last executing test programs: 3.507715278s ago: executing program 3 (id=44): r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x18, 0xc003, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x3a, 0x68, 0x0, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001900)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xfff}, 0x38, 0x1000, 0x0) setuid(0xffffffffffffffff) fstat(r2, &(0x7f0000001540)) recvfrom$inet(r0, 0x0, 0x0, 0xc03, 0x0, 0x0) 3.45160215s ago: executing program 3 (id=49): open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) truncate(&(0x7f0000000080)='./file0\x00', 0x40002ffff) r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000240)="ee11d2ac4a36", 0xffffffb8}], 0x1) (async) open(&(0x7f0000000100)='./file0\x00', 0x615, 0x13) sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000)="0000e65bc39e76ecc9ddb3c3cc6bbc252487c139ecf344", &(0x7f0000000240)=0x17, 0x0, 0x0) 3.432101849s ago: executing program 3 (id=50): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x2, 0x2, 0x0) openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = syz_open_pts() ioctl$TIOCSCTTY(r3, 0x20007461) ioctl$TIOCFLUSH(r3, 0x80047476, &(0x7f0000000080)=0x1) r4 = getuid() getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(r4, r5, r6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000000)=[0xe, 0xb0, 0x8, 0xff, 0x6, 0x9, 0x5, 0x40, 0x7, 0x4], 0xa}) ioctl$FIONREAD(r3, 0xc0206922, &(0x7f00000000c0)) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) 2.797939212s ago: executing program 2 (id=87): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r0 = socket$inet(0x2, 0x3, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) pread(r1, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) r2 = fcntl$dupfd(r0, 0xa, r1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000200)={0x3, &(0x7f00000001c0)=[{0xb, 0x4, 0xfc, 0x400}, {0x6, 0x7, 0x0, 0x1}, {0x6, 0x5, 0x45}]}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r3, 0x8020691f, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0xfffe, 0x0, 0x2}, {0xc3e2, 0x3, 0x0, 0xffffffff}, {0x4, 0x2, 0x0, 0xff}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) sysctl$kern(&(0x7f0000000000)={0x1, 0x3}, 0x2, &(0x7f0000000180)="19c46f9fe745d08ba3130bfcae007324aae7e7a97cca9f9a681687186e8e02bfd0c5840252010711fe52e8040c25b5ee9f2a9a214ef3ad213f36ff56c7ce5141d27dbe6eea82983fc6d8a442028f530de9d14b4a88d3eab6daef11dfe25bda29da918fd53b16c29e25e9a24159bbd95180e79c49963c120224bb0cb73f8c3a76bacb906d79", &(0x7f0000000240)=0x85, &(0x7f0000000280)="96dbdc401fec8a097d488b232e80b73fd46bf6427d54ac0a605019c8bce3023b93327e537891ab86493ffc4e2599500b1de9d7bbb48907e42f33754c651bfb8df660dfd8d01f578f1eccbafd61b728cf30978ee96444f16a3473c7c96bfaa15d836348475a7af3b597ae0c28e11075cd78b310347973263b1b2aa85be9022de02beca822b0ee81977ae7b48636519e23605574f6c9d403f76c5825edbee1888ee2016e6895b6e787b7c37c719ea84810fd080ee7d11d89d285293d5bba37666ed71dfb100b6187ac40d7ece39d13c3", 0xcf) 2.639560965s ago: executing program 3 (id=94): r0 = socket(0x2, 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x9cab835cfdc52675, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x40001738, 0x0) setgid(0xffffffffffffffff) ktrace(&(0x7f00000001c0)='./file0\x00', 0x2, 0x1006, 0x0) setsockopt(r0, 0x0, 0x4, 0x0, 0x0) 2.631912725s ago: executing program 3 (id=96): syz_emit_ethernet(0x67, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000800312b00fe8000000000000000000000000000bb00000040"]) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) futimens(r2, 0x0) setsockopt(r1, 0x1000000029, 0xd, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r6 = kqueue() kevent(r5, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffffc, 0x4, 0x4, 0x7, 0x2}, {{r4}, 0xfffffffffffffffa, 0x20, 0x80000000, 0x2, 0x31}, {{r4}, 0xfffffffffffffff8, 0x1, 0x2, 0x8, 0x2}, {{r0}, 0xfffffffffffffff8, 0x10, 0x40, 0x7}], 0x1000, &(0x7f0000000400)=[{{r3}, 0xfffffffffffffffb, 0x5d, 0x1, 0xffffffffffffffff, 0x8}, {{r0}, 0xfffffffffffffffb, 0x4, 0x4, 0x1, 0x4}, {{r3}, 0xfffffffffffffff6, 0x8, 0x1, 0xa, 0x10000}, {{r6}, 0xfffffffffffffff8, 0x10, 0x8, 0x5, 0x3}, {{r4}, 0xfffffffffffffff7, 0x11, 0x80, 0x3, 0xb}], 0x0, &(0x7f00000004c0)={0x293c, 0x6}) connect$unix(r4, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) r7 = socket(0x2, 0x8002, 0x0) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) closefrom(r8) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x11, 0xffff63d6, 0x5, 0x2, 0xa, 0x3, 0x47, 0x10, [{0x4, 0x10000, 0xfffff114, 0x80000002}, {0x7fffffff, 0xea, 0x2, 0x10}, {0xcd7, 0x6, 0x2, 0xfffffffc}, {0x7, 0x7f, 0xf, 0x2000100}, {0x4, 0x10, 0x0, 0xfffffffe}, {0x388d, 0x40fff9, 0x1, 0x5}, {0x2, 0xa00, 0x4, 0x1}, {0x6, 0x1, 0x28003, 0x9}, {0x9, 0xf7ffffff, 0x4, 0x8003}, {0x4, 0x2, 0x3ff, 0xf}, {0x3, 0x0, 0x8a3a0004, 0x401}, {0x10000, 0x13e, 0x400010, 0x10001}, {0x401, 0x0, 0x8400009, 0x4a1}, {0x4, 0x2, 0x401, 0x7}, {0x1, 0xd, 0x8000003, 0x1fe}, {0x9be2, 0x1, 0x23, 0xffff}]}) r9 = socket(0x11, 0x3, 0xd) sendto$unix(r9, &(0x7f0000000100)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce1002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712050eeab7196fcbd80407000200c011200000", 0xb1, 0x6, 0x0, 0x0) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r10 = socket(0x18, 0xc003, 0x3a) setsockopt(r10, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r10, 0x29, 0x66, &(0x7f00000003c0)={0x400, 0x1, 0x3, 0xe05f, 0x2}, 0xc) syz_emit_ethernet(0xa9, &(0x7f00000001c0)={@broadcast, @empty, [], {@generic={0x803e, "95122f8aa14788224e8bc9431323eaebb7bb7dcaca0bfbef33d80c1c99747b6e3d36574017b4d7a358d888ae543504069488b39c99023cbcdc979281afeba1902d781a6ddb3887c396cd1ce5304987e05fdca66f3f16f09887e8ee3f8a1b3d93bf0bce780d9cfa2bb8271a07d4413b6ec687c2d77a197608342660adcc0ad086c64c3af396ff898b92bbdccc20ceb6cba6571eb796d2617d88111a"}}}) r11 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8009, 0x0) ioctl$WSKBDIO_SETMAP(r11, 0x8010570e, &(0x7f0000000040)={0x0, 0xffffffffffffffff}) 2.592966353s ago: executing program 3 (id=98): r0 = syz_open_pts() fchmodat(0xffffffffffffffff, 0x0, 0x2, 0x4) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0x9, 0xffef9ff6, 0x6, "4b06a6bcff0300dba800000000000800", 0x0, 0xf}) writev(r0, &(0x7f0000001200)=[{&(0x7f00000000c0)="c2f9ed657bd19344f0c0e9e71f2e1aa72d6ff31f27f68a18341d7ddd517ddca00d", 0x21}], 0x1) ppoll(&(0x7f0000000000)=[{r0, 0xa07ce4ca8ae65e4f}], 0x1, 0x0, 0x0) symlink(&(0x7f0000000900)='.\x00', &(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000080)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) syz_open_pts() syz_open_pts() (async) fchmodat(0xffffffffffffffff, 0x0, 0x2, 0x4) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0xfffffffe, 0x9, 0xffef9ff6, 0x6, "4b06a6bcff0300dba800000000000800", 0x0, 0xf}) (async) writev(r0, &(0x7f0000001200)=[{&(0x7f00000000c0)="c2f9ed657bd19344f0c0e9e71f2e1aa72d6ff31f27f68a18341d7ddd517ddca00d", 0x21}], 0x1) (async) ppoll(&(0x7f0000000000)=[{r0, 0xa07ce4ca8ae65e4f}], 0x1, 0x0, 0x0) (async) symlink(&(0x7f0000000900)='.