last executing test programs: 4.109479287s ago: executing program 7 (id=124): openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000080)=[{0x24, 0x40, 0x6, 0x880}, {0x4, 0xb, 0x5, 0x2}, {0x206, 0x8c, 0x8, 0x7}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) pipe2(&(0x7f0000000100), 0x4) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@random="fb30c1c425b3", @remote, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @empty, @remote={0xac, 0x14, 0x0}, @local, @local={0xac, 0x14, 0x0}}}}}) r1 = syz_open_pts() sysctl$kern(&(0x7f0000000040)={0x1, 0x2}, 0x2, &(0x7f0000000180)="e99a409198", &(0x7f0000000140)=0x5, 0x0, 0x0) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000200)=0xb72) syz_open_pts() 3.769206585s ago: executing program 5 (id=129): syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f61184a00200601000000000900fffe0a00000000000000fe8000000000000000000000000000aa4e224e22fe089078cac7994a8602"]) 3.68053529s ago: executing program 5 (id=133): r0 = socket$inet(0x2, 0x3, 0x2) (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000029c0), 0x1, 0x0) (async, rerun: 32) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) (rerun: 32) ioctl$BIOCLOCK(r2, 0x20004276) (async, rerun: 64) ioctl$BIOCGRSIG(r2, 0x40044273, &(0x7f0000000000)) (rerun: 64) ioctl$DIOCGETRULES(r1, 0xcd604406, &(0x7f0000000080)={0x0, 0x6483, 0x8003, '\x00', './file0\x00', 0x0, "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"}) ioctl$DIOCXEND(r1, 0xc0044464, &(0x7f0000001a80)=0x1) (async) setsockopt(r0, 0x0, 0xe, 0x0, 0x0) 3.592770097s ago: executing program 7 (id=135): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0x80047308, &(0x7f0000001840)={0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff}) mkdir(&(0x7f0000000640)='./file0\x00', 0x40) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') chroot(&(0x7f0000000000)='./file1\x00') sysctl$net_inet6_icmp6(0x0, 0x0, &(0x7f0000000080)="232a30dd8a376583b075fa3a4bb394ad72da2c56454312b4af917df6e384776c89cebc6477c7cb5f0f5f171b201151", &(0x7f00000000c0)=0x2f, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x80) closefrom(r1) r2 = socket$inet6(0x18, 0x2, 0x0) getpeername$inet6(r0, &(0x7f0000000140), &(0x7f0000000180)=0x1c) getresgid(0x0, 0x0, &(0x7f0000000440)) bind$inet6(r2, &(0x7f0000000040)={0x1c, 0x18, 0x2, 0x0, "fffe0000000000000000008000", 0xfffffff5}, 0x1c) socket$inet(0x2, 0x2, 0x0) openat$pf(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x80, 0x8, 0x5, 0x9}, {0x30, 0x40, 0x4, 0x11}, {0x6, 0x5, 0xff, 0x9}]}) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[]) connect$inet6(r2, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x8a, "0a5be30e01a3d3d1793c1db58465282f", 0x308}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffe52) getresuid(0x0, &(0x7f0000000200)=0x0, 0x0) setresuid(0x0, 0x0, r7) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x7) r8 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCGETD(r8, 0x4004741a, &(0x7f0000000040)) setresuid(r7, r7, r6) setsockopt$sock_cred(r4, 0xffff, 0x1023, &(0x7f0000000000)={r5, r6}, 0xc) 3.466088142s ago: executing program 5 (id=139): munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) shmat(r0, &(0x7f0000000000/0x800000)=nil, 0x1000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, 0x10000000000e}) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) (async) shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000ffd000/0x3000)=nil) (async) shmat(r0, &(0x7f0000000000/0x800000)=nil, 0x1000) (async) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x9, 0x10000000000e}) (async) 3.339325539s ago: executing program 5 (id=141): socketpair(0x21, 0x3, 0x3, 0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) unveil(&(0x7f0000000100)='.\x00', &(0x7f00000000c0)='x\x00') writev(r0, &(0x7f0000000380)=[{&(0x7f0000000000)="661c", 0x2}], 0x1) syz_emit_ethernet(0x56, &(0x7f0000000040)=ANY=[@ANYRES32]) 3.338734026s ago: executing program 4 (id=142): mkfifo(&(0x7f00000020c0)='./file0\x00', 0x0) (async) recvmmsg(0xffffffffffffffff, 0xfffffffffffffffe, 0x38, 0x3001, &(0x7f0000001a80)={0x0, 0xb70}) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) ioctl$FIOASYNC(r0, 0xc0106924, &(0x7f0000000240)=0xc0000000) pselect(0xffffffffffffff16, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x14) r2 = syz_open_pts() syz_open_pts() (async) ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000000)={0x6, 0x0, 0xffffffc0, 0x4d, "9012b30900", 0x401, 0x956e}) (async) ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000040)={0x1, 0x80000001, 0x0, 0x243d, "f97b5ad1789696f95fe8f6da8c9ee54d5b26b292", 0xa, 0x3}) (async) ioctl$FIOASYNC(r1, 0xc0106978, &(0x7f0000000580)=0x7) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 3.33837083s ago: executing program 7 (id=143): r0 = semget$private(0x0, 0x4, 0x85) semop(r0, &(0x7f0000000000)=[{0x2, 0x3, 0x1800}, {0x1, 0xfffc, 0x1000}, {0x1, 0x7, 0x800}], 0x3) r1 = socket$inet(0x2, 0xade8ac586522c178, 0x6) r2 = setsid() setpgid(r2, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(0x0, 0xffffffffffffffff, r7) setregid(r7, r7) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0)={r2, r3, r7}, 0xc) socket$unix(0x1, 0x5, 0x0) semop(r0, &(0x7f0000001440)=[{0x0, 