729af839e0c6adf738f6c052a4e8e007e81c2d32cd2b385c2763980841a8fa53916aee08f84128ec73b99b2b63594f888213ebdb1900c1c514f67ae8f95713803f31fb6e6989b0ff747bafea0a456f33a6de3ea89"]) 11:45:04 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x45}, {0x74}, {0x6}]}) syz_emit_ethernet(0xe, &(0x7f0000000a80)) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) read(r1, &(0x7f0000001740)=""/4096, 0x1000) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) renameat(r4, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000001640)=""/247, 0xffffffcc}], 0x1, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) fcntl$setstatus(r5, 0x4, 0x80) pwritev(r5, &(0x7f00000003c0), 0x273, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x10, r3, 0x0, 0x8000000000000000) write(r2, &(0x7f0000000100)='w', 0x1) mkdir(&(0x7f0000000280)='./bus\x00', 0x24) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000140)=""/106, 0x6a}], 0x1) 11:45:04 executing program 0: r0 = socket$inet(0x2, 0xc002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000440)="ee08665d19ac14d5e51348771197a7728420aef61715f7b183d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x80) r1 = socket(0x10000000011, 0x8000000003, 0x0) close(r1) r2 = socket(0x18, 0x1, 0x0) r3 = socket(0x800000018, 0x1, 0x59) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r4 = socket$inet(0x2, 0xc002, 0x0) setsockopt$inet_opts(r4, 0x0, 0x1, &(0x7f0000000440)="ee08665d19ac14d5e51348771197a7728420aef61715f7b183d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r4, 0x0, 0x1, 0x0, 0x0) setsockopt(r4, 0x0, 0x9a, &(0x7f0000000100)="dc7b68d1c32757c23fe3f5eed9975d474e99b4444b01e2facdba63bdee04338faa4211eb1e5ff6d820e67eb658914872c2d5145fb18c757c8f4fb728a3b2c6bac8bf5673971ebc9a5ebb107259d9d360e7d8d58ffa0e10c95aed2e0b5bb3ce686dd2ceb6b540c11bbdf60c6e2011ee257f07df28f7d85638bb1a71fd1766482fd746cdcd94ffdbb0821cf46a03f0722d2f5ec91b6ae61957de6a3a55392a36ebe865c635a1b07ea9a1f7d5c3605d129a946649c59524fe50883137b3022de7b08b07c9f35513ee22319adc4b7a9529e80195582f", 0xd4) listen(r3, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "000000000000000100002000"}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r1, 0xffff, 0x2000, &(0x7f00000000c0)=0x2, 0x4) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 11:45:05 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffe, 0x3, 0x1, 0xfffffffffffffff9}], 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="82020000ffffffff"], 0x1) r1 = socket(0x2, 0x8001, 0x0) close(r1) connect$unix(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="82028611e2b2020000006262dd65c84e08c027ad12d417ec80ac134b281be097dff0efa5b32eaf23a299e04d2f45a611829ac19aaf1e936182e881850ecb792fd7a8fcd11c3fc8962eb3a7e61fec776122400e899ee0d3d92501f6a0b61deb75fcfb3ebdb5c50284a1a9d3c07651a434798c3813c7756cca69d82e887d5e6d3aee60a3ede69923f29406004d3bb7f71274e38621a609ff8a45d1c60752698af2b1b17964d885eeb2fa4a619c4627340a640f25a557cbc4b8e3e40d6ad97ae5a93b989c4cad4966ae37ce9ee81f139bcbba39a3e43aee56051efe6ea50b9d7f1b5f5446172de857ca84b4e4454099e9081a06f879c9a9fa340000"], 0x10) writev(r1, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x2}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10, 0x0) sendto$unix(r2, &(0x7f0000000140)="f0d52c51dce5fefe3f984ed0e2872367270fc5b6014342d0c582a1addd7c40051458dd2342d064d9c679f56f41461fd04eff82b3282d28109dd982490198c111c7f54a398195b7be0a17c520b0d421cdb6ae688719fa892cb60cd4cf11273eed15b5fe5ad4f6e61ec8379195102ffe9dee69d979eac7c9e3489abc905b7c039e192ae774acbf1b362d07f7da59381f5c955ab42db5e30e901c9826aae048a0833c96cd7b8726701201e56ba729acd730af2b44eaf38ef4a33fddaae2e574416e3458b9ba90f17b70cd8c2d0880b0328bea75db27e0da098a742a1a6c41010ce0", 0xe0, 0x8, &(0x7f0000000080)=@file={0x1, './file1\x00'}, 0xa) r3 = socket(0x2, 0x3, 0x1) connect$unix(r3, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x10) sendto$unix(r3, &(0x7f0000000100)="749703210f6e83f89087515ab45713442de600d63204af5ca169f5bc55a07c96eb2ffe1c", 0x24, 0x0, 0x0, 0x0) 11:45:05 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x100000001, 0x0, 0x0, 0x101}, {0x14}, {0x3c}, {0x7ffffffe}]}) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$KDSETRAD(r1, 0x20004b43) syz_emit_ethernet(0x3b9, &(0x7f0000000200)) 11:45:05 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x462, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x14}, {0x60}, {0x6, 0x0, 0x0, 0x81}]}) pwrite(r0, &(0x7f0000000240)="fbaf84ea37679be96914f6357e3a", 0xe, 0x0, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f0000000000)=0xf8d) 11:45:05 executing program 0: r0 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$VMM_IOC_WRITEREGS(r0, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x0, 0x3, 0x0, 0xa87], [0x8000, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x9, 0x80], [0x0, 0x0, 0x401], [{0x4}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2000000}, {0x1000}]}}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000980)='/dev/bpf\x00', 0x100, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCFLUSH(r4, 0x8080691a, &(0x7f0000000300)) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$lock(r3, 0x7, &(0x7f0000000080)={0x7, 0x1, 0x5, 0x7, r5}) writev(0xffffffffffffff9c, &(0x7f00000008c0)=[{&(0x7f00000000c0)="4ce1d3cdc393ce0a5e9dfb5c580c8e024f17e11a8538c2a354d88ad7c8cb57e2da711cb25697a8973ff3f4865a9ab27ce2902b3d3980b60e58497c23da943f3be25d06924e84b10ebe9abe4bb6098c7409b99c3f68f3973663f927147775dba8dd8dc0b2248ded4d392b6e0ba3402c4d6f1efdfc2eb4", 0x76}, {&(0x7f0000000140)="c1d1c92789ded4e1d439eac68dc52cbe0a83", 0x12}, {&(0x7f00000004c0)="141f9c6006eea34b51a7ca4a343be70a0e7c2b43c38823b3e90adab7b146a3a477d3c403c15e23296dfaa7655ae4924dc2eb66bf5319ce0c530d33755b4f2342a5992b0317904321bcd30253c120ec23ff139c58fc01db86b3c3f75ac47881d1ba60f29a40e0c5177cb08376a9377e2516a5e3aa4db8310cd45e32ca09cd40c58d95936b960030598062800487c3071af2df94536c097d5805193ea796a0a9", 0x9f}, {&(0x7f0000000580)="1928af9b540e29870293c39a11433e16b89c6732238101a48740d8c2f25237fe9d1451ab692555a5c3f4e69191b93bec5caa4bd566baaefdfac53b8ccdcd03e354ebf1266a47ca844331689ed5f3706236690201cd94c58257171f48c2030f032569b012429db264747014d8f7ebc185b38e65fa53a177647916c4760e7576520561ad23d18230c68f0a1c7152e12ec12c9f01cca193ccb28ddad4d13cd096b23432f9b3f7fd4376a4ce2d747c7f96b648451bd6eb35c836c3bad60ff522949fb6414073af63482937609ffe8b71082c", 0xd0}, {&(0x7f0000000680)="8f7459e8aa78df25c7739fb760c7554cf0b3dfd7951c21a4bbd6ba8526e646b94bed8de8c3c85eb7848ddf68e90af815dbc0b97a40c422c0d343944d9fb2195ba6aef46fc0203c57c2e445561c98946119b60f57de859157db6061c984df71e2153f382fb443bf503f9e20bc8a043ec4d00d285e02d6849c045824afdd55719d48bd12df097837b7c338887053f262a73c8283a31ecbd43a", 0x98}, {&(0x7f00000001c0)="3ef2", 0x2}, {&(0x7f0000000740)="ff97f4ab70ff33bbcae1845fcb3f50ceceeeead8db5ea02a3bebea1e53dfc614d1b0bed069f2fd15bfb27e2e9ee0299b3080b75edf745fa3fb5b1aa577866d1cbf40bc290281274afa13919e32174e34be223cdd9281f8f6be19049fc0e27aca6327996e23e1e8a742a30244cd30f3d9bbb8e1538f10d2c4b714358a1e201a6e1bfd06ec0b0b7870c7fd7b54b02afed7fd6ca961eb16897fa4a78df3044107f9f061737c729a889a42a5fdf53f3af2f920be2ba5f337c973d6e8fbeb3ac7e54c92258a6d89a88e5e97a0edf75cf07571136fbf9bb0b8cb82585990ff50dd7048422913429caa6c25461297f4c906050cf256e79ae19d3bd1c807779e", 0xfc}, {&(0x7f0000000840)="95cabd83272a5ea4962d4c1300dc07b2d66525ed9a6f65e5c54d841d70bc758b2534899ce8d2a19a2df808efcd723fd1ed7e197a43139b5b9ceab323e16507e32b68c44639b6f694a765ff6b1dcae137805e5df3219e72950041", 0x5a}, {&(0x7f0000000200)="52c07c49876099a156a9456e04349056a5228f9d9be658", 0x17}], 0x9) 11:45:05 executing program 1: r0 = open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) r1 = getpid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x10, r1) getpid() r2 = socket(0x11, 0x4003, 0xfd) r3 = socket(0x11, 0x4003, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xa) recvfrom(r0, &(0x7f0000000300)=""/105, 0x69, 0x842, &(0x7f00000002c0)=@un=@abs={0x1, 0x0, 0x0}, 0x8) sendto$unix(r3, &(0x7f0000000000)="b1000513600000000000000020000000000004fecea11ea8fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37281002e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01b1257aea8c500ff0002000000000000020208a371a3f8000400000000000000010000000000000000", 0xb1, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x7, 0x20) semop(r4, &(0x7f0000000100)=[{0x3, 0x7, 0x1000}, {0x3, 0x80}, {0x1, 0x59, 0x800}, {0x0, 0x10001, 0x1000}, {0x3, 0x401, 0x1800}, {0x3, 0x6, 0x800}, {0x0, 0x2, 0x1000}, {0x7, 0x5c, 0x800}, {0x2, 0x4, 0x1000}, {0x5, 0x8, 0x800}], 0xa) semop(r4, &(0x7f0000000340), 0x21) semop(r4, &(0x7f0000000000)=[{0x2, 0x1f, 0x1400}, {0x0, 0x3, 0x800}, {0x4, 0x1}, {0x3, 0xfeff, 0x1000}, {0x4, 0xfff7, 0x400}, {0x5, 0x7, 0x3800}, {0x4, 0x4, 0x1800}], 0x7) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000100)=""/144) r5 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000258f88)) msgctl$IPC_RMID(r5, 0x0) semop(r4, &(0x7f00000000c0)=[{0x3, 0x8, 0x1000}, {0x4, 0x0, 0x800}, {0x4, 0x7fff, 0x1800}, {0x3, 0x3, 0x1000}, {0x0, 0x9}, {0x2, 0x4, 0x1000}, {0x0, 0x6, 0x800}, {0x3, 0xfff8, 0x800}, {0x4, 0x5, 0x800}], 0x9) semctl$GETVAL(r4, 0x1, 0x5, &(0x7f00000001c0)=""/181) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000000140)=@in6, 0x0, &(0x7f0000000180), 0x1000000000000264, 0x0, 0x26a}, 0x0) 11:45:05 executing program 0: syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff5ac2b42469b5f6ac86dd6000000000263a1a00000000000000000000000000000000ff0200000000000000000000000000010100907800000000602484a200002c00ff02000000000000000000000000000122c9d18d594c9364e0560968ddf4da4c11000000000000000100000000000000"]) 11:45:05 executing program 0: r0 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="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", 0xfffffeeb}], 0x1) ioctl$WSDISPLAYIO_SVIDEO(r0, 0x80045745, &(0x7f0000000080)=0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaabb08004500001c0000000000019078ac3400bb0000000008009078000000001ff635c899ac734ce30626d4deba05fa527dfaef24bca571e1984e361fec339a28cc97f1505a8f3d6da8b13218eb5e3843bc1596e03bd5252809b0e5819b837f0ef6748da49d1da168c8"]) 11:45:05 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x10, 0x0) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/wskbd\x00', 0x20, 0x0) r2 = socket(0x2, 0x8001, 0x0) close(r2) connect$unix(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r2, &(0x7f0000000140)=[{0x0}], 0x1) r3 = socket(0x2, 0x8001, 0x0) close(r3) connect$unix(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="82028611e2b2020000006262dd65c84e08c027ad12d417ec80ac134b281be097dff0efa5b32eaf23a299e04d2f45a611829ac19aaf1e936182e881850ecb792fd7a8fcd11c3fc8962eb3a7e61fec776122400e899ee0d3d92501f6a0b61deb75fcfb3ebdb5c50284a1a9d3c07651a434798c3813c7756cca69d82e887d5e6d3aee60a3ede69923f29406004d3bb7f71274e38621a609ff8a45d1c60752698af2b1b17964d885eeb2fa4a619c4627340a640f25a557cbc4b8e3e40d6ad97ae5a93b989c4cad4966ae37ce9ee81f139bcbba39a3e43aee56051efe6ea50b9d7f1b5f5446172de857ca84b4e4454099e9081a06f879c9a9fa340000"], 0x10) writev(r3, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname(r3, &(0x7f0000000280)=@in6, &(0x7f00000002c0)=0xc) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r1, r2) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x64}, {0x7}, {0x6}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0x15c, &(0x7f0000000340)) login: pckbd_enable: command error 11:45:06 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x80) recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@in, 0xc, &(0x7f0000000540)=[{&(0x7f0000000140)=""/222, 0xde}, {&(0x7f0000000240)=""/245, 0xf5}, {&(0x7f0000000340)=""/198, 0xc6}, {&(0x7f0000000080)=""/41, 0x29}, {&(0x7f0000000440)=""/213, 0xd5}], 0x5, &(0x7f00000005c0)=""/65, 0x41}, 0xf8c7228987baa27f) open(&(0x7f0000000100)='./bus\x00', 0x20, 0x0) r1 = socket(0x2, 0x8001, 0x0) close(r1) connect$unix(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r1, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$unix(r1, &(0x7f0000000640)="ecef2a8769dc30ab60c944fee334ee83407c14b6750cbc1edb799df20e1c39acd1fcff98eefeb56eac6711a1f31186737384b564c691605390fe1534002c76b5461d5e89e9e0f90597165ceea864b6c09470956509b7b0f6ddd7aaf4cb02c6184cb76b7276b1f92a1f3ca50cbbf7ea0da4edc870f2cc533a2fd0854d51dfde2e88611d21d0a6b20491330ea251e12e512fb80d3cd9599b359fce61c41d622addb16cb6cd1ab5923ea08ee0e749a17145f74b92036a67012f5b1a670148982576350cde8862aa678136f77480ccb9470ca4171a75c3135a192ea7508124677ec5f177f6d435782b5c9307082fa5e18ee6f1f2e79097899c7281ed539a200d4a6afc6305fcb4181f4d182702b4aeb4bdf30b97f659f01be32b1f44b5009e36f12f7b5a64e03cfa73750e5372d015654a3ea150f422332682805c6367a2e051374c64dc94a07387ca1cc3c93f893e8c98ae94a499cc676546f2d20b28f2e9cc1399a9f947fa5ed86906e1165cd1b1129af4b292fa1d774b72529609c701f81ac4a98b36ef11e13c0981d75b517edf28686248273e71d5811e85d8782ee3c8ee64041d6346ba735c6821d3c98fcaa690980326b607ce173488e1ab4428985c88958ee6394dfa550fc5fb20b221cb8e93a88803d91a8c98516db8005517e929288d757454ea5674f04e1923714ba69bba85bf44f3121cea0b0701853cae4ae3b4e1460bd48bf3abf8b00b75187954da9ff15bf5fd67f68ac1e5a88b4c0e1437942844b0c765122b20331ddbc8dd0c03a414f211103ba7319bcc3d516b0a48889c1c05349ecbbe19ebe9ddc4d35b72e2da3dce8a7979ca1f7a2867108397a2bfea83859ebf2b02a99710a6bb170a0c27d8505415beafbc071bf644807f086aeeeabf6cf1b22ae91c2dba1eb9a8abba127f8d382e409bb5a2418f9a80ed9051ab56deae7fa7b02752ce86b59b3467d6487faef974b2c85072245346f97ebd5bcc6da9e5ba92297e80105fa81e5050e48f4695397caea940c7a94af5cca6ff72aa6dc230e920fbea334a56feec0ef768cb5879bc2d8191c4af0f26ede884366908c698362cfbc02dd27d4aa78f6523f7eb55f9d9919ed7f55aad280b26dd1ac1ed00162767d486caa1f1421ba000cddbcd7ea0cc5cca3c2925853962c42b4a0174826a066a08e5701f5cf85f45599bb02a16820ef71c2f6248b55d6aca186e7b802d45393290762ee23ec7418f133746577ddd8e1c94181c1e8cc22feb7118a9421807ccae799eecb77a900597f34f1ecf382960bce5d45d0f9eae1682214a8b0b49ccf114c3e10e3d6d5d5363c076cfde430473531873188c99c059c1c32650a35c1857f2bbad2728dc2a355c554f6f6d67625c77b5afa1c9f263f5b1e55149fe54f021706bbf8a7cd02a21501d24df9b13cf0a582792d06c51cf2e761af2c0562f5c971f743c04201830f9b6774fddf9a1c9beed33c9d7615b5ff5ecb8fe7f7f80e3e012df992d041fa849be47a8a8559588190182611e1b0faa4270b7e9f6035af415214720b01a749f5cd30fd1e5bcf941aef97d24cf7c265d7e9bf3a47e640c5d8ee2820fda5bf8c1d283446d481b71883b379a8700efc7e7538d9d276eda7fc18e5582a7433c52a99df8c87d1c4e570b18dce921d08883b8e271a23cd8baec3d5eff88a4ee49f97c72eadd932d664918566b8e8d008966d56ed6fb6336b961c9a3327f1b1caf9d407c71cbd04e28f4b02e16a278b4421f20abb465bf3d592dd4530ea29ecbce83101c9d5d9f64c88c8d1e620b2162cc0c6aab0ee06fd0357ac14fb1094fe59ef2076b63ddf03b400429d04ae8c4af29735e297874d21c4ba386845016b14ae8c0037d463d9c8ec515ba5f8ebc1f60d64e1474efbeba531617c67239fc6d9468720d96516720b44f7d172197b20bcfbf416187e10a78daac54306daab9aaf74dc7ceede4bfeb8fd45ee5ef2cba786a888404e8b09d055a483199ef0fbd6429f232e287535b79f4ed7b4b1e5891acccc976b46ec942caf29eb85d7520c25a402c80e3fd3b0c5266ef3cfa357a2eebeda4a663468b5859135aab824be7e1bc703f50a765810d41bab397efe6374b9b39a971cc2bed8a74126630c05fa8b58e2f2fd225b89e04838f76828e9039e200ae6a7c99933ee8e9abae947ea1e1431a5fd0295fce6b85b04d133aed15682521db7f5f4cc82f8a2e9498595c1c8cf70fed8c54a8bb7fc8e34084adfffd39ffb77b3c4bb6b56298869ae2b5372bcb4e469c3001706592149d5666e6221e9accccd9e638a184b1442876e4ab143795d4b62be7f03