\x00', &(0x7f0000000240)='./file0\x00') (async) chroot(&(0x7f0000000080)='./file0\x00') (async) unveil(&(0x7f0000000040)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) (async) syz_open_pts() (async) 2.250483945s ago: executing program 2 (id=108): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000003c0)=[{0x3, 0x1, 0x84, 0x7}, {0x48, 0xee, 0xff, 0x2000c05}, {0x6, 0x2, 0x9, 0x5}]}) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="0e32dc7ff681", [], {@ipv6={0x86dd, {0x8, 0x6, "4498fb", 0x0, 0x2c, 0xb, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2}}}}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x149, &(0x7f0000000680)={@empty, @remote, [], {@ipv4={0x800, {{0x13, 0x4, 0x0, 0x29, 0x13b, 0x64, 0x1, 0x8, 0x62, 0x0, @local={0xac, 0x14, 0x0}, @empty, {[@rr={0x7, 0x27, 0x7, [@empty, @empty, @broadcast, @rand_addr=0x4, @local={0xac, 0x14, 0x0}, @rand_addr=0x8001, @local={0xac, 0x14, 0x0}, @loopback, @loopback]}, @end, @end, @generic={0x1, 0xc, "0500000000000000fc22"}]}}, @generic="c109f17087c3a6dd59c5f6d67c6ab4723d43ec60b20d18677a1b56cdb178e9e7cdbd9b1333a79e1c52a11adf5d1697300cd46adbb6bf5fd81179b7ea1f896eb5c6d4bbe575bc3f72e3c3914ad39630d06d8e7839b3c6ee6710df9dfd99ecb95dd84a7cd966b6617d63b768ac514f465629319b0375fb096a63a49734e0e0d35a2fe7a765022972352d65b1cf1f6abfb653d63c4e48d0be6e3a6c1c18f5d3489d044fcc86e6004a876cb982b1fb3c565681dedc2b50f42284199a0a6a58168d54c1902ea26c016b939f6a77482de4155ec8cda4c6286a48638eb77fc75b81d39163f7a9057c2ec2ecb89e25d908e81c"}}}}) ioctl$WSMOUSEIO_SETPARAMS(r2, 0x80105728, &(0x7f00000000c0)={&(0x7f00000017c0)=[{0x3, 0xfffffffe}], 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX=r3], 0x28, 0x4}, 0x0) write(r4, 0x0, 0x0) recvmsg(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/87, 0x57}, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000240)=[{0x34, 0x2, 0x0, 0x2}, {0x24, 0xf, 0x6, 0x40005}, {0x3c56, 0x6, 0x16, 0x598}]}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONREAD(r6, 0x40047309, &(0x7f00000001c0)) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f00000001c0)={0x6, &(0x7f0000000080)=[{0x1, 0x9, 0x9}, {0xb, 0xd, 0x7f, 0x101}, {0x1, 0x5, 0x81, 0x5}, {0x1, 0x2, 0x2, 0x8}, {0x0, 0xd, 0x2, 0xfffff281}, {0x5, 0x81, 0x7, 0x1000}]}) syz_emit_ethernet(0x4a, &(0x7f0000000540)=ANY=[@ANYBLOB="ffffffffffffe04b1c561ac486dd6036e28200143b020182c124000000000000000067b40000fe8000000000000000000000000000aa4e224e21", @ANYRES32=0x41424344, @ANYRESOCT=r1, @ANYBLOB="5002000590780006"]) r7 = syz_open_pts() close(r7) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x800000054}) r8 = syz_open_pts() close(r8) read$audio(r5, &(0x7f0000000480)=""/148, 0x94) r9 = syz_open_pts() ioctl$TIOCSETA(r9, 0x802c7414, &(0x7f0000000340)={0x0, 0x5, 0xffffdf82, 0x7, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) writev(r7, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x8, 0x0) 2.061752139s ago: executing program 4 (id=119): mkdir(&(0x7f0000000180)='./file0\x00', 0x14) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x7, 0x0, 0xfffffffe, 0x1005, "ff14e7130b1e586ca6294000", 0x40, 0x5}) syz_open_pts() (async) ioctl$TIOCSTAT(r0, 0x20007465) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0xd5f24cccd331706f, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async, rerun: 32) r2 = syz_open_pts() (rerun: 32) close(r2) syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x8) read(r1, &(0x7f00000003c0)=""/139, 0x8b) (async) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x60) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) (async) r3 = dup(r0) bind$unix(r3, &(0x7f0000000140)=@abs={0x1, 0x1, 0x0, 0x0}, 0x8) (async, rerun: 64) ioctl$TIOCGWINSZ(r3, 0x40087468, &(0x7f0000000100)) (async, rerun: 64) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r4 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r4, 0x8020691f, &(0x7f00000001c0)) (async, rerun: 32) r5 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x88, 0x0) (rerun: 32) poll(&(0x7f0000000240)=[{r5}], 0x1, 0xd146) (async) r6 = socket$inet(0x2, 0x3, 0xfc) setsockopt(0xffffffffffffffff, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e7130", 0xd) (async) ioctl$FIONREAD(r6, 0x80206979, &(0x7f0000000000)) (async) chroot(&(0x7f0000000200)='./file0/file0\x00') (async, rerun: 32) rename(&(0x7f0000000000)='./file0/file0/..\x00', &(0x7f0000000040)='./file0/file0/..\x00') (rerun: 32) 1.934758345s ago: executing program 4 (id=126): r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "0000000000000000000000000000ef00", 0x7}, 0x1c) r1 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000000000000001", 0x7}, 0x1c) mkdir(&(0x7f0000000080)='.\x00', 0x0) 1.852196511s ago: executing program 4 (id=127): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) socket$inet(0x2, 0x3, 0x0) (async) r0 = socket$inet(0x2, 0x3, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34) (async) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) pread(r1, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) r2 = fcntl$dupfd(r0, 0xa, r1) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) (async) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x3a, 0x29, @rand_addr="000000000000000000020000008000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@param_prob={0x4, 0x2, 0x0, 0x9, {0x5, 0x6, "a28eea", 0x932e, 0x2c, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="428d8a0aa07df960ae22721eb73d8b56"}}}}}}}) 1.844851249s ago: executing program 5 (id=129): r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000000)=[{0x0, 0xfff8, 0x1000}], 0x1) semop(r0, &(0x7f0000000040)=[{0x0, 0x8, 0x1000}], 0x1) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e520aef61715f7b1c3d4b3830c921bf0817a0000000000006a0101df0000000000000000", 0x2c) (async) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f00000002c0)="ee08665d19ac14d5e520aef61715f7b1c3d4b3830c921bf0817a0000000000006a0101df0000000000000000", 0x2c) syz_extract_tcp_res(&(0x7f0000000080), 0x9d, 0x2562) (async) syz_extract_tcp_res(&(0x7f0000000080), 0x9d, 0x2562) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') 1.701786859s ago: executing program 7 (id=134): sysctl$vfs_nfs(&(0x7f00000010c0)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000001100), 0x0, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x26, &(0x7f0000000800)=ANY=[@ANYBLOB="2d72a003d130aaabaa37aaaaaa080044de00180065002c0478e638281098243a90787f4a7201"]) poll(&(0x7f00000000c0)=[{r1, 0x4}], 0x1, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfffffdaf) close(r0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r2 = socket(0x18, 0x1, 0x0) r3 = getpgrp() fcntl$setown(r2, 0x6, r3) ioctl$FIONREAD(r2, 0x80047308, &(0x7f00000001c0)) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000040)="e38d3523f65cd0", &(0x7f0000000080)=0x7, &(0x7f0000000140)="67db31a3742e10603c761585b1d77815c50d5c3c8f6c07e1fb6d6f89e11f89c3d6dd2cb37171d3a865b067733f7c865bdd6a799e1f36bbb2f90fd26344143b4f6520dca8f0d101fa240f30748c6c302f8e66117eeb15bd8145a22fcfff094053bae94604d58ad668b87a27ab", 0x6c) 646.247631ms ago: executing program 5 (id=137): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x0, 0x6, 0x0, 0x20000001}, {0x60, 0xe, 0x7, 0x7}, {0x3c56, 0x1e, 0x6, 0x80000007}]}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x22, 0x1c, 0x0, 0x6, 0x9, 0x1, 0x0, @broadcast, @rand_addr=0xdfffffff}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x67, 0x8}}}}}) 617.430922ms ago: executing program 1 (id=139): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80000000000206, 0xb7) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0}, 0xc) getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0xffffffffffffffff, 0x0, r5) setgid(r5) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000240)={r2, r3, r5}, 0xc) syz_emit_ethernet(0x4a, &(0x7f0000000d40)={@broadcast, @local, [], {@ipv6={0x86dd, {0x9, 0x6, "8fcec6", 0x14, 0x50, 0x8, @empty, @loopback={0x0, 0xfffffffffffffffe}, {[], @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0xf, 0x0, 0x100}}}}}}}) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x2, 0xa, "759f5a5ad65ada388e47a1e7a5446cfe", 0x1}, {0x1c, 0x18, 0x3, 0x4, "7e908ea871810362ffeeb2b2c94fa87b", 0x5}, 0x0, [0x3efa, 0x9f72, 0x1, 0x200, 0x8, 0x5, 0x800, 0x4]}, 0x5c) r6 = socket(0x18, 0x1, 0x0) close(r6) r7 = socket(0x18, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt(r7, 0x1000000029, 0x25, &(0x7f0000000000)="5ab7776a", 0x4) r8 = socket(0x18, 0x3, 0x0) setsockopt(r8, 0x1000000029, 0x1a, &(0x7f0000000000)="02000000", 0x4) connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x3, "fe8234022c23bdd0e86bc2a6b5ae30dd", 0x3}, 0x1c) writev(r6, &(0x7f0000000740)=[{0x0}], 0x1) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x35}, 0x4, &(0x7f0000000100)="6212296d7c90d26a901bdcbdc3324bd27451d45bb60701afd80a0c85c46ff38a16b4a9324aba1f27ceafa17715252ee026f3d959688c8db385656d29c12a4d5aefda5162e90039d3d9ff82f838ad86ceef9d21eda44dcb1c96dc9a8e97a8a3f509cab29a66b5bf8212a07674034fe7e99cbd478e8130bf62", &(0x7f00000001c0)=0x78, 0x0, 0x0) r9 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r9, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) r10 