last executing test programs: 1.113567833s ago: executing program 3 (id=4): sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x3f}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.092402964s ago: executing program 2 (id=3): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockname$unix(0xffffffffffffff9c, &(0x7f0000000140)=@abs, &(0x7f0000000180)=0x8) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000000029, 0x3e, &(0x7f0000000040)="005082d2", 0x4) select(0x40, &(0x7f0000000100)={0x0, 0x400000, 0x0, 0xfffffffffffffffe, 0x10000000000, 0x4b02, 0x80000000, 0x3}, &(0x7f0000000080)={0x9, 0x10000, 0x1, 0x3000000, 0x2000, 0x0, 0x0, 0x4}, 0x0, 0x0) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsid() r2 = syz_open_pts() ioctl$TIOCSCTTY(r2, 0x20007461) syz_open_pts() openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000040)={0x8000, './file0\x00'}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x9, 0x200007, 0x7, 0x101, 0xb, 0x2, 0xfffffff8, 0x10, [{0x0, 0x7, 0x4, 0x35}, {0x7, 0xfffffffc, 0x10000008, 0xfffffff8}, {0xe, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x8}, {0xdb, 0x7fffffff, 0xe, 0x7}, {0x22, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0xfffffffd, 0x101}, {0xa, 0x7ff, 0x14, 0x8}, {0x5, 0x81, 0x1, 0x9}, {0xfffffffe, 0x7, 0xc8, 0x88}, {0x3, 0x10001, 0x100009, 0xaeb}, {0x7bf, 0x9, 0x8, 0x4}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x95, 0x6}, {0x4, 0x80000000, 0x6}, {0x0, 0x1, 0x2, 0x2}]}) poll(&(0x7f0000000000), 0x35, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000002d40)={{0x82d5, 0xfffffffffffffffd}, {0x3, 0x3}}, 0x2) 1.090763874s ago: executing program 4 (id=5): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040, &(0x7f0000003640)={0x9, 0x7}) r1 = kqueue() madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0xffffff2e, 0x1, 0x480000d, 0xffffffff, "efe976b72fc690025405a9d0697182bcd5bc5c05", 0x1, 0x6}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b10005046000000000", 0x9, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) ioctl$DIOCIGETIFACES(r2, 0xc0284457, &(0x7f0000001140)={'./file0\x00', 0x0, 0x80000001, 0x3, 0x322, 0x7}) recvmmsg(r2, &(0x7f00000026c0)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x1840, 0x0) kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) 1.031249211s ago: executing program 0 (id=1): r0 = socket(0x2, 0x400000000002, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f00000000c0)="05000000", 0x4) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x1ff9, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x7, 0xfffffffffffffffc, 0x2, 0x8000, 0x3, 0x4, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x6, 0x632e, 0xffff, 0x18], [0xfffffffffffffffe, 0x80000001, 0x4, 0xc72e, 0xfff7, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x3, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x6, 0xfffffffffffffffc, 0x8000000100000000, 0xffffffffffffffff, 0x3], [{0x6, 0x4, 0x0, 0x7d06}, {0x0, 0x1, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x1000000000081}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x5cc2, 0x3, 0x8}, {0xfffe, 0x2006, 0x8, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8008, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x7, 0x100000b0, 0x8000000000000004}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6(0x18, 0x1, 0x6) connect$inet6(r4, &(0x7f0000000280)={0x1c, 0x18, 0x3, 0xe92}, 0x1c) bind$unix(r3, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r3, 0x1) socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000040)=@file={0x7, 0x1, './file0\x00'}, 0xa) r6 = socket(0x2, 0x8002, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r8 = syz_open_pts() close(r8) r9 = syz_open_pts() ioctl$TIOCSETA(r9, 0x802c7414, &(0x7f00000000c0)={0xf609, 0x8, 0xfffdff82, 0x1603508, "04f0ee090004000000000005ccdb4a889625daa0", 0x0, 0x43}) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) close(r8) ioctl$TIOCSETAF(r9, 0x802c7416, &(0x7f0000000000)={0xfff, 0x6, 0xcf8, 0x3, "425dc50b89920834541c04cddbc8b5510302b735", 0x6, 0x1ff}) closefrom(r7) close(r3) recvmmsg(r1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffb}, 0x38, 0x2000, 0x0) recvfrom$unix(r1, &(0x7f0000000180)=""/27, 0x1b, 0x3040, 0x0, 0x0) 1.027324499s ago: executing program 1 (id=2): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket$inet(0x2, 0x5, 0x1) ioctl$FIONREAD(r0, 0xc020697e, &(0x7f00000001c0)) umask(0x0) 1.019992297s ago: executing program 6 (id=7): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x3e) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000100)={0xffff77fc, 0x1000, {[0x10000, 0x101, 0x8, 0xff, 0x2, 0x64, 0x6, 0xfffffffffffffff7, 0x81, 0x4, 0x3, 0xc, 0x8001, 0x45, 0x0, 0x5, 0x5b, 0x8000], [0x7fffffff, 0x6, 0x0, 0xc4c4, 0x10, 0x6, 0x7, 0x9, 0x401, 0x6cc], [0x0, 0x3ff, 0x12, 0x3, 0x2, 0xaa0, 0x2], [0xfffffffffffffff8, 0x4, 0x1, 0xdeb5, 0x6, 0x8000], [{0x8, 0x0, 0x7, 0x2}, {0x7fff, 0x2, 0x3, 0x100}, {0x200, 0x5, 0x1, 0xb5c}, {0x3, 0x3, 0x6, 0x1}, {0x7, 0x8000, 0xd3, 0x80000000}, {0x0, 0x7, 0x7, 0x7}, {0x87f, 0x1000, 0x9, 0x9}, {0x8, 0x6, 0x5, 0x7}], {0x8000, 0x962, 0x7, 0x3}, {0x401, 0x4, 0x5ff5, 0x5}}}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.012663948s ago: executing program 3 (id=9): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40070, 0x2) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x8, 0x4b) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) minherit(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x30}, 0x2, &(0x7f00000000c0)="a065a5bba63ca1fc6daee54e9d67335c9ecd5080f21b6d30160d8f9cbe23fd049c65840723ff5a626ee743bd14ae48a500b75ab8da1faa542a80d53d240dc9f108d4dc4a26e68aa9491d9f3f316798b7f1af450b5119ff9e78da79043dafb23fbd1334e0a3fd97712fef388ea9589c72767f3da4bc9085", &(0x7f0000000140)=0x77, &(0x7f0000000180)="784c9b60b7f47a1c5e685d14ccad8b95c484a57c2cdd1dd165ac204e3daba150b224353686fb987fab2ba37b1a5467b15e195b1f7ade5c52f5d7ba389f7224c43a9df2df1c0ea09ae6c23fd99c0da41a09faf5a1e067b58c", 0x58) getpeername$inet6(r1, &(0x7f0000000200), &(0x7f0000000240)=0x1c) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x8, 0x1) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) pwrite(r0, &(0x7f00000002c0)="9f4526bc0ec55a5939c7757273e6e379bfcea809666811f1084801c08fabe2552bfa46744d90cd81fd997256c8f0f919d11e662f8f7b6fab7888494c8ed5a63429126eec3897e1891289bf87fefde312885b64e4e491a890ac7db139e08bc9fdebaea47f22ae8291986a83696485f5300bb6eedf0b0595ba3a4244d54feee6c74459b8967ce5f984a71c6c729b9a6c093ba88a16bcdbbe27b40c8c097530886dffa4770b53d672034ed4c154ae2efdcc99b276a1db46fd450c178d0453c0", 0xbe, 0x81) ioctl$DIOCRCLRTSTATS(r1, 0xc4504441, &(0x7f00000007c0)={{'./file0\x00', './file0\x00', 0x40, 0x7}, &(0x7f0000000380)=[{'./file0\x00', './file0\x00', 0x1}], 0x4, 0x1, 0x3ff, 0x7f, 0x4, 0x1ec6, 0x0, 0x8}) r2 = socket(0x18, 0x2, 