b18fe30e7727b75121da174910b52acbdbba5e23e6b10b73ef8cec5e77c8931cdc22f59465bf0d14a9a7271db80389c75533f3d527c4fe1916c657841c74069d2887d9a2887ebe06757f24591d7678afe7ef1e08bb6734ccbdcb88a0946e56679e78af8a07485e2e7b9e56fe1ac3726a43502a97c1c3975254569df8fd88c530fc5f46ba6c36a71489d49c98516b3e7b4965adadc3d7bb3e08d19ded049a7e6ef8470d1164ff4c7ebe9306e44a3c5a69736c9cfbc69afdddd20948442d078bfdcbd94ffd85788488773be04ac510dadff5d203f063d6d58010da0d8ca86fe4d68531202fc4f276fd49937edb013a99bac7f4601e4d3d02836d428e9b16bcceda40462a280687b0d7c5f1f5a84df9f461ab38dd04d321502f9623453be79cc562903f942700480cb17cdb4ee25becb9ea6bd81e9ac5d73b7438497df0544f24533c7bb5ff1a1fa6603281e71480108a2f0b492f675d4db1c4e11109d3cde9e3677e23edc6f5f14583cf79730f491cbea4e29859052e9a51ed2f7774a98d3de1aadf7917c9e699885947ed616ac584e40c1d808bf5d457bc8e7695fa30ab29796e5f0a3ac41cb7a75e85bbc04cb74ef0b2d7adcc9e570fb7712d3caecdf83f46d0b19440b8970019fc3146b30beeb4245ebc94809123e8749a82f284d34db2432659e61a4ce7cc0fce93aefa086350298e0a63bfcadaae3a511b5dd514c813c096a1804f64ff80dbe3e9ef949c531ca18b6d48e903618c1d72908562f4710344701997b7110d1e014003362eccefac5820c8b9b7fdd53bab7f6e31bfb8a56bf3b0338d11f40134396d6dd5064b9eb7d93cae40be3d5d64c0f9d99fdd59c2ff243bbefe57a68f14aee3aef85a2a98e8a5bf11dc57c477f1753510abd7fad7ec299ad7d83cbec43baefb9446852cad070546eed34e3f8ed4b29f1f9f618ddedc121c93f7230464925e220daaef17a713c9515d6d02e63b4184552a0e6c54ab1da69f2b8727d3e6a53e231f842ac9916aa98a20ec3c027c3e527e42cf4fa094a3f510be035eecc7db0d0e7f1f9ae64e7c3d8c9c0783ee14a2fa1890219c0e92e1bf11c5078514ba271cf8e412422f51227d43f33e7c160fed5eaded2233b193ef0a6d64bd467e7bf60494ae80d038154bd33a521d881ae7e29e121a00b2d72cd472ed61f8d98cf04c28e512ed1cc0e33f26cba4939b6f2103b796afec702cf85d921982c868b4c50e4c96ebdf381b53c760cf748bf32ac7df343516e43431c75e4b45eea5f3581c84b2f2005f8e33d781c68562e672f2960fafe7450246d97bc16a41b294c2684f3544e52106b3e1ae68fb2d55b35e805226574f43077ead019a8b47753b23f8e780d553dead1da57169b29937749c567e48926d9a842da7f77315890338a612abf487aa5bb42a052588a0129139f92344846973946940360fb7da8c86c6dba0a5cc018fc4606e435d939496cf81a5dc2471984a2592e03a6ea8032ee833e7131619d98ff4903e1275b84dc701e55e7a56e080978733641dea68723d106c5a7fe6e7a121c11409262756527d4121b3b42b3a9d4442f801e4d4b3c5c85bf4088aeffcf791864478d339a9e90f627bcbda40d280ed1c5ed3b92e98477a573b9d0038c91f377b35a123ee1f8f040fa6a3c883b8041133c00833afdb420a1284da7426cf6d0dcc4b4dd591450e089270c22fcd102f1e850e5076e0c2a4ba1bad69ed94f109f647ad320795b749ad13dcffabfa5cb5e5ffb697e581aaf48a61643360822d4426b41fb0cabf0cb9f45c517824f75e939739bd4208d147954409c43e6dc5a2b6671e7380f759d90927e999bd16e22a213b9e20b51960f422b01de7659c816294b7ce405c81a50832340b1446634178982c5f3430c2b67ac8fbda50d2164553feffa72229a28a17e50e44a45a7f22d10041535d12ac07e6681784c6366ddb48238166951753075207c906c80a08683e9ad4c3ba061cb244175dcca8ea47c055673f6dec86f8f501c29997ef5684f2c6eb39482e1cddf850fce0fce923a404bcad170e4080fb72c696f6adade40b87ee561cea4c784633336e90d0fb35873e09b70afdbd19b44e419219361ed821bcd93620ea7bdef965e0fd384317250c20ad4ec6358dea6f6758305770e456c96032048938faf93c9c294e7c892eb9c76a3c43c4adfdaee061dc74fb07684490841ce1f97e8d208281d5208e531d829497b78e0fd8abd63673138d6a34ba4dd3d513c03f4bfbf853f4ca81357ca136e267c912e3d07939664b668d6a25c38416aabed78368f758395a54a47bd52044f04b2460c4a1b1a0603fac7d37a93aa26adf7392492456cf760b1a80f00cfddb202241ce9f7501cc8bc5001b29431b13413850ecfe72c1fa6151773ee305f26f3d7c93f8ac4d514434244ade4e02b09d5edea200f00f002565af489ee2eaa628c3f87f8fec61531fa1e01c42d10c9cd57669cee6c359c166484c85cbf954d31f00fadc10a1669b9fcd18f4f4fceef6dfb8c424ce72864dc19a4ab96242ec5b688d88dd4fd0c486d09a81aa21d0ed5b4e86e7894ac8c2fe749fb3168680a86145e9818e132996b094b639db82345b52c98cf15dad7db6709167d177adfece681adff1194a745efcc6b750bebeed86e4d62e40fb605ca112721abde0aa972e642149c95115e5f6e9eeb202638c9e058237271a7c6ffef566db0164625c8b1f0ec723cd742b509980d8748e3d4e8c0443512c98ba7e1dc3a5c482f69dfbe58a15316895274084109c748489367583875071821e7ce54c096ffd5c1a9c525314491e78a6f233678526533cb7b70195baf4be910293544396676fc1f6076a0f79f6e495cbd0fe54bfd0ca6b4a1f1f53d8ab5811d7d60558df7369882e15d5f1d6029ae475714bccc307493450d1a00fe0c056f07beefa2a1d4ccd03cde04b02dc12e28c909e844885dcb2b2e1453fcc9f708302b2c7aefda575aa0a972703d54b806efa3a4023e30ba0eff8b001df1ee325317b020592737f483962d0af2b480c40bc305a94b00e4a5002e3e722dba20f72f4a566ab4a9473276c709722f1efbb9826deee987c48aacb9d5e24f1cc91456ce29c479da3675c91d4dd3f0f62bb3d4b35b8e5abae4e970d1c1fe983f811a90e3bdc176caab97b78c5ded93db24aa3cc40bcb67f41870da9d03cf887c3fb9dc6b3fdec394b67ce549c6e4738a70e939614d0e2c122c95562f334c20120ad2a9d381cf6a8cf6126ba421bd278f2155637e8d4a5c08252aa13a78dd2fc63e8a26361699676615adce87cf87cffc48ab619845f6ffbcb5b8d2ceebd1000c157afb1895c4b8761ee19ec14ff38ad3e849fbe718ddec36905893532c2ff8c23e2cc2b49332f08c2aa30dd3b2ab21244bb6a4ba2ca5851d666fa4fd2bb1d028008a35ad793c9a55d730cbeefb5fa7da38403455c863379d4e14517dda64c19675d327525183c9c1632b93", 0x1000, 0x400, &(0x7f0000001640)=@abs={0x1, 0x0, 0x1}, 0x8) 11:45:06 executing program 0: syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @broadcast, @multicast1}, @icmp=@timestamp={0x11}}}}}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, [], {@arp={0x806, @generic={0x6, 0x802, 0x6, 0x10, 0x3, @remote, "a2dc57068955bbcbf58f3e0686c0e340", @random="6bf356b9a9b9", "62ff80ef4cc571f05bb71735b1c24d92"}}}}) 11:45:06 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r0, &(0x7f0000000280), 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x8, 0x0) ioctl$VT_SETMODE(r1, 0x80087602, &(0x7f0000000080)={0x1, 0x81, 0x8, 0x7f, 0x9}) poll(&(0x7f0000000100)=[{r0, 0x15}], 0x1, 0x400) poll(&(0x7f0000000100)=[{r0, 0x15}], 0x1, 0x0) 11:45:06 executing program 1: r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/diskmap\x00', 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = dup2(r1, r0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000140)={0x3, &(0x7f0000000940)=[{0x4c}, {0x1d}, {0x6}]}) syz_emit_ethernet(0xe, &(0x7f0000000340)={@empty, @random="b2a3a42f4965"}) syz_emit_ethernet(0xc1, &(0x7f0000000180)={@remote, @local, [{[], {0x8100, 0x6, 0x1, 0x1}}], {@generic={0x80c6, "36b29167e46edd8bb449f5512e30a54ea71621799d4e8a6c91a9b85c4bb41e4b2ad9b50def67f19e5e9d2cde6aac25bf5dd44373ce00dab3edb52580c8975c7c9f7518b1c9bc2976fc22a255f7821b0ec086bc9ede671301524af8e958f8f64ba86e2c44f61c2fcfed4b48a103b4e8447452d39dc11ced4576f1e4801073ff7c05963e41c3888f2cd50e8c58df9f5670fbea46ad585b17a019c0c5222357bc13c2ea9427be3a3c753a0ab58056c2b9"}}}) 11:45:06 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x400000060}, {0x16}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000140)) r1 = semget$private(0x0, 0x4, 0x4) semop(r1, &(0x7f0000001180), 0x0) semop(r1, &(0x7f0000000240)=[{0x1, 0x6, 0x3800}, {0x0, 0x44, 0x1800}, {0x2, 0x3, 0xffc}, {0x2, 0x7, 0x1000}, {0x3, 0x268, 0x800}, {0x3, 0x1, 0x1000}, {0x1, 0xfffffffffffffff8, 0x1000}, {0x2, 0xad, 0x1000}], 0x8) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x40) r3 = getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) chown(&(0x7f0000000000)='./file0\x00', r3, r6) setreuid(0xee00, r3) r7 = socket(0x2, 0xc003, 