0x40, 0x1800}, {0x1, 0x5, 0x800}, {0x2, 0xa6}], 0x3) r8 = geteuid() setuid(r8) getgroups(0x2, &(0x7f0000000100)=[r4, r7]) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000140)={{r8, r9, r6, r4, 0x20, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, 0x5}) 3.337730578s ago: executing program 4 (id=144): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSDIRFILT(r1, 0x8004427d, &(0x7f0000000080)=0x5) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0x135, &(0x7f0000000200)={@local, @local, [], {@ipv6={0x86dd, {0xf, 0x6, '\x00,\x00', 0xff, 0x6, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x0, 0x0, 0x59}, {"faf7e20b73c1408362da7e33afbbc5163a6f99c99896c2bea3a490d0a2ea9e2e5e40c8f86bf3c64e9c483a8102450ccac98f5d779487c149d39be0d2d4d6eb77739d9e6fbba43b7c8b7890885f4a3269dabef155f6515929a45861a5f769a49e7b4e4879e17ee3bd9f7826bedf54d68393098164b219cb92d52a52edb9bb840c177d67e74b12a5b3ea785933929b6af551be7ea58acc3060d711607998d0fd190f55b5029f8f545089ec4267d5d8fdfd73f62bdb7d775d2c4bf18dcb31bd40294265f89485d0383292fca31421c1e099fa8ba69a19140839143f34245c311cbba32fd66e7c390ba9bb87d0"}}}}}}}) 3.242156375s ago: executing program 4 (id=145): msgrcv(0x0, 0x0, 0x0, 0x2, 0x0) msgctl$IPC_STAT(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000001500)=@file={0x4, 0x1, './file0\x00'}, 0xa) ioctl$DIOCGETRULES(0xffffffffffffffff, 0xcd604406, &(0x7f0000001ec0)={0x5, 0x6, 0x6, './file0\x00', './file0\x00', 0x0, "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"}) r2 = socket$inet6(0x18, 0x3, 0x7) recvmmsg(r2, &(0x7f0000000000)={{0x0, 0x0, &(0x7f00000026c0), 0x1000000000000161, 0x0}, 0xa}, 0x38, 0x1040, 0x0) seteuid(0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, 0x0) r3 = openat$bpf(0xffffffffffffff9c, 0x0, 0x40, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @random="a057f7311c14", [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x1c, 0x68, 0x0, 0x6, 0xff, 0x0, @loopback, @remote={0xac, 0x14, 0x0}}, @generic="83f21b9371d67a17"}}}}) r4 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x80, 0x0) ioctl$VNDIOCSET(r4, 0xc0384600, &(0x7f0000002b00)={0x0, 0x5, 0x0}) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000000)={0x104, 0xec49, 0x4, 0xb17b, "a61fa4ed8d3b13ca001a38f1a2dcaba77900", 0x6, 0x14}) sysctl$kern(&(0x7f0000000000)={0x1, 0x3f}, 0x7, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6f75184a00403a0000d5e6b7b40700000200001a00000000fe8000000000000000000000000000aa030090780f0000006800000000642c32d87c98be9a00000000000000000000aafe8000000000000000000000000000aa3a00035966", @ANYRESOCT=0x0, @ANYRES32=r2, @ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC=r3]) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) getpeername(r0, 0x0, &(0x7f0000001e80)) 3.239580156s ago: executing program 2 (id=147): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) fchown(r1, 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_pts() r3 = dup2(r2, r2) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01864c1, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x9}) ioctl$WSMOUSEIO_GETPARAMS(r4, 0x80105727, &(0x7f0000000100)={&(0x7f00000000c0)=[{0x8f, 0x1ff}, {0x0, 0xe}, {0x3, 0x771}], 0x3}) munmap(&(0x7f0000000000/0x9000)=nil, 0x9000) fcntl$lock(r3, 0x7, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) closefrom(r0) getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt(r7, 0x0, 0x1e, &(0x7f0000000100)="9a355644", 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r8, 0xffff, 0x4, 0x0, 0x0) setresgid(0x0, r5, r6) getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(0x0, 0x0, r9) syz_emit_ethernet(0x0, 0x0) 3.138560305s ago: executing program 6 (id=13): r0 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) r1 = socket$inet(0x2, 0x8003, 0x1) (async) sendto$inet(r0, &(0x7f0000000300)="aae954a88e29df81cbd0e915ed80a91b97dcbd1130662116f883dbee276341f05ddb217dc5e1877a6b93e175c4286b354ad429dd56ff956056c2620a0ad384cfdd41e98681f136b87641db2a3d0c2dd1ca56891b315e2ed3398eaf7fed7c6b61cad51bc13522df152e563f40f5d05099eb17fb6f22c3aa2a00a8d2491ecf6d8f9bb446b8d075d46650e151f967d7fe31f76a857926f3f86a", 0x98, 0x1, &(0x7f00000003c0)={0x10, 0x2, 0x0, 0x511}, 0x10) getsockopt(r1, 0x0, 0x3, 0x0, 0x0) closefrom(r1) (async) setitimer(0x2, &(0x7f0000000080)={{0x10000006, 0xa2b}, {0x112d, 0x40000000}}, 0x0) (async) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x80, 0x3c) (async) r3 = socket$inet6(0x18, 0x3, 0x7) setsockopt(r3, 0x29, 0x39, 0x0, 0x51) (async) r4 = getpgrp() pselect(0x40, &(0x7f0000000280)={0x7c, 0x1, 0xcdf, 0x1000, 0x1, 0x7, 0x85, 0xfffffffffffff5ed}, &(0x7f0000000400)={0x1, 0xffffffffd5e28b25, 0x4, 0x9a5d, 0xfffffffffffffffd, 0x7ff, 0x0, 0x9}, &(0x7f0000000440)={0x10, 0x8001, 0x899, 0x8, 0x7, 0x9, 0x10, 0x5}, 0x0, 0x0) r5 = getuid() (async) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000240)={r4, r5, r6}, 0xc) (async) closefrom(0xffffffffffffffff) (async) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) (async) r7 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r7, 0x80105727, &(0x7f0000000080)={&(0x7f00000000c0)}) (async) socket$inet(0x2, 0x8000, 0x0) (async) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') 2.925167599s ago: executing