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x2, 0x10) ftruncate(r10, 0x80002) preadv(r10, &(0x7f0000000480)=[{&(0x7f0000000340)=""/69, 0x45}], 0x1, 0xfffc) truncate(&(0x7f0000000300)='./file0\x00', 0xe89) 616.911164ms ago: executing program 2 (id=140): shmget(0x1, 0x3000, 0x220, &(0x7f0000ffc000/0x3000)=nil) shmget(0x1, 0x1000, 0x600, &(0x7f0000ffe000/0x1000)=nil) mknod(&(0x7f0000000200)='./file0\x00', 0x2000, 0x4287e) r0 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x12) write(r0, &(0x7f0000000000)="b96abc18", 0x4) 614.273435ms ago: executing program 1 (id=141): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000000)='./file0\x00', 0x100, 0x1c2) ioctl$TIOCSWINSZ(r0, 0x80087467, &(0x7f0000000240)={0x5, 0x5, 0xd, 0x2}) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x25, &(0x7f0000000000)="5ab7776a", 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "36e282", 0x8, 0x3b, 0x0, @rand_addr="01984b0e23742b40c3fa3d76af5fc1fa", @mcast2, {[], @udp={{0x1, 0x0, 0x8}}}}}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)="a9a8a9595e2368c973f131335fc3580cecc90d0a098b1538fb7417e137c89fa8f19a2ba68fac1cf2494c8ed88e91af80cb3820101f5411255b4ed57b3429f1ec33d8da9e3e792e0a31e19e3cf35fc70d4a4f484855683c7e38cb1822c5aaba19227f79e6d7cf48e813329fe7a519cfc6b48aeaf523f3ecfe0889d0fb1000"/136, 0x88}, {&(0x7f0000000200)="2f17d594d3ed826047", 0x9}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x402}, 0xa) recvmmsg(r1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/233, 0xe9}, 0x3}, 0x38, 0x802, 0x0) ioctl$VT_GETMODE(r0, 0x40087603, &(0x7f0000000080)) ioctl$TIOCCBRK(r0, 0x2000747a) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) rename(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='./bus\x00') ioctl$BIOCLOCK(r3, 0x20004276) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={0x3, 0x3, 0xffffffffffffff9c}) ioctl$WSDISPLAYIO_GMODE(r4, 0x4004574b, &(0x7f0000000180)) ioctl$BIOCGETIF(r3, 0x4020426b, 0x0) 522.026544ms ago: executing program 1 (id=142): sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501", 0x4, 0x414, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x8003, 0x0) r1 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0xf, 0x6, {[0x1, 0x0, 0x7, 0x100000000, 0x7, 0xf3e5, 0xdf5c, 0xfffffffffffffffe, 0x0, 0x2eff, 0xfffffffffffffffc, 0x9, 0xbffffffffffffff6, 0xa, 0x1, 0x200, 0xffbfffffffffffff, 0x100], [0xba, 0x80000001, 0xfffffffffffffffd, 0xe3e, 0x5d, 0x3, 0x1fe, 0x0, 0x2000020000004, 0x9], [0x10000000, 0x2, 0xffffffffffffffff, 0x8, 0xfffffffffffffffc, 0x10fff, 0xffffffff00000000], [0x1, 0x5, 0x7ffffffffffffffc, 0x9, 0xfffffffffffffffd, 0x4], [{0x0, 0xffffffe7, 0x8, 0x7d06}, {0xfffc, 0x2, 0x6, 0x1}, {0x4, 0x900, 0x6b0, 0x83}, {0x3, 0x7, 0x6, 0xffffffffffffffff}, {0x0, 0x3, 0x2, 0x8}, {0x0, 0xd, 0x9, 0x2fa}, {0x1ffd, 0x30000, 0x7, 0x3}, {0x0, 0x100, 0x0, 0x9}], {0x0, 0x6, 0x8000005, 0x36f}, {0x3, 0x80000004, 0x1000}}}) kevent(r1, &(0x7f00000000c0), 0x40, 0x0, 0xa, 0x0) kevent(r1, &(0x7f0000000000), 0x29f, 0x0, 0x8001, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1025, &(0x7f0000000100), &(0x7f0000000000)=0x4) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501", 0x4, 0x414, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket$inet(0x2, 0x8003, 0x0) (async) kqueue() (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0xf, 0x6, {[0x1, 0x0, 0x7, 0x100000000, 0x7, 0xf3e5, 0xdf5c, 0xfffffffffffffffe, 0x0, 0x2eff, 0xfffffffffffffffc, 0x9, 0xbffffffffffffff6, 0xa, 0x1, 0x200, 0xffbfffffffffffff, 0x100], [0xba, 0x80000001, 0xfffffffffffffffd, 0xe3e, 0x5d, 0x3, 0x1fe, 0x0, 0x2000020000004, 0x9], [0x10000000, 0x2, 0xffffffffffffffff, 0x8, 0xfffffffffffffffc, 0x10fff, 0xffffffff00000000], [0x1, 0x5, 0x7ffffffffffffffc, 0x9, 0xfffffffffffffffd, 0x4], [{0x0, 0xffffffe7, 0x8, 0x7d06}, {0xfffc, 0x2, 0x6, 0x1}, {0x4, 0x900, 0x6b0, 0x83}, {0x3, 0x7, 0x6, 0xffffffffffffffff}, {0x0, 0x3, 0x2, 0x8}, {0x0, 0xd, 0x9, 0x2fa}, {0x1ffd, 0x30000, 0x7, 0x3}, {0x0, 0x100, 0x0, 0x9}], {0x0, 0x6, 0x8000005, 0x36f}, {0x3, 0x80000004, 0x1000}}}) (async) kevent(r1, &(0x7f00000000c0), 0x40, 0x0, 0xa, 0x0) (async) kevent(r1, &(0x7f0000000000), 0x29f, 0x0, 0x8001, 0x0) (async) getsockopt$sock_int(r0, 0xffff, 0x1025, &(0x7f0000000100), &(0x7f0000000000)=0x4) (async) 511.92744ms ago: executing program 1 (id=144): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) minherit(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r1 = socket(0x2, 0x400000000002, 0x0) setsockopt(r1, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x2}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETENCODING(r2, 0x80047476, &(0x7f00000000c0)=0x1300) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) minherit(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) (async) socket(0x2, 0x400000000002, 0x0) (async) setsockopt(r1, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4) (async) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x2}) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) ioctl$WSKBDIO_SETENCODING(r2, 0x80047476, &(0x7f00000000c0)=0x1300) (async) 509.083627ms ago: executing program 5 (id=146): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') open(0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x41, &(0x7f0000003000/0x3000)=nil) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) shmctl$IPC_STAT(r0, 0x2, 0x0) unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') r1 = syz_open_pts() syz_open_pts() ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000040)=0x8) syz_open_pts() unveil(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='w\x00') open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x40) 507.795432ms ago: executing program 7 (id=147): r0 = socket$inet(0x2, 0x2, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r1 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) shmat(r1, &(0x7f0000001000/0x3000)=nil, 0x1000) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r2 = socket(0x18, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0xc9e, "9452986eff46257424accfcd55214332", 0xa95}, 0x1a) fstat(r0, &(0x7f0000000080)) fcntl$dupfd(r0, 0xc, r0) 458.700945ms ago: executing program 0 (id=148): setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) select(0x27, &(0x7f0000000040)={0x8000010000000000, 0xaa71, 0x0, 0x4, 0x4, 0xfffffffffffffff8, 0x0, 0x5}, &(0x7f0000000080)={0x3, 0x4, 0x7fff, 0x2, 0x80000000000008, 0x102, 0x0, 0x497}, &(0x7f0000000100)={0xd, 0x3, 0x1, 0x80002, 0x40000000000009ef, 0x9, 0xffffffffffffffff, 0x100002}, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000480)='x\x00') 455.04465ms ago: executing program 7 (id=149): openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f0100000000000000903abf65b18d7c51f75527d152ea276d420000000000000000fafd3493776665d40000000034", 0x31}], 0x1, 0x0, 0x0, 0xf}, 0xb) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xac1400ff}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x3, 0x2f) r1 = dup(r0) r2 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r2, 0x20007461) r3 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) dup3(r3, r2, 0x0) read(r3, &(0x7f00000015c0)=""/167, 0xa7) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x5}, 0x10) sendmsg$unix(r0, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x4) sendto$inet(r0, 0x0, 0x0, 0x404, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIOASYNC(r5, 0x8004667d, &(0x7f0000002d00)) ioctl$TIOCSTOP(r4, 0x2000746f) ioctl$TIOCSETA(r4, 0xc4504445, &(0x7f0000000740)={0x9, 0xfffe, 0x8002, 0xffff, "040000000080107377d178d952d6d31962fff0d1", 0xfffffffe, 0x2}) 454.702039ms ago: executing program 0 (id=150): socket$inet(0x2, 0x3, 0x102) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) kqueue() (async) r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) (async) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(r3, 0x80585750, &(0x7f00000000c0)={'./file0\x00', 0x4, 0xfffffffe, 0xfff7, 0x0, 0x802, 0x55db, 0x2, 0x2, 0x2, 0xffffffffffffffff, 0x3}) (async) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) (async) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x1) closefrom(r1) sysctl$kern(&(0x7f0000001c80)={0x1, 0x32}, 0x2, &(0x7f0000001cc0)="9eb4e1d5", &(0x7f0000002cc0)=0x4, &(0x7f0000002d00), 0x0) (async) r4 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(r4, 0x80585750, &(0x7f0000000140)={'./file1\x00', 0x3ff, 0xb0, 0xffef, 0x1, 0x7, 0x6, 0xfffffc17, 0x2, 0x2, 0xfffffffffffffff8, 0x2000000000000}) mlockall(0x0) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) close(r4) (async) gettimeofday(&(0x7f0000000040), &(0x7f00000001c0)) 452.498813ms ago: executing program 5 (id=152): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0e99db6de761f86, 0x0) setresuid(0xee00, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0xc028698d, &(0x7f0000000000)) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r1 = open(&(0x7f0000000400)='./bus\x00', 0x1, 0x100) chmod(&(0x7f0000000040)='.