0x61) seteuid(r5) connect$unix(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="8202adfdffffffff2a197a386207000000008295955984c87910bf07af654841c3453f68c11700287ed30bffffffffffffffffa84e6abca64896bc5e57c6360bcd4c0a162b58fd4237b8fa4d012ae447472b3e8495aaee48c02f6abf1e6bf3bf554799b9b8138d30505e8f0000a49fef9d612f871f4385f04157795ea4a5c5fe65baa202361cd8cac7dbac5b65122cd2350000000000040000000000000000000000ff0100000000000021d39b4028adb1ff1afb37ec4305642ad2cf8724eb18089278e314330000000000000000000000e02b05e5d12f524ab2aa8cc7712a2b279dbff4b7b46564ef560026e969c9341589c8ae135db3119e911c3a94484c6997ac607b1c26455bedfb9c9f35f23d1aa5513a6c17f08969eddff7244a744123053ff03d925341d85544cd1cfd7834aa3fc1611c8665840ea3b1e39af6256b1f007bf8f244cbc769cee44346040906000000ec895c4784f6490ba02e9768a8b36d05c2b89da05a0a414c6394359a0000000000c5906c074cf888981d4e22265330027548d8ffda5eb1152f6bc23442dc9631d64bcd5b823e495bac2204ccdaf73300a509da7f66d0c7598f54a53f5e773e35d0d6bc372d1a8ff42aa3cdc2e80e306615b7a814b77f3f5a659255490b88ff43ac3436e6731ad3574d79be64d7a570715f68932de75cc53ec316484d3e4132dee58554fdac1bfa4aca2c3ebed7ad1bd9da569f770def062c3a87e75f6a28b7f09126efe6c2d6ad126358a2bf7eb6652c52476b0f4a1fc0c7ee2e61ac5538254b916042575a9603e109cc5b44d587c08f6f7c1013f89d3bd1f11b9dd8c3e5afc074c1771cebe4f8f92cfdee2e52bf897cc233cab1d5ef49a8aa68ea9977751b76b6c98bf0d9f371e916fc7b88c013c7381f77d036b0233aca38bc2f6b0e0cda87573f3ed78789d01c4674fb41c17246be9389e32be26a498d0ce05a3852a1cb4338f3bfee17a07001520dd2515741374c70916b23a8b086c43633a42e93fe75f8a85f37ee8c3f120c300afe7e7c1f1dbea0d7ce9a15edf26e82fcca1e245a58d78b79dc3b93721aa7885824e119dc4c67c825898793cd381a7aa89400bfc4c950eb6fcd3b65c4ab78a2793c3f6ac242939caff03767a04075a5f9e5d29e3cac6c0be6ddb009c48adb4e38cc96072cab037ec2d04030b3e09396293ceaeb7654667b76bb2aedb6ee790c0514a813dbbca51acf3f76d12ae4b87f1ca4132cf1f6184c8c156ce5cb47566abe86451173c12dfcce0a325aed454f7aabda6e3def3f5a190a05885d48b3f7b9871543e605aec4e9fea4d6f8fdd21d3af7a4ce856fa952f23b216639cb5ba8ca8715e9c8218b768310da70195f548c8db21db9f706ad94abd33e1c7740a57bfadfecfc7f6f59036009d9d7ea7fcfd400000000000000000000000000000000a2ad2e5614112118f2329c5ea4fc08ca848acb2e0d4b4d7f9ebdec8573e5934472f435b62fa5e7527b0a285fa7959672ba51ee9274615a21ff84e9d18b041b023ea3b510fb858e5e8f637366fa670ebdb62fdd865ad48a87d3ad926c89e856bb0d4fc992e8f366a21432c91829e053c8c190fa254640aa54ab03c720e4abe974745c190555f12f12462cd4cce8965fed07a00cc35143830c6d62ac6e833023af1ca95cfa3db9607f9a3c08d051923844f3eb1d14b5ee73850929e1523b90aa91220000000000000000000000000000000036a97f659cba96643ee80b67ed1f062d2958a6271c4e21b23896a28206e5a30cbfe2948bd12ee66c685a2d25c3a63fc982672650552a4a05a039b041e7abbf60294728c0af2f0e4593b6dbb9dda24ee11252c67b260f4ec88a0574181b8235df2a3c149d36f351cd47d9f7f396769a2ff9b0b2681f279714417c5cc6ff99c86d028b77ae5a4e907b8b4c1452b2c56edbf1635826bfae914f95261a8a98534e5eded2b552217e6f92af5892bb28d9f963c531f10726b632"], 0x10) writev(r7, &(0x7f0000000000)=[{0x0}], 0x1) getsockopt$SO_PEERCRED(r7, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0xc) fchownat(r2, &(0x7f00000000c0)='./file0\x00', r3, r8, 0x2) semop(r1, &(0x7f0000000240), 0x6) 11:45:06 executing program 1: msgsnd(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000e4000447403ab967453adc629608770af73183"], 0x1, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x3, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket$inet(0x2, 0xc002, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000440)="ee08665d19ac14d5e51348771197a7728420aef61715f7b183d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r1, 0x0, 0x1, 0x0, 0x0) getsockopt(r1, 0x1000, 0x2, &(0x7f0000000100)=""/4096, &(0x7f0000000080)=0x1000) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000001100)=0xffff) r3 = socket(0x20, 0x2, 0x0) close(r3) socket(0x18, 0x3, 0x3a) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r3, &(0x7f0000000040)="100a2956b9223776", 0x21d) 11:45:06 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) ioctl$VMM_IOC_INTR(r1, 0x800c5606, &(0x7f00000001c0)={0x1ff, 0x9, 0x200}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BIOCSDIRFILT(r2, 0x8004427d, &(0x7f00000002c0)=0x2) r3 = socket(0x2, 0x8001, 0x0) close(r3) connect$unix(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r3, &(0x7f0000000140)=[{0x0}], 0x1) getpeername(r2, &(0x7f0000000100)=@in6, &(0x7f0000000140)=0xc) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) ioctl$BIOCGDIRFILT(r1, 0x4004427c, &(0x7f0000000000)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x35}, {0x3c}, {0x1}]}) syz_emit_ethernet(0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) r4 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$VMM_IOC_TERM(r4, 0x80045604, &(0x7f0000000300)={0x4}) 11:45:06 executing program 0: open$dir(&(0x7f0000000140)='./file0\x00', 0x400004002c5, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat(r2, &(0x7f0000000080)='./file0/file0\x00', 0x2, 0x10) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000180)='#', 0x1}], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x2011, r0, 0x0, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) readv(r0, &(0x7f0000000000), 0x100000000000021b) 11:45:06 executing program 1: r0 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) r1 = socket$inet(0x2, 0xc002, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000440)="ee08665d19ac14d5e51348771197a7728420aef61715f7b183d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r1, 0x0, 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000080)={0x4}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bpf\x00', 0x0, 0x0) ioctl$FIONBIO(0xffffffffffffff9c, 0x8004667e, &(0x7f0000000140)=0x3) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x4}, {0x48}, {0x4000000000000006}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="1a893b7a114fed889afa749744caf45debd44d0776ec773a15c043e6f4b57840b529ae38b83de953832ef62d60f2251c5b99015eb91621509a242705492240848fb270858d306da67c2aca00320d1f86256d51d82612086621631f6aa12724b8d4e85ff89fdbd75130c1b31bbc1e5ccdb513ce8fcf1cc8b2"]) 11:45:06 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x3d, 0x0, 0xff}, {0x45}, {0x4006}]}) syz_emit_ethernet(0x35c, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000bda6ffffffffffffa769a8437d56cb56ba95834e4ea8c482e58767f7171d63b5cca057f29d05fff1064c7f3b72cfe026cf63cfa99c"]) r1 = semget$private(0x0, 0x4000000009, 0x82) semop(r1, &(0x7f0000000380)=[{0x3, 0x101, 0x1800}, {0x3, 0x4}, {0x2, 0x3ff, 0x800}, {0x3, 0x1}, {0x1, 0xed13}, {0x1, 0xc000, 0x800}, {0x1, 0xfffc, 0x2000}, {0x0, 0x1, 0x1000}, {0x2, 0x0, 0x800}], 0x9) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000080)=0x6) ioctl$TIOCGETD(r2, 0x4004741a, &(0x7f0000000200)) semop(r1, &(0x7f0000000000)=[{0x1, 0x9}, {0x3, 0x7fff, 0x1800}, {0x0, 0x7, 0x800}, {0x4, 0x5, 0x800}, {0x4, 0x9, 0x1800}, {0x3, 0x4, 0x1800}, {0x1, 0x101, 0x1800}, {0x2, 0x7ff, 0x800}, {0x2, 0x5, 0x1000}], 0x9) semctl$SETVAL(r1, 0x5, 0x8, &(0x7f0000000100)=0x7) r3 = openat(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x400, 0x22) ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f0000000640)={'./file0\x00', 0x2, 0x10001, 0xe33, 0x1, 0x0, 0x8, 0x6, 0x2, 0x1, 0x4, 0x14}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x80, 0x0) sendto(r4, &(0x7f00000003c0)="b720bd38ddec872a4ac33db8a2d2d4775043f67b1ed5f1eab804e06d866b6cb68c2b5b23765b908439ede07c56f48450666189d2e2e67698c5dbf26026175566d7b951009bc2883314bbc8789f96c85a5b246d011ba35426c04ed80d539956ac2bcd67ce109bd8548245d9e4a6871c52fc16e1ff15cd54c9310d855d4eeb76c3d44d66e4788df5e0edf88d89ad0e7be03de717b3f5eee3e1cda1ed4855abb9346bf8897bb33a3625468c3372311f3597a51ba57dabef90965643eb314edd3e4e5565078d7d4f53f56fcb8c1f986fb881ace748165d203619e03c7e46f26cbbcb7520370c98b87f2d08e51018daa2562507cc4082", 0xf4, 0xf, &(0x7f0000000280)=@in6={0x18, 0x1, 0x3c, 0xfffff000}, 0xc) semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f0000000140)=""/163) syz_emit_ethernet(0x2a, &(0x7f00000006c0)={@broadcast, @random="ed19fac7fced", [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @broadcast, @local={0xac, 0x14, 0x0}, @empty, @multicast2}}}}) semop(r1, &(0x7f00000000c0)=[{0x0, 