last executing test programs: 1.011774868s ago: executing program 5 (id=6): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) r1 = socket(0x2, 0x8000, 0xb5) getsockname(r1, 0x0, 0xffffffffffffffff) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 856.591668ms ago: executing program 3 (id=9): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) sync() (async) ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0xd27d43220c7ff9d, 0x0) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x10, r0, 0x0) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f00000014c0), 0x1, 0x0) (async) r1 = fcntl$dupfd(r0, 0x6, r0) ftruncate(r1, 0x6) (async) ioctl$WSKBDIO_GETENCODING(r1, 0x4004570f, &(0x7f0000000000)) (async) r2 = kqueue() kevent(r2, 0x0, 0x600000, 0x0, 0x7, &(0x7f0000000240)={0x1ff, 0xe}) 778.409023ms ago: executing program 3 (id=11): r0 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000080)={0x1c, 0x18, 0x1, 0x1000, '\x00', 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x1ff, "00000000000000000000000000000081", 0xbc}, 0x1c) getpeername$inet6(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) r1 = socket$inet6(0x18, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) 774.062187ms ago: executing program 3 (id=13): r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x142) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) ftruncate(r0, 0x79c8) clock_getres(0x0, &(0x7f0000000100)) 737.971779ms ago: executing program 7 (id=15): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f00000000c0)="b100051360000004000000000700000002008106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f1302000000000000007d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba9c500022012010000de5000"/177, 0xb1, 0x800, 0x0, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34) (async, rerun: 64) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) (rerun: 64) write(r1, &(0x7f0000000180)="6b6b9c2f94bdd91be55d075c2e971569b71e3054a51ffd53a202a71dfe3e327e25918db8b11cc1fb3e21b4f1108afc8ed6476cbb9bafaf1a9b915e72592ef1cf64536d6085743f50bd0d2324e1bf02046131f0764446b3360a092efbe49fd5b826120c33929af304586e780fdcce1650cba218017b96f12a1811da071d2a313a22cbb9c8c9fcd532adcf4c68d74db5feb2a7ba7cd181ebf4a55354a6d9b8fe11a8f5b6eaab6c07887fcf11efcf4917d1542e984f7a4dcdbb048e8f489478eaa6ca3605de2a9e", 0xc6) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 64) r2 = socket$inet(0x2, 0x1, 0x6) (rerun: 64) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) (async) pread(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x1) 723.435349ms ago: executing program 3 (id=17): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x4, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc], [], [0x0, 0x0, 0x3, 0xfffffffffffffffc, 0x0, 0x0, 0x77], [0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7], [{}, {0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x800000000000}, {0x0, 0xfffffffd}, {}, {}, {0x2}], {0x5}, {0x0, 0x3, 0x800000}}}) r2 = socket(0x11, 0x3, 0xa) sendto$unix(r2, &(0x7f0000000100)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfab19964ce1002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712050eeab7196fcbd80407000200c011200000", 0xb1, 0x6, 0x0, 0x0) r3 = kqueue() mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000000)="7f45", 0x2}], 0x1) ioctl$FIONREAD(r4, 0xc0106978, &(0x7f0000000140)) kevent(r3, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r5, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x8) r6 = open(&(0x7f0000000000)='./file0\x00', 0x8, 0x9bf2d372586474f1) ioctl$BIOCSETIF(r6, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) close(r6) 672.411767ms ago: executing program 3 (id=32): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x1000, 0x9, {[0xf248, 0xf, 0x4787, 0x1002, 0x20008001, 0x1, 0x6, 0xfffffffffffffffb, 0xf0d1, 0x7fffffff, 0x6, 0x8000000003, 0xfffffffffffbffff, 0x4, 0x9, 0xffffffffffffffa8, 0x82, 0xce5], [0x3, 0x7fff, 0x8000000000000002, 0x4000000, 0x7, 0x26520a6a, 0x6, 0x0, 0x0, 0x4], [0x200000005ad8, 0xad41, 0x9, 0x0, 0xffffffffffffffff, 0x6, 0xfffffffffffffffe], [0x0, 0x3, 0x0, 0x6, 0x2, 0x8000], [{0x0, 0x6, 0xffffffff, 0xb961}, {0xa, 0x2, 0x40000001, 0x100000000}, {0x0, 0x400, 0x4d, 0x48}, {0x3, 0x100, 0x8, 0x1}, {0x0, 0x0, 0x2, 0x1}, {0x0, 0x2106, 0x40040, 0x2000000000000000}, {0x4, 0xffffffff, 0x1, 0x1}, {0x1, 0x0, 0x0, 0xfff}], {0x8002, 0x6, 0x8}, {0x4, 0x101, 0x1, 0x2}}}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000280)=0xd72) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x7, &(0x7f00000001c0)=[{0x2, 0x2, 0x0, 0x9}, {0x3c09, 0xff, 0x8, 0x7}, {0x1, 0x0, 0x6, 0x4}, {0x8, 0x5, 0x7}, {0x0, 0x7c, 0x4, 0x63}, {0x1, 0x6, 0x2, 0xfffff3be}, {0x8, 0xff, 0x1, 0x9}]}) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="c2a65024b9b7a065af1faf4a1532d36083c8c73a28ce546a06907f80ffffffffae848cca2ee3592f195e92bae3058b25925a3a374df1c4affb9628b13967153d8ce15ea1a2fd1bc2dd3ce03d6e6cf4f9c5a7c0ec8c061e998f7d0ddb62e431ef6b399a4c704edf9de5dad0ef07f9220e5c20859a83125929aa", &(0x7f0000000000)=0x79, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f0000000180)={0x1d4a, &(0x7f0000000240)=[{0x5, 0x0, 0x1, 0x2, 0x4}, {0x1, 0x7, 0x2, 0x63c8, 0xf001}]}) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) 657.571043ms ago: executing program 4 (id=21): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x1c, 0x66, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@echo={0x8, 0x0, 0x0, 0x8, 0x9b8}}}}}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x6c, 0x8, 0xb, 0x1}, {0x0, 0xf, 0x1, 0x10000b}, {0x9b36, 0xb8, 0x9, 0x5000801}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0]) 489.08698ms ago: executing program 3 (id=23): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000000c0)={0x202, 0x0, 0xa7, 0xc0ce, 0x4}, 0xc) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r2 = syz_open_pts() close(r2) syz_open_pts() munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x7f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ioctl$FIOASYNC(r2, 0x80047469, &(0x7f00000000c0)=0x47) writev(r2, &(0x7f0000000200)=[{0x0}], 0x1) select(0x40, &(0x7f0000000040)={0x2, 0x81, 0x7, 0x5, 0xffffffffffffffa5, 0x5, 0x3, 0xaeb3}, &(0x7f0000000080)={0xde4, 0x7, 0x0, 0x1, 0x6, 0x6, 0x0, 0x4}, 0x0, 0x0) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f0000000040)={0x1, 0xa6a}) sysctl$hw(&(0x7f0000000000)={0x6, 0x1d}, 0x2, &(0x7f00000001c0)="315fd6d4", &(0x7f0000000240)=0x4, &(0x7f0000000280)="fde73be26e4b485b", 0x8) 488.142585ms ago: executing program 5 (id=24): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000100)) 480.661953ms ago: executing program 6 (id=7): ioctl$WSDISPLAYIO_GETSUPPORTEDDEPTH(0xffffffffffffffff, 0x4004575c, &(0x7f0000000000)) r0 = open(&(0x7f0000000040)='\x00', 0x20000, 0xc0) r1 = openat$dri(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/renderD128\x00', 0x10, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r1, 0x1}) 479.26484ms ago: executing program 4 (id=26): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = accept$unix(r0, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0xfffffff7, 0x9, r0}) ioctl$DIOCGETSTATE(r2, 0xc1084413, &(0x7f00000000c0)={{0xfff, './file0\x00', [{[@v4=@rand_addr=0xe, @v6=@empty], [0x9, 0xd], 0x3, 0x2}, {[@v6=@rand_addr="624cbe0a94d598896426a0d74acc4165"], [0xe, 0x100], 0x8001, 0x2}], {{0x8, 0xbb, 0xbe, 0x80}, 0x8, 0x8001, 0x401, 0x7, 0x3, 0x9, 0x9}, {{0x2, 0x6, 0x6, 0x8}, 