0x9) sendto$inet6(r1, &(0x7f0000000c40)="1588363b04d69ad85ff338f7a47d793c65a986866a4faf936754d649c9a0185b85f64d4c52b952364e3aaf4b8916d7dbc17cd2118a85f19a7a9385ccc9daebe4a86a1ac25d429f38bdd629845808003b7d9d533c823b17c7c51b42475fb65408c4b09b71dbf317b2bf4e28ad310c10c34486b80fa0eec1f2270976d0d66229e098593226b015247582af2c7d1c17503c363c30e8b3211eaa90f7a2d396c6e841514a7df0193fc6deb7035ddd10251a0add4fa8dc7d09ac099c0841253353eff82c2bdf881f863e2c93b48925d0b957011b256bcdc61e8aa77334128b4a2f91ad9dd0b1941ec94f51962e561fd538e319c16537f125a3ba78c25490c523faab04af520c1febd938907a62541157b13d83f963207b096140add91d927d1d608b3e97bfe34dfcddc29576e013a4f1d306816c76ff954e1348fd18a365a991fe6368a943796c84e04de2939364a333f96a675353e3a20baad174dff2003cf34540971d06afdcfc093915aad8a49eac449be5b0555c182315d3a37cbc3ad751b02fbe45d51e2292095246e857142dbfb56e2e765393756a8564135c49f48635b2943635bae44c5526bcb9179a324a5ead82c4ff78ff8a7c22b5f767250301541c78f17de09d7c9dd2b8da0668a1f49cd42f36f67237f71624d9ff20822748da9a7a14f3601cfc6726bfecf1ce7e3c13d48b620e2f81924530d4c71aaebbd5bcb33814f03937204ff09321693563ae7f952c3f658d46efe3fc1785694118b248deee059cd15185cd12624ffa2acacf30aeefbc55451b6cc3b1654dd18cbb56e6292db62b15e9db50649ff1d323335e88eec3cda5a6b2008becbe3074c7529b9f5e667ff08a8fe778a582316717e9a4b96c82a641a48c1a2cab9da06980216e3ec59f20dcfea2aed1754b22dd2b07c4ed298bf03b18e7a9a784a4ccd96d24de07ab9916999015f1b709be21ea85ce4d8f36ee11d388f767876cee82d559e29201b2b547749aeada7d93d474458fd2340e65e0bc7735f03d6a5fc4dfe37c397856c5b5c7902898e70c3a9a5baf4dff445f2ad6b0512448d01e85d14fe393a21402fc15ddad8c1f9ad10b0e8bca778ccbfad6bd16649815b52afbfa302aaa5a97026f8e596a441665752229aa3af267e86ca0df0a2a089f18a357b9d6830cb515fec25c8d8c06d93a361202fc7b27ab918eca42ee1c62070e7f0adc624563e9565934f3721fb2c59ddac47d3892c8d8aa4cdde25fe311059949b8535c4efa95060545ab196524f288f7ef4014817c25134145460c97dc94f0c11a7364c543d498c251913534b4856b89f56637603d1158d77213ed6a7c32209b897d9e13eac2c292cfcd0c178265f471c181985b79f78ed69c98669dd0b20def51365030806624e43d23269296588247bda5ac36f8aaf92dc4f32b1a249d026d704ef6a5a3d435f6f4610b6b35709ef6db3fe8e916de00c185c01455ac169cbc860276b1ce79e0e873c83bf60114b387e2d60098cc9ef66b31a584cba23c2c8a4f21492c623b4182e6b4d36a4705073f6243aba50149c9e98a246bbd0e991f6a0ada1cab37fd6844c7de3327548356ff132b4597a91168ec8573580065a1a99af149e679aa7b21883be37f313496d2abab084d8619cac5b5f401005f8091b53a5d3c11a03dd20c3c6ffc712180b8e455610b4788f9a15d87851e36dbe6b510584726daffb3d9b1b63ef20377fa63abc61dbae5b5fd8f7c2e14750eb0a49d929f0e62ea197de7365376bc7564407f84833b73137c3844534d702d5f3e7a3fff07eb8a7f1a5ad7b1a4c7da8dbb3015550b2c92387c73f0636be5053494639df80ae45d1441cca9dfb377cd35af4086942f91fb480584028745c82f3f70e63f7f124cc2ba7dd244f5bb21f936ad638a486724abd1972ca69b6c589706f8b317238c10b2273e47164cc6ff67d1f7dca86b2a7896a5943702f83f02dd42cb3d09ad51f94356f0f14114d77bdede9d16cb16cbc39c84d9e192e7c168450e87d14d392a65818c5a3c2fc88712828e0739bac7c83c59b8384cce61d67f5e18d4288e37ee31c351ab714ffb917af83ee8a0838fd4d580b8a3d75d258e989dd5157c93ac641a7a09df4b0494c1d92eda33a22d9481e022e3663e90297b99825451f831419ef79f395650d107a5dfa56113c3e6c8f56e23ebbc2bb2ae24b8b54509ee51b0de89caa6223e36823339f11db7fa570eba8c7db98d395a807c4bdd6b05614e76e566e22cc96ca8e7c469eec2d5c869873db7f9f9b327cb72b9af4c135a4a65f8b9b51a50746c629c8fcd64033b68510efeccf89c3e1c47d8d28713bd7e0e7865f22dee48730e18ea6b073dd444e0f1919028f9dc238ee8ac457dffa981d9435566ed0dc9e6142215ce763cb0558dd88c9c6e10268da4051953ac7d3f9ca05825d2a25904ef36b41229b5b2856d577e8e4b1a775bfbbdd93c8005d3f8a48a491d811ebcf9631ef8e6607118cf0aab4f3f586c670022a911b989c3da8d5bc45867f1bef1c321394acd98770ba4d409dc86a3aa3e2732f8ad588dc3168048c9d43e101b48229e96dc69ec16bb2c3f6d9a18ce996e80a3b2ba6497a848a2c1548cf71d1c769636756faef639c142ab84e6d2b2587a5e640ec0f657f2c82c3c14c87173c73613548ad9703a943c08446f9f71244bed96c465cfce829401f967d9615cf25ce03a68e7fcfb50a0bcc3fe05a2a8f7ed76f4cc75965db29b46aebb846003de52e277ae6783a3ce3eb3ad0d0c22aa7a11bea4f68cb08e6d667c34636db0659d4f954f6ea4f0cc18bb7e751b450b839e6947ee3bf22ef41406f87ec37705d0878f71674c3cd1b1b75fe4700f6fa115e01da396daf606b94ea680a0a057e579a5daf8c23d527298cc0b51e1c7168c21a44b762a10ef9b214df690e0cd6241cbb766fbea9981f33fd38602ff21cb58a91490d4ecfafcbb6b028aebd0a9d31afe3249a24dcba7467c3ec5837b45efe90dd740ffddd5c79feb48798d123adcc685c95191d1af351665d5fd54dcf022ddbddf97b2f33f0739fd28efda45f795207efbeef110d5fae8020773b1b9f3bfe81be870166e74c36878472d0bc2254d7b880fd9193f60755c5bc7a15d1c76250c9dbbd84c969e7ada3d531a520ef77204db5f9462321058293f5cd269b89db57baf3195ebd36cb67cc2532c78fc8494aafdb08db1bafd53dd99fb52da3c5eb40996f9816b94f634e9162fb709654a53c50702ede789abfd0bd4308b57d52d78e482e7b6008666436bc5454a4aee821f3b5ec3fe506660c502c4d6007cfd374bf18de62fc2f7a773bd7444a67fa6896be9dac7d18a370af2e21cdd1a5af57cf812726b9a49c5f7dc61cf3f1853df3f9d56dacbc90321171f943863531d611c1763692f0879c3c95c8ea329eb7e9ca5c461eed928ba51891c702613e41c19b391adef18696f95c28f5f7fab4f15730d7fb605375e064ce4e4715fb2086fb7470b1f2de089387d4e216bb44e90ce9a313f967f65f2eba02078ea14d28f23967d97e428274d2b2698e026abd45ecbd091fe116e0c12d054bb68b1cd6310ef7701273da1eb26817d3093b19035420096c1beb8e7e9dcf91afb7ad8b754e26416716cfd3f18c192dd155b8c793bacbfbb43dede81d17c056f2b570f8380c3c065338ea2dac70bed8c598fb917cace7e40743d1c791c57960f34782475d329168f162a81c9f76a67652d11ac31c35dbafa4d6171b84d645c871869752dda91fa1af6cbbefb2642f41410b241e12ff434eac45ee31bd02bf21245bd9b612a2beaa068fe6e757fad14b44d458773b1ffb4c5eccd8fdf38bbb73a3c090c9e452fca5a62f68c8e45373cdb1383cfbad83f1aaa940d90e97f725ae7b3648641b2a26dbebc0ffd751717e62ba75a751204acd51b2c9e16df17195e002180e32e1f8617be907919f9de2281441723e1f8fa6ed214c47daf4c7b0466e2f28dee7931925e77bbce5c73bf35729794d6b82bd2a7f05c8976475dd47af4a3353f9ae84ba4645c70be8d0f17bd507125a81a63aff9c044fadd8c526779c6eae03628b469a50bddf47dd315fa87eb8c431d8e532cdc8e60e2db3183b7dff4126239e5dcbc1a33e87332e4596e4eeac3ca832fbb77247f7c3a322a82f976a955d9137617e1abf26b36b5ebc94a922299850331e007a9d1740b51d836460ae51fa72f62648d0bf531beff40fb7a8280ae179dd84bb7990e0af8b9d15858495853fba8bb330ef6a037c2f776bff2f93624444108af2c303f13831efdd69dd1697047178189f620c588acd98d2e4986ae219081008e7d34f9243e477f5158e46f6529898393006a25191fe3ab90d6b382b4035e423c0aff2c8fb6514dc166abd5930f7eea8abbf63e6ef46d9e6eabffa18c835cea6f461775f55b812d9a22e8120cdad6757d739e70c16b387f7779e8f6f77d91c65df6693ccc9bac65bcf2f3a1e7071cd5e33690f300cddf1b4a444abc0a6defb220887cd576c652b3b5d674bd161bd906af7f378ab30adc0cf28ee60202e4922a41e560ec67a9532e0720e1a15611aa7805091e38e89e8d1bd0a0ae6f1330536126c1480642932fb78d5fd70998188ccab3dcb1b304d5b7b4f89b4c5d69053c89ea2742e16595a51246ebe40c7ce2e0a232da17d1a712f1947d84b285b6b6ce8a3289abe6b2563cb9c6e900c1ea2a9c1f45bd488f5c1bcbd5c48894c083e9f9435bd31b15b926b0cd2a02319b35188a9ff4df77bee99eb4c764d94cd67cee8591ef3691116a0d0a4db6880900c30c668a09f55dd6056f757a0bbca32d2930bbce70eb45b2353f1b84fa7be0cbe9846c0bf8f055e1f79af82025f1648b36bdbf48a78a27ec7c76143defc538edf24908d7fec5edd946355362cb7326e5e2be353db5a93f7c8590972f736b55d0e2390c4793e7f13de0e47c69298e0c6de574a0fea5e2987f1bc3d011d2af95c0d24c