0x1, 0x800}, {0x1, 0x1, 0x1000}], 0x2) sendsyslog(&(0x7f00000004c0)="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", 0xff, 0xa) semctl$SETALL(r1, 0x0, 0x9, &(0x7f00000005c0)=[0x1, 0x2000]) 11:45:06 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000280)={0x3, &(0x7f00000000c0)=[{0x81}, {0x87}, {0x6, 0x0, 0x0, 0x10030103}]}) pwrite(r0, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) r1 = shmget$private(0x0, 0x8000, 0x8, &(0x7f0000ff8000/0x8000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_LOCK(r1, 0x3) r2 = socket$inet(0x2, 0xc002, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000440)="ee08665d19ac14d5e51348771197a7728420aef61715f7b183d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0) shutdown(r2, 0x3) 11:45:06 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x2080002002, 0x28a5) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x100, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000180)="000000186204018b002b06000000267e890053b5d1d090753dd40000a24efff000af846ddacb33d800e1838f74a2e84567f810efc950550ca7f9a86a652d62e159c51bad5a8bf626d9dea3c200000000000000005febea", 0x57}], 0x1) 11:45:06 executing program 0: r0 = syz_open_pts() fcntl$lock(r0, 0x9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x100000000}) flock(r0, 0x3) r1 = socket(0x2, 0x8001, 0x0) close(r1) connect$unix(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="82028611e2b2020000000062dd65c84e08c027ad12d417ec80ac134b281be097dff0efa5b32eaf23a299e04d2f45ae11829ac19aaf1e936182e881850ecb792fd7a8fcd11c3fc8962eb3a7e61fec776122400e899ee0d3d92501f6a0b61deb75fcfb3ebdb5c50284a1a9d3c07651a434798c3813c7756cca69d82e887d5e6d3aee60a3ede69923f29406004d3bb7f71274e38621a609ff8a45d1c60752698af2b1b17964d885eeb2fa4a619c4627340a640f25a557cbc4b8e3e40d6ad97ae5a93b989c4cad4966ae37ce9ee81f139bcbba39a3e43aee56051efe6ea50b9d7f1b5f5446172de857ca84b4e4454099e9081a06f879c9a9fa340000"], 0x10) connect$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x0}, 0x8) writev(r1, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setflags(r1, 0x2, 0x1) kqueue() r2 = semget$private(0x0, 0x2, 0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000480)={{0x20000008}}) semctl$IPC_RMID(r2, 0x0, 0x0) semctl$GETZCNT(r2, 0x4, 0x7, &(0x7f0000000000)=""/77) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x8}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000540)={0x97ac, 0x0, 0xfffffffffffffff8, 0xfffffff9, "0900000000e6000000e800000012ce8cd900"}) 11:45:07 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bpf\x00', 0x1, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000080)={0x4, &(0x7f0000000300)=[{0x8000, 0x2, 0x1f, 0x9}, {0x7, 0x3, 0xf7, 0x1}, {0x3, 0x7, 0x7}, {0x7f, 0x8, 0x40, 0x7e}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x100, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) r2 = socket(0x2, 0x8001, 0x0) close(r2) pipe2(&(0x7f0000000280), 0x4) ioctl$SPKRTONE(0xffffffffffffff9c, 0x80085301, &(0x7f00000002c0)={0x9, 0xedeb}) r3 = socket(0x2, 0x8001, 0x0) close(r3) connect$unix(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="82028611e2b2020000006262dd65c84e08c027ad12d417ec80ac134b281be097dff0efa5b32eaf23a299e04d2f45a611829ac19aaf1e5704156ccabe936182e881850ecb7900d7a8fcd11c3fc8962eb3a7e61fec776122400e899ee0d3d92501f6a0b61deb75fcfb3ebdb5c50284a1a9d3c07651a434798c3813c7756cca69d82e887d5e6d3aee60a3ede69923f29406004d3bb7f71274e38621a609ff8a45d1c60752698af2b1b17964d885eeb2fa4a619c4627340a640f25a557cbc4b8e3e40d6ad97ae5a93b989c4cad4966ae37ce9ee81f139bcbba39a3e43aee56051efe6ea50b9d7f1b5f5446172de857ca84b4e4454099e9081a06f879"], 0x10) writev(r3, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x10) writev(r2, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r2, 0xffffffffffffffff) fcntl$setflags(r0, 0x2, 0x1) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000340)={'tap', 0x0}) pwrite(r0, &(0x7f00000000c0)="fbaf353a0000030024375100c40c65740000000000", 0x15, 0x0, 0x2) 11:45:07 executing program 1: r0 = kqueue() r1 = socket(0x2, 0x8001, 0x0) close(r1) connect$unix(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r1, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000001c0)="dc478fd1de7e4822810235bf41e0069bf916ce27eab41f8ad03a7bff5f050ced32c3438f17211506c4fe5f6faf6f81c7d7c68ac169f0a73089cc1c946b998bc9b0a161f88d9d97983e8f03f8b81e2bfab5495328803be0fa847c161529dd8c9984ad0463e60fdc2f72bc1df39ad3ba757a74e2e8552b552108890955f38e068e746bcacfaaef2f9bd8d7116b4c30fce3b553ae2df2c112666c956b62ead5ecb0f119cc20227da4e1c941b80033353dd4b0ea8ee41586364833055e9f8e4b38a23f765fdc9fea0b2bc4f8fffb600fe9df692b4ff3f453256af7", 0xd9, 0x0, &(0x7f00000000c0)={0x18, 0x2, 0x3, 0x7fffffff}, 0xc) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bpf\x00', 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000140)=[{}, {0x4}]}) kevent(r0, &(0x7f0000000180)=[{{r2}, 0xffffffffffffffff, 0x12}, {{r2}, 0xffffffffffffffff, 0x3}], 0x7, 0x0, 0xffffffff, 0x0) mknod(&(0x7f0000000100)='./bus\x00', 0x2000, 0x6) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$TIOCCONS(r3, 0xc0106477, &(0x7f0000000140)=0x8000000020000000) kevent(r0, &(0x7f00000000c0), 0xf8b4, 0x0, 0x10000fe, 0x0) 11:45:08 executing program 0: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x2000, 0xffffffffffffffff) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2003, 0x1000800) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = socket(0x2, 0x8001, 0x0) close(r2) connect$unix(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r2, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bind(r2, &(0x7f0000000100)=@in6={0x18, 0x2, 0x5, 0x2}, 0xc) close(r1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x2000000000b20a, 0x0, "1dda410cef36499dc809030aaf58d991cc06d0f7"}) 11:45:08 executing program 1: r0 = socket(0x2, 0x3, 0x6c) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="82020000fffffdff"], 0x1) connect$unix(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="89594ac8937fa116d1df7f6266e4096eb38c751eda695db50300000000000000281d4be409bb9c2d1f"], 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bind(r0, &(0x7f0000000040)=@in6={0x18, 0x2, 0x7f, 0x80000001}, 0xc) 11:45:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chroot(&(0x7f00000001c0)='.\x00') unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='r\x00') rmdir(&(0x7f0000000040)='./file1\x00') chroot(&(0x7f0000000200)='./file0/file0/file0/file0\x00') 11:45:08 executing program 1: mknod(&(0x7f0000000000)='./bus\x00', 0x2080002002, 0x28a5) open(&(0x7f00000000c0)='./bus\x00', 0x10702, 0x0) r0 = socket(0x2, 0x8001, 0x0) close(r0) r1 = socket(0x2, 0x8001, 0x0) close(r1) connect$unix(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r1, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0xa, 0xffffffffffffff9c) connect$unix(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="82028611e2b2020000006262dd65c84e08c027ad12d417ec80ac134b281be097dff0efa5b32eaf23a299e04d2f45a611829ac19aaf1e936182e881850ecb792fd7a8fcd11c3fc8962eb3a7e61fec776122400e899ee0d3d92501f6a0b61deb75fcfb3ebdb5c50284a1a9d3c07651a434798c3813c7756cca69d82e887d5e6d3aee60a3ede69923f29406004d3bb7f71274e38621a609ff8a45d1c60752698af2b1b17964d885eeb2fa4a619c4627340a640f25a557cbc4b8e3e40d6ad97ae5a93b989c4cad4966ae37ce9ee81f139bcbba39a3e43aee56051efe6ea50b9d7f1b5f5446172de857ca84b4e4454099e9081a06f879c9a9fa340000"], 0x10) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000040), 0x5f) 11:45:08 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000009000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0, 0x0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r1, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20004000, 