0x1000, 0x9, 0x3ff, 0x0, 0xff, 0x0, 0x7}, @v6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x6, 0x7f, 0x7, 0x1ff, [[0x7fffffff, 0x7fffffff], [0x0, 0x4]], [[0xffffffff, 0x1], [0x3, 0x2]], 0xfffffffd, [0xff, 0x2], 0x1, 0x1b, 0x9, 0x3, 0x20, 0x4, 0x1, 0x8, 0x6, 0x8, 0x67, 0x4000, "1134"}}) sendmmsg(r0, &(0x7f0000000540)={{&(0x7f0000000200)=@un=@abs={0x8, 0x1, 0x0, 0x3}, 0x8, &(0x7f0000000240), 0x0, &(0x7f0000000280)=[{0x40, 0x1, 0xb130, "fee00eaabd655badf3c6a0c0b9229f41ecf333f782c4a7180978a64ed55a3d165c5017e8f401c31e7f0bd4f69f416c4d6fb5"}, {0x80, 0x1, 0x7e, "c1ebd158f2af72673962b662e31332fd3fd7c64d9a136751fca380658582c707a5824f6a156585483cfffc520fff1837cdc355d7bc4dac2bb9b400dfa60d61b6cd84f166f33cf19fbb5d76722441a505e9fe62b7940dc6bfd5044c4aff39769707b4a524a2323d32eba5426189896a9dea"}, {0x20, 0x1, 0x2, "cac4dad8e09997583fc7b80f3a5200543e45"}, {0xb0, 0xffff, 0x9, "24b603605d72685552fb722072f6a9d26c09b4c309147be287d671147d78a84574508967073578fbe496442e7e3f8f3479a64f687a119feb625e618cb4ddaabbd820f9d84adb9d929005a53a20b4284898e6a3b933beabb98128edf8117d6615a810a22b27f75c2e4991f8870420b9f7e3c2bc0a751967bf9b0dd4743766fb73db645a6ee261c4114a83f706172cfeb030b6eef81f90379d54410ad37ac53db4b3"}, {0x104, 0x1, 0x3, "4fc6bd5b9dda9f39bb0540b324042b0d0ff78af583dff2e0c77280ba4eb2935c89a8cb33e7ecadb7a8d8f7181383ce2b84c5a0470b7c9d61a164f8d375b5388451bebe7a7065619f87265bf3bb779fcec3e5c594b31d3098f56f2a6a05558af82c47de818578ad5127d7011d9c4e8e56599786b60d698a80e26f150ada88241feace576089a0f0904c39b6b34cfe2dd9631fbd432e026b98d63481c302460397ca340b342059dd8d7d8e00e0b7bd560f6b11feddfd30a91a77b42e7c71d06846386c99b87df3c8c5c9bc3ecf11b72a235276959c646e0f3aeee499f99abe7c1c7f329cc2a967a1041b28050006fd3eb7ee88dbd316"}], 0x294}}, 0x38, 0xd) accept$unix(r1, &(0x7f0000000580)=@abs, &(0x7f00000005c0)=0x8) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000600)={0xff, 0xb0, 0x5, 0xea4, "bf9215002e70f1fac7d76852333970df9c9a62ed", 0x1, 0x1}) r3 = openat$klog(0xffffffffffffff9c, &(0x7f0000000640), 0x80, 0x0) fchflags(r3, 0x0) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r2, 0x400c570a, &(0x7f0000000680)) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f00000006c0)={0x0, 0x8, 0x7, 0xb, 0x5, 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_CLOSEFB(r2, 0xc00864d0, &(0x7f0000000700)={r4}) ioctl$WSKBDIO_SETMAP(r2, 0x8010570e, &(0x7f0000000780)={0x3, &(0x7f0000000740)=[{0xe2, 0x8513, 0x7, 0x4b, 0xb33}, {0x2, 0x9, 0xff, 0x1, 0x100}, {0x1fb2, 0xf, 0x1, 0x9, 0x5380}]}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f00000007c0)={0x3, 0x101, 0x3, 0xe, 0x6, 0xffff}) ioctl$DIOCSETSTATUSIF(0xffffffffffffffff, 0xc0284414, &(0x7f00000008c0)={'./file0\x00', &(0x7f0000000800)=""/190, 0x73, 0x8, 0x6, 0xd}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000900)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000009c0)={&(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, r6, 0x9, 0xee17, 0x4, 0xce, {0x6, 0x101, 0xb882, 0xa5f8, 0x3, 0x8000, 0x8, 0x0, 0x4, 0x3, 0x0, 0x3e, 0x14000, 0x68, "f419c84904f2e4263941c0b0d9bd56c47e48cdfa8f22700665a0eb9219ce97f5"}}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000a40)={r7, r8, r4, 0x3, 0x0, 0x400, 0xfffff000, 0xb, 0x5, 0x8, 0x7fff, 0xe}) r9 = openat(r2, &(0x7f0000000a80)='./file0\x00', 0x800, 0x100) ioctl$TIOCSETAW(r9, 0x802c7415, &(0x7f0000000ac0)={0x6, 0x5, 0x4, 0xd2, "f4fc4a5789da0ce8b3b32383f4e0d518f2911fd9", 0x4, 0x1}) r10 = openat$dri(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/dri/card0\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000c40)={&(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[0x0, 0x0], 0x3, 0x9, 0xa, 0x2, 0x6143ef89, 0x86c2, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB(r10, 0xc01c64ad, &(0x7f0000000c80)={r11, 0x4, 0x3, 0x1, 0x9e, 0x85, r5}) openat$dri(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/dri/card0\x00', 0x80, 0x0) r12 = geteuid() r13 = geteuid() setreuid(r12, r13) open(&(0x7f0000000d00)='./file0\x00', 0x100, 0x14) ioctl$DIOCADDRULE(r9, 0xcd604404, &(0x7f0000000d40)={0x5, 0x9, 0x2, './file0\x00', './file0\x00', 0x0, "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"}) setuid(r13) 444.185237ms ago: executing program 4 (id=28): r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0xd, 0x1, './file0\x00'}, 0xa) r1 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r1, 0x20007461) fcntl$setstatus(r1, 0x4, 0x40) close(r1) open(&(0x7f0000000040)='./file0\x00', 0x615, 0x0) 438.424863ms ago: executing program 0 (id=29): r0 = syz_open_pts() ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f0000000580)={0x4, 0xee}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1, 0x4}) r1 = socket(0x18, 0xc003, 0x3a) setsockopt(r1, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x14, 0x1}, 0xc) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0xffffffff, 0x7, 0x1, 0x200023, 0x0, 0x0, 0xfffffffffffffffe}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) closefrom(r4) 438.042563ms ago: executing program 2 (id=30): r0 = socket$inet6(0x18, 0x3, 0x80) close(r0) r1 = socket(0x18, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x20000, 0x0) socket(0x18, 0x4001, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) r2 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f0000000100)=0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x4009, '\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x7}, 0x1c) sendmmsg(r1, &(0x7f0000000000)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000000000000000000000000001", 0xc}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) 437.69683ms ago: executing program 4 (id=31): sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x26) r0 = socket(0x18, 0xc003, 0x3a) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x10000007, "00000000000000000000000000004001", 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6788010000003a9a", 0x8}], 0x1, 0x0}, 0x402) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x26) (async) socket(0x18, 0xc003, 0x3a) (async) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x10000007, "00000000000000000000000000004001", 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="6788010000003a9a", 0x8}], 0x1, 0x0}, 0x402) (async) 364.474353ms ago: executing program 7 (id=34): poll(0x0, 0x0, 0xffffffff) (async) poll(0x0, 0x0, 0xffffffff) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='x\x00') 362.679871ms ago: executing program 4 (id=36): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$audio(r0, &(0x7f0000000040)=""/219, 0xdb) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x80, 0x9) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000180)={0x3, 0x9d39, 0x456ff71a, 0xc751f2e, 0xffffffff, 0x5, 0x0}) symlinkat(&(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r3 = openat$dri(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dri/renderD128\x00', 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r1, 0xc01864c2, &(0x7f0000000280)={0x0, 0x1, r1, 0x0, 0x7fffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r3, 0xc01064c4, &(0x7f0000000300)={&(0x7f00000002c0)=[r4], 0x1}) fchdir(r1) ioctl$AUDIO_GETPAR(r1, 0x40404124, &(0x7f0000000340)) ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000380)) getrusage(0xffffffffffffffff, &(0x7f00000003c0)) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000480)={0x3, 0x4, 0x8000, 0x8000, 0xfffffffb, 0x8000, r2, 0x4, 0x53b71c4d}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0xfffffc31, 