16301d41f4307a74778826db4a9ad31c474742d75c2eed36ff3aae6e44a1367c7c546b961aae171a806f5cd90d7e928013c0aadcac8bddf9eb27db8869d12ce61833183d7edca4b2963734486aafd88803e8d6decb528815ed232e0de1e8bb2ba52c52527452d7b09d6fbf243956df772139cc251f8a41089c8b653642bc1e946f0f8710fc1abd449a39963d362b91440df5083eef82144deec6d2f02c0956b3b34fcfda115ed218eaab5baefe94cf47c7a815f71de49849e8ba86d0c7f89bb4a849039ec896e1ea1583e8ef67c5714e33781d163be334c762ee84b38533c0b833b3b0541a01e8bd100ea95c624c4e74ff6a3efd23bed98d4a395b1d30f3750149833535d5994cfbdf1a551d6c9f2ec1ff37b99a176bf6cc282c5e9a9860b6ad22f7c77a620f39ca42f2c895714785c9a6bd3acc8281576b48878f3d7a64903cf919cac915942a6a14bbc889f87d0180473ff46144c170d46923960b5103c76552b6c58892d0283fc9e5be7a6a4aedf8b590549433d9e77dc3e45aa430b638bf1a5314e4f7c69d339c1a0f17bbf973ed1ea19833f7af70fafe612297fe21552e6452b251cd4b9ddf22b34f67b0aff34ff70f22eaf0ca8582e615ae8c4a33ad59e6bc888db607834c104d93d2a743e62045988094af33a3eb38cc0bf2ef2ad1d8d93d6d7bec4152a9426eab28e1af637b87a39ef5074f4003420b8a89274bd1ba80f85b93df1a59d1ae6f2bc0a866b13449f10e5d2252106138cee08e0a5ee83699fefca6735da04a2ef4a085807a1febead8a006f6e7a0d0f9b65d1e66548092103aa42b096366", 0x1000, 0x401, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x8, &(0x7f0000001c40)=0x44, 0x4) pselect(0x40, &(0x7f0000001c80)={0x2, 0x9, 0xd, 0x4, 0xd, 0x9, 0x6}, &(0x7f0000001cc0)={0x746, 0xfffffffffffffff7, 0x3, 0x8, 0xc1, 0xb, 0x8, 0x5}, &(0x7f0000001d00)={0x0, 0x2, 0x2, 0x5, 0x5, 0x5, 0x3, 0x6}, &(0x7f0000001d40)={0x100000000, 0x8000}, &(0x7f0000001d80)={0x3}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000001e00)={0x8, 0x0, &(0x7f0000001dc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$inet6(0x18, 0x1, 0x8) fchdir(r3) r4 = dup(r3) ioctl$DIOCRGETASTATS(r4, 0xc4504447, &(0x7f0000001ec0)={{'./file0\x00', './file0\x00', 0x73, 0x7f}, &(0x7f0000001e40)=[{@empty, '\x00', './file1\x00', 0x1, 0x0, 0x4, 0xe, 0x9, 0x0, 0xf1}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xffffffff, 0x3, 0x18, 0x8, 0xa, 0x7, 0x5}], 0x0, 0x2, 0x1af204f9, 0x200, 0x1, 0x10000, 0x30, 0x2}) connect$inet6(r2, &(0x7f0000002340)={0x1c, 0x18, 0x2, 0xe, "66086373afd431803349a89be0b1f5bf", 0x9}, 0x1c) r5 = fcntl$getown(r3, 0x5) r6 = getuid() getresgid(&(0x7f0000002380)=0x0, &(0x7f00000023c0), &(0x7f0000002400)) setsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000002440)={r5, r6, r7}, 0xc) r8 = open(&(0x7f0000002480)='./file0\x00', 0x10, 0x0) socket(0x18, 0x4, 0xe) ioctl$DIOCRGETADDRS(r8, 0xc4504446, &(0x7f0000002680)={{'./file1\x00', './file1\x00', 0x11, 0x6}, &(0x7f00000024c0)=[{@broadcast, '\x00', './file2\x00', 0x0, 0xfffe, 0x1a, 0x5, 0x6d, 0x70, 0x8}, {@loopback, '\x00', './file1\x00', 0xfffff8df, 0x6, 0x0, 0x5, 0x5, 0x6, 0x6}, {@rand_addr=0x10000, '\x00', './file1\x00', 0x1, 0x9, 0x32, 0xdc, 0x10, 0x8, 0x4}, {@multicast1, '\x00', './file0\x00', 0x2, 0x1, 0x0, 0xd, 0x7, 0x0, 0xb}, {@multicast1, '\x00', './file0\x00', 0x8, 0x200, 0x18, 0x8, 0x9, 0x3, 0x67}, {@remote={0xac, 0x14, 0x0}, '\x00', './file1\x00', 0x3, 0x7, 0x0, 0x1, 0x7, 0x5, 0x8}, {@multicast1, '\x00', './file1\x00', 0x0, 0x40c1, 0x1a, 0x2, 0x7, 0x6, 0x7f}, {@loopback, '\x00', './file0\x00', 0xff, 0x10, 0x18, 0x9, 0x43, 0x0, 0x2}], 0x9, 0x8, 0x7, 0xb, 0x7, 0x7f, 0x20, 0x8}) geteuid() ioctl$DIOCKILLSTATES(r1, 0x0, &(0x7f0000002b00)={{0x5, 0x2, 0x3}, 0x0, '\x00', 0x790, {@table={'./file0\x00', 0x0, 0x3, 0x81}, [0x5, 0x200], 0x4, 0x8, 0xe306}, {@any={'\x00', 0x0, 0x3, 0x9}, [0x8, 0x1000], 0x9, 0x4, 0x6}, './file0\x00', './file1\x00', 0x401, 0x7}) ioctl$WSMOUSEIO_GETPARAMS(r4, 0x80105727, &(0x7f0000002c40)={&(0x7f0000002c00)=[{0x42, 0x5}, {0x87, 0x8}, {0x87, 0x400}, {0x42, 0x1}, {0x88, 0x3}, {0x87, 0x343d}], 0x6}) 961.618308ms ago: executing program 3 (id=10): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x5, 0x80000000, 0xfffffffe, 0x966b, "ff14e7130b1e586ca6294000f3ffffffffffffff", 0x44, 0x3effd}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x5) closefrom(r0) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) r2 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCSETVERAUTH(r2, 0x8004741c, &(0x7f0000000000)=0x5150) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x14, &(0x7f0000000000), 0x4) 951.300882ms ago: executing program 1 (id=11): sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r1 = socket(0x18, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000840)={0x1c, 0x18, 0x1, 0x97, "00000000000000000000000000f96200", 0x5}, 0x1c) (async) recvfrom$inet6(r0, &(0x7f0000000680)=""/139, 0x8b, 0x2002, 0x0, 0x0) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f00000000c0)={0x200, 0x7, 0x6, 0x8, "ef57d7a95a7fbfe12acb43a8267ec995ae5ce9e1", 0x5, 0xfffffc00}) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x6}, 0x4, &(0x7f0000000080)="27fcc8f5768e4911ca77f79b72b5136736a3cd4853cb1970ec1e6badda7d4ee15c6552c12bd361327319b6c8ad2e4fef396a1cff69a67d9f948e66d7343d42de23d1279246bd0658d6f8166635bba7c38d7736f77aebc9d014aeee5224dd74527ecc45d8ef865dc0447816d13c9928cdd5b77fe0c36910af968736033577751e5273aec4a05b67278dbb9c73290eb526215b0a6f7dda6dcf", &(0x7f0000000140)=0x98, &(0x7f0000000180)="0622abbefea0642844ca64358f5f3af9dd09c0c688e9252c88a54bb9bdaebbc06529a482a6ec2b0da39061", 0x2b) (async) bind(r0, &(0x7f00000001c0)=@in={0x10, 0x2, 0x0, 0x8efb}, 0x10) 709.959429ms ago: executing program 4 (id=12): r0 = kqueue() (async) r1 = socket$inet(0x2, 0x1, 0x6) getsockopt(r1, 0x0, 0xc, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffff6, 0x0, 0xf27ff779bbbc9c09, 0xfb, 0x10000}], 0x10003, 0x0, 0x9b6c, 0x0) (async) kevent(r0, &(0x7f0000000040)=[{{}, 0xfffffffffffffff6, 0xa7, 0x40000000, 0xfffffffffffffffd, 0x8000000000013fff}], 0x4, 0x0, 0x8, 0x0) (async) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 709.342203ms ago: executing program 4 (id=13): mprotect(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x0) (async) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x184) (async) r1 = socket(0x2, 0x2, 0xb0) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='w\x00') (async) unveil(&(0x7f00000015c0)='./file2\x00', &(0x7f0000001600)='c\x00') unveil(&(0x7f0000001700)='./file1\x00', &(0x7f0000001740)='x\x00') unveil(&(0x7f0000000580)='./file0aaaaaaaaa\x00', &(0x7f00000005c0)='x\x00') (async) recvmsg(r1, &(0x7f00000011c0)={&(0x7f0000000000)=@in, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000100)=""/80, 0x50}], 0x2, &(0x7f00000001c0)=""/4096, 0x1000}, 0x2) (async) mmap(&(0x7f0000234000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 708.132368ms ago: executing program 5 (id=6): setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r0 = socket$unix(0x1, 0x1, 0x0) read(r0, &(0x7f0000000000)=""/12, 0xc) r1 = syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r2 = syz_open_pts() r3 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x200000000002, 0xf, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x0, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x8000, 