0x200000]}}) r2 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(r2, 0xc5005601, &(0x7f0000000580)={0x1, 0x0, 0x1, {[0x0, 0x0, 0x0, 0x20004000, 0x200000]}}) dup2(r1, r2) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r3, 0x0, 0x0) 11:45:08 executing program 0: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xfffffffffffffffd) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000140)='#!', 0x2}], 0x1) r1 = dup2(r0, 0xffffffffffffffff) r2 = syz_open_pts() fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x80000000000002, 0x7ffffffffffffffe, 0x10002ffffffff}) listen(r1, 0x400) write(r0, &(0x7f0000000300)="09099838059d010438b171ce20000000000000000400000000000f1892aed5e1a33cbfe83824add0752bc6e69393bc16eb5f11eafaf49bbe21d2a8f79b7f54dd8509b7636078a867d059906e35c7a80d82c15c9f8eff860261c906d861c88352b3b4ab1b27f516d67833527635a48a102ac03fc6ab4eaeb065fced250a", 0x7d) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 11:45:08 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000540)={'tap', 0x0}) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r1, &(0x7f00000001c0), 0x4c) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000080)=0x6) r2 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) r3 = socket$inet(0x2, 0xc002, 0x0) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000440)="ee08665d19ac14d5e51348771197a7728420aef61715f7b183d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r3, 0x0, 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$TIOCSTOP(r2, 0x2000746f) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x28, 0x0, 0x7, 0x40000}, {0x40, 0x1}, {0x16, 0x10, 0x81}]}) pwrite(r0, &(0x7f0000000140)="f94c4c49dfd685fbaf8a8d1a029b", 0xe, 0x0, 0x0) 11:45:08 executing program 1: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000100)=[{0x9, 0x1f, 0x6, 0xf58}, {0x3ff, 0x20, 0x9, 0xf40c}, {0x6, 0x12, 0xfc, 0x5}]}) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x3}, {0x8000025, 0x4}, {0x6, 0x7f, 0x80, 0xfc}]}) pwrite(r0, &(0x7f0000000240)="fbaf8a8d1a029be96914f6357e3a", 0xe, 0x0, 0x0) 11:45:08 executing program 0: nanosleep(&(0x7f00000001c0)={0xf0, 0x7fefffff}, 0x0) r0 = kqueue() mlockall(0x0) kevent(r0, &(0x7f00000000c0), 0x60, 0x0, 0xfffffffffffffff9, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x60, 0x0, 0xfffffffffffffff9, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bpf\x00', 0x201, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) write(r2, &(0x7f0000000100)="3c9ebbd555feff969613ba3e1fd0", 0xe) 11:45:08 executing program 0: r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/bpf\x00', 0x4000000001, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xa}, {0x15}, {0x9, 0x0, 0x0, 0x100}]}) pwrite(r0, &(0x7f00000000c0)="05a68a00007e3aa440fd47a1bc0a00001000000400"/31, 0x1f, 0x0, 0x8000) 11:45:08 executing program 1: r0 = socket(0x2, 0x8001, 0x0) close(r0) connect$unix(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) flock(r0, 0x8) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000001000"}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x1}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x3, 0x6) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$BIOCGETIF(r3, 0x4020426b, &(0x7f0000000040)={""/16, @ifru_metric}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r2, 0x0, 0x0) 11:45:08 executing program 0: sendmsg$unix(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0), 0x10000000000000f5}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) r0 = socket$inet(0x2, 0xc002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000440)="ee08665d19ac14d5e51348771197a7728420aef61715f7b183d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) ftruncate(r0, 0x0, 0x5) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x400000000002, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) ioctl$TIOCFLUSH(r2, 0x80206982, &(0x7f0000000300)) r3 = fcntl$dupfd(r2, 0xa, 0xffffffffffffffff) ioctl$VMM_IOC_READREGS(r3, 0xc2485607, &(0x7f0000000480)) 11:45:08 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000040)) setsockopt$inet_opts(r0, 0x0, 0x2001000000009, &(0x7f0000000000)="3c380652", 0x4) 11:45:08 executing program 0: setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xee00, r0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bpf\x00', 0x10, 0x0) ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000040)) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x29, 0x36, &(0x7f0000000140), 0x4) 11:45:08 executing program 1: mknod(&(0x7f0000000100)='./bus\x00', 0x3a0914c44f7b202c, 0xd02) open(&(0x7f0000000080)='./bus\x00', 0x1, 0x1ba) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x0, 0xfffffffffffffffc) 11:45:08 executing program 0: r0 = socket(0x11, 0x3, 0x0) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f00000000c0)=0x5, 0x4) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x20000000000011, 0x3, &(0x7f0000000000)="04000000", 0x4) setsockopt(r1, 0x20000000000011, 0x800000000001, &(0x7f0000000000)="186fe65c", 0x4) r2 = socket$inet(0x2, 0xc002, 0x0) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000440)="ee08665d19ac14d5e51348771197a7728420aef61715f7b183d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r2, 0x0, 0x1, 0x0, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200], [0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0xbfffbfffbfffffff], [0x0, 0x0, 0x401]}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000300)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TIOCFLUSH(r4, 0x8080691a, &(0x7f0000000300)) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000100)="be35058eda92e1e9e098455594e5eca4a42eaea656d9b6b219338520c8cebc253e3dd9734ddff53ca6e1d57554ba709402adaae92bd32c760f6d6453a5de51253432b9f6", 0x44) close(r2) sendto$unix(r0, &(0x7f0000000000)="b100050400000000000008000101000000000000cea1fea7fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acbdd602000d7d026ba8af63ff37282902e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c8943310b404f36a00f90006ee01bc43eaea8c500000002000000000000020208a371a3f80004000000000000000100"/177, 0xb1, 0x0, 0x0, 0x0) 11:45:08 executing program 0: mknod(&(0x7f0000000140)='./bus\x00', 0x80002006, 0x20659) r0 = open(&(0x7f0000000080)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f0000000680)=[{0x0}], 0x1) close(r0) r1 = socket(0x2, 0x8001, 0x0) close(r1) connect$unix(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r1, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000280)="b64f867a6bde485a79f6ba438e5df794d54dc0dd9dd61d28e2df19b1b2974bd2e1cf22adddfc535ee20b63fd12e90d115976d78878c8de3391d1ae800f1438d46a9a924e1855e55c6d64d73d250f4693d32a77e88b3466057efd22d8858c09f349e7c0b4ffa77e0f9cafa31eb7f5941f35e2d4e4809f4c4920dd0fbfc6277cccf11a095475957b13cffdf80936245577dffd5ce87262c3c7242c0b7561bfb77a2ace1a0cf74befccb5ecb4338718fc771cb91fec2899b959f23ffbf2295576cb05b3d0d03800332044d1a8ba776604e7d6703954da454b8849a8379ef752", 0xde) open$dir(&(0x7f0000000240)='./file0\x00', 0x400000002c2, 0x0) execve(0x0, 0x0, 0x0) 11:45:08 executing program 1: r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmm\x00', 0x0, 0x0) ioctl$VMM_IOC_INTR(r0, 0x8020560a, &(0x7f00000002c0)={0x80, 0x5, 0x20}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$inet6(0x18, 0x2, 0x0) mmap(&(0x7f0000450000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0, 0x0) getsockname$inet6(r2, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffd9b) r3 = socket(0x18, 0x4000, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) dup2(r3, r0) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000000)=0x43cbc, 