program 0 (id=150): syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f61184a00200601000000000900feff0a00000000000000fe8000000000000000000000000000aa4e224e22fe089078cac7994a8602"]) 2.92312124s ago: executing program 2 (id=151): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r0, 0x80245753, &(0x7f0000000040)={0x909aa78b, './file0\x00', './file0\x00'}) syz_emit_ethernet(0x73, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6f15184a003d3a017e000000fe000000000017000000000054cd318c7e7974600108f43a1bc1bc6a84"]) 2.377015961s ago: executing program 0 (id=152): socket$inet(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004200)={0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0xe6a, "ff05483cfa51e0a206ea57f900", 0x8}, 0x1c) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000000)={0x3, 0x5, r0}) sysctl$kern(&(0x7f0000000000)={0x1, 0x27}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x32}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) 2.376715355s ago: executing program 2 (id=153): setresuid(0x0, 0x0, 0xffffffffffffffff) (async) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x1000000}, 0x3, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000040)={@empty, @remote, [{[{0x88a8, 0x1, 0x0, 0x2}], {0x8100, 0x5, 0x0, 0x2}}], {@ipv6={0x86dd, {0x9, 0x6, "a0e6ef", 0x14, 0x3, 0x40, @mcast2, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x0, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x80, 0x13, 0x0, 0xe55}}}}}}}) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000a80)={0xffffffffffffffff}) ioctl$BIOCGDIRFILT(r2, 0x80047476, &(0x7f0000000080)) (async) sendmmsg(r1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x210, 0xffff, 0x1, "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"}], 0x210}}, 0x38, 0x406) (async) ioctl$DIOCGETSTATES(r0, 0xc0104419, &(0x7f00000000c0)={0x9, &(0x7f0000000ac0)=[{0x0, ""/16, [{[@v6=@remote, @v4=@loopback]}, {[@v4=@multicast2, @v6=@mcast1]}], {}, {}, @v4=@multicast1}, {0x0, ""/16, [{[@v6=@mcast2, @v4=@broadcast]}, {[@v6=@mcast1, @v4=@multicast2]}], {}, {}, @v6=@ipv4={""/10, ""/2, @rand_addr}}, {0x0, ""/16, [{[@v6=@loopback, @v6=@ipv4={""/10, ""/2, @loopback}]}, {[@v6, @v6=@remote]}], {}, {}, @v6=@mcast2}, {0x0, ""/16, [{[@v4=@multicast1, @v6=@ipv4={""/10, ""/2, @local}]}, {[@v4, @v4=@multicast2]}], {}, {}, @v6}, {0x0, ""/16, [{[@v4=@multicast1, @v6=@local]}, {[@v6=@remote, @v6]}], {}, {}, @v6}, {0x0, ""/16, [{[@v4, @v6=@remote]}, {[@v6=@ipv4, @v6]}], {}, {}, @v6=@remote}, {0x0, ""/16, [{[@v4=@broadcast, @v6]}, {[@v6=@remote, @v4=@loopback]}], {}, {}, @v4=@rand_addr}, {0x0, ""/16, [{[@v4=@remote, @v4=@multicast2]}, {[@v4=@remote, @v6=@loopback]}], {}, {}, @v6=@ipv4={""/10, ""/2, @local}}, {0x0, ""/16, [{[@v4=@broadcast, @v6=@local]}, {[@v4=@remote, @v4=@rand_addr]}], {}, {}, @v6}]}) 2.374355109s ago: executing program 4 (id=155): minherit(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) r0 = kqueue() mquery(&(0x7f0000fe9000/0x14000)=nil, 0x14000, 0x0, 0x10, r0, 0x9) munmap(&(0x7f0000fea000/0x4000)=nil, 0x4000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x49a, 0x8) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, r3) pwrite(r0, &(0x7f0000000180)="6a032c1064cec85aada0da5d791064abf2a2f00da5a5ee1bb1907ce2677b7ca7956fa7d783f27dbcc6958157b04ac59229d6023ea46c708c6e22116c564124fc71b1bbab68bb8d775a84a88c06200d65510678282f2b45518f2837c63ea62f94c805cf3410b53b9306cee879bb354530c0", 0x71, 0x401) mquery(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x2, 0x0, r0, 0x53d6) recvfrom$unix(r1, &(0x7f0000000200)=""/229, 0xe5, 0x801, 0x0, 0x0) r4 = shmget(0x0, 0x3000, 0x84, &(0x7f0000fe8000/0x3000)=nil) fstatat(r1, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) r7 = getppid() r8 = getpgrp() shmctl$IPC_SET(r4, 0x1, &(0x7f00000003c0)={{r5, r3, r2, r3, 0x101, 0x2fae, 0x0, 0x0, 0x6}, 0xe3, r7, r8, 0x3, 0x0, 0x8, 0x1, 0x77e3, 0x3, 0xff, 0x83c}) fcntl$lock(r1, 0x9, &(0x7f0000000440)={0x2, 0x0, 0xeb1, 0x6, r8}) ioctl$VMM_IOC_CREATE(r1, 0xca605601, &(0x7f0000000480)={0x10, 0x5, [{&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, 0x4}, {&(0x7f0000af0000/0x14000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x79}, {&(0x7f0000d89000/0x4000)=nil, &(0x7f0000952000/0x4000)=nil, 0x7ff}, {&(0x7f0000a3b000/0x3000)=nil, &(0x7f0000b9b000/0x4000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000f59000/0x4000)=nil, 0x1ff}, {&(0x7f0000c4d000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x4}, {&(0x7f0000e9c000/0x2000)=nil, &(0x7f00006f0000/0x3000)=nil, 0x2}, {&(0x7f00008a2000/0x1000)=nil, &(0x7f0000df0000/0x3000)=nil, 0x6}, {&(0x7f000075a000/0x1000)=nil, &(0x7f000071b000/0x1000)=nil, 0x9}, {&(0x7f0000887000/0x3000)=nil, &(0x7f0000bbf000/0x1000)=nil, 0x8}, {&(0x7f0000a52000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x7ff}, {&(0x7f0000b24000/0x3000)=nil, &(0x7f0000cf0000/0x3000)=nil, 0x7}, {&(0x7f00008da000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x9}, {&(0x7f00005e5000/0x2000)=nil, &(0x7f0000827000/0x2000)=nil, 0x3}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f00007e3000/0x2000)=nil, 0x82}, {&(0x7f0000850000/0x1000)=nil, &(0x7f0000796000/0x1000)=nil, 0xfffffffffffffccb}], './file0\x00', 0x3, 