0xfffffffffffffffc, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x7ffffffffffffffc, 0x100000000, 0x2, 0x1], [{0x0, 0x0, 0x0, 0x7d02}, {0x96d7, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000002}, {0x0, 0x0, 0xfffffff9}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x5, 0x7}, {0xfbfe, 0x0, 0x6d5, 0x4}}}) kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x80007fd, 0x0) close(r1) syz_open_pts() closefrom(r2) close(0xffffffffffffff9c) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000180)={0x1040978c, 0xba, 0xf7fffbfc, 0x80a19f, "bb08000100f167d910508b000000000000000080", 0x100, 0x4000002}) writev(r1, &(0x7f0000000700)=[{&(0x7f0000000080)="4e391efcb06088d523977073258b4bb05062c026a6d86c86bb6f", 0x1a}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x62}) socket(0x18, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = socket(0x2, 0x8002, 0x0) r5 = socket(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/194, 0xc2}, 0x2000) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040100000003}}) r6 = socket(0x18, 0x2, 0x0) setsockopt(r6, 0x1000000000029, 0x9, &(0x7f00000002c0)="03000000", 0x4) setsockopt(r6, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) connect$inet(r5, &(0x7f0000000100)={0x10, 0x2, 0x2, 0xfffffffd}, 0x10) sendmmsg(r5, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x38, 0x400) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x5, 0x100, 0x3, 0xf, "94c4334738e1fb3d1617c93f6c9d906b4d17eb7d", 0x4, 0x400}) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) 707.34522ms ago: executing program 7 (id=8): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r1 = fcntl$dupfd(r0, 0x3, r0) ioctl$FIONREAD(r1, 0x800474c4, &(0x7f00000000c0)) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000100)="4ef72ce73cd626b5b85e799747ba71cad0b0d188b5bf04704c0c2f3eb2d4774bf9d6fdacb2dc1e7f3102ef333c8845862b63c27c9303dc7742f57d9b363952e13510dd3ab44487cb35d900b8ddda5970", 0x50}], 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x200, "8daedff44f34d6c7f809000000000100", 0x802}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x17fdffffffffc}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x30, 0x1, 0x1200, "0780e61cef6c3b682ffd6421d2d8357709c5545d09b44276cadc4351b7e41c4888"}, {0x5c, 0xffff, 0x4, "967950faee34b18875d20c345ab11b785f8c87639139a32a9c809bca36191efbfea8e31329899a9e4912ff7b6cbbb7f5c973861ca625a5b5f5988ca980d6c9dd036fb820e431a06a1bf7c43da6"}], 0x8c}}, 0x38, 0xa) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f00000000c0)={0xf607, 0x8, 0xfffdff82, 0x1603506, "04f0070000000000000000000000700907ffe002", 0x0, 0x43}) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r4 = socket(0x18, 0x1, 0x0) setsockopt(r4, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r4, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='r\x00') open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf794d) r5 = socket(0x18, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x4000800, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Z>\x00', 0x802}, 0x1c) 706.118836ms ago: executing program 1 (id=14): r0 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 0x1, 0xff, 0x0, 0x0, 0x67}, 0xfffffffffffffff9, 0x8000000000001, 0x7, 0x7ffffeff7ffbffff, 0x5, 0x0, 0x0, 0x10000008, 0x0, 0x5, 0x0, 0x2}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6bacaf6300372821", 0x62, 0x41a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r1 = syz_open_pts() ioctl$TIOCGETA(r1, 0x402c7413, &(0x7f0000002a00)) (async) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x2b, &(0x7f0000003680)="000000f0", 0x4) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x0, 0xfffc, 0x0, 0x0, 0x4, 0x0, 0x800000800000000}) lseek(0xffffffffffffffff, 0x8000000000000001, 0x2) r4 = fcntl$dupfd(0xffffffffffffffff, 0xa, 0xffffffffffffffff) ioctl$DIOCSTOP(r4, 0x20004402) (async) recvfrom$unix(r2, &(0x7f00000002c0)=""/144, 0x90, 0x1000, &(0x7f0000000380)=@abs={0x2, 0x1, 0x0, 0x2}, 0x8) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x4, "00ea2a06a89438f50200", 0xe}, 0x1c) (async) unveil(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='w\x00') (async) openat$dri(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/card0\x00', 0x200, 0x0) (async) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6099cea6001c2c03cb697a653e336f000000500000000000ff0200000000000000000000000000011100002e"]) (async) syz_emit_ethernet(0x4e, &(0x7f0000000240)={@broadcast, @random="12263abc614e", [], {@ipv6={0x86dd, {0x0, 0x6, "f53200", 0x18, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@ndisc_ns}}}}}) syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[]) (async) shmctl$IPC_RMID(r0, 0x0) 615.159141ms ago: executing program 1 (id=15): kqueue() (async) syz_emit_ethernet(0x46, &(0x7f0000001840)={@local, @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x2, 0x36, 0x38, 0x68, 0x8, 0x9, 0x3, 0x0, @multicast2, @multicast1, {[@timestamp={0x44, 0x10, 0x9, 0x3, 0x4, [{[], 0xfffff470}, {[@multicast1], 0x100}]}]}}, @tcp={{0x0, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x400, 0x0, 0x6}}}}}}) (async) sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) setrlimit(0x8, &(0x7f00000000c0)={0x45, 0x56}) (async) r0 = syz_open_pts() close(r0) (async) r1 = syz_open_pts() ioctl$FIOASYNC(r0, 0x80047466, &(0x7f0000000200)=0x5) (async) ioctl$TIOCSBRK(r1, 0x2000747b) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x40, 0x3, 0x775, 0x80000201}, {0x8, 0x8, 0x9, 0xfff}, {0x7, 0xfdfffffe, 0x7, 0x20000}, {0x5, 0x2, 0xf}, {0x0, 0x7, 0xf11, 0xb}, {0x3, 0xffff, 0x80d0, 0x1}, {0x3, 0x801, 0x100, 0x5}, {0x3, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfe}, {0x2, 0x8000000, 0x44d2, 0x2}, {0x4, 0xc7ce, 0x800000, 0x5}, {0xd6, 0x106, 0x8, 0x3e}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x0, 0x1001, 0x5}, {0x9be2, 0x8001, 0x5, 0x69}]}) (async) poll(&(0x7f0000000000), 0x35, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x6, &(0x7f0000000080)="ae215599fed2fce97f573b9c553a0e622d29cd093849cd4fe42e0f5d2d06a4e744f0713d1fcaa1b8274dffd067d413ef9d2224d3fddc171f73a295b6ed18b3d0588be75e78a1d734e15bfe", 0x0, 0x0, 0xfffffffffffffd37) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0x80047476, &(0x7f0000000080)={0x401, [{0x2, 0x101}, {0x1, 0x5}, {0x2, 0x800}, {0x3, 0x5}, {0x2, 0xd98}, {0x2, 0x3}, {0x2}, {0x2, 0x8}, {0x1, 0x5}, {0x2, 0x80000000}, {0x1, 0x7f}, {0x2, 0x6}, {0x3, 0x3}, {0x3}, {0x2, 0x200}, {0x1, 0xa224}, {0x3, 0xf1}, {0x3, 0xb4}, {0x2, 0xdc}, {0x3, 0x8}, {0x3, 0x7}, {0x2, 0x1}, {0x3, 0x9f5}, {0x3, 0x40}, {0x1, 0x10000}, {0xc844ca12ff01e3b3, 0xaec}, {0x2, 0xffff}, {0x3, 0x5}, {0x1, 0x7}, {0x3, 0x372002ea}, {0x1, 0x83ff}, {0x1, 0x4}]}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fchflags(0xffffffffffffffff, 0x0) (async) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) 614.788006ms ago: executing program 3 (id=16): sysctl$net_inet6_ip6(&(0x7f0000000080)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000000000)="6d6902caea", &(0x7f00000000c0)=0x5, 