0x4) r4 = dup(r1) sendto$inet6(r4, &(0x7f0000000040), 0x43000, 0x0, 0x0, 0x0) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/wsmouse\x00', 0x0, 0x0) r6 = getppid() fcntl$setown(r5, 0x6, r6) r7 = getuid() setreuid(0xee00, r7) r8 = getegid() sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f00000001c0)=[{&(0x7f0000000240)="781cc3b44320eca08866be44595ea0a7", 0x10}], 0x1, &(0x7f0000000340)=[@cred={0x20}, @cred={0x20, 0xffff, 0x0, 0x0, 0x0, r8}, @cred={0x20, 0xffff, 0x0, r6, r7, r8}], 0x60, 0x40d}, 0x1) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000000)=0x5) 11:45:08 executing program 0: ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f00000002c0)={0x0, 0x80000000, {0x0, 0x9b}}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff, 0x0, "00000000000000000000f2ffffffffffffff4000"}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r0 = socket(0x2, 0x8001, 0x0) close(r0) connect$unix(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r0, &(0x7f0000000140)=[{0x0}], 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES64], 0x1) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, "010000000000000000ffffff7f00"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x29, 0x7afd, &(0x7f0000000080)="ebffcbff13b9fd812eaaba7008003048e69931929648", 0x16) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x2, 0x2, 0x0) close(r2) socket(0x400000000018, 0x3, 0x3a) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) write(r2, &(0x7f0000000040)="100a2956b9223776", 0x79c) 11:45:08 executing program 1: r0 = socket(0x2, 0x8001, 0x0) close(r0) connect$unix(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r0, &(0x7f0000000280)=[{0x0}], 0x1) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getpeername$inet(r0, &(0x7f0000000080), &(0x7f0000000100)=0xc) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bpf\x00', 0x201, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f00000004c0)={0x3, &(0x7f0000000000)=[{}, {0x35}, {0x6, 0x0, 0x0, 0x401}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) write(r1, &(0x7f0000000040)="918208022efde586b67558919662", 0xe) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0xa) 11:45:08 executing program 0: r0 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$LIOCSFD(r0, 0x80046c7f, &(0x7f00000000c0)=r0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0xc}, {0x2}, {0x6, 0x3}]}) syz_emit_ethernet(0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="000000001d0000000000000000"]) 11:45:08 executing program 1: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80, 0x88) r0 = openat(0xffffffffffffff9c, &(0x7f000052fff8)='./file0\x00', 0x10, 0x0) symlinkat(&(0x7f00000000c0)='/', r0, &(0x7f0000d06ff8)='./file0\x00') chdir(&(0x7f0000000300)='./file0\x00') chdir(&(0x7f0000000240)='./file0\x00') msgsnd(0x0, 0x0, 0x75, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x0, 0x0, 0x0) chroot(&(0x7f0000000080)='.\x00') chroot(&(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/210, 0xd2}, 0x0) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="28318d0000ffff0000eaffffff08cd7fdf03002eef7482b2f2d8b06c5dd4d9a70064f2c6ce63f8b443363bdc2d4a2883a13e64e8f2b242883e9df47010094c3c727303174117f470a7d2ab8713d3f91d7e58d896b4a2ed77873d4c9fc02160f8cf7535"], 0x28}, 0x0) 11:45:08 executing program 0: mknod(&(0x7f0000000080)='./bus\x00', 0x80002005, 0x2d94) open(&(0x7f0000000040)='./bus\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0xc002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000440)="ee08665d19ac14d5e51348771197a7728420aef61715f7b183d4b3830c921bf0817a0000000000006a89dbdf", 0x2c) setsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) write(r0, &(0x7f0000000140)='\"', 0x1) 11:45:08 executing program 0: connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="3f381f48bb84f7bc"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = kqueue() r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) bind(r2, &(0x7f0000000000)=@un=@abs={0x0, 0xd}, 0x10) r3 = socket(0x2, 0x2, 0x0) r4 = socket(0x2, 0x8001, 0x0) close(r4) connect$unix(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x10) writev(r4, &(0x7f0000000140)=[{0x0}], 0x1) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = dup2(r2, r4) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffffff, 0x8058574f, &(0x7f0000000280)={'./file0\x00', 0x5, 0x1, 0x10000, 0x1, 0xe9, 0x6, 0x9, 0x72977810c5e68498, 0x1, 0x0, 0x2}) connect$unix(r3, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) write(r5, &(0x7f0000000100)="3ac8bc02b873435981339325414817011c9d065e", 0x14) sendto$unix(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000080), 0x4) 11:45:08 executing program 0: bind(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="01070f"], 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="62020207e0000001"], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x10) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="0000001862040179002b06000000267e897f7780e9992d836000753dd40900a24e14da97f23e4600000000e1838f74654462e159c51bad5a8bca2f17a953f59be5b79d7d2c336ec5003a00000000000040000000000000", 0x57}], 0x1) ioctl$WSDISPLAYIO_SVIDEO(r1, 0x80045745, &(0x7f0000000040)) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="0714000000900025df149b33ff0f000000000000", 0x10) write(r0, 0x0, 0x0) panic: vref used where vget required Stopped at db_enter+0x18: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 455171 23364 0 0 0 0 syz-executor.1 *420692 23364 0 0 0x4000000 1K syz-executor.1 db_enter() at db_enter+0x18 panic(ffffffff82244adb) at panic+0x15c vref(fffffd8067e75c48) at vref+0x7e namei(ffff8000241bd898) at namei+0x86b sys_chroot(ffff800020ed7ae8,ffff8000241bd9c8,ffff8000241bda10) at sys_chroot+0x87 syscall(ffff8000241bda90) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa78a5223640, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic vref used where vget required ddb{1}> trace db_enter() at db_enter+0x18 panic(ffffffff82244adb) at panic+0x15c vref(fffffd8067e75c48) at vref+0x7e namei(ffff8000241bd898) at namei+0x86b sys_chroot(ffff800020ed7ae8,ffff8000241bd9c8,ffff8000241bda10) at sys_chroot+0x87 syscall(ffff8000241bda90) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa78a5223640, count: -7 ddb{1}> show registers rdi 0xffffffff81752b27 db_enter+0x17 rsi 0x1334 __ALIGN_SIZE+0x334 rbp 0xffff8000241bd6f0 rbx 0xffff8000241bd7a0 rdx 0x1335 __ALIGN_SIZE+0x335 rcx 0xffff800023990000 rax 0xffff800023990000 r8 0xffffffff821c8b5f kprintf+0x16f r9 0x1 r10 0x25 r11 0x157030980411be7b r12 0x3000000008 r13 0xffff8000241bd700 r14 0x100 r15 0x1 rip 0xffffffff81752b28 db_enter+0x18 cs 0x8 rflags 0x246 rsp 0xffff8000241bd6e0 ss 0x10 db_enter+0x18: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor.1) pid=420692 stat=onproc flags process=0 proc=4000000 pri=32, usrpri=60, nice=20 forw=0xffffffffffffffff, list=0xffff800020ed6288,0xffffffff82664cb8 process=0xffff800020e92ba8 user=0xffff8000241b8000, vmspace=0xfffffd807efffb80 estcpu=10, cpticks=0, pctcpu=0.0 user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 23364 455171 39461 0 7 0 syz-executor.1 23364 523785 39461 0 2 0x4000000 syz-executor.1 23364 298461 39461 0 3 0x4000080 netio syz-executor.1 23364 39866 39461 0 3 0x4000080 fsleep syz-executor.1 23364 304635 39461 0 3 0x4000080 fsleep syz-executor.1 *23364 420692 39461 0 7 0x4000000 syz-executor.1 22451 70028 0 0 3 0x14200 bored sosplice 39461 214006 52635 0 3 0x82 nanosleep syz-executor.1 49206 259518 52635 0 3 0x82 piperd syz-executor.0 52635 42218 8646 0 3 0x82 thrsleep syz-fuzzer 52635 384845 8646 0 3 0x4000082 thrsleep syz-fuzzer 52635 441155 