\x00', 0x8c) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) setitimer(0x1, &(0x7f0000000140)={{0x6, 0x8}, {0x6, 0x2}}, 0x0) r3 = socket(0x1, 0x2, 0x0) select(0x40, &(0x7f0000000200)={0x10000, 0x1, 0x3, 0x2, 0x5, 0x10, 0x8}, &(0x7f0000000240)={0x4, 0x100, 0x4, 0x8, 0x9, 0x5, 0x6, 0x4f5}, &(0x7f0000000280)={0x5, 0x0, 0x800, 0x6, 0xe, 0xc4b4, 0x10, 0x2890}, &(0x7f00000002c0)={0x0, 0x8000000000000000}) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) r4 = socket(0x18, 0x3, 0xf9) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x2) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) open$dir(&(0x7f0000000080)='./file0\x00', 0xc50, 0x8) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x53, 0x27, 0x2336}, {0x64, 0x4, 0x4, 0xbba}, {0x6, 0x6, 0x7, 0xfffffffc}]}) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) r5 = open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000180)=0x7) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000001500)=ANY=[]) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') ioctl$TIOCCONS(r1, 0x80047462, &(0x7f00000003c0)=0x245) ktrace(&(0x7f0000000100)='./bus\x00', 0x2, 0x40000000, 0x0) 451.918103ms ago: executing program 7 (id=153): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x4, 0x1, './file0\x00'}, 0xa) connect(r0, &(0x7f0000000000)=@un=@abs={0x4, 0x0, 0x0, 0x0}, 0xb) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001ec0)=@file={0x9, 0x1, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000100)=@file={0x87, 0x1, './file0\x00'}, 0xa) r3 = dup2(r2, r0) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) getsockopt$sock_cred(r4, 0xffff, 0x1022, 0x0, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000140)={&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`\x00', 0xffffffffffffffff, 0x1}) 393.369102ms ago: executing program 4 (id=154): syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @remote, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x14, 0x6, 0x30, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x9, 0x0, 0x5a}}}}}}}) (async) syz_emit_ethernet(0x1b0, &(0x7f0000000140)={@broadcast, @local, [{[], {0x8100, 0x7, 0x1}}], {@ipv6={0x86dd, {0x8, 0x6, "8b373c", 0x176, 0x70, 0x7, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@dstopts={0x16}, @fragment={0x88, 0x0, 0x9, 0x0, 0x0, 0x12, 0x67}, @dstopts={0x29, 0x1c, '\x00', [@padn={0x1, 0x1, [0x0]}, @jumbo={0xc2, 0x4, 0x9}, @enc_lim={0x4, 0x1, 0xa}, @generic={0x1, 0xd7, "d982902bbd872aa0149f399100e19062d100bf61a777b3672f5019f5b8e67eb97f0ac8f829d28b0f164d462cdf87bf54d174e65036a61ebec4b5a698b5eb9cab27077c9a9ac7f5560e73ce43fe475c6fb487d87a502d47e5c71e7fb863ebf4249123516fe2616a201788327b281f10be60b93f6c0f231006f8c57f8571dfda48377f39510f4934b0dbfe5f7a42487fde57decb80fbeeade3bfa4ada7c1e8147b7f643248adaaee6a2c555472b9f785bd249d2e144a71a039104f26d5bb7ed45a006935dbbf13ca7d4f2254983b3a4deda4dd971300cc45"}]}, @dstopts={0x37, 0x0, '\x00', [@padn={0x1, 0x1, [0x0]}]}, @fragment={0x2, 0x0, 0x4, 0x1, 0x0, 0x17, 0x68}], @generic="daebd701fb878aad75e07fe6c3aa36bde654080548b99aac5e543680f95bb427e42fd276e49940c821417242c01e241a61146d7527f52df8d90e4f889ad9c1111ecbf0bf0f9c489cc12dcddac7a710a273626f9b19d13ed22bfe39953eb5"}}}}}) 392.770851ms ago: executing program 4 (id=155): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) (async) ftruncate(r0, 0x79c8) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async) sysctl$kern(&(0x7f0000000140)={0x1, 0x1a}, 0x2, &(0x7f0000000180)="cb5f828c47afc4", &(0x7f00000001c0)=0x7, &(0x7f0000000200)="48e6ea92c89b0f8918ff5c30f5d83e4278656abf382cdd878ebf3cba963fa96e0919d72f4d107e1bb7a13a0ad4db8f9aaccb5f4beaee04033c24258a9dd90f8109363d07073f73197239831008821a6f95fac1eca1c6e1be69c436887861b86786cfb8eb", 0x64) (async) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) 381.843975ms ago: executing program 0 (id=156): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xd, 0x7d, 0x3, 0x48}, {0x40, 0x8, 0x35, 0x2}, {0x2, 0x80, 0x6, 0xfffff805}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="c2a6100000fcbb7aed94075fca09a12bd3fe5a156fb81100000000f7793296ac0029948999e6e897", &(0x7f0000000000)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x599) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000300000000", 0x8) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x14, 0x5, 0x43, 0x3}, {0x80, 0xf0, 0x40, 0x9}, {0x6, 0x80, 0x12, 0xfffff802}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000002c0)={'tap', 0x0}) r3 = socket(0x18, 0x3, 0xff) setsockopt(r3, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmmsg(r3, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x9, "ff0100", 0x40000002}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000880)=ANY=[]) syz_emit_ethernet(0x2a, &(0x7f0000001a80)=ANY=[]) r4 = syz_open_pts() fcntl$lock(r4, 0x9, &(0x7f0000000100)={0x2, 0x1, 0x5, 0x1000100000000}) flock(r4, 0x3) sysctl$kern(&(0x7f0000004e00)={0x1, 0x46}, 0x2, 0x0, 0x0, &(0x7f0000004f80)="e3c3adbc", 0x4) fcntl$lock(r4, 0x8, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x100000001}) 381.017925ms ago: executing program 1 (id=157): r0 = semget$private(0x0, 0x4, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getuid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{r1, r3, r4, r6, 0x100, 0x6, 0x0, 0x0, 0x8}, 0x0, 0x5, 0x0, 0x0, 0xea, 0x0, 0x7}) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) ioctl$WSDISPLAYIO_LDFONT(r7, 0x8058574d, &(0x7f00000002c0)={'./file0/file0\x00', 0x0, 0x6, 0x10001, 0x1, 0x28c99fd6, 0x8, 0x4, 0x2, 0x1, 0x101, 0x1ff}) r8 = accept$unix(0xffffffffffffff9c, &(0x7f0000000340)=@file={0x0, 0x0, ""/4104}, &(0x7f0000001380)=0x100a) r9 = getpgid(0xffffffffffffffff) r10 = getpgid(0xffffffffffffffff) r11 = getthrid() r12 = getsid(0xffffffffffffffff) r13 = socket$inet6(0x18, 0x1000, 0x0) sendmsg$unix(r8, &(0x7f0000001840)={&(0x7f00000013c0)=@file={0x5, 0x1, './file0\x00'}, 0xa, &(0x7f0000001740)=[{&(0x7f0000001400)="1a21552089b74e4c5d70c157447eef80142e095b4f78ef0b55dde5a772089688048e9ed93219d06227fe464d9d79eda8aa7c9dabdafc8a99041cabe85ef2a9119e9b19608478243d67d30c3b7559894a6cce1fc46bed6e431541f51cce0cd24018e3dba8dd44fd43b4ee0d9c57866756b76759eb0551dac04a4e52e064d1eeb4108a9cdf0dd24d21b5794268c7ac1f26f4efc5a275e7feb7939096a07c3d86", 0x9f}, {&(0x7f00000014c0)="07e840cde2a850f17c23a578c957ac89c01348d0b7f2086b345afdbfbec29bb6cdbc685e007e87ebb779825b13db31553b170b8b873c6990325c531aaec270c73ecb03090d3f578bebfa1d25740816e8094d67f7434b2fab3344f5883dbdf9ff18848309a984fb5e469f1591dc49988d000778011ded7e9c6f2baac3653f38c9b195f8df215b9377c0e3c323af9c3e3a295655c166e299ff5991010ea68989835c7bbad82de3d0df16e86267350e5f1ebac0c1a6dce596bffe742fcef0e4d52008dadf45219dcf290c7bc6e41041f65e99", 0xd1}, {&(0x7f00000015c0)="c1f5f3cbc345758ddcfc261dea3e4492e48247d111d690aeb18d61acd290f07ef606c7f2bd3e72e028c1d1d600b7d0d0d38224a15bff4d40c6f02e9407cd945f19e19cf733f6de09fa0034ed8a70f193c97b99f0d1a8add5d8a0768124f1ea09970a3a5f2db8d3a1afd691e9f5fca86f42e2b6671b7add4cbd1396c7fe23d5ebb9c60630c0ffd4f711c842cfb20519f0f2c5f971352ce067799833c8cd86b88042", 0xa1}, {&(0x7f0000001680)="0653a7b9e0692e10765b4a46e657b0568d00ab13beaeca3cb665286b6195351fa95a9792037e3d2ba18d8ac7add7bfade10b58739959b5257d3dffc119fe0d3a3a4b0d6c074f30b43e447710f33955581642f21f4e0512de7c5752ce51777bb4d07f835c6c15d09437cc2f7f03e8f33a1960be63368678c4c8c53acf2be99ef2ba6fc93ac04f297a0c560815bc5dd9d42d3398fb2b9490f09a6ca53e14e8c419bd2a0c2081", 