0x0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 614.356772ms ago: executing program 6 (id=17): r0 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x81) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x41f, 0x2, 0x9, 0x7, 0x8}, {0x9, 0x1, 0x15b7, 0x40, 0x7f}]}) fcntl$setstatus(r0, 0x4, 0x8) ioctl$WSKBDIO_GETMAP(r0, 0xc010570d, &(0x7f0000000140)={0x9, &(0x7f00000000c0)=[{0x9, 0x800, 0x80db, 0xfff9, 0x4}, {0x7fff, 0x6, 0x1000, 0x4, 0x9}, {0x0, 0x9, 0x7fff, 0x0, 0x8}, {0x8001, 0x3, 0x8, 0x8, 0x3c}, {0x8, 0x4e21, 0x1000, 0x2, 0x7ff}, {0xa, 0x9, 0x8, 0x7fff, 0xcc37}, {0xe, 0x8, 0xd5f7, 0x7, 0x2}, {0x590, 0x9, 0x1ff, 0x401, 0x7}, {0x6, 0x5, 0x5, 0xaaeb}]}) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000180), 0x50211, 0x0) ioctl$WSDISPLAYIO_LSFONT(r1, 0xc058574e, &(0x7f00000001c0)={'./file0\x00', 0x10, 0x3, 0xfffff9c7, 0x1, 0x4, 0x8, 0x6, 0x0, 0x0, 0x8, 0x3}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000240)=0x3) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) shmget(0x1, 0x3000, 0x1f2, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x4010, r0, 0xfc) r2 = getsid(0x0) fcntl$setown(r1, 0x6, r2) ktrace(&(0x7f0000000280)='./file0\x00', 0x2, 0x0, r2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) poll(&(0x7f0000000340)=[{r4}, {r4, 0x20}, {r6, 0x20}, {r0, 0x100}], 0x4, 0xfff) ioctl$TIOCNXCL(r3, 0x2000740e) ioctl$WSKBDIO_GETENCODING(r4, 0x4004570f, &(0x7f0000000380)) r7 = socket$inet(0x2, 0x1, 0x6) flock(r7, 0x0) sysctl$net_inet_tcp(&(0x7f00000003c0)={0x4, 0x2, 0x6, 0xe}, 0x4, &(0x7f0000000400)="1d5a34e9743434842da730de9017a955a07733576909dcf93144ba2147b51376aac5ae3023c774ca42cde0b30686acb23d0e7a6df7c815d78ea07ee2b56e81ab9fc3960a7975798059e5e7913a91e1354683b034abbe744fdec13a33abcd222fc373900c5208075fb11e65efbf2703a4201c2a741a2bd39b2b7f7668bc05576ac03803bdbea7eeb4b557b72291b278dfd8b5f00922797f", &(0x7f00000004c0)=0x97, &(0x7f0000000500)='$7', 0x2) r8 = openat(r5, &(0x7f0000000540)='./file0\x00', 0x0, 0x20) ioctl$TIOCCBRK(r8, 0x2000747a) ioctl$TIOCGFLAGS(r0, 0x4004745d, &(0x7f0000000580)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8011, r8, 0x10) fcntl$lock(r3, 0x8, &(0x7f00000005c0)={0x3, 0x1, 0xf, 0x99cd, r2}) openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x20000, 0x0) r9 = socket$inet6(0x18, 0x0, 0x6) preadv(r9, &(0x7f0000000b40)=[{&(0x7f0000000640)=""/142, 0x8e}, {&(0x7f0000000700)=""/34, 0x22}, {&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f0000000800)=""/125, 0x7d}, {&(0x7f0000000880)=""/243, 0xf3}, {&(0x7f0000000980)=""/3, 0x3}, {&(0x7f00000009c0)=""/182, 0xb6}, {&(0x7f0000000a80)=""/15, 0xf}, {&(0x7f0000000ac0)=""/8, 0x8}, {&(0x7f0000000b00)}], 0xa, 0x5) 613.420456ms ago: executing program 3 (id=18): r0 = syz_open_pts() setsid() (async) ioctl$TIOCSCTTY(r0, 0x20007461) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0x101, 0x3d, 0x0, 0x0, 0x460}, 0x6205, 0x2a3, 0x7, 0x8, 0x8000000000000001, 0x0, 0x0, 0xff, 0x0, 0x28, 0x0, 0x2000007}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) r1 = socket$inet6(0x18, 0x1, 0x6) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) r2 = syz_open_pts() close(r2) (async) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000300)={0x83, 0x1, 0xfbfffffe, 0xfffffe5b, "d76c1f000000000000000000000073e226c00080", 0x800, 0x7}) (async) poll(&(0x7f0000002540)=[{r3, 0x40}], 0x1, 0x7) (async) writev(r2, &(0x7f0000000480)=[{&(0x7f00000004c0)="ce", 0x1}], 0x1) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000000)={0xf66d, 0x9, 0x0, 0x5effff5f, "9cdc452ecd33040000000000000700", 0x8, 0x5}) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000000)=0x7, 0x4) connect$inet6(r1, &(0x7f00000002c0)={0x1c, 0x18, 0x0, 0xd, "fffffffffffffffe0000000100", 0x100004}, 0x1c) (async) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) r4 = socket(0x2, 0x8002, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) closefrom(r5) 612.89749ms ago: executing program 6 (id=19): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chmod(&(0x7f0000000340)='./file0\x00', 0x0) (async) syz_emit_ethernet(0x41, &(0x7f00000000c0)={@local, @broadcast, [], {@arp={0x806, @generic={0x0, 0x8005, 0x6, 0xf, 0x3, @random="d6baf506e040", "4a45983fc4383371561249fc689693", @local, "531e3a3c4c95b3325d7d489974b80313"}}}}) (async) setitimer(0x0, &(0x7f0000000bc0)={{0x1, 0x4}, {0x9, 0xa0000}}, &(0x7f0000000c00)) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x88) (async) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 611.61823ms ago: executing program 1 (id=20): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) lseek(0xffffffffffffffff, 0xa89, 0x1) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)='#!', 0x2}, {&(0x7f0000000440)="c213e7697f170f79518a3589150c3f55d47471368d8aa4fc0c512de38b1d2f360920aac722d66a6ff4763eac57f38e2607af23ebc87b4943c8e9390cc2a016debbeb0373b3996131377a3f59ddd54d8db31408f1e96dcea9d94d7ab5c1354b7767e70f0a", 0x64}], 0x2) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 608.950494ms ago: executing program 7 (id=21): setrlimit(0x8, &(0x7f0000000980)={0x47, 0x62}) r0 = syz_open_pts() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x5, "00000000000000000000000000000001", 0xc}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000180), 0x18a8a, 0x0, 0xbfffffff, 0x0) r2 = socket(0x2, 0x2, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffffc, 0xda, 0x13, 0x5, 0x1}], 0x0, 0x0, 0x0, 0x0) socket(0x18, 0x2, 0x0) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) closefrom(0xffffffffffffffff) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xffff, 0xffff63df, 0x3, 0x2, 0x1, 0x63f9, 0x40, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0xffffffff, 0xfff}, {0x1, 0x30000, 0x6, 0x1}, {0x2, 0xdf, 0xf, 0x40}, {0x2, 0x7, 0xf11, 0x7}, {0x803, 0xffff, 0x80cf}, {0x1, 0x4, 0x0, 0x2}, {0x10007, 0x1, 0xfffffff8, 0xfbffe2eb}, {0x8, 0xffe, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x8, 0x8000000, 0x8, 0x6}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x10a, 0x6, 0xd}, {0x200003, 0xee2, 0x2, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x5}, {0xffffffff, 0x8003, 0x6, 0x69}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x18, 0x1, 0x0) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r3, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e6993192", 0x12) setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) kevent(r1, 0x0, 0x7, &(0x7f0000000180), 0x7, &(0x7f00000001c0)={0xa, 0x7}) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x10, 0x2, 0x3, 0x80000}, 0x74) syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045f40028006700000006907800000000ac1400aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="9500000000000000808fc3ada4db10cd6dc23ff6e12138ff5dff87d70b82d7a15f987c0540e703082d3cad34188e56e56f1d4e567680b4895b570e42928261819eb9cf2751e8460e57ee907496b918ab301dca812a01544844ddea7c6470a4d5744b4fe79d1efd11f5e65b1263251d67738e73991c7220c0dfbe36e75cc2ea771e10ce09b6b77cd7fa04a32a3ae83c10f39512a921e3ab7bf3931ec3f283956932fa57e188ad"]) close(r0) syz_open_pts() r5 = accept$unix(0xffffffffffffff9c, &(0x7f0000000200)=@file={0x0, 0x0, ""/505}, &(0x7f0000000400)=0x1fb) setsockopt$sock_int(r5, 0xffff, 0x1001, &(0x7f0000000480)=0x5853, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @rand_addr="fed38d5ba80b9e61cd0c535a9800", @mcast2, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) socket(0x18, 0x2, 0x0) socket(0x2, 0x2, 0x0) 548.768341ms ago: executing program 1 (id=22): r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x800, 0x100) fsync(r0) (async) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) r1 = socket(0x2, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0xa, 0xffffffffffffffff) ioctl$DIOCCLRSTATUS(r2, 0xc0284416, &(0x7f0000001c00)={'./file0/file0\x00', &(0x7f0000000c00)=""/4096, 0x78b9, 0x8, 0x10000, 0x9}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file0/file0/..