0xa276, 0xec1c, 0x8, [0xffffffff, 0x6, 0x4, 0x2, 0x9, 0xc3d, 0x2, 0x8001, 0x0, 0x10000, 0x2, 0x4, 0x100000, 0x1000, 0x5, 0x2, 0x7fffffff, 0x7, 0x8000, 0x9, 0x6000000, 0x2, 0x2, 0x7f, 0x7fffffff, 0x0, 0xfc1b, 0x5, 0x2, 0x1, 0x800, 0x2, 0x5, 0x9, 0x1, 0x2, 0x4, 0x0, 0x5d13, 0xffff7fff, 0x7, 0x1, 0x3ff, 0x15, 0x5, 0xe, 0x2, 0x6, 0x3, 0x0, 0x3, 0x8, 0x3ff, 0x8000, 0xf6, 0xd92, 0x4, 0x3, 0x0, 0xf, 0x6, 0xb3, 0x0, 0x10000, 0x48, 0x4, 0xe, 0x8, 0xf0, 0x8, 0x8, 0xc, 0x3, 0x101, 0x7ff, 0x5, 0x7, 0xffffffff, 0x6318, 0xffff0001, 0x34ba, 0x9, 0x8, 0x4, 0x9, 0x7d6f, 0x947, 0x10001, 0xe8e, 0x4, 0xfffffffd, 0x2, 0x7, 0x8, 0x4, 0x0, 0x1, 0x0, 0x4, 0x4, 0x1, 0x0, 0xcbc, 0x5b, 0x80000000, 0x5, 0x1, 0xfff, 0xb, 0xfffffff9, 0x4, 0x3, 0x7, 0x0, 0x6, 0x1, 0x4, 0x7, 0xb, 0x4, 0x7, 0x9, 0x99c, 0xffffff93, 0x7, 0x4, 0x1, 0x18, 0x1, 0x5, 0x7fffffff, 0x7, 0xbfed, 0x2, 0x80000001, 0x1, 0x8001, 0x5, 0x5, 0xffffffff, 0x0, 0x5, 0x0, 0x4135b4a7, 0x3, 0x4, 0x8, 0xfffffff1, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x1, 0x5, 0x8, 0x3, 0x3, 0x4, 0x0, 0x6, 0x7f, 0x100, 0x7, 0x4, 0x7ff, 0x1, 0xfffeffff, 0x4, 0x1, 0x6, 0x8, 0xa, 0xff, 0xffffffff, 0x20000, 0x89, 0x2, 0x6, 0x9, 0x4, 0x3, 0x6, 0x7daa, 0x8, 0x7b39, 0x40, 0x9, 0x0, 0x4, 0x80000000, 0x5, 0x1, 0x7, 0x6, 0x7ff, 0x80000001, 0x2, 0x9bbc, 0x6, 0x9, 0x3, 0x4, 0x833, 0xfffffff9, 0x675f, 0xc6, 0x3, 0x81, 0x4, 0x7f, 0x1, 0x101, 0x5, 0x9, 0x8001, 0x4, 0xfffffffd, 0x40, 0x7, 0x1, 0x400, 0x6, 0x9, 0x8, 0xfff, 0x7, 0x80000001, 0x6, 0x5b85, 0x10001, 0x8, 0x5, 0x8, 0x7, 0x1, 0x864, 0x9, 0x6, 0x4, 0x9, 0x7, 0x7, 0xf9d9, 0xa, 0xa, 0xfff, 0x5, 0x1ff, 0x0, 0x4, 0x5, 0x8c, 0x2, 0x7, 0x67c00, 0xe5, 0x3, 0x9, 0x9, 0x10, 0x400, 0x6, 0x4, 0x3ff, 0xe, 0x40, 0x5, 0x6, 0x1, 0x480000, 0x4, 0x4, 0x7, 0x8, 0xa61, 0x954, 0x98, 0x0, 0x1, 0x400, 0xfffff625, 0x1, 0x8d, 0xfffffffc, 0x80, 0xfc, 0xec4, 0x8, 0x6, 0x2, 0x8, 0x1, 0x7, 0x45dc60f, 0x8, 0x1, 0xffff, 0x5, 0x1, 0x2, 0x1000000, 0x4, 0x0, 0x1fffe00, 0x6, 0x81, 0x2, 0x1, 0x3ff, 0x7, 0x9, 0x7, 0x8, 0x9, 0x2, 0xfffff4c3, 0x1, 0x17f, 0x4, 0x8, 0x3b, 0xe28, 0x7, 0x3, 0x80000000, 0x1000, 0xb7a, 0x1, 0x80000000, 0x2a3, 0x80000000, 0x0, 0xfffffffb, 0x8, 0x69d7, 0x30, 0x5228, 0x2, 0x1, 0xfffffff7, 0x1ff, 0x100, 0x8, 0x8, 0xf, 0x1, 0xc4, 0x1012584f, 0x200, 0x40b00258, 0xc, 0x7f, 0x8, 0x9, 0xffffffff, 0xfff, 0x8, 0xc078, 0x5, 0x10000, 0xe27e, 0x4, 0x2, 0x1000, 0x15, 0x3, 0x7, 0x3, 0x400, 0x4, 0x3, 0x7, 0x7, 0xcc7a, 0x80000001, 0x1, 0x9, 0xc, 0xfffffff9, 0xfffffffc, 0x7, 0xfffffffe, 0x9, 0x0, 0x1, 0x4, 0x7fffffff, 0x5, 0x9, 0xf173, 0x3b0, 0x4, 0x9, 0x2, 0x404, 0x6e, 0x1, 0x5, 0x48c7, 0x7fff, 0x7fffffff, 0x4d8, 0x7b7f8a2f, 0x10001, 0x10000, 0x5, 0x8, 0x8001, 0x2, 0xb, 0xffffffff, 0x80, 0x3, 0x3f8, 0x3d, 0xd8, 0x0, 0x2, 0x0, 0x0, 0x4, 0xc, 0x7, 0x3, 0x1, 0x7a16, 0x40, 0x7, 0x24, 0x81, 0x5, 0x800, 0x40, 0x1000, 0x4, 0x7, 0x6, 0x64, 0x80000001, 0x4eab, 0xc, 0x9, 0x3, 0x0, 0x8, 0x1, 0x6, 0x6, 0x7, 0x0, 0x9, 0x6, 0x80, 0x8, 0x3, 0x1000, 0x3, 0x993, 0x128, 0x10, 0x1, 0x9798, 0x545, 0x5, 0x81, 0x6, 0x1, 0x10001, 0x9, 0x8, 0xc46d, 0x800, 0x0, 0x200, 0x401, 0x7, 0x10, 0x1000, 0xdb, 0x0, 0x3, 0x7, 0x3, 0x8, 0x3, 0x2, 0x0, 0x8, 0x9, 0xf8000000, 0x1, 0x6bf2, 0xfffffffa, 0x100, 0x1ffd, 0x9, 0x80000001, 0x2b6, 0x0, 0x80, 0x81, 0x7f, 0xffff, 0xe375, 0x3, 0x1, 0x7, 0x4, 0x101, 0x10, 0x8]}) fchownat(r1, &(0x7f0000000e80)='./file0\x00', r5, r6, 0x2) getresgid(&(0x7f0000000ec0), &(0x7f0000000f00), &(0x7f0000000f40)) acct(&(0x7f0000000f80)='./file0\x00') r9 = socket$inet6(0x18, 0x68ae3329978b488c, 0xd5) ioctl$VNDIOCGET(r1, 0xc4104603, &(0x7f0000000fc0)={'./file0\x00', 0x200, 0x10000, 0x5}) connect$inet6(r9, &(0x7f0000001400)={0x1c, 0x18, 0x1, 0x8, "90de62c8ccccd9eeac841488c255eaee", 0x4}, 0x1c) shmget$private(0x0, 0x2000, 0x1, &(0x7f000079f000/0x2000)=nil) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000001480)={0x2, &(0x7f0000001440)=[{0x1, 0x0, 0x1, 0x8}, {0x4, 0x46, 0xf, 0xff}]}) r10 = openat$pf(0xffffffffffffff9c, &(0x7f00000014c0), 0x10000, 0x0) ioctl$DIOCRGETTABLES(r10, 0xc450443f, &(0x7f0000001d80)={{'./file0\x00', './file0\x00', 0x20, 0x9}, &(0x7f0000001500)=[{'./file0\x00', './file0\x00', 0x8, 0x6}, {'./file0\x00', './file0\x00', 0x8, 0x2}], 0x8, 0x2, 0x6, 0x9, 0x6, 0x6, 0x14, 0x7}) r11 = openat$vnd(0xffffffffffffff9c, &(0x7f0000002200), 0x80, 0x0) dup(r11) 2.372661117s ago: executing program 5 (id=156): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) closefrom(r2) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) syz_open_pts() ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x80000000, 0x5, 0x1, 0x494, "2feac1b1549b00", 0x0, 0x6}) sysctl$kern(&(0x7f0000000000)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x801007, 0x8, 0x7, 0xd13, "fe7432cc0f81b9487a92ffffffff7fffffff00", 0x95, 0x10001}) write(r1, &(0x7f0000000040)="7ef5ffff00", 0x5) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000140)=[0x8, 0x3f00, 0x10], &(0x7f0000000180)=[0x4, 0xc000, 0x7, 0x2, 0x751a], &(0x7f00000001c0)=[0x0, 0xfffb, 0x3, 0x7, 0x1, 0x8, 0x8, 0xfb]}) sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x0, &(0x7f0000000040)="8dbb19ab", &(0x7f0000000240)=0x4, &(0x7f00000000c0)="4e1eba61", 