last executing test programs: 1.479153982s ago: executing program 3 (id=930): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fc, 0x17, 0x2100007, 0x101, 0x80000001, 0x80001001, 0x10001, 0x10, [{0x0, 0x6, 0x800004, 0x71001}, {0x8, 0xffffffff, 0x80008, 0xfffffff9}, {0x8, 0xf86, 0x82, 0x9}, {0x1, 0x801, 0x5, 0xfffeffff}, {0x4, 0x200726, 0x2800, 0x8007}, {0x1, 0xa, 0x3, 0x2}, {0xce1, 0x0, 0x573, 0x6d}, {0x6, 0x300, 0x54, 0x738}, {0x3ca, 0x9, 0x5, 0x8}, {0x5, 0x1, 0xd1b, 0x8c}, {0x5f, 0x7, 0x7, 0x3}, {0x7ff, 0x9, 0x0, 0x9}, {0xb8c, 0x4, 0x2, 0x4}, {0x29a71717, 0x1, 0x1, 0xfeac}, {0xc, 0x407, 0xffffffff}, {0x8800, 0x1, 0x1002, 0xfff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 1.426176455s ago: executing program 2 (id=933): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r0, 0xcd604406, &(0x7f0000000040)={0x7ffb, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1dd00", 0x4, 0x5}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) ioctl$TIOCSETA(r2, 0xcd604406, &(0x7f0000000040)={0x7fffffff, 0x40000000, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1dd00", 0x4, 0x6}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r1, 0xcd604407, &(0x7f0000000040)={0x3, 0x0, 0xfffffffe, 0x5, "210d000000020000000000000000004021800600", 0x2000000, 0x5}) 1.403196142s ago: executing program 2 (id=937): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0xff, 0x4, 0x9}, {0xc, 0x0, 0x2, 0x6}, {0x9b1e, 0x5, 0x1f, 0x4000800}]}) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x66, &(0x7f0000000240)={@empty, @random="47c17471de08", [], {@arp={0x806, @generic={0x6, 0x8146, 0x6, 0x0, 0x4, @empty, "", @empty, "378df48cb0a17e73015ebedade938d87"}}}}) 1.38366841s ago: executing program 2 (id=939): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x20766a, 0x80, 0xd02, 0xfffffffd, "001700ffffff7f0000000021bd5f81e6015fdd04", 0x5ffffffe, 0x3ff}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="2aef1ba69986bfa8bdbecbcad1f3c1622163c1f5228fdb7c32bca7f3fbb73f4dc3a6f65d935878b1eb253cd096f8cc79616313b32f5322e0b353900f163102e8d7d10f70b82891374d7a7194f8e389ef304b6ae2a05bfc367f5f7e26429d3744e8c527949c7c9cf5cdf50cb497f38a364de272a33409d37704405a9e3a04ce70b030e9e6d5e035f09fe4e9f5d125d6a59dc71059cae75a706fc343e93b3cd5bd5012390c9979b681d08bf4271a78fb4aef8ad01e4be2bf8abcbe33d4250fec27fec8901c4ef2fe5f4aa010797dd5deb02d5f1f3bbdd854934d70fa322214a6de03954966a7fe92a2b328c4a9a0ee3b791598319b4ec9096289a3e8678b8e8cb777cd7a414ccebd131b3b10ff23355e00adcefab600a793aa92290fce8eec2c76fa5ed06a104b7bfd9ebd22ffabdf11c9bab57b4b22bcba67692d53a1985e43c733841eaeb09c3ba011aa129a2e1fa5a718340fd85507676301cf9702437eb9681aaabd8f98ed06c512333fff813c6a7293126fb20e53dc969fbf07d6de8aa65384ac5b178c6eac1b7f31cacd4b7ec500fe8d03fba3f6460aaf028b2765d76a1568d99654b0866ebd1ce3fdfdadf23db97d0f0c27482d255b00e219c13191ca16e417a8f04b3488e87210df", 0x1cb}], 0x1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000080)={0x9, 0x6, 0x9, 0xe9d4, "15a046cfe406f32e09dff5fa79dc9bc4aefe383d", 0x3, 0xfffffff8}) 1.383306068s ago: executing program 3 (id=940): r0 = socket(0x18, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x1, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b802, 0x1, 0x7}, {0x100806, 0x0, 0x9, 0x2}, {0x2, 0x0, 0x200, 0xfffffffc}, {0x4, 0x3, 0x8, 0x7}, {0x2, 0x47fff, 0x14000006, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x34, 0xa}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38c000, 0xe1}, {0x80000cb, 0x2, 0xa, 0x8}, {0x2000df, 0x9, 0x7, 0x100}, {0x10008, 0xe2, 0xfffffff5, 0xfffffff8}, {0x5, 0x5, 0x24, 0x4}, {0x1, 0xd655, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) setitimer(0x1, &(0x7f0000000140)={{0xcdc, 0x5}, {0xfffffffffffffff0, 0x11}}, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 966.664288ms ago: executing program 2 (id=952): r0 = syz_open_pts() syz_open_pts() poll(0x0, 0x0, 0x8f2) close(0xffffffffffffffff) openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x8004746b, 0x0) ftruncate(r0, 0x4e1a) 881.141289ms ago: executing program 7 (id=953): r0 = semget$private(0x0, 0x3, 0x6e2) semctl$SETVAL(r0, 0x0, 0x8, &(0x7f0000000000)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000080)=0xc) geteuid() dup2(0xffffffffffffff9c, 0xffffffffffffffff) utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x3d5e8d04, 0x1}, {0x80, 0x1}}) semop(r0, &(0x7f0000001900)=[{0x1, 0x849, 0x2800}, {0x1, 0x1ff, 0x1000}, {0x1, 0xb, 0x1800}, {0x0, 0xffff, 0x1000}, {0x4, 0x658f, 0x800}, {0x4, 