\x00', 0x4b, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setitimer(0x0, &(0x7f0000000bc0)={{0x4, 0x4}, {0x9, 0xa0000}}, &(0x7f0000000180)) (async) rename(&(0x7f0000000100)='./file0/file0/..\x00', &(0x7f0000000140)='./file0/file0/..\x00') (async) syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6040e7aa001c0003fec01a773e26828e3406790000000000fe8000000000000000000000000000aa3c00fb39680000004e234e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c827dd00000000000000d5b22a2ec65d3747e8e8faf4a1cc174265c61dde169749eacb0200000000000000"]) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x97) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 548.189823ms ago: executing program 6 (id=23): mkdir(&(0x7f0000000c00)='./file0\x00', 0xc4) unveil(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='w\x00') r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) r1 = open(&(0x7f0000002d00)='./file0/../file0\x00', 0x2, 0x18d) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) accept$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x200, "feee0004210000000000000000000100", 0x802}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, 0x17fdffffffffc}) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) listen(r2, 0x7fff) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x30, 0x68, 0x0, 0xf, 0x6, 0x0, @empty, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x8200, 0x0, 0xfffc, {[@nop, @mss={0x2, 0x4}]}}}}}}}) 547.830975ms ago: executing program 3 (id=24): r0 = getsid(0x0) getsid(r0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x2, 0xa, 0x6, 0x0, 0xffffffffffffffff}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x5012, 0xffffffffffffffff, 0xfffffffffffffffc) connect$inet6(r1, &(0x7f00000002c0)={0x1c, 0x18, 0x0, 0x8, "00007d530600", 0x100004}, 0x1c) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = shmget$private(0x0, 0x3000, 0x382, &(0x7f0000ffd000/0x3000)=nil) select(0x40, &(0x7f0000000000)={0x800006, 0x7f, 0x4, 0x2000000009, 0xc, 0x4, 0x7fffffff, 0x40000003fd}, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000140)={0x10, 0x2, 0x3, 0x6}, 0x10) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) shmctl$SHM_LOCK(r2, 0x3) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1002, &(0x7f0000000000)=0x200800, 0x4) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f00000005c0)={0x1000f66f, 0xc, 0x7, 0x39bb555b, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x1, 0x7f6}) shmctl$SHM_LOCK(r2, 0x3) mprotect(&(0x7f00001d2000/0x2000)=nil, 0x2000, 0x4) r6 = socket(0x18, 0x1, 0x0) setsockopt(r6, 0x1000000029, 0x5, &(0x7f0000000100)="ebffcbff13b9fd812eaa59713048e69931929648", 0x14) setsockopt(r6, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) ioctl$TIOCSTART(r3, 0x2000746e) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x11, r7, 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) 217.804201ms ago: executing program 0 (id=25): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x1040978c, 0x0, 0xf7fffbfc, 0x9, "bb08000100f167d910508b000000000000000080", 0x100, 0x4000002}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1000000000000252) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000000)) closefrom(r0) r1 = syz_open_pts() close(r1) socket(0x18, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0xd4e688a67930cd) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r3 = socket(0x18, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x7}, 0x38, 0x1841, &(0x7f0000003f00)={0x40007, 0x1020fdc7}) getsockopt$sock_int(r3, 0xffff, 0x1007, &(0x7f0000000040), &(0x7f0000000080)=0x4) 204.126267ms ago: executing program 4 (id=26): futimes(0xffffffffffffffff, 0xfffffffffffffffe) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x10, 0x9e) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x1b0) fcntl$lock(r2, 0x7, &(0x7f00000001c0)={0x1, 0x1, 0x1, 0xd}) shmctl$IPC_SET(0x0, 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000440)="2302", 0x2}], 0x1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) close(r0) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000140)={0x2000020a, 0xe, 0x6fab, 0xfff7ff9f, "01c1d8e3006267041c1000050020f59c00", 0x0, 0x4000083c}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xfffc, 0xffff63df, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x4, 0x8, 0xffffffff, 0xffd}, {0x1, 0xfffffffe, 0x6, 0x3}, {0x2, 0xdf, 0xf, 0x3c}, {0x1, 0x7, 0xf11, 0x7}, {0x800, 0xffff, 0x80cf}, {0x0, 0x3, 0xc5, 0x9}, {0x3, 0x1, 0xfffffff8, 0xf3ffe2eb}, {0x8, 0xfff, 0x6, 0x20}, {0x3, 0x0, 0x5, 0x8bfd}, {0x7fff, 0x8000000, 0x8, 0x7}, {0x8, 0xc7ce, 0x800000, 0xa66}, {0x401, 0x10a, 0x9, 0x3e}, {0x200003, 0xee2, 0x202, 0x6f5fc48f}, {0x4, 0xd54a, 0x3, 0x5}, {0xffffffff, 0x8003, 0x6, 0x869}]}) poll(&(0x7f0000000000), 0x35, 0x0) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='r\x00') r4 = socket(0x18, 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x40, 0x3, 0x775, 0x80000201}, {0x8, 0x8, 0x9, 0xfff}, {0x7, 0xfdfffffe, 0x7, 0x20000}, {0x5, 0x2, 0x3}, {0x0, 0x7, 0xf11, 0xb}, {0x3, 0xffff, 0x80d0, 0x1}, {0x3, 0x801, 0x100, 0x5}, {0x3, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfe}, {0x2, 0x8000000, 0x44d2, 0x2}, {0x4, 0xc7ce, 0x800000, 0x5}, {0xd6, 0x106, 0x92fb, 0x3e}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x81, 0x0, 0x1001, 0x5}, {0x9be2, 0x8001, 0x5, 0x69}]}) poll(&(0x7f0000000000), 0x35, 0x0) connect$inet6(r4, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0xef9, "000000000000000000000000f47300", 0x5}, 0x1c) unveil(&(0x7f0000000580)='./file0aaaaaaaaa\x00', &(0x7f00000005c0)='x\x00') 13.626198ms ago: executing program 5 (id=27): r0 = kqueue() r1 = kqueue() mmap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7, 0x10, 0xffffffffffffffff, 0x200000000) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f00000000c0)='\x00', 0x1) r3 = socket$inet(0x2, 0x4, 0x8) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000280)="fc58714180dda27df64d1c78c1edc7fc2600413cab404707efd60d8fdce4334749b0c2bda3260e3c5abdb01f4f758477a31b6a070485552e2129831d883b58380edc3d42f704a657cee1261af90d5c7a1a42c09713f98307b00b58f7db154e8372eef68414e1129ffdc88b2d00eaebb6d709f55f8c76b1d78938c772f79f95b5a6ea799ac5b5fe1dd492d4dc45233b8b1d11", 0x92) getsockopt(r2, 0x0, 0xa, 0x0, 0x0) kevent(r0, &(0x7f0000000180)=[{{}, 0xfffffffffffffff6, 0x11, 0x40, 0x808, 0xad}, {{}, 0xfffffffffffffff6, 0xaa, 0x40000000, 0x40000000e, 0xfffffffffffffffb}, {{r1}, 0xfffffffffffffffc, 0x71, 0x8, 0x8, 0x9}, {{r2}, 0xffffffffffffffff, 0x8, 0x40000000, 0x46, 0x3}, {{r2}, 0xffffffffffffffff, 0x8, 0xfffff, 0x0, 0x983f}, {{r0}, 0xfffffffffffffffc, 0xae, 0x4, 0x8, 0x5}, {{r2}, 0xfffffffffffffff8, 0x10, 0x4, 0x8, 0x3c}], 0x8a8a, 0x0, 0xc0000002, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') rmdir(&(0x7f0000000140)='./file0/file0/..