0x4) openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async) syz_open_pts() (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) closefrom(r2) (async) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) (async) syz_open_pts() (async) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0x80000000, 0x5, 0x1, 0x494, "2feac1b1549b00", 0x0, 0x6}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) (async) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x801007, 0x8, 0x7, 0xd13, "fe7432cc0f81b9487a92ffffffff7fffffff00", 0x95, 0x10001}) (async) write(r1, &(0x7f0000000040)="7ef5ffff00", 0x5) (async) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000140)=[0x8, 0x3f00, 0x10], &(0x7f0000000180)=[0x4, 0xc000, 0x7, 0x2, 0x751a], &(0x7f00000001c0)=[0x0, 0xfffb, 0x3, 0x7, 0x1, 0x8, 0x8, 0xfb]}) (async) sysctl$vm(&(0x7f0000000000)={0x2, 0x9}, 0x0, &(0x7f0000000040)="8dbb19ab", &(0x7f0000000240)=0x4, &(0x7f00000000c0)="4e1eba61", 0x4) (async) 2.314446147s ago: executing program 7 (id=157): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x672) (async) r0 = kqueue() (async) pipe2(&(0x7f0000001880)={0xffffffffffffffff}, 0x4) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000004800)=0xf06) closefrom(r0) r2 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0x0) ioctl$TIOCFLUSH(r2, 0x80047410, &(0x7f0000000040)=0x6) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, &(0x7f00000000c0)='\x00\x00\x00\x00', 0x4) sysctl$net_inet_ipcomp(&(0x7f0000000040)={0x4, 0x2, 0x6c, 0x1}, 0x56, 0x0, 0x0, 0x0, 0x0) 2.161599162s ago: executing program 1 (id=158): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5d42) unlink(&(0x7f00000000c0)='./file0/file0\x00') mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = socket$inet6(0x18, 0x3, 0x7) getsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffedd) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ioctl$FIOASYNC(r1, 0x8020690c, &(0x7f0000000580)=0x7) 2.161031008s ago: executing program 0 (id=159): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000005240), 0x2, 0x0) ioctl$DIOCIGETIFACES(r0, 0xc0284457, &(0x7f0000000200)={'.\x00', &(0x7f0000000140)=""/119, 0x100, 0x1000, 0xff, 0x1a3}) ioctl$DIOCGETQUEUES(r0, 0xc148445e, &(0x7f00000001c0)={0x1, 0x3, {'\x00', './file0\x00', './file0\x00', './file0/file0/fi', {{0x5, 0x3}, {0x6, 0x7fffffff}, 0x2f12e68f}, {{0x2, 0x2}, {0x1, 0x3}, 0x3ff}, {{0x800, 0x5}, {0x7, 0x5}, 0x5}, {0x8001, 0x3, 0x1, 0x5}, 0x0, 0x4, 0x8001, 0x10, 0x3}}) r1 = socket$inet6(0x18, 0x3, 0x7) ioctl$FIOGETOWN(r1, 0x40047477, &(0x7f0000003d00)) mkdir(&(0x7f0000000180)='./file0\x00', 0x2) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$DIOCCLRSTATUS(r2, 0xc0284416, &(0x7f0000000100)={'./file0/file0\x00', &(0x7f0000000040)=""/154, 0x1, 0x9, 0x7fff, 0x140}) mknod$loop(&(0x7f0000000600)='./file0/file0\x00', 0x1000, 0x1) 2.159655023s ago: executing program 7 (id=160): r0 = socket$inet(0x2, 0x3, 0x14) munmap(&(0x7f00000cf000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt(r2, 0x0, 0x6b, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r4, 0xffff, 0x1022, 0xfffffffffffffffe, &(0x7f0000000100)=0x63) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = fcntl$getown(r2, 0x5) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000340)={r5, 0x0, r6}, 0xc) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0]}) r8 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) fcntl$setown(r8, 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) truncate(&(0x7f0000000000)='./file0\x00', 0x88100) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x128) unveil(0x0, 0x0) setsockopt(r3, 0x10001, 0x81, &(0x7f0000000380)="bd1f668702f24322b9c68633673f52df662318aa2cb818e475f2005c2df06e6bb49d4b38af0b038716c5048f4d0404b838732928d83b9fa951e4aeec2d6abe85ddd5146683c880ef08cb7cd602bbc17d5a15c5d696a9ebb167532b949aae4b9c94b5ee47", 0x64) writev(r9, &(0x7f0000000540)=[{&(0x7f0000000180)="19a09f0a20", 0x100000}], 0x1) setitimer(0x0, &(0x7f0000000080)={{0x6, 0x200}, {0x0, 0x7}}, 0x0) mprotect(&(0x7f00000cf000/0x2000)=nil, 0x2000, 0x4) getitimer(0x0, &(0x7f0000000000)) getresuid(0x0, &(0x7f0000000040), &(0x7f0000000080)) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000180)="19a09f0a20", 0x100000}], 0x1) r10 = socket$inet(0x2, 0x71f9370b7dcd0c40, 0x2) setsockopt(r10, 0x0, 0x24, &(0x7f0000000100), 0x0) ioctl$FIOASYNC(r0, 0xc0206981, &(0x7f0000000080)=0x3005) closefrom(r0) 2.15928012s ago: executing program 5 (id=161): getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r3 = accept$unix(0xffffffffffffff9c, &(0x7f00000002c0)=@abs, &(0x7f0000000300)=0x8) setsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000340)={r0, r1, r2}, 0xc) kill(r0, 0x2) r4 = socket$inet6(0x18, 0x8003, 0x4) r5 = socket$unix(0x1, 0x2, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='r\x00') r6 = kqueue1(0x0) r7 = accept(r4, 0x0, &(0x7f00000001c0)) fcntl$lock(r6, 0x7, &(0x7f0000000280)={0x0, 0x2, 0x80, 0x7f, r0}) sendmsg$unix(r5, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x4, 0x0, './file0\x00'}, 0xa, &(0x7f0000000180)=[{&(0x7f00000000c0)="e1b31f68e151511f36670ee598fe43188d9d4f8701252c7e3e2ae1ef2b2bf18516d938fe7a310026019e43c651cc61048498ae84f49ab162b60b8178cc97af891403716c8fb0f8c3e6390240d575ada3d98e4ca2c3520e50bd328cce3c314c63d4c30625398248144543d96f75a7c6cdee7822336fd55228f09ed152733cc2ef3a08f849bfb062290fb05aabe565361ce42788ff59234a41", 