0xd, 0x1000}, {0x1, 0x0, 0x1800}], 0x7) 880.214428ms ago: executing program 3 (id=954): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047460, &(0x7f0000000280)=0x4) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x80, 0x4, 0xfbfffffe, 0xfffffffe, "dd6c1f460000ff20004092d6126e4ed671e500", 0x800}) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000780)="f9e3732dcc560f508af928fd5d247d6b0e04dc25d3987700b6ca71b837834fc822a84007aeed8278e844545454d44aa7905025e2ae27bc4bd768a5d05a1b00eba02405e67a3b2fa515e4802be0a1a645d9663fb3f133a3c5e9b064411e3fa73566c4a6ebc06ea9146c1b", 0x6a}], 0x1) 870.998515ms ago: executing program 7 (id=956): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000}) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) execve(0x0, 0x0, 0x0) 845.76867ms ago: executing program 3 (id=957): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000000)=0x2) ioctl$FIOASYNC(r1, 0x80047460, &(0x7f0000000280)=0x4) read(r0, &(0x7f0000000100)=""/60, 0x3c) 823.962015ms ago: executing program 3 (id=959): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0xff, 0x1, 0x9}, {0x20, 0xc9, 0x2, 0x8}, {0x9b1e, 0x22, 0xf, 0x40207ff}]}) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="c2a6500000fcbb7ab811ee92d746932483c9c73a16ce546a0790fd80ffffffff5196be9e589e1f9983fb826dc58396a16683078bb407048937b0bfec9c3519bf618cbeb7a8", &(0x7f0000000000)=0x45, 0x0, 0xfffffffffffffed0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe) 818.51545ms ago: executing program 6 (id=960): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000100)={0xffffffff, 0x8001, {0x4000000f09, 0x1}}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xff, {0x2, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000100)="ebffcbff13b9fdc12eaa4e713048e69931929648", 0x14) 787.117964ms ago: executing program 3 (id=962): r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$inet6(r0, 0x0, 0x0, 0x7, 0x0, 0x0) 733.401186ms ago: executing program 0 (id=966): r0 = semget(0x0, 0x1, 0x201) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r2, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, 0x0) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semctl$GETZCNT(r0, 0x3, 0x7, 0x0) 718.983104ms ago: executing program 4 (id=967): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSRTIMEOUT(r0, 0x8010426d, &(0x7f0000000100)={0x0, 0x6f}) ioctl$BIOCSBLEN(r0, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) syz_extract_tcp_res(0x0, 0xffffffff, 0x41) syz_extract_tcp_res(0x0, 0x10001, 0x5) pread(r0, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) 702.720896ms ago: executing program 7 (id=968): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4000000000000054}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000040)={0x766a, 0x7ff, 0xcfe, 0xffffff01, "9cdc4580307e080000006b08fc5f81e6015fdd04", 0x7, 0x9}) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)=0x7) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="2aef1ba69986bfa8bdbecbcad1f3c1622163c1f5228fdb7c32bca7f3fbb73f4dc3a6f65d935878b1eb253cd096f8cc79616313b32f5322e0b353900f163102e8d7d10f70b82891374d7a7194f8e389ef304b6ae2a05bfc367f5f7e26429d3744e8c527949c7c9cf5cdf50cb497f38a364de272a33409d37704405a9e3a04ce70b030e9e6d5e035f09fe4e9f5d125d6a59dc71059cae75a706fc343e93b3cd5bd5012390c9979b681d08bf4271a78fb4aef8ad01e4be2bf8abcbe33d4250fec27fec8901c4ef2fe5f4aa010797dd5deb02d5f1f3bbdd854934d70fa322214a6de03954966a7fe92a2b328c4a9a0ee3b791598319b4ec9096289a3e8678b8e8cb777cd7a414ccebd131b3b10ff23355e00adcefab600a793aa92290fce8eec2c76fa5ed06a104b7bfd9ebd22ffabdf11c9bab57b4b22bcba67692d53a1985e43c733841eaeb09c3ba011aa129a2e1fa5a718340fd85507676301cf9702437eb9681aaabd8f98ed06c512333fff813c6a7293126fb20e53dc969fbf07d6de8aa65384ac5b178c6eac1b7f31cacd4b7ec500fe8d03fba3f6460aaf028b2765d76a1568d99654b0866ebd1ce3fdfdadf23db97d0f0c27482d255b00e219c13191ca16e417a8f04b3488e87210df971c644cf7811c815daef73f67625d3ecc575fae5b0a31c0c29b89bba9353dca8559d91823f86f987d854aafb0b6b90e85a73e6a96b207b0e03f4729964725cf780d7c22e53e3e0e8acf83e0d69a19a4a5119147a2dec2230b006aa6672484bb93b1127371d56a6071307e20fa85543abadc07806d6b4d8a8a66be5f2ea29d6b084f223ae956885fd30df7132e93177d326dec10045d41ed8bad802371161569021890e4e358355042155896c483defd10f3439e8bd555079242e9d00e5246b2038e1ed86af97b09ee7004209841bb0161c518f826631140334ec5d7f95d4012a15867bf42e678494f7c42bdbc388e78f6e037e16d04e7f2ad834464a5ba7e085c5e", 0xfd98}], 0x1) 702.419499ms ago: executing program 0 (id=969): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x6, 0x17, 0x2100007, 0x101, 0x80000001, 0x80001001, 0x10001, 0x10, [{0x0, 0x6, 0x800004, 0x71001}, {0x8, 0xffffffff, 0x80008, 0xfffffff9}, {0x8, 0xf86, 0x82, 0x9}, {0x1, 0x801, 0x5, 0xfffefffc}, {0x1, 0x200726, 0x2800, 0x7}, {0xfffffffd, 0xa, 0x3, 0x2}, {0xcdf, 0x0, 0x573, 0x6d}, {0x6, 0x300, 0x54, 0x738}, {0x3cb, 0x9, 0x5, 0x8}, {0x5, 0x1, 0xd1b, 0x8c}, {0x5f, 0x7, 0xc, 0x3}, {0x7ff, 0x9, 0x2, 0x9}, {0xb8c, 0x4, 0x2, 0xe628}, {0x29a71717, 0x1, 0x1, 0xfeac}, {0xc, 0x407, 0xffffffff}, {0x8800, 0x1, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 634.123115ms ago: executing program 5 (id=970): readv(0xffffffffffffffff, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000600)=""/251, 0xfb}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000002c0)="ed", 0x1) recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xa48c}, 0x38, 0x1842, 0x0) readv(r1, &(0x7f0000001a80)=[{0x0}], 0x1) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1046) shutdown(r0, 0x1) 633.831744ms ago: executing program 6 (id=971): setrlimit(0x8, &(0x7f0000000400)={0x42, 0x800000003fb}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000000)="d50190c19bd104cb440f517b0c31e627635df928c84d8137c83b3f3e84b519b9d13be3e790e3e51cd643a55eb76fe54796c315e4c22ede5ac446f609", 0x3c}, {&(0x7f00000001c0)="8c1a19c9834f27e01637d2f715b2151a244b791bfe322548d97472e7f7ff2bca88eb24e3f0ee4a70a974f15e3565cfea417dd2748dd98efc153e0acba1f8c1fd2caa2d13", 0x44}], 0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1) 633.421495ms ago: executing program 1 (id=972): setrlimit(0x8, &(0x7f0000000000)={0x41, 0x5f}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0xf66c, 0x6, 0x9, 0x5effff5b, "9cdc452e307e7f000000000000002f9e68cd3304", 0x8, 0x7}) writev(r0, &(0x7f0000001ac0)=[{&(0x7f0000000f80)="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", 0x692}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000100)="234452ef47842d11f45af8c5b84e", 0xe}], 0x1) 493.944388ms ago: executing program 0 (id=973): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000040)=@file={0x97, 0x1, './file0\x00'}, 0xa) setuid(0xee01) connect$unix(r0, &(0x7f00000001c0)=@file={0x5, 0x1, './file0\x00'}, 0xa) 492.696707ms ago: executing program 6 (id=974): mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000240)='./file0\x00', 0x10000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0x8018, 0x2000007, 0x101, 0x3ff, 0x81b0, 0x10201, 0x10, [{0xffffffff, 0x2890, 0x4, 0x71002}, {0xa, 0x9, 0x7, 0xffffdffd}, {0x0, 0xf88, 0xfffffffd, 0x4}, {0x4, 0x800, 0x8003, 0x83}, {0x8, 0x3, 0x2800, 0x7}, {0xc, 0x650, 0x3, 0x199}, {0xd, 0x4, 0x1, 0x6d}, {0x3, 0x80d, 0x14, 0x800008}, {0x2, 0x80000000, 0x5, 0x5}, {0x20006a75, 0x8001, 0x1, 0x4}, {0x1c9, 0x6, 0x8}, {0x8, 0x9, 0x610, 0x2}, {0xb94, 0x7, 0x2, 0x1}, {0x29a71717, 0xfffffffa, 0x2001, 0x7}, {0x9, 0x5, 0x5}, {0x0, 0x1, 0xf, 0x10000}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0x8, 0x0}) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') 491.547725ms ago: executing program 4 (id=975): setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) ioctl$TIOCSBRK(r0, 0x2000747b) read(r0, &(0x7f0000000240)=""/243, 0xf3) 394.837053ms ago: executing program 4 (id=976): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0x7}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffc}, {0x4, 0x3, 0x80000000, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x34, 0xa}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38c000, 0xe1}, {0x80000cb, 0x2, 0xc, 0x8}, {0x2000df, 0x9, 0x15, 0x400}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x24, 0x80000001}, {0x4, 0xd655, 0x3, 0x6}]}) open$dir(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) setitimer(0x0, &(0x7f0000000140)={{0x4, 0x100800000000009}, {0x1ff, 0x3}}, 0x0) r0 = socket(0x18, 0x3, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 387.909765ms ago: executing program 5 (id=977): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) 358.069987ms ago: executing program 0 (id=978): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0x7}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffc}, {0x4, 0x3, 0x80000000, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x8, 0xfdf0, 0x9}, {0x0, 0x7, 0x34, 0xa}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0xa44f, 0xfff9, 0xa38c000, 0xe1}, {0x80000cb, 0x2, 0xc, 0x8}, {0x2000df, 0x9, 0x15, 0x400}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x24, 