0xa5}], 0x4, &(0x7f0000001780)=[@rights={0x20, 0xffff, 0x1, [r7, r7, r7, r7, r7]}, @cred={0x18, 0xffff, 0x0, r9, r1, r2}, @cred={0x18, 0xffff, 0x0, r10, r5, r2}, @cred={0x18, 0xffff, 0x0, r11, 0x0, r6}, @cred={0x18, 0xffff, 0x0, r12, r4, r3}, @rights={0x20, 0xffff, 0x1, [r7, r13, 0xffffffffffffffff, r7, r7]}], 0xa0, 0x405}, 0xa) openat$pf(0xffffffffffffff9c, &(0x7f0000001880), 0x8, 0x0) r14 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000018c0), 0x8, 0x0) ioctl$DIOCMAP(r14, 0xc0106477, &(0x7f0000001940)={&(0x7f0000001900)='./file0\x00', r7, 0x3}) socket(0x20, 0x1, 0x0) r15 = openat$tty(0xffffffffffffff9c, &(0x7f0000001980), 0x20000, 0x0) ioctl$TIOCSETA(r15, 0x802c7414, &(0x7f00000019c0)={0x1ff, 0x2, 0x651, 0x0, "bc3ad58cb59979c60f5b3cb7294c76ce4c55d97e", 0x3a4, 0x3}) sysctl$net_inet_ah(&(0x7f0000001a00)={0x4, 0x2, 0x33, 0x7}, 0x4, &(0x7f0000001a40)="bb5af22a5e9126fab466d0f228b339b7035d902dd76c6df6732cdda528fcb1e8e01fedbe91d4dde918", &(0x7f0000001a80)=0x29, &(0x7f0000001ac0)="930c4eb820d23e0e2e635b26546281894b31bb63a78209bd53e3af538c05fe2cecaec863c52ed5c40529c385299cdf98095f0397952f26a5b136d7f08675543b6e214ac959248d08bea2e688124045b766bf3604ffe889de4d79d3ad28b3dff01e50ab33193a7c508ef2df31f01d48023d5798e24f18", 0x76) r16 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001b40), 0x100, 0x0) ioctl$VMM_IOC_CREATE(r16, 0xca605601, &(0x7f0000001b80)={0x10, 0x100000000, [{&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0xfffffffffffffda2}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, 0x8}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x8000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x67c9}, {&(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x97}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x923}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x1}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff3000/0x1000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x2000)=nil, 0x200}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xf3}], './file0/file0\x00', 0x10, 0x7, 0x0, 0x80, [0x0, 0x200, 0x800, 0x6974, 0x7, 0x200, 0x1543a175, 0x2d8ef827, 0x5, 0xb, 0xa, 0x5, 0xe, 0x8, 0x1, 0x1, 0xa10f, 0x0, 0x79f, 0x5, 0x9, 0x20e7, 0x6, 0x0, 0xff, 0x2, 0x100, 0x2, 0x0, 0x5, 0xfffffff8, 0x5db, 0x80, 0x8161, 0x9, 0x1, 0xe40a, 0x6, 0x3, 0x0, 0x4, 0x1e3, 0x7, 0x35f, 0x27, 0xfffffffe, 0x5, 0x5b, 0x8, 0x6, 0x6, 0x6, 0xd7, 0x9, 0x80, 0x2, 0x100, 0x2, 0x3, 0x8, 0x4, 0x7, 0x2, 0x8, 0x4, 0x4, 0x8, 0x10000, 0x40, 0x7, 0xfffffff9, 0x1ff, 0x0, 0xce, 0x1, 0x5, 0x5, 0x7, 0x9, 0x2, 0x2, 0x5, 0x7, 0x9, 0x13, 0x5, 0x3, 0xb436, 0x2, 0xbb3, 0xfff, 0x6, 0xefa4, 0x2, 0xfffffffe, 0xe4, 0x6, 0x7ff, 0x4, 0x1, 0x1, 0x3, 0x3, 0xff, 0x4, 0x7, 0x3, 0x2, 0x8, 0x4, 0xff, 0xfffffbff, 0x7f, 0x1cc9, 0x7, 0x6, 0x6, 0x6, 0x8001, 0x0, 0xd986, 0x0, 0x5, 0x9, 0x2, 0x6, 0x2, 0x39bc, 0x8, 0xc, 0xe158, 0x2, 0x80, 0x8, 0x1762, 0x0, 0xfffffff8, 0x1, 0x0, 0xffffffff, 0x2cf4, 0x7ff, 0x6, 0x5, 0x5, 0x81c, 0x4, 0xc25a, 0x6, 0x5, 0x0, 0x7, 0x6, 0x6, 0x4, 0x8, 0x3, 0xba, 0x2, 0xfffffff9, 0x84f, 0x10, 0x2e2, 0x4, 0x5, 0x5, 0x0, 0x9, 0xff94, 0x4, 0xe8a2, 0x0, 0x80000000, 0x800, 0x80000000, 0x80000000, 0x2, 0x6, 0x0, 0x0, 0x8001, 0xffff8000, 0x3, 0x278f, 0x5, 0x0, 0x87, 0x6, 0x146, 0x0, 0x0, 0x7, 0x9, 0x2f6, 0x5, 0x707, 0xa, 0x8, 0x86, 0x10, 0xfb1, 0x6, 0x80000001, 0xfff, 0x7fff, 0xfffffffb, 0x881, 0xb9, 0xfffffff7, 0x9, 0x3, 0x7f, 0x0, 0xfffffffe, 0x7, 0x0, 0x1, 0x2, 0x7, 0xdc, 0x80000000, 0x7f37138e, 0x0, 0x4, 0xb78b, 0x7, 0x7ff, 0x7, 0x2, 0x10000, 0x9, 0x8, 0x13, 0x4, 0xa1, 0x5, 0x3, 0x2c, 0x1, 0x3160, 0x1, 0x6, 0x6, 0x8, 0x101, 0x5, 0xff, 0x7b1, 0xa8, 0x101, 0xfffffff9, 0x2, 0xaf, 0x3, 0x1, 0x6, 0x2a, 0x6, 0x14f, 0xd, 0x7fffffff, 0x8, 0x8000000, 0x3ff, 0x4, 0x642b, 0x80, 0x8, 0x0, 0xfffffff3, 0xfffffffc, 0x5, 0x0, 0x38c, 0x400, 0x6, 0x1, 0x1000, 0x0, 0x3, 0x9, 0xbb5f, 0x7, 0x100000, 0x10, 0xd, 0x5, 0x5, 0x9, 0x1d, 0x4, 0x5, 0x1, 0x72a8, 0x9, 0xa, 0x3, 0x7, 0x2, 0x36, 0x2, 0x8000, 0x7, 0xa, 0x7, 0x2, 0x3ff, 0x5, 0x1ffd, 0x1, 0xc0a, 0x1, 0x8000, 0x5f, 0x3, 0x4, 0x728, 0x1, 0x9, 0x9, 0x8, 0xd44, 0x7fffffff, 0x1, 0x1ff, 0x8, 0x6, 0x8, 0x5, 0x273f, 0x1, 0x1, 0x3, 0x3, 0x7, 0x8, 0x7, 0x0, 0x6, 0x6, 0x73, 0xfffffff3, 0x1, 0xf, 0x8, 0x2, 0x7f, 0x4, 0x7, 0xc01, 0x2, 0x6, 0x0, 0xe, 0x3, 0x7, 0x9, 0x5b3e, 0x4, 0x7, 0x3, 0x60, 0x9, 0x2000, 0x1, 0xfffffff7, 0x5, 0x7194, 0x0, 0x5, 0x7f, 0x7, 0x0, 0x0, 0x3, 0xbd7, 0x2, 0xfffffffc, 0x1ff, 0x2, 0xc, 0x4, 0xb05, 0x2, 0x81, 0x1, 0x500000, 0x3, 0x4, 0x0, 0x9, 0x5, 0x5, 0x8, 0x1000, 0x9, 0x4, 0xffff1a60, 0x4, 0x7, 0x1ff, 0x7fff, 0x8, 0x8, 0x7, 0x3, 0x7, 0x1, 0x5, 0x4, 0x802, 0x5c91a08, 0x200, 0x7ff, 0x9, 0x1, 0xfff, 0x7f, 0xffff, 0x0, 0xffffffff, 0x8, 0x2, 0x7, 0x1, 0x9, 0x8028, 0x1ff, 0x1, 0x9, 0x7f, 0xe5, 0x401, 0xd635, 0x3, 0xffffff93, 0x0, 0x1c, 0x4, 0x5, 0x80000001, 0x10000, 0x4, 0x0, 0x9, 0x8, 0x8000, 0xe, 0x0, 0x9, 0xbd76, 0x1000, 0x2, 0x2, 0x7, 0x0, 0x2, 0x2, 0x3, 0x2, 0x4, 0x9, 0x7, 0x0, 0x81, 0x0, 0xaf, 0x7, 0x4, 0x1, 0x9, 0x5, 0xcef00, 0x0, 0x100, 0x3, 0x2, 0xa, 0x3, 0xb25e, 0xed, 0x6, 0x4, 0x1, 0x4, 0x4, 0x31ee3ac1, 0x7ff, 0xfffffff9, 0x80000000, 0xffffffff, 0x0, 0x400, 0x2, 0x101, 0x8, 0x4, 0xffffffff, 0x5, 0x3, 0x10001, 0x7, 0xc, 0x6, 0x1, 0xdb, 0xc33, 0x2, 0x1, 0x5, 0x8, 0x2]}) sysctl$net_inet_ah(&(0x7f0000002580)={0x4, 0x2, 0x33, 0x3}, 0x4, &(0x7f00000025c0)="3b77ed670cdd3b75dfb9722136b09e2f187c1ef8c0deb1", &(0x7f0000002600)=0x17, &(0x7f0000002640)="0acd3a5fb5713f57c440dd8ba8725516cce20b4fcc45b7a032752a4313633b3045511ddddd8c239d6c58ff68ba9754b4c1d91394e4f091cd70f217b3be61c6f25bac4b5e954a41ac64129563b4f1996db72abc682bbfeb24ba926d93000aa34534f53f66541adf3e066eec09606af7d003ff4694374cbd911f1259d9e052d76b6d442e2c65faa57efb41b3db0d29f716832a88a4a72403509b3cbb0c841581d46b54006dd501726b81341aa5b351f9e0e4855dccdfdee734ba45a38a34a94066413980248008f7b602d514c35163d722ec3ebd21db5879cc", 0xd8) sendmsg(r13, &(0x7f0000002980)={&(0x7f0000002740)=@in={0x10, 0x2, 0x2, 0x4}, 0x10, &(0x7f0000002840)=[{&(0x7f0000002780)="a72464146db45bb94a5a97c4b89e5c7ec824", 0x12}, {&(0x7f00000027c0)="f76d9576b3ba475032396d7359241910b4e23ad1af08fb3cc84bc4933a94e6ee4f11b1c0d4f690254ac35d4e85c4c6c3eea48dfb890d5d0a3e2916d8f505fab5574e246927420f74c6df5e2058a54ba00e9e86082d8d7f306252201442bbc8758dc987eec349f6b4ae7975", 0x6b}], 0x2, &(0x7f0000002880)=[{0x8c, 0xffff, 0x3ff, "38f51ba1ff55b574786a9ec2afc14ec05deb91d2588e3bd90ef550729b281badb495ab485874ae964d9a19689d31369fde72cd5f7793d8c686afe659081f7621c604aa06312edcaddf842e5751e60d2d0a64eeca9a56a91e73eed367c755972869e8e8a6cfd08477e0d98f71bb43932f15f39eb6fa3a9d2cedf43530e6aaf8"}, {0x70, 0xffff, 0x5, "1ba839a2e8219ec84687808337ee99221c94b3f290401debe6cbdb9ab2fe56ec4535295ff2c14af44015f7d003ce9d56f1d59e9579a761c1b0c45b62ff3ca3a817ae313aac8c22ba470e99d4b702b1aa272f3762a2c4e6063722603631f41364b4"}], 0xfc}, 0x8) r17 = accept$inet6(r13, &(0x7f00000029c0), &(0x7f0000002a00)=0x1c) getsockopt$sock_timeval(r17, 0xffff, 0x1006, &(0x7f0000002a40), &(0x7f0000002a80)=0x10) execve(&(0x7f0000002ac0)='./file0/file0\x00', &(0x7f0000002bc0)=[&(0x7f0000002b00)='/dev/diskmap\x00', &(0x7f0000002b40)='\x00', &(0x7f0000002b80)='\']-,*!