0xe4c0, 0xd, 0x4, 0x800, 0x1], 0x6, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000540)={r5}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000580)={0x0, 0x6, 0x2a, 0x38414258, 0x2, [r7, r7, r7, r7], [0x3d, 0x9, 0xff, 0xd], [0x1, 0xfc4, 0xa, 0x8], [0x3, 0x2, 0x1, 0x22]}) getrusage(0xffffffffffffffff, &(0x7f0000000600)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x8010640d, &(0x7f00000006c0)={0x3cc6c2f8da2a7cc4, 0x101}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r6, 0xc02064a5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000700)=[0x40, 0x9, 0x5, 0xfa, 0x2], &(0x7f0000000740)=[0xfff2, 0x0, 0x0, 0xff, 0xa1b0, 0x4, 0xdc], &(0x7f0000000780)=[0xfff]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000800)={0x0, r9, r8, 0xe, 0xd2b6, 0x7, 0x44d, 0x8, 0x4, 0x8, 0x9, 0x5}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r6, 0xc04064aa, &(0x7f00000009c0)={&(0x7f0000000840)=[0x0], &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, ""/32, 0x1, 0x8}) openat$audio(0xffffffffffffff9c, &(0x7f0000000a00), 0x2a7d981b9c5aa6ca, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000a80)={&(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01864c1, &(0x7f0000000ac0)={r4, 0x3, 0xffffffffffffffff, 0x0, 0x7}) ioctl$AUDIO_MIXER_READ(r10, 0xc0144d00, &(0x7f0000000b00)=@set_ctrl={0x72, 0x2, 0x4}) ioctl$AUDIO_GETPAR(r1, 0x40404124, &(0x7f0000000b40)) setsockopt$sock_timeval(r10, 0xffff, 0x200c, &(0x7f0000000b80)={0x9, 0x9d}, 0x10) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000bc0)={'./file0\x00', 0x8, 0x2, 0x47, 0x0, 0x0, 0x2, 0x200, 0x0, 0x0, 0x825c, 0x4}) r11 = accept$unix(r10, &(0x7f0000000c40)=@abs, &(0x7f0000000c80)=0x8) ioctl$FIOGETOWN(r11, 0x4004667b, &(0x7f0000000cc0)) 362.267074ms ago: executing program 2 (id=37): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x0, './file0\x00', [{[@v6=@empty, @v6=@loopback], [0x1, 0x40], 0x0, 0x2}, {[@v6=@rand_addr="be762f745a650c4fc824f39777cbdbf1", @v4=@rand_addr=0x9], [0x46], 0x4, 0x14}], {{0x246, 0x48, 0xba, 0x100007ff}, 0x6543, 0x409, 0xfff00000, 0x8001, 0x8, 0x17, 0x7}, {{0x0, 0x7, 0x5, 0x5}, 0x51fe1b1d, 0xc86, 0x10007, 0x4, 0x3ff, 0xf2}, @v6=@empty, 0x54d5, 0xa, 0x2, 0xf23b, 0x5, [[0x8, 0xffffffff], [0x3958, 0x6]], [[0xfc000002, 0x4], [0xfffffff7, 0x3]], 0xb, [0x80001d9, 0x79], 0x1, 0x18, 0x6, 0x1, 0x0, 0x3, 0xb, 0x83, 0x5, 0x8, 0x1, 0xce57, "0600"}}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) ioctl$BIOCVERSION(r1, 0x40044271, &(0x7f00000001c0)) ioctl$BIOCGDLTLIST(r1, 0xc010427b, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[0x7, 0x15c3aa4d, 0x35, 0x4]}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023, 0x0, 0x0, 0xffffffffffffffff}) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x1ff, 0x0, 0xfffffffe, 0x3, "210d0000000200000006000000000200007fffff", 0x7ffffffe}) 332.03686ms ago: executing program 2 (id=39): r0 = socket(0x2, 0x3, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x30, 0x66, 0x8000, 0x0, 0x1, 0x0, @empty, @multicast1}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x0, 0xa, 0x0, {0x5, 0x4, 0x0, 0x1b, 0xfffc, 0x0, 0x0, 0x8, 0x6, 0x5e2, @multicast1, @loopback}}}}}}) (async) r1 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7928) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='#!', 0x2}], 0x1) (async) write(r1, &(0x7f0000000080)='\n', 0x1) (async) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0x2, &(0x7f0000000000), 0x4) (async) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x80, 0x1, 0x0, {[0x7, 0x0, 0xffffffffffffffd, 0x2, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0xfffffffffffffffd, 0x80, 0xffffffdfffffffff, 0x0, 0x200, 0x5, 0x1], [0x64, 0x800, 0x5, 0x80000000010000, 0x0, 0x0, 0x10, 0x9, 0x80000002, 0xfdfffffffffffffb], [0x7fffffffffffffff, 0x0, 0x0, 0xd34, 0x2009, 0x10000000000, 0x5], [0x81, 0x0, 0xfffffffffffffffc, 0x165, 0x200, 0xe], [{0x0, 0x10, 0x80000001, 0x7fffffffffffd}, {0x2, 0x0, 0x1006}, {0x1000, 0x3, 0xfffffffe, 0x4}, {0x0, 0x6, 0xfffd, 0x4000000000000001}, {0xfffd, 0xa832, 0xc8, 0x8}, {0x9, 0x2, 0x0, 0x1}, {0x0, 0x8, 0xaa, 0x4000000000000000}, {0x0, 0xfffffff1, 0xc00003}], {0xfffc, 0x10, 0x20000003, 0xf5a752c}, {0x0, 0x5, 0x401}}}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8040691a, &(0x7f0000000100)) 331.214147ms ago: executing program 4 (id=40): mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x20, 0x153) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$DIOCSTART(r0, 0x20004401) r1 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x151) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) r3 = socket(0x11, 0x3, 0x0) setsockopt(r3, 0x11, 0x1, &(0x7f0000000140)="b443d4ed", 0x4) sendto$unix(r3, &(0x7f0000000580)="b10005010000009f0500070105000000331c13fecea70500fef96ecfc72fd3357ae30200004e3039d2d236acf20bf404be01000000f7c8cf5f882b297bd8aa0504000051e2f0ad3ebbc257699a1f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300008abfba0900000008e37193f8343712050500b71d808e5ed405080000fca653181afc9d3f0100"/177, 0xb1, 0x0, 0x0, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$BIOCSETIF(r4, 0x20006473, 0x0) r6 = socket(0x11, 0x3, 0x0) setsockopt$sock_timeval(r2, 0xffff, 0x0, &(0x7f00000001c0)={0x9, 0xe6}, 0x10) getsockopt$sock_timeval(r6, 0xffff, 0x1006, &(0x7f0000000080), &(0x7f00000000c0)=0x10) munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000) r7 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) truncate(&(0x7f0000000000)='./file0\x00', 0xafffe) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x20) syz_emit_ethernet(0xe, &(0x7f0000002800)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffbffff8864"]) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0)}], 0x1, 0x38000000000) fchdir(r7) setuid(0xee01) r8 = setsid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x802, r8) ioctl$WSDISPLAYIO_USEFONT(r1, 0x80585750, &(0x7f0000000040)={'./file0\x00', 0x5, 0xfffffff3, 0x5, 0x1, 0x5, 0x1, 0x8, 0x2, 0x0, 0x4d, 0x4c}) 271.488543ms ago: executing program 2 (id=42): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x4, 0xd, 0x8, 0x9}, {0xfff4, 0xf4, 0xff, 0x8}, {0x6, 0x80, 0x33, 0xfffff805}]}) seteuid(0xffffffffffffffff) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x1000) r2 = socket$inet(0x2, 0x3, 0x0) setreuid(0x0, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000040)=@file={0x97, 0x1, './file0\x00'}, 0xa) getpeername(r3, 0x0, &(0x7f00000001c0)) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7822) execve(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) geteuid() ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000100)) 271.195456ms ago: executing program 6 (id=43): sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x3414, 0x0, 0xffffffffffffffb8) 267.940965ms ago: executing program 7 (id=44): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000003c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x17, 0x1c, 0x66, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}, @multicast1}, @icmp=@echo={0x8, 0x0, 0x0, 0x8, 0x9b8}}}}}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f00000001c0)=[{0x6c, 0x8, 0xb, 0x1}, {0x0, 0xf, 0x1, 0x10000b}, {0x9b36, 0xb8, 0x9, 0x5000801}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0]) 267.719617ms ago: executing program 1 (id=45): r0 = socket(0x2, 0x3, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) connect$unix(r0, &(0x7f0000000000), 