0x4}, {0x4, 0xd655, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x800c1, 0xf, 0x0, 0x1040807, 0x50001, 0x0, 0x1, 0x0, 0x8, 0xf5fffffffffffff9}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 356.484871ms ago: executing program 4 (id=979): setrlimit(0x8, &(0x7f0000000400)={0x42, 0x800000003fb}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047469, &(0x7f00000000c0)=0x5) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1) writev(r0, &(0x7f0000000bc0)=[{0x0}], 0x1) 349.537179ms ago: executing program 5 (id=980): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000040)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac1658bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) 348.353066ms ago: executing program 7 (id=981): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e4f) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x1ff, 0xa4, 0x9, 0x5, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0xfffffffc, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x8, 0xffbffff9}, {0xfd, 0x6, 0xfffffffc, 0x9}, {0x4, 0x10001, 0x200800f, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000086, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x4, 0x4}, {0x3, 0x8009, 0x1000, 0x4}, {0x1d0, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0x5, 0x5, 0x204004}, {0x0, 0x1, 0xfff, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) setpgid(0x0, 0x0) 336.461378ms ago: executing program 0 (id=982): open(0x0, 0x0, 0x140) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x1000f66c, 0x57e, 0x7, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0xffffffff, 0x9}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="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", 0x4c0}], 0x1) rename(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 294.368531ms ago: executing program 5 (id=983): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0xff, 0x1, 0x9}, {0x30, 0xc9, 0x2, 0x8}, {0x9b1e, 0x22, 0xf, 0x40207ff}]}) sysctl$kern(0x0, 0x0, &(0x7f00000001c0)="c2a6500000fcbb7ab811ee92d746932483c9c73a16ce546a0790fd80ffffffff5196be9e589e1f9983fb826dc58396a16683078bb407048937b0bfec9c3519bf618cbeb7a8", &(0x7f0000000000)=0x45, 0x0, 0xfffffffffffffed0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r0, &(0x7f00000002c0)="f81ad30100060000000100000000", 0xe) 269.610306ms ago: executing program 5 (id=984): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) r0 = socket(0x18, 0xc003, 0x3a) getsockname$inet6(r0, 0x0, &(0x7f00000001c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63d6, 0xe9, 0x2, 0xa, 0x3, 0xc, 0x10, [{0x10000004, 0x80000002, 0x5, 0x80000002}, {0xe9, 0xe8, 0x1000002, 0x2}, {0xcd5, 0x4baa, 0x8004, 0x4}, {0x7, 0xff, 0xf, 0x88ce}, {0x4, 0x200000a, 0x1, 0x1}, {0x388d, 0xffffffff, 0x85, 0x5}, {0x10000, 0xa00, 0x20003, 0xffffffff}, {0x207, 0xfffffffd, 0x5, 0xffffe2e8}, {0x7, 0x1000, 0x1, 0x7ffd}, {0x3f8, 0xfffffffd, 0x1ff, 0x12}, {0x82, 0x0, 0x8a3a0004, 0xfffffff4}, {0x10000, 0xfffffffe, 0xfffffffd, 0xa68}, {0x401, 0xc, 0xa6a8, 0xa5}, {0x6, 0x2, 0x102, 0x4}, {0x2, 0x400, 0x81, 0x7}, {0x89be2, 0x1, 0x2, 0x400}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r1, 0x80d04466, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000000000000100", 0x20004118, 0x6}) 261.639258ms ago: executing program 4 (id=985): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000004600), 0x800, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f0000000100)={0x807ff, 0xa4, 0x9, 0x0, 0x7fffffff, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0x1925, 0xc, 0xfffffff9}, {0x101, 0x81, 0x8, 0x9}, {0x4, 0x10001, 0x8012, 0x7}, {0x401, 0xffff, 0x2800, 0x7}, {0x2, 0x650, 0x2000003, 0x9b}, {0xce1, 0xffffffff, 0x6, 0x6}, {0x1000006, 0x8, 0x14, 0x5910}, {0x6000001, 0x82, 0x5, 0x6}, {0x3, 0x8009, 0x1000, 0x4}, {0x1d3, 0x800, 0xdaa1, 0x3}, {0x1c, 0xa, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0x5, 0x5, 0x4}, {0x0, 0x0, 0x0, 0x30003}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) ioctl$BIOCGBLEN(r0, 0x40044266, 0x0) 241.388805ms ago: executing program 1 (id=986): openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) r0 = socket(0x2, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1023, &(0x7f0000000040)=0x6, 0x4) 240.417135ms ago: executing program 6 (id=987): r0 = socket$inet(0x2, 0x1, 0x0) listen(r0, 0x7fff) accept4(r0, 0x0, 0x0, 0x8000) r1 = socket(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) closefrom(r2) unveil(0x0, &(0x7f0000000200)='r\x00') 