\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f00000008c0)={{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000000)="205f8ca14c48f3b8ef94", 0xa}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0}}, 0x38, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000000029, 0x2b, &(0x7f0000003680)="000000f0", 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x58}, 0x2, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_pts() fcntl$lock(r6, 0x9, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x1000300010080}) flock(r6, 0x0) fcntl$lock(r6, 0x8, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x100000003}) 1.234587ms ago: executing program 2 (id=28): semop(0xffffffffffffffff, 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000100)='r\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) r1 = getppid() ktrace(&(0x7f0000000140)='./file0\x00', 0x1, 0x40000420, r1) ioctl$DIOCGETQUEUES(r0, 0xc148445e, &(0x7f00000001c0)={0xd, 0x1, {'\x00', './file0/file0/..\x00', './file0/file0/..\x00', '.\x00', {{0xfffffffffffffffe, 0x9}, {0x0, 0x6}, 0x1}, {{0x1c4, 0x1ff}, {0x6, 0x1}, 0x3}, {{0x0, 0x8001}, {0x3, 0x8001}, 0x5}, {0x80, 0x101, 0x1, 0x3}, 0x0, 0x4, 0x308d, 0x8, 0x7}}) 777.087µs ago: executing program 7 (id=29): r0 = getpgid(0x0) setpgid(0x0, 0x0) setpgid(0x0, r0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) r1 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x1ffd, 0x0, {[0xfffffbeffffffffb, 0x0, 0x4787, 0x1002, 0x8001, 0xfffffffffffffffc, 0x2, 0x8000, 0x0, 0x4, 0x0, 0x3, 0xfffffffffffbffff, 0x400000002000000, 0x0, 0x632e, 0xffff, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x2, 0xffff, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffa], [0x100, 0x20000000000, 0xfffffffffffffffc, 0x8000000100000000, 0xffffffffffffffff, 0x3], [{0x6, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x5, 0x10}, {0x0, 0x0, 0xfffffffe, 0x1000000000081}, {0x3, 0x100, 0x3, 0xffffffffffffffff}, {0x0, 0x5cc2, 0x3, 0x8}, {0xfffe, 0x2006, 0x8, 0x2000000000000000}, {0x6b7, 0x0, 0x1}, {0x8008, 0x965, 0x0, 0x8}], {0x2, 0x6, 0x8}, {0x21, 0x7, 0x100000b0, 0x8000000000000000}}}) kevent(r1, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) setsid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) minherit(&(0x7f0000276000/0x3000)=nil, 0x3000, 0x2) 0s ago: executing program 2 (id=30): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() syz_emit_ethernet(0x1000e, &(0x7f0000000200)={@random="b905f0ffffff", @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x2, 0x3, 0x8}, {"e3c4fc107f71ed734b5547194172bf7ade"}}}}}}) close(r0) r1 = syz_open_pts() r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0207534, &(0x7f00000001c0)) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000140)={0x40007, 0xf, 0x5, 0xfff7ff9f, "01c1020062670461b6a31e0021f58d00", 0x0, 0x4000083d}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000000)=0x3) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. kernel: protection fault trap, code=0 Stopped at in_ifdetach+0x67: movzbl 0x1(%rax),%r12d ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> show kasan No such command ddb{0}> trace in_ifdetach(ffff8000015fa000) at in_ifdetach+0x67 if_detach(ffff8000015fa000) at if_detach+0x2fe tun_clone_destroy(ffff8000015fa000) at tun_clone_destroy+0x2ce if_clone_destroy(ffff800034b88ab0) at if_clone_destroy+0x205 tun_dev_close(5d06,7) at tun_dev_close+0x1d9 spec_close(ffff800034b88b70) at spec_close+0x417 VOP_CLOSE(fffff2006e5696e8,7,fffff200097fd4e0,ffff800045feea78) at VOP_CLOSE+0x132 vn_closefile(fffff2006cf56900,ffff800045feea78) at vn_closefile+0x12b fdrop(fffff2006cf56900,ffff800045feea78) at fdrop+0x121 closef(fffff2006cf56900,ffff800045feea78) at closef+0x192 fdfree(ffff800045feea78) at fdfree+0x116 exit1(ffff800045feea78,1,0,1) at exit1+0x595 sys_exit(ffff800045feea78,ffff800034b88ee0,ffff800034b88e30) at sys_exit+0x1a syscall(ffff800034b88ee0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70fd26ee6e60, count: -15 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff800034b889a0 rbx 0xffff800001616800 rdx 0 rcx 0xffff800045feea78 rax 0xdead4110dead4110 r8 0xffffffffffffffff r9 0 r10 0xecee374ca3d642f5 r11 0xa72c501234c0a0c8 r12 0 r13 0xffff8000015fa048 r14 0xffff8000015fa000 r15 0xdead0036dead4110 rip 0xffffffff81f04527 in_ifdetach+0x67 cs 0x8 rflags 0x10286 __ALIGN_SIZE+0xf286 rsp 0xffff800034b88950 ss 0x10 in_ifdetach+0x67: movzbl 0x1(%rax),%r12d ddb{0}> show proc PROC (syz-executor) tid=492531 pid=39821 tcnt=0 stat=onproc flags process=18 proc=2000 runpri=32, usrpri=61, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=1 forw=0xffffffffffffffff, list=0xffff800045fef4d8,0xffff800045fee028 process=0xffff800045feb038 user=0xffff800034b83000, vmspace=0xfffff20074076d78 estcpu=11, cpticks=2, pctcpu=0.1, user=0, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 35192 451519 1150 32767 7 0x10 0 syz-executor 51019 325986 64826 32767 2 0x10 0 syz-executor 51019 335085 64826 32767 2 0x10 0x4000000 syz-executor 69916 428079 88758 0 3 0x2 0 clonelk ifconfig 88758 470267 63750 0 3 0x100002 0x88 sigsusp sh 63750 111044 61886 0 3 0 0x80 wait syz-executor 39270 108267 84524 32767 2 0x10 0 syz-executor 39270 500707 84524 32767 3 0x10 0x4000080 fsleep syz-executor 39270 302923 84524 32767 3 0x10 0x4000080 fsleep syz-executor 61886 106939 45023 0 3 0x2 0x80 wait syz-executor 38106 51747 4671 32767 3 0x10 0x80 nanoslp syz-executor 38106 474315 4671 32767 3 0x10 0x4000080 kqsel syz-executor 38106 365218 4671 32767 3 0x10 0x4000080 fsleep syz-executor 1150 42678 13827 32767 3 0x10 0x80 nanoslp syz-executor 84524 199536 70829 32767 3 0x10 0x80 nanoslp syz-executor 64826 271145 15509 32767 3 0x10 0x80 nanoslp syz-executor 4671 462568 38958 32767 3 0x10 0x80 nanoslp syz-executor 15509 216634 45023 0 3 0x2 0x80 wait syz-executor 873 466191 45023 0 3 0x2 0x80 wait syz-executor 70829 287906 45023 0 3 0x2 0x80 wait syz-executor 38958 148321 45023 0 3 0x2 0x80 wait syz-executor 13827 496538 45023 0 3 0x2 0x80 wait syz-executor 65807 277918 45023 0 3 0x2 0x80 wait syz-executor 18424 320325 45023 0 3 0x2 