0x64) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000080)={0x5, 0x0, 0x8, 0x7acb, 0x5}, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000040)='./file1\x00', 0x2000, 0x429f) openat(r1, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) 266.526182ms ago: executing program 7 (id=46): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) select(0x40, &(0x7f0000000080)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, &(0x7f0000000380)={0xffb, 0x0, 0x6, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000140)={&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`\x00', 0xffffffffffffffff, 0x1}) ktrace(&(0x7f0000000040)='./file0\x00', 0x0, 0x40003708, 0x0) 258.946927ms ago: executing program 6 (id=47): fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0x0, 0x1, 0x100000004}) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000780)="3bb8c80000000007dee5f7fd0206", 0xe}], 0x1) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34d}], 0x1) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x1000000, 0x440000, "000000000000000000000000dc9ba2dd00", 0x24000, 0x2000016}) setitimer(0x0, &(0x7f0000000100)={{0x1, 0x3}, {0x0, 0xfff}}, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0xfffffffb, 0x3, 0x101, 0x4, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0xfffffffd, 0x300b7fe, 0x800002, 0xa}, {0x100806, 0x0, 0x4, 0x2}, {0x2, 0x0, 0x200, 0xfffffffc}, {0x4, 0x3, 0x80000000, 0x7}, {0x2, 0x47fff, 0x14000009, 0xc}, {0x5, 0xbffffff5, 0x7, 0x6d}, {0x2000a, 0x7291, 0xfdf0, 0x9}, {0x0, 0x7, 0x36, 0xa}, {0xfffffc04, 0x4, 0x8003, 0x1}, {0xa44f, 0xfff9, 0x3, 0xe1}, {0x80000cb, 0x2, 0xc, 0x8}, {0x2000df, 0x9, 0x15, 0x400}, {0x10008, 0xe2, 0xfffffff5, 0x2}, {0x5, 0x5, 0x24, 0x4}, {0x4, 0xd655, 0x3, 0x2}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x7890, 0x800c1, 0xb, 0x1, 0x1040807, 0x50001, 0x3, 0x0, 0x0, 0x8, 0xf5fffffffffffff9}) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x9, 0x20, 0x9}, {0x7c, 0x9, 0xff, 0x200900}, {0x6, 0x1, 0x2, 0x9}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500ffb0006700000011907800000000ac14ffff4e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000fd0000907800"]) setitimer(0x0, &(0x7f00000015c0)={{0x8001, 0x3}, {0x0, 0xe}}, 0x0) 256.975832ms ago: executing program 0 (id=48): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$DIOCRADDTABLES(0xffffffffffffffff, 0xc450443d, &(0x7f0000001340)={{'./file0\x00', './file0\x00', 0x10, 0x7}, &(0x7f0000000280)=[{'./file0\x00', './file0\x00', 0x1, 0xa}, {'./file0\x00', './file0\x00', 0x0, 0xff}, {'./file0\x00', './file0\x00', 0x42, 0xe4}, {'./file0\x00', './file0\x00', 0x64}], 0xb, 0x4, 0xffffb816, 0x800, 0x7, 0x4, 0x4, 0x7}) r1 = dup2(r0, r0) ioctl$DIOCRADDTABLES(r1, 0xc450443d, &(0x7f0000002040)={{'./file0\x00', './file0\x00', 0xc, 0x66}, &(0x7f00000017c0)=[{'./file0\x00', './file0\x00', 0x4}, {'./file0\x00', './file0\x00', 0x0, 0xf4}], 0x7f, 0x2, 0xe0000000, 0x5, 0x1, 0x6, 0x2, 0xb}) 214.481683ms ago: executing program 0 (id=49): r0 = socket$inet(0x2, 0x3, 0x40) socket$inet(0x2, 0x3, 0x2) shutdown(r0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x40) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, &(0x7f0000001100), 0x4) sendto$inet(r1, 0x0, 0x0, 0xa, &(0x7f00000002c0)={0x10, 0x2, 0x2, 0xffffffff}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="00e0300eaaf8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x7, 0x1, 0x0, @local={0xac, 0x14, 0x0}, @broadcast}, @icmp=@echo_reply={0x0, 0x0, 0x0, 0x66, 0x1}}}}}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DIOCSETSYNCOOKIES(r2, 0xc0014462, &(0x7f00000006c0)=0x2) ioctl$DIOCSETSYNCOOKIES(r2, 0xc0014462, &(0x7f0000000040)=0x1) 213.668504ms ago: executing program 1 (id=50): writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000080)="5c4d901c9398526c18e8d21455108dd044c3db79a330e67653a92e92d0f18a94ad267c1db705b764069a99373938f62117ca789724023a45d8b390d44a8fe86439b10e1a278a5c63114710057aeb2094eba7f7a301cf732ef3883219c6679d1877b89eb849ca1404148ea10cae9b94b847d2fe2ed64cdc19f5b9697e04e0294d0cb07db904478529cf42681b80c8364b8d4cb3832c5b3c3c1df7ebff7f5593dfb3a4e27b25ab62e3607f144c7586c62258365615d213aeea3e20aece385189ed03", 0xc1}], 0x1) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r0, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) closefrom(0xffffffffffffffff) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) accept4(r0, &(0x7f0000000100)=@in, &(0x7f0000000140)=0x10, 0x4000) 213.059757ms ago: executing program 7 (id=51): r0 = socket$inet(0x2, 0x2, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "0200", 0x18, 0x0, 0x0, @empty, @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@mld={0x82, 0x0, 0x0, 0x2, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}) (async) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r2, r3, 0x0) socket(0x2, 0x2, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc290560b, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0xfff, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x9, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x2, 0x6, 0x6, 0x1, 0x2, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x4, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0xb277, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x75, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0x8, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x6, 0x5, 0xb, 0x4, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x6, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0xfffffff8, 0x2, 0xe877, 0x5, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x5, 0xef6, 0x2, 0x719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2d, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x3, 0x6, 0xe, 0xa6d, 0xfc46, 0x1ff, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0x4, 0x9, 0x7, 0x10, 0x8, 0x2, 0x5b7, 0x7ff, 0x9d1, 0x71f, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x7, 0x5, 0x4, 0xba]}) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) setuid(0xee01) setgid(r1) setresgid(0x0, r4, r3) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001180), 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x24, &(0x7f0000000180)="fd0cc085", 0x4) sendmsg(r5, &(0x7f0000000680)={&(0x7f0000000080)=@un=@abs={0x1}, 0xc, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="140000000000000024"], 0x5e}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x13, &(0x7f0000000000), 0x4) 212.65694ms ago: executing program 0 (id=52): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0084463, &(0x7f00000000c0)={0x8, 0xffeffffc, 0x8, 0x3, "c9f7550000000bca9853a4956b47c0d100", 0x7, 0x200}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x20}, 0x4, &(0x7f00000000c0)="48035d13934c", &(0x7f0000000080)=0x6, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x0}, 0x0, &(0x7f0000000100)="71f91e3471ac0078bc5a91501d94a34b8e5f84cf71e7c050e8c37082", &(0x7f0000000140)=0x1c, 0x0, 0x0) 151.516911ms ago: executing program 1 (id=53): sysctl$vm(&(0x7f0000000000)={0x2, 0x8}, 0x400000ea, 0x0, 0x0, 0x0, 0x54) r0 = kqueue() ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}]}) kevent(r0, &(0x7f0000000040), 0x96, &(0x7f00000003c0)=[{{}, 0x5, 0x1, 0x8, 0x6, 0x3}, {{r0}, 0xfffffffffffffff9, 0x8, 0x2, 0xd681, 0xb}], 0xfffa4961, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r1, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "201800", 0xfffffff9, 0x40000002}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, 