239.531078ms ago: executing program 7 (id=988): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x0) r0 = getpgrp() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$setown(r1, 0x6, r0) fcntl$setown(r1, 0x6, r0) 184.39747ms ago: executing program 1 (id=989): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x8, 0x5, 0xffffdf82, 0xffffff8c, "08ed95990000000000000000ffffffffffffffe6", 0x4, 0x4}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000540)="00612699fd93f8b7a83695", 0xb}], 0x1) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) 154.899791ms ago: executing program 1 (id=990): sendmmsg(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f00000000c0)=@in={0x10, 0x2, 0x3, 0x40}, 0x10, 0x0, 0x0, 0x0}}, 0x38, 0x8) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f2a"]) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x3361) r1 = open(&(0x7f0000000480)='./file0\x00', 0x1, 0x4ebfac6bbaf782c) sysctl$kern(0x0, 0x0, &(0x7f0000000200)="a7", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCCLR(r1, 0xc0a86b03, &(0x7f0000000200)={0x0, 0x10000, 0x0}) 147.10946ms ago: executing program 6 (id=991): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xd5, 0x0, 0x8, 0x100200000, 0x3, 0x8, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x8000000000000001], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x6, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x8], [0x100000001, 0x8000, 0x3ffffffe, 0x0, 0xb, 0x11004, 0xffffffff00000001], [0x1, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x8, 0x22, 0x5, 0xffffffbffffffff9}, {0x4, 0x4, 0xfffffffe, 0x80}, {0x2, 0xd, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x207f, 0xb}, {0x0, 0x9, 0xe7, 0x2000000000000002}, {0x7f, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7, 0x3}, {0xfbfe, 0x9, 0x6d5, 0x4}}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$DIOCGETRULES(r0, 0xcd604406, &(0x7f00000000c0)={0x101, 0x7fffffff, 0xa, './file0\x00', './file0\x00', 0x0, "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"}) ioctl$TIOCSETA(r0, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1d100", 0x84, 0x5}) ioctl$DIOCXEND(r0, 0xc0044464, &(0x7f0000000e80)=0x6) r1 = kqueue() kevent(r1, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) close(r1) 138.953675ms ago: executing program 5 (id=992): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x8531) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000001f00), 0x10000, 0x0) ioctl$DIOCIGETIFACES(r2, 0xc0284457, &(0x7f0000002540)={'./file0/../file0', 0x0, 0x100, 0x4, 0x40}) open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) 90.850095ms ago: executing program 7 (id=993): openat$dri(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x10, 0x0) setrlimit(0x8, &(0x7f0000000140)={0xa, 0x5a}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x920e, 0x8, 0xffffdf82, 0xffffffd1, "08955c1cfac164e20a07da23b8aa291cfcf20800", 0x4000000, 0x5}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) unveil(0x0, &(0x7f0000000080)='r\x00') 90.040667ms ago: executing program 1 (id=994): setrlimit(0x8, &(0x7f0000000000)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$FIOASYNC(r0, 0x80047470, &(0x7f0000000140)=0x2) socket(0x18, 0x1, 0x0) select(0x40, &(0x7f0000000180)={0xffffffffdffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x400181c, 0x8, 0x2000000000000044}, 0x0, 0x0, 0x0) 89.818101ms ago: executing program 2 (id=995): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x0, 0x100800000000009}, {0xfeeffffc, 0x2000a}}, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 2.208745ms ago: executing program 6 (id=996): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000663000/0x4000)=nil, 0xfffffffffffff801}, {&(0x7f00006ac000/0x4000)=nil, 0x0, 0x3}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000515000/0x4000)=nil}, {&(0x7f00000f2000/0x11000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil}, {0x0, 0x0, 0x3}, {&(0x7f0000727000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f000065d000/0x2000)=nil, 0xdc9}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000355000/0x13000)=nil, &(0x7f0000358000/0x2000)=nil, 0x80}], './file0\x00', 0x7, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc87, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4000000, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0xfe7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6]}) r1 = open(&(0x7f0000000240)='./bus\x00', 