0x98}], 0x1, &(0x7f0000000200)=[@rights={0x1c, 0xffff, 0x1, [r4, r4, r4, r6]}, @rights={0x18, 0xffff, 0x1, [r4, r7, r4]}], 0x34, 0x3}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x3a, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f0000000000)=0xc) (async) accept$unix(0xffffffffffffff9c, &(0x7f00000002c0)=@abs, &(0x7f0000000300)=0x8) (async) setsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000340)={r0, r1, r2}, 0xc) (async) kill(r0, 0x2) (async) socket$inet6(0x18, 0x8003, 0x4) (async) socket$unix(0x1, 0x2, 0x0) (async) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='r\x00') (async) kqueue1(0x0) (async) accept(r4, 0x0, &(0x7f00000001c0)) (async) fcntl$lock(r6, 0x7, &(0x7f0000000280)={0x0, 0x2, 0x80, 0x7f, r0}) (async) sendmsg$unix(r5, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x4, 0x0, './file0\x00'}, 0xa, &(0x7f0000000180)=[{&(0x7f00000000c0)="e1b31f68e151511f36670ee598fe43188d9d4f8701252c7e3e2ae1ef2b2bf18516d938fe7a310026019e43c651cc61048498ae84f49ab162b60b8178cc97af891403716c8fb0f8c3e6390240d575ada3d98e4ca2c3520e50bd328cce3c314c63d4c30625398248144543d96f75a7c6cdee7822336fd55228f09ed152733cc2ef3a08f849bfb062290fb05aabe565361ce42788ff59234a41", 0x98}], 0x1, &(0x7f0000000200)=[@rights={0x1c, 0xffff, 0x1, [r4, r4, r4, r6]}, @rights={0x18, 0xffff, 0x1, [r4, r7, r4]}], 0x34, 0x3}, 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x3a, 0x12, 0x0, 0x0) (async) 1.028288169s ago: executing program 2 (id=162): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, 0x0) r2 = getppid() fcntl$setown(r1, 0x6, r2) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$WSDISPLAYIO_GINFO(r3, 0x40185741, &(0x7f0000000100)) mkdir(&(0x7f0000000a00)='./file0\x00', 0x1a) chdir(&(0x7f0000000140)='./file0/../file0\x00') unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='c\x00') r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001c80), 0x1, 0x0) ioctl$WSKBDIO_SETMODE(r5, 0x80045713, &(0x7f0000000000)) ioctl$BIOCSDIRFILT(r4, 0x8004427d, &(0x7f0000000080)=0x5) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYRES16=0x0, @ANYRES32=0x41424344, @ANYRES32=r4, @ANYRES64=r4]) 1.023722485s ago: executing program 2 (id=165): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000001200)=0x8) seteuid(0xffffffffffffffff) kill(0xffffffffffffffff, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) getpid() r4 = getthrid() fcntl$setown(r3, 0x6, r4) closefrom(r2) getgroups(0x40000000000001f6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r6, r5, 0x0) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r7, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/151, 0x97}, 0x26}, 0x38, 0x3040, 0x0) recvmmsg(r7, &(0x7f0000001080)={{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/26, 0x1a}], 0x1, 0x0}, 0x2}, 0x38, 0x3000, 0x0) write(r8, &(0x7f0000000280)="00002dc6f773", 0x6) execve(0x0, 0x0, 0x0) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x308) open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x200, 0xfdf98e28ba4af85) sysctl$kern(&(0x7f0000000080)={0x1, 0x55}, 0x2, &(0x7f0000000100)="991b5e10276cbca4ad23cb4fb6a07f75d5034722d0689caf39a9c4d06f0ddbf292c636a3e862735eeb1f89dfef08bc1cab5b8da818e0647100785aa0eb2d830638170ac37bb31bc33442b6e87610a5543d46ec6c13115ae0e40e50f4bdd55ca70e9dad286180cc84b1524daa3bdd2461e01aa513a4d4c6c9ab9af81199c05e55522439eb882f02cd6c0c72f5e2844e3510f4dfaa278bd4a6ea0280b3be707ae9e8eea24f2d1104e410ce1dd28d2ec583", &(0x7f00000001c0)=0xb0, &(0x7f0000000200)="9a990bdc0ed7e46ba5fb0d7704cfa0bff9a8b0b2fde3fdd52d458714e61b47157b", 0x21) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000040)="29d25f48fa", 0x5}], 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r9, 0xffff, 0x4, 0x0, 0x0) r10 = syz_open_pts() r11 = dup2(r10, r10) ioctl$TIOCSCTTY(r11, 0x20007461) 814.931433ms ago: executing program 4 (id=166): ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r0 = socket$inet(0x2, 0x3, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, 0xfffffffffffffffe, &(0x7f0000000100)=0xfffffffffffffeb2) r2 = dup(r0) mlock(&(0x7f0000fec000/0x11000)=nil, 0x11000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000001c0)={0xffff, 0x5, 0x40, 0x0, "14a488da38a765015adc050815573339d8ddb048", 0x1ff, 0x4c}) closefrom(0xffffffffffffffff) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) open(&(0x7f0000000080)='./file0\x00', 0x8000, 0x21) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000240)={0x0, 0x5, 0x0, 0x80004a, "90d431362579980f500000000000001700", 0x0, 0x9}) closefrom(r3) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r4, &(0x7f0000002180)=[{&(0x7f0000000180)="8a2fc8efa1aff7ec420444edf25372ac958a4a590b61301617c8a7607bd681d554be419a191f5e5cc0d623050d439f60d4d224e37b18ddf4e5b02e34abb56e8b6a21c88e7c67ef883ef08902c784bd1b51cf3815a048e86faca4daf8b6bfd0cd87dd48ae54070c160de9f245f6ee6d22c22131a8839b30a79ecf11b3e4ba1014b9a45f74e578b7cffdc7ad0fa77b9b04e64008746291597f8df2ff2a133940baf615d2fc432b21f100", 0xa9}], 