0x0, 0x0) 139.732872ms ago: executing program 7 (id=54): openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x9, 0x3, 0x8fe, 0x4, 0x5, 0x3, 0x10, [{0xfffff000, 0x2, 0x6, 0x71800}, {0x3, 0x2000b7fe, 0x800002, 0x400000}, {0x100006, 0xc7, 0x208, 0x2}, {0x2, 0x80ff, 0x200, 0x5}, {0x10000, 0x3, 0x5, 0x7}, {0x2, 0x83, 0x14000009, 0xf}, {0x5, 0xbffffff9, 0x1, 0x6d}, {0x2400a, 0x3, 0xfdf0, 0x4}, {0x7, 0x6, 0x3, 0x9}, {0x401, 0x0, 0x8001, 0x7}, {0x401, 0xfff9, 0x48a, 0x13}, {0xcb, 0x2, 0x8, 0x8}, {0x2000df, 0x29, 0x5, 0x3ff}, {0x8, 0xfffffffc, 0xfffffff5, 0xffffffb8}, {0x6, 0x5, 0x26, 0x40000003}, {0xfffffffd, 0xd654, 0x3, 0x6}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x9, 0x3, 0x8fe, 0x4, 0x5, 0x3, 0x10, [{0xfffff000, 0x2, 0x6, 0x71800}, {0x3, 0x2000b7fe, 0x800002, 0x400000}, {0x100006, 0xc7, 0x208, 0x2}, {0x2, 0x80ff, 0x200, 0x5}, {0x10000, 0x3, 0x5, 0x7}, {0x2, 0x83, 0x14000009, 0xf}, {0x5, 0xbffffff9, 0x1, 0x6d}, {0x2400a, 0x3, 0xfdf0, 0x4}, {0x7, 0x6, 0x3, 0x9}, {0x401, 0x0, 0x8001, 0x7}, {0x401, 0xfff9, 0x48a, 0x13}, {0xcb, 0x2, 0x8, 0x8}, {0x2000df, 0x29, 0x5, 0x3ff}, {0x8, 0xfffffffc, 0xfffffff5, 0xffffffb8}, {0x6, 0x5, 0x26, 0x40000003}, {0xfffffffd, 0xd654, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socket(0x18, 0x3, 0x0) (async) r1 = socket(0x18, 0x3, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async) setuid(0xee01) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x144) chdir(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unveil(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='w\x00') (async) unveil(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='w\x00') ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x2, 0x800c1, 0xf, 0x0, 0x1040807, 0x50002, 0x0, 0x1, 0x0, 0x8, 0xf5fffffffffffff9}) r2 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) socket(0x2, 0x8000, 0x93) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) clock_getres(0x0, &(0x7f00000000c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x400000000000008d, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x54}, 0x400000000000008d, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f00000006c0)=0xbcff) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) madvise(&(0x7f00001cf000/0x4000)=nil, 0x4000, 0x1) ioctl$DIOCXROLLBACK(r0, 0xc0104453, &(0x7f0000000440)={0x3f80fe03f80fe3, 0x408, &(0x7f0000000740)=[{0x1, './file0\x00', 0x9}, {0x0, './file0\x00', 0xf}]}) (async) ioctl$DIOCXROLLBACK(r0, 0xc0104453, &(0x7f0000000440)={0x3f80fe03f80fe3, 0x408, &(0x7f0000000740)=[{0x1, './file0\x00', 0x9}, {0x0, './file0\x00', 0xf}]}) 106.289804ms ago: executing program 2 (id=55): openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000040)={0x1, 0x408, &(0x7f0000002480)=[{0x1, './bus/../file0/file0/../file0/file0/file0\x00', 0x74}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x4509) r0 = open(&(0x7f0000000300)='./bus\x00', 0x200, 0xa0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x100, &(0x7f0000000180)=[{{r0}, 0xffffffffffffffff, 0x13, 0x2}, {{r0}, 0xffffffffffffffff, 0x62}], 0x6, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DIOCXCOMMIT(r2, 0xc0104452, &(0x7f0000000040)={0x0, 0x40a, 0x0}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e, 0x0) ioctl$TIOCSETA(r3, 0xcd60441a, &(0x7f0000000280)={0x1, 0x2, 0x7, 0x2e, "2000030100010000000000000068a95a010400", 0x6, 0x3b8f}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) writev(r4, &(0x7f0000000b80)=[{&(0x7f0000000000)="8674793a7f867fd4705fb62958d9c6c18e8c6a133a9f4f80bf1dfd735ae2afd9e6aa9ee29c7cf5c88476efb8dd6fbf7010f7112c65e98912f0ec0e45f53853d36b6788000f52b0384a14b133339c7c4f304e3e3559804ac52ddd6f0228f84ea3fb51c007ada1b06211c9c87c78ee94fd76c89b5c82e9f93518d4c2c670baa72f03688a5dea846bb2449839b5533c7b7c062c67d8f24337c38d37925d022c5e8b69fe64717d9be16566efd070ee2db2e8361564303e492ebe5e22e4", 0xbb}, {&(0x7f00000000c0)="e750abd4edde6500f42055cbb04383f0dd7208afbe02a5b7129b5bf54fb78b5fdc76643a3cfe9dc208b1640f9a5a6c44196a2fb8508d95a71dbfc079f151811fed67c9df277be876778a4516c14873d949e43d1e6a0ac8ca93bc05dbea93cd337943d45fd87a52e332e3442ef98cb7d9cf19c5754ab912e2f0d1df4cd0735f2178809be40dab04a2a47cd3ea8ccade20", 0x90}, {&(0x7f0000000180)}, {&(0x7f00000001c0)="7718010ced423c93c0754756be6587a0eb5a3bc51fb9513a8491381ad895f32ece6cb82fd9b54bfd1b59b200c3768ae931878ec5d86e522c98235f41c0466119786d8bc368532996364307e2306ec01a19c6b26bd2954c23867488a0fc9c5c9549f5df87d4f81a80ad623db769d5f00a9ac9280c94a32c74cf268da617ffe4a18ada4b4e04992ce61d32acc25e084192f02c35a9a152e233bc290ca367f0f760c86f9bb344f6064dc7136e9ae9dd4a279b666b149ac7c08f54", 0xb9}, {&(0x7f0000000300)="ac95ff4275fef4a39228ba2e333b0c72956f1b3577620948d9be572a19877c40fca33348bcd446c8e121763ff39f94e3db9451205129f520498d15e77816bd3c22271ca492134caab00c4056f137db9ddc7a93a640f6ed726ba36b946c8736d5e22979c2403bdbfae21d2cac1c346a1ec576778fabc3343ca6c86d286cdbc9c3f7d5a3f0d3bb9a7eb2e7b44764ecf7cba94946706c29a6d6d819865c33b2", 0x9e}, {&(0x7f00000003c0)="6fa31a9a638ce0484198751bd51783f1bca30936f957f1519c74926e415fb480043172f494ff40e156699d2f7656900e", 0x30}, {&(0x7f0000000940)="26f58d90e63e4e7f2399aeb3efc6e033d627efc2e033afe45f1bb476a2cc6275fba9d501a21467f47a79fca5af4d0d8970c924c9377f02c51f3caf8e739a7465426a1f4a6f426c3d1e11ae15225372c1ec8afd653e2875e38af6fee07a39a2d00ac586aad77b7ce3830d09c39b2b21e7c76fe9b5993ade9607667d861b4aa2041b099e92c17255b4303b1c19bb47845c71d4b3f34e553739c7e6ca0b34baa3cba5721e1f28dcaae485eb4d2f94102f8a729b951489763ccd49e55b65a70580a79278376d693eb193687b53f824d002", 0xcf}, {&(0x7f0000000a40)="35931814ad47d17a08529db80f8f74d628ac99997b1c0653f0f019e4ea7276ee2930a69d9a90eb2142222b0aee63f98359d7af338301c18eb817d76fbad53cb2b8f6e30fd484c32a7cdf21afe0fafa8892c1582d563659e8bbb012fe61ab6ada31aafabc951456b831657a9f58", 0x6d}, {&(0x7f0000000ac0)="d6b86c64f4d1ecade2c68d583cfe3f8eb823e39b298a6fcbd30c1e63e662ed21339eb7215b320c979a65d172996a40a578caa1ddc844f6f2a7f2a0e553bd4e3384837d5aca33f6ea052a1c1b8d18030fad30bb7ba189ef3dadb188d77cfcbe7b1c8cb1a58051c04426c7af680260a0eb3a00419f1b9d8319ce28c4e63181b467bcdea19e5eb4e307217e8dc3aa13bbdf23e87aaa95a3cb4418", 0x99}], 0x9) ioctl$DIOCRGETASTATS(r4, 0xc0104454, &(0x7f00000004c0)={{'./file0\x00', './file0\x00', 0xa5, 0x10}, 0x0, 0x4, 0x0, 0x5, 0x0, 0x4, 0x7, 0x1a, 0x635e}) 80.393681ms ago: executing program 6 (id=56): mknod(&(0x7f00000000c0)='./bus\x00', 0x100, 0x33) mkfifo(&(0x7f0000000080)='./bus/file0\x00', 0x100) r0 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x80206919, &(0x7f0000000100)) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$BIOCLOCK(r2, 0x20004276) ioctl$BIOCGDLTLIST(r2, 0xc010427b, &(0x7f0000000180)={0x0, 0x0}) recvmsg(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000000)=@in6, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000300)=""/123, 0x7b}, {&(0x7f0000000180)=""/228, 0xe4}, {&(0x7f0000000280)=""/88, 0x58}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/26, 0x1a}, {&(0x7f00000018c0)=""/258, 0x102}, {&(0x7f0000001500)=""/90, 0x5a}, {&(0x7f0000001580)=""/77, 0x4d}, {&(0x7f0000001600)=""/160, 0xa0}], 0xa, &(0x7f0000001780)=""/225, 0xe1}, 0x803) closefrom(0xffffffffffffffff) ioctl$FIONREAD(0xffffffffffffffff, 0x2000747a, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RELDISP(r4, 0x20007604, &(0x7f0000000140)=0x2) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000001400)={0x8, &(0x7f0000000380)=[{0x9, 0x2, 0x58, 0xfffffbbf}, {0x22, 0x8, 0x8, 0x10001}, {0xe, 0x3, 0x1, 