0x2, 0x111) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x84946467, &(0x7f0000000000)={0x0, 0xffffffffffffffba, 0x0}) ftruncate(r0, 0x100000) 1.876361ms ago: executing program 0 (id=997): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000)="0000e65bc39e76ecc9ddb3c3cc6bbc2506870300ec", &(0x7f0000000240)=0x15, 0x0, 0x0) execve(0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, 0x0, ""/21}, &(0x7f0000000200)=0x17) write(r0, &(0x7f0000000380)="69483f27b368da3176c35e0c2469b4090000000000002bc2d783b67bb6b1010cf569053e1b7f15674cefbca8a8cce0c22b9ad89eab4baa29dcae28a945968d50f29643b907921d76b507c7fa5c3dcf56b69a9cb0d204a60e74e8bd00a32faa3e439ea6cbbbbe2bf229afabe2e4ea5556bfe1d2aeb67d255a31d31b66f324162368d9313d7cfb000000000000000000000000000000000000004c57f627754701ca976d603512be6a5c484d22f7ca6753e1f9f31d1d8663c7f55e2aa91cf19c0f167be575df47f3ce566079994fb2a08c95685705353075d67cf4726de2ce01", 0xdf) 1.566961ms ago: executing program 1 (id=998): syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) read(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@in6={0x1c, 0x18, 0x1, 0x4, "fefe0000000000000000009000", 0xff}, 0x1c) 351.992µs ago: executing program 2 (id=999): r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) closefrom(r0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000100)={0xffffffff, 0x6, 0xfffffff2, 0xffffff90, "08955c1cfac164e20a070e00000009ffe600", 0xd93, 0x3}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 0s ago: executing program 4 (id=1000): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) ioctl$TIOCSETD(r0, 0x8004745f, &(0x7f0000000000)=0x1d) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. Connection to 10.128.0.236 closed by remote host. ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped ktrace write failed, errno 27, tracing stopped uvm_fault(0xffffffff83aad520, 0xffff800023fd2004, 0, 1) -> d kernel: page fault trap, code=0 Stopped at ufs_lookup+0x623: movzwl 0x4(%r15,%r14,1),%ebx TID PID UID PRFLAGS PFLAGS CPU COMMAND * 52746 14051 0 0 0x4000000 1K syz-executor 517531 26827 0 0 0 0 syz-executor ufs_lookup() at ufs_lookup+0x623 VOP_LOOKUP(fffffd800d45bb50,ffff80002a34eb48,ffff80002a34eb78) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a34eb18) at vfs_lookup+0x963 namei(ffff80002a34eb18) at namei+0x7c5 domknodat(ffff8000357a9a28,ffffff9c,200000000100,1000,0) at domknodat+0xb4 syscall(ffff80002a34ed10) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4ce99e1a450, count: 8 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xffffffff83aad520, 0xffff800023fd2004, 0, 1) -> d ddb{1}> trace ufs_lookup() at ufs_lookup+0x623 VOP_LOOKUP(fffffd800d45bb50,ffff80002a34eb48,ffff80002a34eb78) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a34eb18) at vfs_lookup+0x963 namei(ffff80002a34eb18) at namei+0x7c5 domknodat(ffff8000357a9a28,ffffff9c,200000000100,1000,0) at domknodat+0xb4 syscall(ffff80002a34ed10) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4ce99e1a450, count: -7 ddb{1}> show registers rdi 0 rsi 0x2 rbp 0xffff80002a34e8b0 rbx 0 rdx 0xffff8000015d3b40 rcx 0xffff8000357a9a28 rax 0xffff80002999dff0 r8 0xffffffffffffffff r9 0xfffffd80097fd680 r10 0x3bba1ec90f4c7cc3 r11 0x72eeb1588a9ccbe8 r12 0xfffffd805f818e78 r13 0 r14 0 r15 0xffff800023fd2000 rip 0xffffffff814be483 ufs_lookup+0x623 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80002a34e7c0 ss 0x10 ufs_lookup+0x623: movzwl 0x4(%r15,%r14,1),%ebx ddb{1}> show proc PROC (syz-executor) tid=52746 pid=14051 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=16, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000357a9260,0xffff8000357a97a0 process=0xffff80003c4549d0 user=0xffff80002a349000, vmspace=0xfffffd806f362b78 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 86771 491377 63299 0 2 0 syz-executor 86771 196268 63299 0 2 0x4000000 syz-executor 527 519263 98655 0 2 0 syz-executor 39444 387477 27800 0 2 0 syz-executor 14051 234615 80894 0 2 0 syz-executor *14051 52746 80894 0 7 0x4000000 syz-executor 26827 517531 53463 0 7 0 syz-executor 26827 19287 53463 0 3 0x4000080 fsleep syz-executor 26827 143755 53463 0 3 0x4000080 fsleep syz-executor 77367 384215 43281 0 2 0 syz-executor 77367 145293 43281 0 3 0x4000080 netcon syz-executor 77367 265196 43281 0 3 0x4000080 fsleep syz-executor 22272 127138 0 0 3 0x14280 nfsidl nfsio 83666 262610 0 0 3 0x14280 nfsidl nfsio 33162 429181 0 0 3 0x14280 nfsidl nfsio 52361 140176 0 0 3 