8646 0 3 0x4000082 thrsleep syz-fuzzer 52635 185936 8646 0 3 0x4000082 kqread syz-fuzzer 52635 38175 8646 0 3 0x4000082 thrsleep syz-fuzzer 52635 416867 8646 0 3 0x4000082 thrsleep syz-fuzzer 52635 444577 8646 0 3 0x4000082 thrsleep syz-fuzzer 52635 305224 8646 0 3 0x4000082 thrsleep syz-fuzzer 52635 5222 8646 0 3 0x4000082 thrsleep syz-fuzzer 52635 66339 8646 0 3 0x4000082 thrsleep syz-fuzzer 8646 520497 68343 0 3 0x10008a pause ksh 68343 464748 84492 0 3 0x92 select sshd 94413 155855 1 0 3 0x100083 ttyopn getty 84492 445743 1 0 3 0x80 select sshd 61946 329061 10961 74 3 0x100092 bpf pflogd 10961 522830 1 0 3 0x80 netio pflogd 37468 217727 6311 73 3 0x100090 kqread syslogd 6311 482640 1 0 3 0x100082 netio syslogd 789 466884 1 77 3 0x100090 poll dhclient 24867 23224 1 0 3 0x80 poll dhclient 58251 269722 0 0 3 0x14200 bored smr 39246 348691 0 0 3 0x14200 pgzero zerothread 14634 246130 0 0 3 0x14200 aiodoned aiodoned 28098 288455 0 0 3 0x14200 syncer update 72752 146230 0 0 3 0x14200 cleaner cleaner 95842 350254 0 0 3 0x14200 reaper reaper 91784 19698 0 0 3 0x14200 pgdaemon pagedaemon 97990 202125 0 0 3 0x14200 bored crynlk 83533 317106 0 0 3 0x14200 bored crypto 57221 388639 0 0 3 0x40014200 acpi0 acpi0 71658 20729 0 0 3 0x40014200 idle1 42602 400538 0 0 3 0x14200 bored softnet 41275 505614 0 0 3 0x14200 bored systqmp 44818 280431 0 0 3 0x14200 bored systq 78870 176396 0 0 3 0x40014200 bored softclock 31630 427283 0 0 3 0x40014200 idle0 1 246790 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 23364 (syz-executor.1) thread 0xffff800020ed7ae8 (420692) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff8266bb40) #0 witness_lock+0x4c7 #1 __mp_acquire_count+0x51 #2 mi_switch+0x392 #3 sleep_finish+0x113 #4 rw_enter+0x3d6 #5 rrw_enter+0x88 #6 VOP_LOCK+0x4b #7 vn_lock+0x81 #8 vfs_lookup+0xe6 #9 namei+0x63c #10 sys_chroot+0x87 #11 syscall+0x4a4 #12 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 9475 6406K 6987K 78643K 10733 0 pcb 13 8K 8K 78643K 27 0 rtable 106 3K 3K 78643K 215 0 ifaddr 46 11K 11K 78643K 58 0 counters 43 33K 34K 78643K 47 0 ioctlops 0 0K 4K 78643K 1473 0 iov 0 0K 12K 78643K 13 0 mount 1 1K 1K 78643K 1 0 vnodes 1220 77K 77K 78643K 1275 0 UFS quota 1 32K 32K 78643K 1 0 UFS mount 5 36K 36K 78643K 5 0 shm 2 1K 1K 78643K 2 0 VM map 2 1K 1K 78643K 2 0 sem 8 0K 0K 78643K 20 0 dirhash 12 2K 2K 78643K 12 0 ACPI 1809 196K 290K 78643K 12766 0 file desc 5 13K 25K 78643K 91 0 sigio 0 0K 0K 78643K 2 0 proc 60 63K 95K 78643K 442 0 subproc 32 2K 2K 78643K 34 0 NFS srvsock 1 0K 0K 78643K 1 0 NFS daemon 1 16K 16K 78643K 1 0 ip_moptions 0 0K 0K 78643K 2 0 in_multi 40 2K 2K 78643K 40 0 ether_multi 1 0K 0K 78643K 1 0 mrt 1 0K 0K 78643K 1 0 ISOFS mount 1 32K 32K 78643K 1 0 MSDOSFS mount 1 16K 16K 78643K 1 0 ttys 43 201K 201K 78643K 43 0 exec 0 0K 1K 78643K 214 0 pagedep 1 8K 8K 78643K 1 0 inodedep 1 32K 32K 78643K 1 0 newblk 1 0K 0K 78643K 1 0 VM swap 7 26K 26K 78643K 7 0 UVM amap 122 39K 39K 78643K 1209 0 UVM aobj 4 2K 2K 78643K 6 0 memdesc 1 4K 4K 78643K 1 0 crypto data 1 1K 1K 78643K 1 0 ip6_options 0 0K 0K 78643K 6 0 NDP 6 0K 0K 78643K 12 0 temp 67 3035K 3100K 78643K 2186 0 kqueue 3 4K 12K 78643K 7 0 SYN cache 2 16K 16K 78643K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle arp 64 6 0 0 1 0 1 1 0 8 0 plcache 128 20 0 0 1 0 1 1 0 8 0 rtpcb 80 28 0 26 1 0 1 1 0 8 0 rtentry 112 45 0 1 2 0 2 2 0 8 0 unpcb 120 47 0 35 1 0 1 1 0 8 0 syncache 264 4 0 4 1 1 0 1 0 8 0 tcpqe 32 377 0 377 1 1 0 1 0 8 0 tcpcb 544 55 0 51 1 0 1 1 0 8 0 inpcb 280 131 0 124 1 0 1 1 0 8 0 nd6 48 6 0 0 1 0 1 1 0 8 0 pfosfp 40 846 0 423 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 14 0 0 1 0 1 1 0 8 0 pfstkey 112 14 0 0 1 0 1 1 0 8 0 pfstate 328 14 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 189 0 0 12 0 12 12 0 8 0 art_table 32 190 0 0 2 0 2 2 0 8 0 art_node 16 44 0 4 1 0 1 1 0 8 0 semupl 112 3 0 3 1 0 1 1 0 8 1 semapl 112 8 0 2 1 0 1 1 0 8 0 shmpl 112 4 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1517 0 110 89 0 89 89 0 8 0 ffsino 272 1517 0 110 94 0 94 94 0 8 0 nchpl 144 1829 0 219 60 0 60 60 0 8 0 uvmvnodes 72 1603 0 0 30 0 30 30 0 8 0 vnodes 208 1603 0 0 85 0 85 85 0 8 0 namei 1024 4804 0 4803 1 0 1 1 0 8 0 percpumem 16 34 0 2 1 0 1 1 0 8 0 vcpupl 1984 2 0 0 1 0 1 1 0 8 0 vmpool 560 2 0 0 1 0 1 1 0 8 0 scsiplug 64 1 0 1 1 0 1 1 0 8 1 scxspl 192 4685 0 4685 2 1 1 2 0 8 1 plimitpl 152 17 0 9 1 0 1 1 0 8 0 sigapl 424 307 0 275 4 0 4 4 0 8 0 futexpl 56 1024 0 1022 1 0 1 1 0 8 0 knotepl 112 65 0 46 1 0 1 1 0 8 0 kqueuepl 144 14 0 12 1 0 1 1 0 8 0 pipelkpl 48 89 0 79 1 0 1 1 0 8 0 pipepl 120 178 0 159 1 0 1 1 0 8 0 fdescpl 496 291 0 275 3 0 3 3 0 8 0 filepl 152 1542 0 1438 5 0 5 5 0 8 1 lockfpl 104 29 0 27 1 0 1 1 0 8 0 lockfspl 48 12 0 10 1 0 1 1 0 8 0 sessionpl 112 18 0 7 1 0 1 1 0 8 0 pgrppl 48 18 0 7 1 0 1 1 0 8 0 ucredpl 96 80 0 71 1 0 1 1 0 8 0 zombiepl 144 275 0 275 1 0 1 1 0 8 1 processpl 984 307 0 275 5 0 5 5 0 8 0 procpl 624 451 0 405 4 0 4 4 0 8 0 sosppl 128 4 0 4 1 0 1 1 0 8 1 sockpl 400 207 0 186 3 0 3 3 0 8 0 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 158 0 0 19 0 19 19 0 8 0 mtagpl 80 8 0 0 1 0 1 1 0 8 0 mbufpl 256 198 0 0 12 0 12 12 0 8 0 bufpl 280 3427 0 133 236 0 236 236 0 8 0 anonpl 16 39682 0 26933 53 1 52 52 0 124 0 amapchunkpl 152 1235 0 1093 7 0 7 7 0 158 1 amappl16 192 1057 0 382 34 0 34 34 0 8 0 amappl15 184 35 0 33 1 0 1 1 0 8 0 amappl14 176 23 0 19 1 0 1 1 0 8 0 amappl13 168 26 0 25 1 0 1 1 0 8 0 amappl12 160 51 0 44 1 0 1 1 0 8 0 amappl11 152 54 0 38 1 0 1 1 0 8 0 amappl10 144 16 0 12 1 0 1 1 0 8 0 amappl9 136 379 0 378 1 0 1 1 0 8 0 amappl8 128 339 0 306 2 0 2 2 0 8 0 amappl7 120 125 0 113 1 0 1 1 0 8 0 amappl6 112 27 0 21 1 0 1 1 0 8 0 amappl5 104 197 0 181 1 0 1 1 0 8 0 amappl4 96 494 0 461 1 0 1 1 0 8 0 amappl3 88 102 0 95 1 0 1 1 0 8 0 amappl2 80 1411 0 1339 2 0 2 2 0 8 0 amappl1 72 16409 0 15951 24 10 14 18 0 8 4 amappl 80 696 0 647 2 0 2 2 0 84 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 64 5 0 2 1 0 1 1 0 8 0 uaddrrnd 24 293 0 275 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 293 0 275 1 0 1 1 0 8 0 vmmpekpl 168 6276 0 6239 2 0 2 2 0 8 0 vmmpepl 168 41924 0 40062 106 5 101 101 0 357 15 vmsppl 368 292 0 275 2 0 2 2 0 8 0 pdppl 4096 594 0 552 6 0 6 6 0 8 0 pvpl 32 143812 0 127913 133 0 133 133 0 265 4 pmappl 232 292 0 275 2 0 2 2 0 8 0 extentpl 40 46 0 29 1 0 1 1 0 8 0 phpool 112 254 0 3 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x1a: addq $0x8,%rsp x86_ipi_db(ffffffff82484ff0) at x86_ipi_db+0x1a x86_ipi_handler() at x86_ipi_handler+0xc6 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 end of kernel end trace frame: 0x7f7ffffc48f0, count: 12 ddb{0}> trace x86_ipi_db(ffffffff82484ff0) at x86_ipi_db+0x1a x86_ipi_handler() at x86_ipi_handler+0xc6 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x23 end of kernel end trace frame: 0x7f7ffffc48f0, count: -3 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x18: addq $0x8,%rsp db_enter() at db_enter+0x18 panic(ffffffff82244adb) at panic+0x15c vref(fffffd8067e75c48) at vref+0x7e namei(ffff8000241bd898) at namei+0x86b sys_chroot(ffff800020ed7ae8,ffff8000241bd9c8,ffff8000241bda10) at sys_chroot+0x87 syscall(ffff8000241bda90) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa78a5223640, count: 8 ddb{1}> trace db_enter() at db_enter+0x18 panic(ffffffff82244adb) at panic+0x15c vref(fffffd8067e75c48) at vref+0x7e namei(ffff8000241bd898) at namei+0x86b sys_chroot(ffff800020ed7ae8,ffff8000241bd9c8,ffff8000241bda10) at sys_chroot+0x87 syscall(ffff8000241bda90) at syscall+0x4a4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa78a5223640, count: -7