0x9}, {0xffff, 0x8, 0x7f, 0x6}, {0x0, 0xf5, 0x7, 0xf2}, {0xff8c, 0x5, 0x0, 0x2}, {0x6, 0x3, 0x9, 0xc6e4}, {0x101, 0x4, 0x9, 0xad}]}) 17.721122ms ago: executing program 0 (id=57): r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x2, 0x4) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) r1 = socket(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002ac0)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000029c0)=""/216, 0xd8}, 0x1}, 0x38, 0x801, &(0x7f0000002b00)={0x6, 0x6}) getrusage(0xffffffffffffffff, &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, &(0x7f0000000200)={{&(0x7f0000000000)=@un=@abs={0x3, 0x1, 0x0, 0x0}, 0x8, 0x0, 0x0, 0x0}}, 0x38, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0x4, "ffffffffffff00000000000000000001", 0x7}, 0x1c) getsockname$inet6(r0, 0x0, &(0x7f0000000100)) 13.996124ms ago: executing program 1 (id=58): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) 11.066498ms ago: executing program 2 (id=59): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) mkdir(&(0x7f0000000180)='./file0\x00', 0x119) mkdir(&(0x7f0000000280)='./file0/file0/..\x00', 0x0) chroot(&(0x7f0000000300)='./file0/file0/..\x00') setuid(0xffffffffffffffff) unveil(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000080)='c\x00') truncate(&(0x7f0000000000)='./file0\x00', 0xaffbb) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x20003916, 0xffffffffffffffff) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79ed) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x2812, r2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCGSTATS(r1, 0x4008426f, &(0x7f0000000180)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000340)}) mprotect(&(0x7f000063d000/0x3000)=nil, 0x3000, 0x5) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000080)={0x0, 0x3, 0xffffffffffffffff, 0x0, 0x10001}) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5, 0x0, 0xffffffffffffffff, 0x81) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000140)={0x4, &(0x7f00000000c0)=[{0x5, 0x3, 0x9, 0x9}, {0x8000, 0x81, 0x3, 0x3}, {0xd, 0x6, 0x2, 0x3}, {0x7, 0x3, 0x7a, 0xe}]}) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000340)={0x0, 0x0}) r4 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000002c0), 0x20, 0x0) r5 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r5, 0x20007461) r6 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x8108, 0x0) dup3(r6, r5, 0x0) mknod(&(0x7f0000000240)='./file0\x00', 0xc000, 0x1a) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) ioctl$WSKBDIO_GETENCODING(r4, 0x4004570f, &(0x7f0000000000)) socket(0x18, 0x2, 0x0) 2.7439ms ago: executing program 1 (id=60): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x44, 0x4, 0x1, 0x410}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) readv(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f00000007c0)=""/205, 0xcd}], 0x2) sendmmsg(r0, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x454}, 0x4008}, 0x38, 0x0) 1.477495ms ago: executing program 6 (id=61): r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) recvfrom(r0, &(0x7f0000000080)=""/210, 0xd2, 0x3041, 0x0, 0x0) getresuid(&(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, r5) r6 = socket$inet6(0x18, 0x2, 0x7) utimes(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{0x9, 0x6}, {0x2, 0x8}}) setuid(r3) r7 = open(&(0x7f0000000340)='./file0\x00', 0x80, 0x4b) getsockopt(r6, 0xe, 0x4, &(0x7f0000000380)=""/144, &(0x7f0000000440)=0x90) bind$inet6(r6, &(0x7f0000000480)={0x1c, 0x18, 0x3, 0x2, "e381a15a2355fc3882655c07d64e257d", 0x1}, 0x1c) fchmod(r0, 0x32) semget$private(0x0, 0x1, 0x400) r8 = socket$inet6(0x18, 0x0, 0x1) r9 = getthrid() r10 = openat$pci(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0xc) setsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f0000000540)={0xffffffffffffffff, r4, r12}, 0xc) rename(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00') semget$private(0x0, 0x3, 0x200) ioctl$TIOCSETA(r7, 0x802c7414, &(0x7f0000000600)={0xe65, 0x7224, 0x3, 0x2, "266826fef7375a00bee9692435cd9e9511b1de2b", 0x7, 0x7fffffff}) preadv(0xffffffffffffff9c, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/153, 0x99}, {&(0x7f0000000700)=""/108, 0x6c}, {&(0x7f0000000780)=""/27, 0x1b}, {&(0x7f00000007c0)=""/239, 0xef}], 0x4, 0xffff) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0x66, &(0x7f0000000900)={0x7, 0x1, 0xff, 0x1dfd, 0xffffffff}, 0xc) setsockopt$sock_int(r8, 0xffff, 0x1, &(0x7f0000000940)=0x8, 0x4) sendto$unix(r0, &(0x7f0000000980)="2ee4093c23c642e94aebf5f576c465ffee129daf9a990c5d4cbb2fb4c86b9ac1962dcdfb83af79b325c41b32a29ca671cc78e33967d021bca85b565f14bd5648cac4c795f7e1385d09ae8fbec81ab5de1ee009ea70da51d1c308733476a6f417337e136e", 0x64, 0x403, 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0x69, &(0x7f0000000a00)={{0x1c, 0x18, 0x3, 0x1, "669290fc9ff3907b955771d7d6526015", 0x4}, {0x1c, 0x18, 0x3, 0x9, "dfec2aa62abac9e98e678865ae785803", 0x5ae}, 0x5, [0x6, 0x5, 0x4, 0x4, 0x4, 0x1000, 0x9, 0xf]}, 0x5c) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x2810, r8, 0x3ff) execve(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000c00)=[&(0x7f0000000ac0)='.\x0f\x00', &(0x7f0000000b00)=',+\x00', &(0x7f0000000b40)='/dev/pci\x00', &(0x7f0000000b80)='/dev/pci\x00', &(0x7f0000000bc0)='*\',&\x00'], &(0x7f0000000cc0)=[&(0x7f0000000c40)='{\x00', &(0x7f0000000c80)='@\'\x00']) flock(r6, 0x2) sendmsg$unix(r0, &(0x7f0000001000)={&(0x7f0000000d00)=@file={0xe6, 0x1, './file0\x00'}, 0xa, &(0x7f0000000e80)=[{&(0x7f0000000d40)="0d9a79bd02f3709ce6e9bfa0ff6935d77ee03c33258eff1b41182039eef75840cf49bd6725a557f5", 0x28}, {&(0x7f0000000d80)="a327b9bedeea442ba7429f143436c72926eb729ffcab112b392da70389377ebe05f8239b90f8c476e5213f7a5f339b280d4d1ce8461635ce2b986a624c2d01ad86a6b1727959c7e336a9d635936164911d2f19f0936db2913b9c1157908b50ffcce0ca622cf66b45f6ceaeea963aaa69658c3fc638b2933c0889d0e07d8d824a5316c0f02b65c8b193bb62f39c0675047597e58729b9c3b8fe81ebba14f8402a2024941500845120c94fd609fd8a4d9d1d72efaadff929c50752d981d26c0351b997cb4d64ca337e76f81b7169e83147c8626eb87cab14598596387f54340d20b2f1c38b6a70d85e4153f9d5a9f9ef98", 0xf0}], 0x2, &(0x7f0000000f80)=[@cred={0x18, 0xffff, 0x0, r9, r3}, @cred={0x18, 0xffff, 0x0, r9, r1, r5}, @cred={0x18, 0xffff, 0x0, 0x0, r2, r12}, @rights={0x18, 0xffff, 0x1, [r10, r0, 0xffffffffffffff9c]}, @cred={0x18, 0xffff, 0x0, r11, r3}], 0x78, 0x4}, 0x402) 806.152µs ago: executing program 0 (id=62): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9) r0 = open(&(0x7f0000000480)='./file0\x00', 0x800, 0x4ebfac6bbaf7900) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc290560b, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000643000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000277000/0x1000)=nil, &(0x7f000029c000/0x4000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x101}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0xfff, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x9, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x2, 0x6, 0x6, 0x1, 0x2, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffe, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x2, 0x5, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x4, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0xb277, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x75, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0x200008, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x6, 0x5, 