0x14280 nfsidl nfsio 78092 424479 0 0 3 0x14280 nfsidl nfsio 7126 432982 0 0 3 0x14280 nfsidl nfsio 53100 168797 0 0 3 0x14280 nfsidl nfsio 18085 450203 0 0 3 0x14280 nfsidl nfsio 73808 395552 0 0 3 0x14280 nfsidl nfsio 25830 517759 0 0 3 0x14280 nfsidl nfsio 52357 128878 0 0 3 0x14280 nfsidl nfsio 87017 302150 0 0 3 0x14280 nfsidl nfsio 48123 169226 0 0 3 0x14280 nfsidl nfsio 1304 316970 0 0 3 0x14280 nfsidl nfsio 31772 286518 0 0 3 0x14280 nfsidl nfsio 68700 380534 0 0 3 0x14280 nfsidl nfsio 25535 246220 0 0 3 0x14280 nfsidl nfsio 94306 131582 0 0 3 0x14280 nfsidl nfsio 33664 421112 0 0 3 0x14280 nfsidl nfsio 53740 283368 0 0 3 0x14280 nfsidl nfsio 20217 494182 0 0 3 0x14200 acct acct 53463 22418 58229 0 2 0x2 syz-executor 63299 95213 58229 0 3 0x82 nanoslp syz-executor 43281 153669 58229 0 3 0x82 nanoslp syz-executor 98655 49171 58229 0 3 0x82 nanoslp syz-executor 27800 36578 58229 0 3 0x82 nanoslp syz-executor 80894 401327 58229 0 3 0x82 nanoslp syz-executor 58229 380236 1 0 2 0x2 syz-executor 32288 386027 0 0 3 0x14200 bored smr 29744 3617 0 0 2 0x14200 zerothread 68131 64159 0 0 3 0x14200 aiodoned aiodoned 49494 138405 0 0 3 0x14200 syncer update 5895 316885 0 0 3 0x14200 cleaner cleaner 31767 4189 0 0 3 0x14200 reaper reaper 45850 497436 0 0 3 0x14200 pgdaemon pagedaemon 50255 27924 0 0 3 0x14200 bored viomb 97464 461044 0 0 3 0x40014200 acpi0 acpi0 26579 118492 0 0 3 0x40014200 idle1 63191 216886 0 0 3 0x14200 bored softnet1 59683 150609 0 0 3 0x14200 bored softnet0 92659 321183 0 0 3 0x14200 bored systqmp 5412 154843 0 0 3 0x14200 bored systq 22914 112912 0 0 3 0x14200 tmoslp softclockmp 96874 331625 0 0 3 0x40014200 tmoslp softclock 85245 285871 0 0 3 0x40014200 idle0 1 373933 0 0 3 0x30000082 nanoslp init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 14051 (syz-executor) thread 0xffff8000357a9a28 (52746) exclusive rrwlock inode r = 0 (0xfffffd806c8aea00) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c5 #7 domknodat+0xb4 #8 syscall+0xb17 #9 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a9f740) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 Process 26827 (syz-executor) thread 0xffff8000357a8a98 (517531) exclusive rwlock uobjlk r = 0 (0xfffffd806d1b9c98) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault+0x1e5 #3 upageflttrap+0xa9 #4 usertrap+0x430 #5 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd806f362108) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11053 12026K 12399K 166960K 12737 0 pcb 17 12K 12K 166960K 145 0 rtable 216 8K 8K 166960K 470 0 pf 34 17K 24K 166960K 148 0 ifaddr 40 7K 7K 166960K 70 0 ifgroup 51 2K 2K 166960K 103 0 sysctl 3 1K 9K 166960K 9 0 counters 68 36K 37K 166960K 104 0 ioctlops 0 0K 4K 166960K 1579 0 iov 0 0K 16K 166960K 20 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1296 82K 82K 166960K 1851 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 20K 24K 166960K 15 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 1K 166960K 29 0 dirhash 12 2K 2K 166960K 33 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 57K 93K 166960K 1146 0 sigio 0 0K 0K 166960K 16 0 proc 12 17K 164K 166960K 632 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 48 0 in_multi 87 6K 7K 166960K 153 0 ether_multi 1 0K 0K 166960K 17 0 mrt 1 0K 0K 166960K 44 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 438 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 101 77K 177K 166960K 11088 0 UVM aobj 5 2K 2K 166960K 5 0 pinsyscall 16 32K 108K 166960K 2328 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 58 0 NDP 11 0K 2K 166960K 45 0 temp 54 9119K 9218K 166960K 39909 0 kqueue 1 2K 26K 166960K 141 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 52 0 52 1 0 1 1 0 8 1 rtentry 176 141 0 49 6 0 6 6 0 8 0 unpcb 144 277 0 277 1 0 1 1 0 8 1 syncache 336 11 0 11 1 1 0 1 0 8 0 tcpcb 736 113 0 111 1 0 1 1 0 8 0 arp 136 23 0 5 1 0 1 1 0 8 0 inpcb 328 441 0 439 1 0 1 1 0 8 0 nd6 152 27 0 6 1 0 1 1 0 8 0 kcovpl 48 9 0 1 1 0 1 1 0 8 0 ppxss 1192 11 0 11 1 0 1 1 0 8 1 pppxif 1576 3 0 3 1 0 1 1 0 8 1 pfstscr 40 6 0 6 2 1 1 1 0 8 1 pffrag 232 3 0 1 1 0 1 1 0 482 0 pffrnode 88 3 0 1 1 0 1 1 0 8 0 pffrent 40 6 0 4 1 0 1 1 0 8 0 pfosfp 40 1428 0 1428 5 5 0 5 0 8 0 pfosfpen 112 1428 0 1428 21 8 13 21 0 8 13 pfrktable 1344 1 0 1 1 1 0 1 0 8 0 pfsrclim 320 4 0 4 1 0 1 1 0 8 1 pfstlim 224 1 0 1 1 1 0 1 0 8 0 pfanchor 1288 4 0 1 1 0 1 1 0 8 0 pftag 88 3 0 0 1 0 1 1 0 8 0 pfstitem 24 66 0 12 1 0 1 1 0 8 0 pfstkey 128 72 0 18 