0x80 wait syz-executor 45023 480716 54556 0 3 0x2 0x80 kqread syz-executor 54556 69686 68711 0 3 0x100002 0x88 sigsusp ksh 68711 518823 248 0 3 0x10 0x88 kqread sshd-session 248 120164 84057 0 3 0x12 0x80 kqread sshd-session 88302 313084 1 0 3 0x100003 0x80 ttyin getty 84057 33530 1 0 3 0 0x88 kqread sshd 29655 68130 32769 73 3 0x1100010 0x80 kqread syslogd 32769 220123 1 0 3 0x100002 0x80 sbwait syslogd 65864 193480 1 0 3 0x100000 0x80 kqread resolvd 23029 353137 23720 77 3 0x100012 0x80 kqread dhcpleased 73795 233947 23720 77 3 0x100012 0x80 kqread dhcpleased 23720 64568 1 0 3 0 0x80 kqread dhcpleased 179 144043 0 0 3 0x14000 0x200 bored smr 94030 369773 0 0 2 0x14000 0x200 zerothread 38931 145281 0 0 3 0x14000 0x200 aiodoned aiodoned 66002 180418 0 0 3 0x14000 0x200 syncer update 90522 143414 0 0 3 0x14000 0x200 cleaner cleaner 53474 322579 0 0 3 0x14000 0x200 reaper reaper 45887 355612 0 0 3 0x14000 0x200 pgdaemon pagedaemon 75583 338137 0 0 3 0x14000 0x200 bored viomb 52541 90999 0 0 3 0x14000 0x40000200 acpi0 acpi0 73498 11465 0 0 3 0x14000 0x40000200 idle1 51472 514212 0 0 3 0x14000 0x200 bored softnet1 59186 331731 0 0 3 0x14000 0x200 bored softnet0 43033 94353 0 0 3 0x14000 0x200 bored systqmp 79501 198832 0 0 3 0x14000 0x200 bored systq 27950 315541 0 0 3 0x14000 0x200 tmoslp softclockmp 56283 471720 0 0 3 0x14000 0x40000200 tmoslp softclock 70636 466059 0 0 3 0x14000 0x40000200 idle0 1 197611 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks Process 35192 (syz-executor) thread 0xffff80003c400a88 (451519) exclusive rwlock uobjlk r = 0 (0xfffff2006cfe9428) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault+0x1e5 #3 upageflttrap+0xa9 #4 usertrap+0x430 #5 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffff2006d087c98) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11049 12016K 12034K 166960K 12144 0 pcb 17 12K 12K 166960K 17 0 rtable 215 6K 7K 166960K 357 0 pf 29 16K 16K 166960K 31 0 ifaddr 38 6K 7K 166960K 44 0 ifgroup 46 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 68 36K 37K 166960K 70 0 ioctlops 0 0K 2K 166960K 31 0 iov 0 0K 12K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1287 81K 81K 166960K 1364 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 24 89K 125K 166960K 172 0 proc 65 115K 163K 166960K 511 0 subproc 72 4K 4K 166960K 81 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 3 0 in_multi 88 5K 6K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 79 360K 360K 166960K 79 0 exec 0 0K 1K 166960K 378 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 218 160K 160K 166960K 3198 0 UVM aobj 4 2K 2K 166960K 5 0 pinsyscall 45 90K 109K 166960K 1286 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 4 0K 0K 166960K 5 0 NDP 10 0K 2K 166960K 27 0 temp 35 9114K 9134K 166960K 3524 0 kqueue 15 22K 26K 166960K 35 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 40 0 37 1 0 1 1 0 8 0 rtentry 176 111 0 12 5 0 5 5 0 8 0 unpcb 144 55 0 40 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 19 0 14 1 0 1 1 0 8 0 arp 136 18 0 2 1 0 1 1 0 8 0 ipq 40 1 0 0 1 0 1 1 0 8 0 ipqe 40 1 0 0 1 0 1 1 0 8 0 inpcb 328 88 0 76 2 0 2 2 0 8 0 nd6 152 24 0 3 1 0 1 1 0 8 0 kcovpl 48 9 0 1 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 44 29 0 29 29 0 8 1 art_table 40 453 0 44 5 0 5 5 0 8 0 art_node 32 111 0 21 1 0 1 1 0 8 0 shmpl 120 2 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1585 0 121 92 0 92 92 0 8 0 ffsino 296 1585 0 121 113 0 113 113 0 8 0 nchpl 144 1813 0 121 63 0 63 63 0 8 0 vnodes 216 1675 0 0 94 0 94 94 0 8 0 namei 1024 6128 0 6128 4 1 3 3 0 8 3 percpumem 16 51 0 1 1 0 1 1 0 8 0 kstatmem 264 25 0 2 2 0 2 2 0 8 0 scxspl 216 6404 0 6404 4 3 1 3 1 8 1 plimitpl 152 46 0 22 2 0 2 2 0 8 0 sigapl 424 471 0 419 7 0 7 7 0 8 0 knotepl 120 106 0 0 4 0 4 4 0 8 0 kqueuepl 224 34 0 22 1 0 1 1 0 8 0 pipepl 344 130 0 103 3 0 3 3 0 8 0 fdescpl 528 455 0 419 4 0 4 4 0 8 0 filepl 160 1608 0 1397 10 0 10 10 0 8 0 lockfpl 104 10 0 8 1 0 1 1 0 8 0 lockfspl 48 6 0 4 1 0 1 1 0 8 0 sessionpl 144 27 0 11 1 0 1 1 0 8 0 pgrppl 48 36 0 12 1 0 1 1 0 8 0 ucredpl 104 161 0 143 1 0 1 1 0 8 0 zombiepl 144 422 0 419 1 0 1 1 0 8 0 processpl 1232 471 0 419 5 0 5 5 0 8 0 procpl 664 522 0 465 6 0 6 6 0 8 0 sockpl 752 183 0 153 5 0 5 5 0 8 1 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 120 0 0 15 0 15 15 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mextrefs 64 15 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 162 0 0 11 0 11 11 0 8 0 bufpl 272 2367 0 102 151 0 151 151 0 8 0 anonpl 32 4203 0 0 34 0 34 34 0 247 0 amapchunkpl 152 8875 0 8427 27 0 27 27 0 158 6 amappl16 200 1619 0 1587 5 0 5 5 0 8 0 amappl15 192 7 0 7 1 0 1 1 0 8 1 amappl14 184 419 0 417 1 0 1 1 0 8 0 amappl13 176 115 0 105 1 0 1 1 0 8 0 amappl12 168 691 0 658 2 0 2 2 0 8 0 amappl11 160 10 0 10 1 0 1 1 0 8 1 amappl10 152 62 0 52 1 0 1 1 0 8 0 amappl9 144 273 0 273 1 0 1 1 0 8 1 amappl8 136 97 0 95 1 0 1 1 0 8 0 amappl7 128 168 0 157 1 0 1 1 0 8 0 amappl6 120 151 0 148 1 0 1 1 0 8 0 amappl5 112 92 0 84 1 0 1 1 0 8 0 amappl4 104 291 0 276 1 0 1 1 0 8 0 amappl3 96 1530 0 1446 4 1 3 3 0 8 0 amappl2 88 572 0 502 2 0 2 2 0 8 0 amappl1 80 10254 0 9691 14 0 14 14 0 8 0 amappl 88 2498 0 2344 5 0 5 5 0 92 0 uvmvnodes 80 97 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 1 1 0 1 1 0 8 0 uaddrrnd 24 455 0 419 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 455 0 419 1 0 1 1 0 8 0 vmmpekpl 168 5618 0 5581 2 0 2 2 0 8 0 vmmpepl 168 38379 0 36459 93 0 93 93 0 357 6 vmsppl 488 454 0 419 7 1 6 6 0 8 1 rwobjpl 80 14259 0 13334 22 0 22 22 0 8 0 pdppl 4096 917 0 838 111 24 87 97 0 8 8 pvpl 32 12302 0 0 101 1 100 100 0 265 0 pmappl 256 454 0 419 4 1 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 432 0 28 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace in_ifdetach(ffff8000015fa000) at in_ifdetach+0x67 if_detach(ffff8000015fa000) at if_detach+0x2fe tun_clone_destroy(ffff8000015fa000) at tun_clone_destroy+0x2ce if_clone_destroy(ffff800034b88ab0) at if_clone_destroy+0x205 tun_dev_close(5d06,7) at tun_dev_close+0x1d9 spec_close(ffff800034b88b70) at spec_close+0x417 VOP_CLOSE(fffff2006e5696e8,7,fffff200097fd4e0,ffff800045feea78) at VOP_CLOSE+0x132 vn_closefile(fffff2006cf56900,ffff800045feea78) at vn_closefile+0x12b fdrop(fffff2006cf56900,ffff800045feea78) at fdrop+0x121 closef(fffff2006cf56900,ffff800045feea78) at closef+0x192 fdfree(ffff800045feea78) at fdfree+0x116 exit1(ffff800045feea78,1,0,1) at exit1+0x595 sys_exit(ffff800045feea78,ffff800034b88ee0,ffff800034b88e30) at sys_exit+0x1a syscall(ffff800034b88ee0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x70fd26ee6e60, count: -15 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83ab6800) at __mp_lock+0x192 uvm_fault(fffff2006d087b98,27ddbdd6000,0,2) at uvm_fault+0x1ea upageflttrap(ffff80003abbe4f0,27ddbdd6000) at upageflttrap+0xa9 usertrap(ffff80003abbe4f0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x797bb12433b0, count: -8