0xb, 0x4, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x1000, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x6, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x87, 0x48c, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0xfffffff8, 0x2, 0xe877, 0x5, 0xfffffffd, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad6, 0x5, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x7, 0xcb, 0x2, 0x719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe1a, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2d, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe40, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x3, 0x6, 0xe, 0xa6d, 0xfc46, 0x1ff, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0x4, 0x9, 0x7, 0x10, 0x8, 0x2, 0x5b3, 0x7ff, 0x9d1, 0x71f, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0xfd, 0x5, 0xff, 0x8, 0x7, 0x5, 0x4, 0xba]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DIOCRTSTADDRS(r0, 0xc0a86b05, &(0x7f00000004c0)={{'./file0\x00', './file0\x00', 0x40, 0x3}, 0x0, 0x9, 0x0, 0xd, 0x8d, 0x4, 0x1, 0xc, 0x3}) r1 = socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aa305daaaaa4d480d5968f290800455c001c0066000000019078ac1400bbe0000001240490784eba15b4410a140025714a4a6a58c2a30df2e2"]) bind$unix(r1, &(0x7f0000000080)=@file={0xe, 0x1, './file0\x00'}, 0xa) r2 = socket(0x1, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) ioctl$FIONREAD(r3, 0xc02069b6, &(0x7f00000001c0)) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$DIOCKILLSTATES(r2, 0x0, &(0x7f0000000b00)={{0x5, 0x2, 0x2}, 0x18, '\x00', 0x6, {@addrmask={@v6=@mcast2, @v6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x6}, [0x3c, 0x8001], 0x5, 0x4, 0xe77}, {@addrmask={@v6=@empty, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0x0, 0x0, 0x9}, [0x6a, 0xe], 0x0, 0x1, 0xb}, './file0\x00', './file0\x00', 0x6, 0xad38}) sendto$unix(r2, 0x0, 0x0, 0x400, &(0x7f00000003c0)=@file={0xb, 0x1, './file0\x00'}, 0xa) 0s ago: executing program 1 (id=63): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40}, 0x6205, 0x2a3, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x100000001, 0x40, 0x0, 0x6}) pipe(&(0x7f0000000140)) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f00000015c0)) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x26}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x26}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1a}, 0x4, &(0x7f00000000c0)="8b2ae9d5e1b71021d035", &(0x7f0000000180)=0xa, &(0x7f0000000200)="e790a6fa9bdf4ecc9a4d780f370b693b9c7ee964", 0x14) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts. panic: uvm_fault_unwire_locked: address not in maWpA RNSItNoGp:p eSPdL aNtOT LOWERED ON SYSCALL 91 -1623937208 EXI T 0 c db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *521808 5554 0 0 0x4000000 0 syz-executor 401651 57784 0 0x2 0 1 syz-executor db_enter() at db_enter+0x25 panic(ffffffff8350d8a2) at panic+0x1e5 uvm_fault_unwire_locked(fffff1806cd06200,2000003c0000,2000003cd000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff1806cd06200,2000003c0000,2000003d1000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff800030f9a2b8,2000003c04c0,10000,1,ffff8000333a3698) at uvm_vslock_device+0x112 physio(ffffffff827acd40,d02,0,ffffffff827ad570,ffff8000333a3978) at physio+0x257 spec_write(ffff8000333a37c0) at spec_write+0x11f VOP_WRITE(fffff18069dfd390,ffff8000333a3978,5,fffff180097fd270) at VOP_WRITE+0x101 vn_write(fffff180694422d8,ffff8000333a3978,0) at vn_write+0x1d3 dofilewritev(ffff800030f9a2b8,7,ffff8000333a3978,0,ffff8000333a3a30) at dofilewritev+0x2bd sys_write(ffff800030f9a2b8,ffff8000333a3ae0,ffff8000333a3a30) at sys_write+0xa2 syscall(ffff8000333a3ae0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe867e5cc6a0, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault_unwire_locked: address not in map ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8350d8a2) at panic+0x1e5 uvm_fault_unwire_locked(fffff1806cd06200,2000003c0000,2000003cd000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff1806cd06200,2000003c0000,2000003d1000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff800030f9a2b8,2000003c04c0,10000,1,ffff8000333a3698) at uvm_vslock_device+0x112 physio(ffffffff827acd40,d02,0,ffffffff827ad570,ffff8000333a3978) at physio+0x257 spec_write(ffff8000333a37c0) at spec_write+0x11f VOP_WRITE(fffff18069dfd390,ffff8000333a3978,5,fffff180097fd270) at VOP_WRITE+0x101 vn_write(fffff180694422d8,ffff8000333a3978,0) at vn_write+0x1d3 dofilewritev(ffff800030f9a2b8,7,ffff8000333a3978,0,ffff8000333a3a30) at dofilewritev+0x2bd sys_write(ffff800030f9a2b8,ffff8000333a3ae0,ffff8000333a3a30) at sys_write+0xa2 syscall(ffff8000333a3ae0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe867e5cc6a0, count: -13 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff8000333a33e0 rbx 0xffffffff838efe07 cpu_info_full_primary+0x2e07 rdx 0xffff80000160c480 rcx 0xffff800030f9a2b8 rax 0xffffffff838eeff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x48ef22489673601a r11 0x5d1b7599b67fb1da r12 0xffffffff838efc08 cpu_info_full_primary+0x2c08 r13 0 r14 0 r15 0x1 rip 0xffffffff8138f9c5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff8000333a33d0 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=521808 pid=5554 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=36, usrpri=86, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800030f9b248,0xffff800030f9da28 process=0xffff8000357b09c0 user=0xffff80003339e000, vmspace=0xfffff1806cd06200 estcpu=36, cpticks=5, pctcpu=0.0, user=0, sys=5, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 95628 259324 30362 0 2 0 syz-executor 95628 426635 30362 0 3 0x4000080 fsleep syz-executor 1147 425492 57784 0 2 0 syz-executor 1147 86613 57784 0 3 0x4000080 fsleep syz-executor 33169 369713 10875 -1 2 0x10 syz-executor 33169 328266 10875 -1 3 0x4000090 fsleep syz-executor 3103 227667 46423 60929 2 0x10 syz-executor 3103 516010 46423 60929 2 0x4000010 syz-executor 3103 254652 46423 60929 3 0x4000090 fsleep syz-executor 5554 217807 22978 0 2 0 syz-executor * 5554 521808 22978 0 7 0x4000000 syz-executor 5554 400487 22978 0 2 0x4000000 syz-executor 40401 148992 13289 0 2 0xc80 syz-executor 40401 139014 13289 0 3 0x4000080 kqsel syz-executor 40401 417958 13289 0 3 0x4000080 fsleep syz-executor 46423 6243 5306 0 2 0xc82 syz-executor 57784 401651 5306 0 7 0x2 syz-executor 22978 122893 5306 0 3 0x82 nanoslp syz-executor 13289 370665 5306 0 3 0x82 nanoslp syz-executor 10875 166564 5306 0 2 0xc82 syz-executor 30362 522670 5306 0 3 0x82 nanoslp syz-executor 5306 140342 96330 0 3 0x82 wait syz-executor 96330 405256 76752 0 3 0x10008a sigsusp ksh 76752 34744 3729 0 3 0x98 kqread sshd-session 3729 64734 38458 0 3 0x92 kqread sshd-session 29592 22005 1 0 3 0x100083 ttyin getty 38458 43812 1 0 3 0x88 kqread sshd 98425 226020 55694 74 3 0x1100092 bpf pflogd 55694 101175 1 0 3 0x80 sbwait pflogd 88316 322620 2598 73 3 0x1100090 kqread syslogd 2598 467178 1 0 3 0x100082 sbwait syslogd 24103 451444 1 0 3 0x100080 kqread resolvd 79113 50345 70508 77 3 0x100092 kqread dhcpleased 23834 405716 70508 77 3 0x100092 kqread dhcpleased 70508 287313 1 0 3 0x80 kqread dhcpleased 47490 310007 0 0 3 0x14200 bored smr 89218 374894 0 0 2 0x14200 zerothread 19993 51994 0 0 3 0x14200 aiodoned aiodoned 48962 46032 0 0 3 0x14200 syncer update 62005 139201 0 0 3 0x14200 cleaner cleaner 55956 499607 0 0 3 0x14200 reaper reaper 