\x00'], &(0x7f0000002c80)=[&(0x7f0000002c00)='-)}\xb2{\x00', &(0x7f0000002c40)='\x00']) ioctl$BIOCSFILDROP(0xffffffffffffffff, 0x80044279, &(0x7f0000002d00)=0x3) 380.41459ms ago: executing program 1 (id=158): openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x1) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x10000004) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000040)={0x2, 0x6, 0x6, 0x7, "dae0000000dc00", 0x200, 0x3}) setrlimit(0x0, &(0x7f0000000180)={0x3, 0x7}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xceb) getsockname(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setgroups(0x0, 0x0) r4 = semget$private(0x0, 0x2, 0x391) semctl$IPC_SET(r4, 0x0, 0x1, 0x0) setgid(0xffffffffffffffff) select(0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xffffffffffffffff) semctl$SETALL(r4, 0x0, 0x9, &(0x7f0000000040)) recvmsg(r2, &(0x7f0000000140)={&(0x7f0000000000)=@in6, 0xc, 0x0, 0x0, &(0x7f00000005c0)=""/87, 0x57}, 0x0) setrlimit(0x5, &(0x7f0000000000)={0x18c4, 0x5}) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r5 = syz_open_pts() close(r5) r6 = semget(0x2, 0x1, 0x204) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0x189, 0x80, 0xae38, 0x0, 0x100000000000000}, 0x23d, 0x6, 0x2, 0x0, 0x7fff}) semctl$GETVAL(r6, 0x0, 0x5, 0x0) syz_open_pts() 366.281625ms ago: executing program 4 (id=159): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="cd3650e3367f7185aaaaaabb88e70018801606000003ffffffffffffffffffffffffd6604a3154b4699b981e2d2f0a52a245"]) r0 = socket(0x1, 0x2, 0x1) ioctl$FIONREAD(r0, 0x8020690e, &(0x7f00000001c0)) open(&(0x7f0000000180)='./file0\x00', 0x615, 0x1a) truncate(&(0x7f0000000140)='./file0\x00', 0x30001) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x11) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) r3 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r3, 0x20007461) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_open_pts() syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) syz_extract_tcp_res(&(0x7f0000000200), 0x7e, 0xfffffffe) clock_settime(0x100000000000000, &(0x7f0000000100)={0xfc1ecc7f, 0x7fffffffffffffff}) 243.703062ms ago: executing program 5 (id=160): fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x100000005}) r0 = socket(0x18, 0x2, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000100)={0x1c, 0x18, 0x2, 0x2, "000000008000", 0xc6}, 0x1c) sendmsg$unix(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x58}, 0x2, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x30000) 240.031987ms ago: executing program 5 (id=162): r0 = kqueue1(0x10004) select(0x40, &(0x7f0000000040)={0x7, 0x4, 0x3, 0x9, 0x8, 0x384, 0x0, 0x2}, 0x0, 0x0, 0x0) kevent(r0, &(0x7f00000000c0)=[{{r0}, 0xfffffffffffffff6, 0x1, 0x4, 0x100000000, 0xc8}, {{r0}, 0xfffffffffffffff6, 0x8, 0xe97adb715d25d342, 0x6, 0x4}], 0x1, 0x0, 0x80000000, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) rename(0x0, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f00000001c0)={0x10080000, 0x2, 0x3, 0x2f, "2800180000020002000000000068ab5ade800600", 0x6, 0x5}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1002, &(0x7f0000000040)=0x101, 0x4) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) r5 = openat$pf(0xffffffffffffff9c, 0x0, 0x20, 0x0) poll(0x0, 0x0, 0x8) ioctl$DIOCRCLRTSTATS(r5, 0xc4504441, 0x0) r6 = socket(0x18, 0x1, 0x0) close(r6) socket(0x18, 0x3, 0x3a) connect$inet6(r6, 0x0, 0x0) ioctl$DIOCGETRULESET(r1, 0xc444443b, &(0x7f0000000180)={0x8, './file0\x00', './file0\x00'}) kevent(r0, &(0x7f0000000080), 0x6c2, 0x0, 0x3, 0x0) 239.305713ms ago: executing program 6 (id=163): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x0, 0x6, 0x0, 0x20000001}, {0x60, 0xe, 0x7, 0x7}, {0x3c56, 0x1e, 0x6, 0x80000007}]}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x22, 0x1c, 0x0, 0x6, 0x9, 0x1, 0x0, @broadcast, @rand_addr=0xdfffffff}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x67, 0x8}}}}}) 238.784183ms ago: executing program 6 (id=164): sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x2, &(0x7f0000000100)="e5a3cdff47b7d38eb4ab43c43a3099963ff6ff56865c2777e907258b22433365ca079f4b97935906426bb55b0ffd922d2514780d32fd17eedbc9d6815e23b928e9c6a9bb69f4c27745e2c2920e7e14b3ef582be70417e98d6d80232b45d3053acf1e9e9c22085877aabc47061459e623535c", &(0x7f0000000180)=0x72, &(0x7f00000001c0)="29d0b560816714673907d347b95c40d7a17ca173ff0108e0fb2ada2e3ee60635ab3936bda108bfb3bb4a666f37f29ddd96561f3f81f57aa4", 0x38) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setuid(0xffffffffffffffff) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) writev(r0, &(0x7f00000006c0)=[{0x0}], 0x1) truncate(&(0x7f0000000000)='./file0\x00', 0x4) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r1, 0x20000000) r2 = socket(0x2, 0x1, 0x0) setuid(0x0) setsockopt(r2, 0x6, 0x4, &(0x7f0000000080), 0x0) unlink(&(0x7f0000000080)='./file0\x00') sysctl$kern(&(0x7f0000000040)={0x1, 0x55}, 0x2, &(0x7f0000000100)="e5a3cdff47b7d38eb4ab43c43a3099963ff6ff56865c2777e907258b22433365ca079f4b97935906426bb55b0ffd922d2514780d32fd17eedbc9d6815e23b928e9c6a9bb69f4c27745e2c2920e7e14b3ef582be70417e98d6d80232b45d3053acf1e9e9c22085877aabc47061459e623535c", &(0x7f0000000180)=0x72, &(0x7f00000001c0)="29d0b560816714673907d347b95c40d7a17ca173ff0108e0fb2ada2e3ee60635ab3936bda108bfb3bb4a666f37f29ddd96561f3f81f57aa4", 0x38) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) setuid(0xffffffffffffffff) (async) open(&(0x7f00000000c0)='./file0\x00', 0x78e, 0x7) (async) writev(r0, &(0x7f00000006c0)=[{0x0}], 0x1) (async) truncate(&(0x7f0000000000)='./file0\x00', 0x4) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x68) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x2810, r1, 0x20000000) (async) socket(0x2, 0x1, 0x0) (async) setuid(0x0) (async) setsockopt(r2, 0x6, 0x4, &(0x7f0000000080), 0x0) (async) unlink(&(0x7f0000000080)='./file0\x00') (async) 236.252378ms ago: executing program 2 (id=165): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) (async) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) (async) open(&(0x7f0000000040)='./file0\x00', 0x18281, 0x110) (async) unveil(0x0, &(0x7f0000000080)='r\x00') 94.004663ms ago: executing program 2 (id=166): syz_emit_ethernet(0x2e, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800465c00200066000000019078ac1400bbe00000010773066d679143d6f14c586a"]) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x0, 0x4, {[0xfffffbeffffffffb, 0x0, 0xffffffff841212aa, 0x2, 0x8011, 0x0, 0x6, 0xffffffffffffffff, 0x80000001, 0x2f00, 0x0, 0x3, 0xffffffffffffffff, 0x3fffffffffffffc, 0x0, 0xffffffffffffffa5, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xffffffffffdffff9, 0x2, 0x0, 0x7b98, 0x9, 0x0, 0xfffffffffffffffe, 0x9], [0x5ad8, 0x2, 0x40000000, 0x0, 0xfffffffffffffffb, 0x11006, 0x4], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x5f25, 0xfffffffffffffffa, 0x3], [{0x3, 0x4, 0x0, 0x7d06}, {0x10, 0x6}, {0x0, 0x0, 0x80000001, 0x80}, {0x3, 0xd, 0xffffffff, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0x8}, {0x0, 0x2003, 0x40000, 0x6}, {0x6b7, 0x0, 0x6dd7}, {0x0, 0x965, 0xfffffffc, 0x9}], {0x2000, 0x7, 0x5, 0xffffffffffffffff}, {0x29, 0x6, 0xb0, 0x2}}}) r0 = kqueue() kevent(r0, &(0x7f0000000000), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r2 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x2000003, 0xffffffff, 0x40, 0x8623, "0104012d29fb00070c000000098004005e00", 0x88}) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f0000000040)={0x10000000, 0x2, 0x87a, 0x2f, "2800180000020002000000000068ab5ade800600", 0x6, 0x2}) 89.631547ms ago: executing program 6 (id=167): mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x50}, 0x2, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xc4) 89.228155ms ago: executing program 7 (id=168): syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffaaaaaaaaaaaa0800455c6600000001907800000001e00000010e0090780001000300000008000000050000db300000000000000000a6fb8c34ea798b2dc4b4da1e27c543cb0ec874378e7321b79a4efaf9e58a081ebb1c3240433bc81426548e3bc49576884955670166d32d5aa5a4ee7954e4fb9c8022a67cdcd8d1a74c6ffa1321a7180df2464aad4bb1d6d71c06097d2feb6fa769ddfa88c6bbd7078f688f7f77fb687f31bbb461dfe74be70e90403f7ada85ab657f4d674d1048f3a4a8f1c0543dbb861d464e31c229f38164"]) 89.046315ms ago: executing program 6 (id=169): open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setuid(0xee01) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) sysctl$vm(&(0x7f0000000040)={0x2, 0x7}, 0x2, &(0x7f0000000000)="0000040c6a", &(0x7f0000000540)=0x5, &(0x7f0000000580)="096c4b1a", 0x4) open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) (async) setuid(0xee01) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) (async) sysctl$vm(&(0x7f0000000040)={0x2, 0x7}, 0x2, &(0x7f0000000000)="0000040c6a", &(0x7f0000000540)=0x5, &(0x7f0000000580)="096c4b1a", 0x4) (async) 42.872237ms ago: executing program 7 (id=170): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r1, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) accept4(r1, 0x0, 0x0, 0x4000) ioctl$TIOCSETA(r0, 0xc4504441, &(0x7f0000000740)={0x9, 0x10, 0x0, 0xfffffff6, "aca2224ff1c14649ebb178926cc9795a0100d100", 0x7, 0xb}) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0xa, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) sysctl$kern(&(0x7f0000000000)={0x1, 0x1}, 0x2, &(0x7f0000000240)="d67c06a4fbc2403c4c8b6763bb6d2256bca945d9c6852b4d71e22a96d78c45884420f79e9dbdb7712d1e70a90f475dcb2f8e0bd480ecfde727e4688c9d5509902721f708168d2d8cf22a2c5bfa83431b6b4bf9e90c56d2ce5303368cd269a596e6a586e2cbf8c999b7d76c97d416d12106b1dc1daf862314dda8fdb74a92ea013f9354a8135026bc8f38ba63f4222f76a05c55a16287aba72c73eea9740f2421529b0167904fc145420ad9a2228ddb5d80982948f9fbfaffa72d84cdf6b1029e528b8df817895fa0cafcd323530ce3ec53ead4d9dc99304d1e22a1a5953ff789b11ec0d4751b0ccdd353fcf025aee3c8889c1b26b9a120c4ef597b3b", &(0x7f0000000340)=0xfc, &(0x7f0000001200)="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", 0x1000) 41.948345ms ago: executing program 0 (id=171): r0 = socket(0x1, 0x5, 0x4) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000040)="bb7b0a8b35aa69d1cd748019ed83518b36b591dba22d0e35451eec46be5e72f769c1f6c5b340bf426e475a93103ee4a95449d77acaa137637a99f288f2356bf6924cd964f8385ca4420003d52465a9c890abf707fa11dfd92937e8a54e8a5ddeda7d2f6e85ea5d8e12d1e988e6109026c49addd240c1168154b5b12b3727ae011b9e16ca5290400870c4a16eb8a1e04346461a3fe400f64976e49c6a3dcb7891b0501b21b5f205d369f50c6480c70129c2f12b58b96b13d9d40ecd81079333dfcf7141411ecde450fd23", 0xca) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) (async) select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x8}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0x6, 0x3, 0xc0}, {0x44, 0xf0, 0xff}, {0x6, 0x80, 0x12, 0x4}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket(0x18, 0x2, 0x0) socketpair(0x2, 0x5, 0x80, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x8, 0x0) (async) r5 = dup3(r2, r1, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) (async) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000002c0), 0xc) (async) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r9 = socket$inet6(0x18, 0x4, 0x57) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000900)={&(0x7f0000000000)=@abs={0xfa, 0x2, 0x0, 0x0}, 0x8, 0x0, 0x0, &(0x7f0000000440)=[@rights={0x20, 0xffff, 0x1, [r2, r1, r0, r9, r1]}, @rights={0x24, 0xffff, 0x1, [r1, r2, r0, r2, r2, r2]}, @rights={0x34, 0xffff, 0x1, [r3, r1, r0, r2, r1, r4, r5, r9, r6, r2]}, @cred={0x18, 0xffff, 0x0, 0xffffffffffffffff, r7, r8}, @rights={0x2c, 0xffff, 0x1, [0xffffffffffffff9c, r4, r9, r10, r3, r1, r5, r1]}], 0xbc, 0x405}, 0xc) (async) r11 = kqueue() kevent(r11, &(0x7f0000001580), 0x6, 0x0, 0x2e59158d, &(0x7f0000001680)={0x91, 0x6}) 41.709922ms ago: executing program 6 (id=172): pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r1 = getppid() fcntl$setown(r0, 0x6, r1) fcntl$setown(r0, 0x6, 0x0) fcntl$lock(r0, 0x0, &(0x7f0000000080)={0xfc5c197114b2c8de, 0x0, 0x40008, 0x2, r1}) mkdir(&(0x7f0000000180)='./file0\x00', 0x14) rename(&(0x7f00000003c0)='.\x00', &(0x7f0000000000)='./file0\x00') 38.820422ms ago: executing program 2 (id=173): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) socket$inet(0x2, 0x3, 0xfc) syz_open_pts() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={0x4, 0x3, r0}) ioctl$FIONREAD(r1, 0x80206979, &(0x7f0000000040)) 4.65824ms ago: executing program 0 (id=174): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) utimes(0x0, &(0x7f0000000000)={{0x7, 0x8}, {0xa13, 0xfffffffffffff000}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DIOCRGETTABLES(r0, 0xc450443f, &(0x7f0000000500)={{'./file0\x00', './file0\x00', 0x9, 0x92}, &(0x7f0000000080), 0xffffffff, 0x0, 0xb4, 0x1009, 0x3, 0x7, 0x40, 0x2}) 257.279µs ago: executing program 6 (id=175): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) sendmmsg(0xffffffffffffff9c, &(0x7f0000001bc0)={{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)="dd718e3e6187c23cdd5c17a870c21ab0997d67925b6f646447ae34400df79322d80d2fb6b331e79e7bb518ccce0daf7d629ad2f892a71576a647d36d5a53a914826bebc3005b3127f73ac3a1053495e807e558e889f44d8474736ce645dafb2c9787abe93f1813adf0b791a2fc1b45450512801538795f239865ca4eabb233e5d2b247c37d75c9cd55c0aa47a657cb527ea7960cb71255e6377f5e93a08d7961312d52279bf4ef46b5097717b8fccd6d389dfee3aeddb44f52d40c97f60bb6d98b", 0xc1}], 0x1, 0x0}}, 0x38, 0xe) (async) sendmmsg(0xffffffffffffff9c, &(0x7f0000001bc0)={{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000540)="dd718e3e6187c23cdd5c17a870c21ab0997d67925b6f646447ae34400df79322d80d2fb6b331e79e7bb518ccce0daf7d629ad2f892a71576a647d36d5a53a914826bebc3005b3127f73ac3a1053495e807e558e889f44d8474736ce645dafb2c9787abe93f1813adf0b791a2fc1b45450512801538795f239865ca4eabb233e5d2b247c37d75c9cd55c0aa47a657cb527ea7960cb71255e6377f5e93a08d7961312d52279bf4ef46b5097717b8fccd6d389dfee3aeddb44f52d40c97f60bb6d98b", 0xc1}], 0x1, 0x0}}, 0x38, 0xe) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2c00) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) ioctl$TIOCSETA(r0, 0xc4504442, &(0x7f0000000200)={0xffffffff, 0x0, 0x20000009, 0x228c4ae2, "6aff000047000000f8ff00", 0x4e9, 0x4}) (async) ioctl$TIOCSETA(r0, 0xc4504442, &(0x7f0000000200)={0xffffffff, 0x0, 0x20000009, 0x228c4ae2, "6aff000047000000f8ff00", 0x4e9, 0x4}) 0s ago: executing program 0 (id=176): open(&(0x7f0000000180)='./file0\x00', 0x615, 0x1a) truncate(&(0x7f0000000140)='./file0\x00', 0x30001) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x11) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x11f) write(r1, &(0x7f00000004c0)="b96a", 0x2) (async) write(r1, &(0x7f00000004c0)="b96a", 0x2) unlink(&(0x7f0000000000)='./file0\x00') (async) unlink(&(0x7f0000000000)='./file0\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. uWAvmR_NINfG:a ulSt(PL 0NxOfTff ffdL8O0WER6ED cO5N6 e0S2Y0SCA,L L 0x793 -8926,0 60,873 16) EX-> IeT 0ker nael: pStopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND * 21565 47859 0 0x2 0 0 ifconfig 153042 98759 60929 0x10 0x4000000 1K syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x7aa360154dd0, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu1: uvm_fault(0xfffffd806c56e020, 0x98, 0, 1) -> e ddb{0}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7aa360154dd0, count: -1 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80003a7cf960 rbx 0 rdx 0 rcx 0xffff8000393c87f0 rax 0x3b r8 0xffff80003a7cf890 r9 0xffff80003a7cf5e0 r10 0x5aa831c113ff5f33 r11 0xb75e68b88458d0a1 r12 0 r13 0 r14 0xffff8000393c87f0 r15 0 rip 0xffffffff8149c3ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80003a7cf8e0 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{0}> show proc PROC (ifconfig) tid=21565 pid=47859 tcnt=1 stat=onproc flags process=2 proc=0 runpri=52, usrpri=52, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000393c9780,0xffff8000393c9a28 process=0xffff8000fffe79e0 user=0xffff80003a7ca000, vmspace=0xfffffd806c56e5d8 estcpu=36, cpticks=2, pctcpu=0.0, user=0, sys=2, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND *47859 21565 15088 0 7 0x2 ifconfig 87955 276742 33144 0 2 0 syz-executor 87955 210222 33144 0 3 0x4000080 fsleep syz-executor 46784 311789 67342 -1 2 0x10 syz-executor 46784 505837 67342 -1 3 0x4000010 biowait syz-executor 46784 356334 67342 -1 3 0x4000010 inode syz-executor 46784 260013 67342 -1 3 0x4000090 fsleep syz-executor 15088 171123 12891 0 3 0x10008a sigsusp sh 98759 385281 52183 60929 2 0x10 syz-executor 98759 153042 52183 60929 7 0x4000010 syz-executor 83826 54695 88344 0 2 0 syz-executor 83826 269500 88344 0 3 0x4000080 fsleep syz-executor 12891 119170 55055 0 3 0x82 wait syz-executor 84827 140026 26022 0 2 0 syz-executor 84827 47054 26022 0 3 0x4000080 kqread syz-executor 84827 413976 26022 0 3 0x4000080 fsleep syz-executor 71528 65699 61883 -1 3 0x90 nanoslp syz-executor 71528 52958 61883 -1 3 0x4000090 kqsel syz-executor 71528 138429 61883 -1 3 0x4000090 fsleep syz-executor 88344 441195 55055 0 3 0x82 nanoslp syz-executor 67342 97450 55055 0 3 