0x1) getsockname$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10) write(r4, &(0x7f0000000400)="7b796c8141e581f4d90500e786c2e2a8d27f3f2432697c2208c3001a066f6cc8fa1a68223c85d6705585aa61420cb8bcecb570a9b2c44119c5c09f738fcdf8a323d862fa8596e8c1509715693c0082db1ec62da2e54592d696e72babc85fca051684299ec0d44f69d5fffd6dc75daf63645d52c07f9884019950a357405b762425cabb49ff1c337e4f93c1490ee797994453c8133fa97de4fc6eb3cfef85938d80e1feca423e2dc965", 0xa9) unveil(0x0, &(0x7f0000000080)='x\x00') ioctl$FIOASYNC(r0, 0xc0206917, &(0x7f0000000580)=0x7) 813.223347ms ago: executing program 3 (id=167): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/146, 0x92}, 0x1}, 0x38, 0x2042, 0x0) setrlimit(0x4, &(0x7f0000000000)={0x0, 0x1}) (async) setrlimit(0x4, &(0x7f0000000000)={0x0, 0x1}) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f00000000c0)={&(0x7f0000000000)=[{0x4, 0x1}], 0x1}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001080)={{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/26, 0x1a}], 0x1, 0x0}, 0x2}, 0x38, 0x3000, 0x0) write(r1, &(0x7f0000001100)='W', 0x1) (async) write(r1, &(0x7f0000001100)='W', 0x1) mkfifo(0x0, 0x8) (async) mkfifo(0x0, 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$audioctl(r2, 0x0, 0x0) read(r0, 0x0, 0x0) execve(0x0, 0x0, 0x0) 812.891466ms ago: executing program 0 (id=168): syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f61184a0020060100000000090000fe0a00000000000000fe8000000000000000000000000000aa4e224e22fe089078cac7994a8602"]) 553.35488ms ago: executing program 32 (id=161): getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) r3 = accept$unix(0xffffffffffffff9c, &(0x7f00000002c0)=@abs, &(0x7f0000000300)=0x8) setsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000340)={r0, r1, r2}, 0xc) kill(r0, 0x2) r4 = socket$inet6(0x18, 0x8003, 0x4) r5 = socket$unix(0x1, 0x2, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='r\x00') r6 = kqueue1(0x0) r7 = accept(r4, 0x0, &(0x7f00000001c0)) fcntl$lock(r6, 0x7, &(0x7f0000000280)={0x0, 0x2, 0x80, 0x7f, r0}) sendmsg$unix(r5, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x4, 0x0, './file0\x00'}, 0xa, &(0x7f0000000180)=[{&(0x7f00000000c0)="e1b31f68e151511f36670ee598fe43188d9d4f8701252c7e3e2ae1ef2b2bf18516d938fe7a310026019e43c651cc61048498ae84f49ab162b60b8178cc97af891403716c8fb0f8c3e6390240d575ada3d98e4ca2c3520e50bd328cce3c314c63d4c30625398248144543d96f75a7c6cdee7822336fd55228f09ed152733cc2ef3a08f849bfb062290fb05aabe565361ce42788ff59234a41", 0x98}], 0x1, &(0x7f0000000200)=[@rights={0x1c, 0xffff, 0x1, [r4, r4, r4, r6]}, @rights={0x18, 0xffff, 0x1, [r4, r7, r4]}], 0x34, 0x3}, 0x4) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x3a, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f0000000000)=0xc) (async) accept$unix(0xffffffffffffff9c, &(0x7f00000002c0)=@abs, &(0x7f0000000300)=0x8) (async) setsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000340)={r0, r1, r2}, 0xc) (async) kill(r0, 0x2) (async) socket$inet6(0x18, 0x8003, 0x4) (async) socket$unix(0x1, 0x2, 0x0) (async) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='r\x00') (async) kqueue1(0x0) (async) accept(r4, 0x0, &(0x7f00000001c0)) (async) fcntl$lock(r6, 0x7, &(0x7f0000000280)={0x0, 0x2, 0x80, 0x7f, r0}) (async) sendmsg$unix(r5, &(0x7f0000000240)={&(0x7f0000000040)=@file={0x4, 0x0, './file0\x00'}, 0xa, &(0x7f0000000180)=[{&(0x7f00000000c0)="e1b31f68e151511f36670ee598fe43188d9d4f8701252c7e3e2ae1ef2b2bf18516d938fe7a310026019e43c651cc61048498ae84f49ab162b60b8178cc97af891403716c8fb0f8c3e6390240d575ada3d98e4ca2c3520e50bd328cce3c314c63d4c30625398248144543d96f75a7c6cdee7822336fd55228f09ed152733cc2ef3a08f849bfb062290fb05aabe565361ce42788ff59234a41", 0x98}], 0x1, &(0x7f0000000200)=[@rights={0x1c, 0xffff, 0x1, [r4, r4, r4, r6]}, @rights={0x18, 0xffff, 0x1, [r4, r7, r4]}], 0x34, 0x3}, 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x3a, 0x12, 0x0, 0x0) (async) 527.687212ms ago: executing program 0 (id=170): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="f27b2beb1db36532277b3405000000000000009ac56ae9703037", 0x1a}], 0x1) unveil(0x0, &(0x7f00000001c0)='w\x00') getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000140)=0xc) mkdir(&(0x7f0000000400)='./file0\x00', 0x120) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0xd07b843b7f7ea096, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x221ff545a928937) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 524.351875ms ago: executing program 1 (id=171): sysctl$kern(&(0x7f0000000080)={0x1, 0x16}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) mlock(&(0x7f0000ff5000/0xb000)=nil, 0xb000) mprotect(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x2) r0 = shmget$private(0x0, 0x3000, 0x2ea, &(0x7f0000001000/0x3000)=nil) shmat(r0, &(0x7f0000001000/0x2000)=nil, 0x0) shmat(r0, &(0x7f0000ffb000/0x1000)=nil, 0x1000) munlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) 524.074319ms ago: executing program 2 (id=172): sysctl$net_inet_udp(&(0x7f00000039c0)={0x4, 0x2, 0x11, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x4) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4) r0 = msgget(0x2, 0x203) msgrcv(r0, 0x0, 0x0, 0x2, 0x0) r1 = msgget(0x2, 0x226) r2 = socket$inet6(0x18, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0x1c, 0x18, 0x0, 0x3fe, "00000000000000000000ffff00", 0x88}, 