2 0 2 2 0 8 0 pfstate 448 69 0 15 7 0 7 7 0 8 0 pfrule 1360 33 0 28 2 1 1 2 0 8 0 rttmr 136 5 0 5 2 1 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 645 0 248 30 3 27 30 0 8 2 art_table 40 647 0 248 5 0 5 5 0 8 0 art_node 32 141 0 62 1 0 1 1 0 8 0 sysvmsgpl 40 14 0 3 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 64 25 0 15 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 31 0 14 3 0 3 3 0 8 0 dino2pl 256 3191 0 1724 93 0 93 93 0 8 0 ffsino 296 3191 0 1724 114 0 114 114 0 8 0 nchpl 144 4510 0 2807 64 0 64 64 0 8 0 vnodes 216 3495 0 0 195 0 195 195 0 8 0 namei 1024 12902 0 12901 3 0 3 3 0 8 2 percpumem 16 67 0 18 1 0 1 1 0 8 0 acpiwqpl 32 1 0 1 1 0 1 1 1 8 1 kstatmem 264 55 0 30 3 0 3 3 0 8 1 scsiplug 72 9 0 9 1 0 1 1 0 8 1 scxspl 216 17562 0 17562 10 2 8 8 1 8 8 plimitpl 152 176 0 158 1 0 1 1 0 8 0 sigapl 424 1482 0 1415 9 1 8 8 0 8 0 knotepl 120 551 0 0 17 0 17 17 0 8 0 kqueuepl 224 132 0 131 1 0 1 1 0 8 0 pipepl 344 148 0 121 3 0 3 3 0 8 0 fdescpl 528 1445 0 1428 3 0 3 3 0 8 0 filepl 160 4870 0 4718 10 0 10 10 0 8 0 lockfpl 104 302 0 302 1 0 1 1 0 8 1 lockfspl 48 125 0 125 1 0 1 1 0 8 1 sessionpl 144 45 0 36 1 0 1 1 0 8 0 pgrppl 48 62 0 45 1 0 1 1 0 8 0 ucredpl 104 1219 0 1205 1 0 1 1 0 8 0 zombiepl 144 1430 0 1415 1 0 1 1 0 8 0 processpl 1232 1482 0 1415 7 1 6 6 0 8 0 procpl 664 2657 0 2584 8 0 8 8 0 8 0 sosppl 176 2 0 2 1 0 1 1 0 8 1 sockpl 752 774 0 772 4 0 4 4 0 8 3 mcl64k 65536 18 0 0 3 0 3 3 0 8 0 mcl16k 16384 15 0 0 2 0 2 2 0 8 0 mcl12k 12288 11 0 0 2 0 2 2 0 8 0 mcl9k128 9344 4 0 0 1 0 1 1 0 8 0 mcl8k 8192 12 0 0 2 0 2 2 0 8 0 mcl4k 4096 128 0 0 16 0 16 16 0 8 0 mcl2k2 2112 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 28 0 0 4 0 4 4 0 8 0 mtagpl 96 11 0 0 1 0 1 1 0 8 0 mbufpl 256 249 0 0 16 0 16 16 0 8 0 bufpl 280 9584 0 3453 439 0 439 439 0 8 0 anonpl 32 7461 0 0 61 0 61 61 0 246 0 amapchunkpl 152 36335 0 36075 27 1 26 27 0 158 11 amappl16 200 4075 0 4052 24 12 12 15 0 8 8 amappl15 192 20 0 20 1 1 0 1 0 8 0 amappl14 184 450 0 450 1 0 1 1 0 8 1 amappl13 176 124 0 124 1 0 1 1 0 8 1 amappl12 168 1711 0 1697 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 1 0 1 0 8 0 amappl10 152 66 0 66 1 0 1 1 0 8 1 amappl9 144 278 0 278 1 1 0 1 0 8 0 amappl8 136 101 0 101 1 0 1 1 0 8 1 amappl7 128 164 0 163 1 0 1 1 0 8 0 amappl6 120 166 0 166 1 0 1 1 0 8 1 amappl5 112 102 0 102 1 0 1 1 0 8 1 amappl4 104 296 0 295 1 0 1 1 0 8 0 amappl3 96 7877 0 7821 4 0 4 4 0 8 1 amappl2 88 552 0 548 2 0 2 2 0 8 0 amappl1 80 14519 0 14438 15 2 13 15 0 8 5 amappl 88 10232 0 10141 4 0 4 4 0 92 0 uvmvnodes 80 132 0 0 3 0 3 3 0 8 0 dma32768 32768 1 0 1 1 0 1 1 0 8 1 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma512 512 1 0 1 1 0 1 1 0 8 1 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 258 0 258 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 1445 0 1428 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1445 0 1428 1 0 1 1 0 8 0 vmmpekpl 168 11585 0 11543 3 0 3 3 0 8 0 vmmpepl 168 94871 0 94179 97 0 97 97 0 357 53 vmsppl 488 1444 0 1428 6 1 5 5 0 8 1 rwobjpl 80 26032 0 25655 27 0 27 27 0 8 2 pdppl 4096 2897 0 2856 99 54 45 85 0 8 4 pvpl 32 14810 0 0 120 0 120 120 0 265 0 pmappl 256 1444 0 1428 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 294 0 63 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83984ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff83a9ef40) at __mp_lock+0x1a3 uvm_fault(fffffd806f362008,fb62f2b1000,0,1) at uvm_fault+0x1ea upageflttrap(ffff80002a254330,fb62f2b1000) at upageflttrap+0xa9 usertrap(ffff80002a254330) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7db8904a9080, count: 6 ddb{0}> trace x86_ipi_db(ffffffff83984ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x2c __mp_lock(ffffffff83a9ef40) at __mp_lock+0x1a3 uvm_fault(fffffd806f362008,fb62f2b1000,0,1) at uvm_fault+0x1ea upageflttrap(ffff80002a254330,fb62f2b1000) at upageflttrap+0xa9 usertrap(ffff80002a254330) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7db8904a9080, count: -9 ddb{0}> machine ddbcpu 1 Stopped at ufs_lookup+0x623: movzwl 0x4(%r15,%r14,1),%ebx ufs_lookup() at ufs_lookup+0x623 VOP_LOOKUP(fffffd800d45bb50,ffff80002a34eb48,ffff80002a34eb78) at VOP_LOOKUP+0x6e vfs_lookup(ffff80002a34eb18) at vfs_lookup+0x963 namei(ffff80002a34eb18) at namei+0x7c5 domknodat(ffff8000357a9a28,ffffff9c,200000000100,1000,0) at domknodat+0xb4 syscall(ffff80002a34ed10) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4ce99e1a450, count: 8 ddb{1}>