0x82 nanoslp syz-executor 26022 395567 55055 0 3 0x82 nanoslp syz-executor 79492 361212 55055 0 3 0x82 nanoslp syz-executor 52183 63587 55055 0 3 0x82 nanoslp syz-executor 61883 505952 55055 0 3 0x82 nanoslp syz-executor 33144 380805 55055 0 3 0x82 nanoslp syz-executor 55055 292741 78683 0 3 0x82 kqread syz-executor 78683 479782 22865 0 3 0x10008a sigsusp ksh 22865 231616 80585 0 3 0x98 kqread sshd-session 80585 202266 44356 0 3 0x92 kqread sshd-session 73557 37707 1 0 3 0x100083 ttyin getty 44356 228313 1 0 3 0x88 kqread sshd 31863 73083 99317 74 3 0x1100092 bpf pflogd 99317 148120 1 0 3 0x80 sbwait pflogd 82730 252827 58071 73 3 0x1100090 kqread syslogd 58071 230673 1 0 3 0x100082 sbwait syslogd 22261 304720 1 0 3 0x100080 kqread resolvd 35874 122496 78157 77 3 0x100092 kqread dhcpleased 31039 355098 78157 77 3 0x100092 kqread dhcpleased 78157 506536 1 0 3 0x80 kqread dhcpleased 96292 326360 0 0 3 0x14200 bored smr 96357 142800 0 0 2 0x14200 zerothread 30807 239766 0 0 3 0x14200 aiodoned aiodoned 75 137376 0 0 3 0x14200 syncer update 15592 365155 0 0 3 0x14200 cleaner cleaner 17665 361503 0 0 3 0x14200 reaper reaper 49327 10495 0 0 3 0x14200 pgdaemon pagedaemon 95888 259216 0 0 3 0x14200 bored viomb 42394 289243 0 0 3 0x40014200 acpi0 acpi0 86261 162295 0 0 3 0x40014200 idle1 10584 397515 0 0 3 0x14200 bored softnet1 2331 505976 0 0 3 0x14200 bored softnet0 88624 311998 0 0 3 0x14200 smrbar systqmp 58931 71938 0 0 3 0x14200 bored systq 64690 168284 0 0 3 0x14200 tmoslp softclockmp 88285 7190 0 0 3 0x40014200 tmoslp softclock 14624 110655 0 0 3 0x40014200 idle0 1 472249 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff839fb020) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 uvm_pmr_freepages+0x1a8 #3 pmap_do_remove+0x8af #4 uvm_unmap_kill_entry_withlock+0x269 #5 uvm_unmap_remove+0x6c2 #6 sys_munmap+0x238 #7 syscall+0xbd4 #8 Xsyscall+0x128 Process 47859 (ifconfig) thread 0xffff8000393c87f0 (21565) exclusive kernel: protection fault trap, code=0 Faulted in DDB; continuing... ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11094 12182K 12344K 166960K 12348 0 pcb 19 14K 16K 166960K 135 0 rtable 219 7K 8K 166960K 395 0 pf 36 18K 25K 166960K 88 0 ifaddr 39 6K 7K 166960K 55 0 ifgroup 54 2K 2K 166960K 76 0 sysctl 4 1K 9K 166960K 9 0 counters 68 36K 37K 166960K 82 0 ioctlops 0 0K 4K 166960K 1515 0 iov 0 0K 16K 166960K 5 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1294 81K 82K 166960K 1495 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 10 0K 0K 166960K 10 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 19 69K 106K 166960K 330 0 sigio 0 0K 0K 166960K 8 0 proc 80 147K 164K 166960K 600 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 28 0 in_multi 88 6K 7K 166960K 118 0 ether_multi 1 0K 0K 166960K 2 0 mrt 0 0K 0K 166960K 9 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 223 996K 996K 166960K 223 0 exec 0 0K 1K 166960K 408 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 253 169K 185K 166960K 4770 0 UVM aobj 11 2K 2K 166960K 11 0 pinsyscall 44 88K 104K 166960K 1504 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 14 0 NDP 13 0K 2K 166960K 35 0 temp 44 9076K 9143K 166960K 15979 0 kqueue 16 24K 31K 166960K 65 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 41 0 38 1 0 1 1 0 8 0 rtentry 176 126 0 28 6 0 6 6 0 8 0 unpcb 144 186 0 164 2 0 2 2 0 8 1 syncache 336 7 0 7 1 0 1 1 0 8 1 tcpqe 32 2 0 2 1 0 1 1 0 8 1 tcpcb 736 63 0 57 1 0 1 1 0 8 0 arp 136 21 0 5 1 0 1 1 0 8 0 inpcb 328 307 0 293 7 0 7 7 0 8 5 nd6 152 26 0 6 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 0 1 1 0 8 1 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1192 3 0 3 1 0 1 1 0 8 1 pfstscr 40 2 0 2 1 0 1 1 0 8 1 pffrag 232 2 0 0 1 0 1 1 0 482 0 pffrnode 88 2 0 0 1 0 1 1 0 8 0 pffrent 40 6 0 4 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 3 0 1 1 0 1 1 0 8 0 pfanchor 1288 6 0 0 1 0 1 1 0 8 0 pfstitem 24 41 0 0 1 0 1 1 0 8 0 pfstkey 128 43 0 2 2 0 2 2 0 8 0 pfstate 448 42 0 1 5 0 5 5 0 8 0 pfrule 1360 25 0 18 2 1 1 2 0 8 0 rttmr 136 2 0 2 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 561 0 152 31 0 31 31 0 8 5 art_table 40 562 0 152 5 0 5 5 0 8 0 art_node 32 126 0 37 1 0 1 1 0 8 0 sysvmsgpl 40 6 0 5 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 112 8 0 0 1 0 1 1 0 8 0 shmpl 112 8 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1881 0 413 93 0 93 93 0 8 1 ffsino 296 1881 0 413 114 0 114 114 0 8 0 nchpl 144 2335 0 628 64 0 64 64 0 8 0 vnodes 216 2054 0 0 115 0 115 115 0 8 0 namei 1024 7493 0 7493 1 0 1 1 0 8 1 percpumem 16 56 0 7 1 0 1 1 0 8 0 pfiaddrpl 120 1 0 0 1 0 1 1 0 8 0 kstatmem 264 37 0 12 3 0 3 3 0 8 1 scxspl 216 8265 0 8264 8 1 7 7 1 8 6 plimitpl 152 114 0 95 1 0 1 1 0 8 0 sigapl 424 638 0 589 7 0 7 7 0 8 1 knotepl 120 547 0 0 17 0 17 17 0 8 0 kqueuepl 224 230 0 217 5 0 5 5 0 8 4 pipepl 344 202 0 174 9 0 9 9 0 8 6 fdescpl 528 622 0 589 3 0 3 3 0 8 0 filepl 160 3021 0 2780 18 0 18 18 0 8 7 lockfpl 104 82 0 80 1 0 1 1 0 8 0 lockfspl 48 38 0 36 1 0 1 1 0 8 0 sessionpl 144 34 0 25 1 0 1 1 0 8 0 pgrppl 48 45 0 28 1 0 1 1 0 8 0 ucredpl 104 320 0 303 1 0 1 1 0 8 0 zombiepl 144 590 0 589 1 0 1 1 0 8 0 processpl 1232 638 0 589 5 0 5 5 0 8 0 procpl 664 951 0 892 6 0 6 6 0 8 0 sockpl 752 543 0 504 10 0 10 10 0 8 5 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 116 0 0 15 0 15 15 0 8 0 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mtagpl 96 5 0 0 1 0 1 1 0 8 0 mbufpl 256 133 0 0 9 0 9 9 0 8 0 bufpl 280 2831 0 105 195 0 195 195 0 8 0 anonpl 32 5444 0 0 44 0 44 44 0 246 0 amapchunkpl 152 14347 0 13818 28 0 28 28 0 158 7 amappl16 200 2248 0 2222 5 2 3 5 0 8 1 amappl15 192 4 0 4 1 1 0 1 0 8 0 amappl14 184 440 0 438 1 0 1 1 0 8 0 amappl13 176 137 0 125 1 0 1 1 0 8 0 amappl12 168 873 0 841 2 0 2 2 0 8 0 amappl11 160 37 0 37 1 1 0 1 0 8 0 amappl10 152 65 0 50 1 0 1 1 0 8 0 amappl9 144 269 0 269 1 1 0 1 0 8 0 amappl8 136 115 0 112 1 0 1 1 0 8 0 amappl7 128 153 0 140 1 0 1 1 0 8 0 amappl6 120 169 0 166 1 0 1 1 0 8 0 amappl5 112 117 0 107 1 0 1 1 0 8 0 amappl4 104 302 0 279 1 0 1 1 0 8 0 amappl3 96 2669 0 2547 4 0 4 4 0 8 0 amappl2 88 554 0 492 2 0 2 2 0 8 0 amappl1 80 11006 0 10393 16 0 16 16 0 8 1 amappl 88 3999 0 3821 5 0 5 5 0 92 0 uvmvnodes 80 105 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 10 0 0 1 0 1 1 0 8 0 uaddrrnd 24 622 0 589 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 622 0 589 1 0 1 1 0 8 0 vmmpekpl 168 7270 0 7231 3 0 3 3 0 8 0 vmmpepl 168 48574 0 46598 98 0 98 98 0 357 5 vmsppl 488 621 0 589 5 0 5 5 0 8 0 rwobjpl 80 16956 0 15876 26 0 26 26 0 8 2 pdppl 4096 1251 0 1178 103 26 77 85 0 8 4 pvpl 32 13344 0 0 108 0 108 108 0 265 0 pmappl 256 621 0 589 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 277 0 29 8 0 8 8 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7aa360154dd0, count: -1 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299bdff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,70) at comcnputc+0x250 cnputc(70) at cnputc+0x67 db_putchar(70) at db_putchar+0x36d kprintf() at kprintf+0x29c5 db_printf(ffffffff83440a7d) at db_printf+0x9b db_ktrap(6,0,ffff8000377c00f0) at db_ktrap+0x1b6 kerntrap(ffff8000377c00f0) at kerntrap+0x243 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff8000fffe82b8,fffffd8066b84630,ffff8000377c02b0) at dovutimens+0x368 sys_futimens(ffff8000fffe82b8,ffff8000377c0400,ffff8000377c0350) at sys_futimens+0xb3 end trace frame: 0xffff8000377c03f0, count: 0 ddb{1}> trace x86_ipi_db(ffff8000299bdff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,70) at comcnputc+0x250 cnputc(70) at cnputc+0x67 db_putchar(70) at db_putchar+0x36d kprintf() at kprintf+0x29c5 db_printf(ffffffff83440a7d) at db_printf+0x9b db_ktrap(6,0,ffff8000377c00f0) at db_ktrap+0x1b6 kerntrap(ffff8000377c00f0) at kerntrap+0x243 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff8000fffe82b8,fffffd8066b84630,ffff8000377c02b0) at dovutimens+0x368 sys_futimens(ffff8000fffe82b8,ffff8000377c0400,ffff8000377c0350) at sys_futimens+0xb3 syscall(ffff8000377c0400) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe73e84f98f0, count: -16