90375 135091 0 0 3 0x14200 pgdaemon pagedaemon 78052 8770 0 0 3 0x14200 bored viomb 47435 87167 0 0 3 0x40014200 acpi0 acpi0 65272 365591 0 0 3 0x40014200 idle1 35303 19613 0 0 3 0x14200 bored softnet1 53698 67533 0 0 3 0x14200 bored softnet0 70602 82422 0 0 3 0x14200 smrbar systqmp 6343 233752 0 0 3 0x14200 bored systq 57875 452794 0 0 3 0x14200 tmoslp softclockmp 45552 248928 0 0 3 0x40014200 tmoslp softclock 88589 22156 0 0 3 0x40014200 idle0 1 464391 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 1: exclusive mutex &sched_lock r = 0 (0xffffffff83a36468) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 wakeup_n+0x54 #3 uvm_pmr_freepages+0x3eb #4 uvm_anfree+0xe9 #5 amap_wiperange_chunk+0x1a6 #6 amap_pp_adjref+0x6d0 #7 amap_adjref_anons+0x22d #8 uvm_unmap_detach+0x8a #9 sys_munmap+0x329 #10 syscall+0xbd4 #11 Xsyscall+0x128 exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff83a36e38) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 uvm_pmr_freepages+0x1a8 #3 uvm_anfree+0xe9 #4 amap_wiperange_chunk+0x1a6 #5 amap_pp_adjref+0x6d0 #6 amap_adjref_anons+0x22d #7 uvm_unmap_detach+0x8a #8 sys_munmap+0x329 #9 syscall+0xbd4 #10 Xsyscall+0x128 Process 5554 (syz-executor) thread 0xffff800030f9a2b8 (521808) shared rwlock vmmaplk r = 0 (0xfffff1806cd06300) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_wire+0x116 #3 uvm_vslock_device+0x112 #4 physio+0x257 #5 spec_write+0x11f #6 VOP_WRITE+0x101 #7 vn_write+0x1d3 #8 dofilewritev+0x2bd #9 sys_write+0xa2 #10 syscall+0xbd4 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a9bb80) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 rw_do_enter_read+0x309 #4 uvmfault_lookup+0x122 #5 uvm_fault_check+0x4f #6 uvm_fault+0x106 #7 uvm_fault_wire+0x73 #8 uvm_vslock_device+0x112 #9 physio+0x257 #10 spec_write+0x11f #11 VOP_WRITE+0x101 #12 vn_write+0x1d3 #13 dofilewritev+0x2bd #14 sys_write+0xa2 #15 syscall+0xbd4 #16 Xsyscall+0x128 Process 5554 (syz-executor) thread 0xffff800030f9da18 (400487) exclusive rwlock amaplk r = 0 (0xfffff1806a6cc348) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 amap_unref+0x3d #3 uvm_unmap_detach+0x8a #4 sys_munmap+0x329 #5 syscall+0xbd4 #6 Xsyscall+0x128 Process 70602 (systqmp) thread 0xffff800045ffe298 (82422) shared rwlock systqmp r = 0 (0xffffffff83981ef8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11049 12224K 12416K 166960K 12199 0 pcb 20 12K 12K 166960K 41 0 rtable 193 6K 7K 166960K 371 0 pf 31 17K 21K 166960K 49 0 ifaddr 34 5K 7K 166960K 45 0 ifgroup 47 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 66 36K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 1489 0 iov 0 0K 0K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1298 82K 82K 166960K 1396 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 15 53K 85K 166960K 195 0 sigio 0 0K 0K 166960K 1 0 proc 74 131K 164K 166960K 559 0 subproc 63 3K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 12 0 in_multi 76 5K 7K 166960K 107 0 ether_multi 1 0K 0K 166960K 5 0 mrt 0 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 31 148K 148K 166960K 31 0 exec 0 0K 1K 166960K 387 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 216 150K 167K 166960K 3541 0 UVM aobj 5 2K 2K 166960K 5 0 pinsyscall 40 80K 100K 166960K 1353 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 16 0K 2K 166960K 28 0 temp 31 9114K 9190K 166960K 3954 0 kqueue 13 20K 22K 166960K 29 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 38 0 33 1 0 1 1 0 8 0 rtentry 176 112 0 27 6 0 6 6 0 8 1 unpcb 144 65 0 46 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 84 0 80 7 0 7 7 0 8 6 arp 136 18 0 4 1 0 1 1 0 8 0 inpcb 328 176 0 166 7 0 7 7 0 8 5 nd6 152 24 0 6 1 0 1 1 0 8 0 kcovpl 48 8 0 1 1 0 1 1 0 8 0 pfstscr 40 2 0 0 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 24 0 0 1 0 1 1 0 8 0 pfstkey 128 24 0 0 1 0 1 1 0 8 0 pfstate 448 23 0 0 3 0 3 3 0 8 0 pfrule 1360 22 0 16 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 459 0 50 29 0 29 29 0 8 1 art_table 40 460 0 50 5 0 5 5 0 8 0 art_node 32 112 0 21 1 0 1 1 0 8 0 semapl 72 2 0 0 1 0 1 1 0 8 0 shmpl 112 2 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1650 0 180 92 0 92 92 0 8 0 ffsino 296 1651 0 181 114 0 114 114 0 8 0 nchpl 144 1922 0 219 64 0 64 64 0 8 0 vnodes 216 1767 0 0 99 0 99 99 0 8 0 namei 1024 5804 0 5804 1 0 1 1 0 8 1 percpumem 16 51 0 2 1 0 1 1 0 8 0 kstatmem 264 27 0 4 2 0 2 2 0 8 0 scxspl 216 6878 0 6878 9 1 8 8 1 8 8 plimitpl 152 31 0 13 1 0 1 1 0 8 0 sigapl 424 512 0 466 6 0 6 6 0 8 0 knotepl 120 58 0 0 2 0 2 2 0 8 0 kqueuepl 224 31 0 21 1 0 1 1 0 8 0 pipepl 344 133 0 104 3 0 3 3 0 8 0 fdescpl 528 496 0 467 3 0 3 3 0 8 0 filepl 160 1864 0 1651 13 0 13 13 0 8 3 lockfpl 104 33 0 30 1 0 1 1 0 8 0 lockfspl 48 18 0 15 1 0 1 1 0 8 0 sessionpl 144 25 0 16 1 0 1 1 0 8 0 pgrppl 48 34 0 17 1 0 1 1 0 8 0 ucredpl 104 94 0 79 1 0 1 1 0 8 0 zombiepl 144 468 0 466 1 0 1 1 0 8 0 processpl 1232 512 0 466 5 0 5 5 0 8 0 procpl 664 603 0 548 6 0 6 6 0 8 0 sockpl 752 282 0 248 11 0 11 11 0 8 7 mcl64k 65536 6 0 0 1 0 1 1 0 8 0 mcl16k 16384 4 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 118 0 0 15 0 15 15 0 8 0 mcl2k 2048 24 0 0 3 0 3 3 0 8 0 mextrefs 64 27 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 191 0 0 12 0 12 12 0 8 0 bufpl 272 2379 0 105 152 0 152 152 0 8 0 anonpl 32 5491 0 0 45 0 45 45 0 247 0 amapchunkpl 152 10014 0 9590 24 0 24 24 0 158 4 amappl16 200 1842 0 1815 5 0 5 5 0 8 2 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 430 0 429 1 0 1 1 0 8 0 amappl13 176 126 0 114 1 0 1 1 0 8 0 amappl12 168 751 0 722 2 0 2 2 0 8 0 amappl11 160 8 0 7 1 0 1 1 0 8 0 amappl10 152 84 0 70 1 0 1 1 0 8 0 amappl9 144 271 0 271 1 0 1 1 0 8 1 amappl8 136 120 0 117 1 0 1 1 0 8 0 amappl7 128 147 0 134 1 0 1 1 0 8 0 amappl6 120 157 0 156 1 0 1 1 0 8 0 amappl5 112 104 0 94 1 0 1 1 0 8 0 amappl4 104 290 0 271 1 0 1 1 0 8 0 amappl3 96 1848 0 1749 4 1 3 4 0 8 0 amappl2 88 535 0 475 2 0 2 2 0 8 0 amappl1 80 10681 0 10078 15 0 15 15 0 8 1 amappl 88 2807 0 2663 4 0 4 4 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 0 1 0 1 1 0 8 0 uaddrrnd 24 496 0 467 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 496 0 467 1 0 1 1 0 8 0 vmmpekpl 168 6060 0 6026 2 0 2 2 0 8 0 vmmpepl 168 41002 0 39177 88 0 88 88 0 357 0 vmsppl 488 495 0 467 5 0 5 5 0 8 0 rwobjpl 80 15162 0 14160 23 0 23 23 0 8 0 pdppl 4096 999 0 934 93 12 81 81 0 8 16 pvpl 32 12424 0 0 101 0 101 101 0 265 0 pmappl 256 495 0 467 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 423 0 14 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff8350d8a2) at panic+0x1e5 uvm_fault_unwire_locked(fffff1806cd06200,2000003c0000,2000003cd000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff1806cd06200,2000003c0000,2000003d1000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff800030f9a2b8,2000003c04c0,10000,1,ffff8000333a3698) at uvm_vslock_device+0x112 physio(ffffffff827acd40,d02,0,ffffffff827ad570,ffff8000333a3978) at physio+0x257 spec_write(ffff8000333a37c0) at spec_write+0x11f VOP_WRITE(fffff18069dfd390,ffff8000333a3978,5,fffff180097fd270) at VOP_WRITE+0x101 vn_write(fffff180694422d8,ffff8000333a3978,0) at vn_write+0x1d3 dofilewritev(ffff800030f9a2b8,7,ffff8000333a3978,0,ffff8000333a3a30) at dofilewritev+0x2bd sys_write(ffff800030f9a2b8,ffff8000333a3ae0,ffff8000333a3a30) at sys_write+0xa2 syscall(ffff8000333a3ae0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xe867e5cc6a0, count: -13 ddb{0}> machine ddbcpu 1