0x1c) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0xff) getsockopt$inet_opts(r3, 0x0, 0x18, 0x0, 0x0) msgsnd(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="02649b8ca700c00000150cbac3c4867acc99eeb7f21135aebe187e56a88e8ec2c7a7cba55e5f1e348fa0475005497df661f8ac8d14170cd5f1fde4e6a09039463caf31e4c69eb17f044a893dcf4814a358"], 0x8, 0x0) 523.82161ms ago: executing program 3 (id=173): socket$inet6(0x18, 0x3, 0x7) (async) r0 = socket$inet6(0x18, 0x3, 0x7) setsockopt$sock_timeval(r0, 0xffff, 0x1005, &(0x7f0000000000)={0xef68, 0xfff}, 0x10) getsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) 516.752837ms ago: executing program 4 (id=174): syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYRESDEC]) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaabbaaaa1ae51c6faf28442183daaaaaaaaa0800000000000000006600000501907800000000ac14"]) r0 = socket$inet6(0x18, 0x1, 0x6) sysctl$net_inet_tcp(&(0x7f0000004a40)={0x4, 0x2, 0x6, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0xfffffffffffffe64) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) getitimer(0xc272b8ca06920a86, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000ffffffffffff080046df006200660009d62b90787f000001e00000028303070027da063ba30694e09304db899dda8cc6612d095f014a67da0aee054a2abc4db483d631fd7a6a408e7472082d867862563540d6c3593da85753a1299900"/112]) shutdown(r0, 0x2) ktrace(0x0, 0x1, 0x1808, 0xffffffffffffffff) r1 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa97bb86dd6688ad25fef7030200000000000000000000000000000000000000000000000028"]) r2 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd"]) closefrom(r2) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r3 = syz_open_pts() r4 = openat$tty(0xffffffffffffff9c, &(0x7f00000002c0), 0x10, 0x0) ioctl$TIOCNXCL(r4, 0x2000740e) kqueue1(0x10004) getsockname$unix(r2, &(0x7f0000000240)=@abs, &(0x7f0000000280)=0x8) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x40000, 0x0) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x40, 0x6e, 0x35a}, {0xc, 0xe, 0xd, 0x2208}, {0x216, 0x9, 0x2, 0x6}]}) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[]) ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000000)={0x1007, 0x3, 0xfff, 0x7, "fe83fe7a9542a14123a70000001efe02bfabb686", 0x2, 0x3}) write(r1, &(0x7f0000000080)="7ef5b69389691e5c5e", 0x9) connect(r2, &(0x7f0000000040)=@un=@file={0x0, 0x0, './file0\x00'}, 0xa) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYRES16=r0]) 380.341354ms ago: executing program 7 (id=175): r0 = syz_open_pts() mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x1672) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1]) setresgid(0x0, 0x0, r2) open(&(0x7f0000001980)='./file0\x00', 0x1800a, 0x71) r3 = dup2(r0, r0) mknod(&(0x7f0000000000)='./file0\x00', 0x6024, 0x11c4) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) write(r3, &(0x7f0000000700)="01110758c703fbb2f101b7865a6a443ac70dbba184aeddfccb0a519ee94a622b1e28f82663ba82eac1a783fc7af31f7942a83c8e0900f0f7a428d5506c28c8e63a97569374989dc3986bfe7f750e904f5f447014cf7f3c726355730d534587dc8a4dd617803937c2801d02b75cb9dbf869bb2fbbede4f1075b1729faec15605c73d6389500c4d45eed4edf3b76299f9778c49e546bf2538d5227e3a6819252df7b279fcb373398b3b7b373a40dfc5545118441db012a6b6877f86174b127cd3239d9c5ec06b0d6a34da9d39c0187ccb61f163dc7d6d11a7a30637be86188e9d6a4ee6881598bb9b24b859782d0e80453919157811d6685ba2d0d0fc66eb3982cd9023a9ce4f2d06ec9b6f606b0e0ac67079365438d8d0e9e1840708b10b858178c3d6822fe22b3bf0d3047c8532ea5184a9fa1cc7aa7ceeb962029b460ac193b5291bb6e219e992fb9376b233159d340", 0xffffff8e) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) (async) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, 0x0) getppid() (async) r5 = getppid() fcntl$setown(r4, 0x6, r5) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4) minherit(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) r6 = socket$inet(0x2, 0x3, 0x3) setsockopt(r6, 0x0, 0x24, 0x0, 0x0) (async) setsockopt(r6, 0x0, 0x24, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$unix(0x1, 0x2, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) recvfrom$unix(r8, &(0x7f0000000040)=""/210, 0xd2, 0x1042, &(0x7f0000000140)=@abs={0x6, 0x0, 0x0, 0x1}, 0x8) closefrom(r7) 378.840398ms ago: executing program 1 (id=176): sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040)="7d2f6b94", &(0x7f00000000c0)=0x4, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, &(0x7f0000000040)="7d2f6b94", &(0x7f00000000c0)=0x4, 0x0, 0x0) (async) 377.74616ms ago: executing program 3 (id=177): mknod(&(0x7f0000000040)='./file0\x00', 0xc000, 0x5388) (async) mknod(&(0x7f0000000040)='./file0\x00', 0xc000, 0x5388) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) poll(&(0x7f0000001180)=[{r0, 0x40}], 0x1, 0x3) 377.442285ms ago: executing program 6 (id=13): r0 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) r1 = socket$inet(0x2, 0x8003, 0x1) (async) sendto$inet(r0, &(0x7f0000000300)="aae954a88e29df81cbd0e915ed80a91b97dcbd1130662116f883dbee276341f05ddb217dc5e1877a6b93e175c4286b354ad429dd56ff956056c2620a0ad384cfdd41e98681f136b87641db2a3d0c2dd1ca56891b315e2ed3398eaf7fed7c6b61cad51bc13522df152e563f40f5d05099eb17fb6f22c3aa2a00a8d2491ecf6d8f9bb446b8d075d46650e151f967d7fe31f76a857926f3f86a", 0x98, 0x1, &(0x7f00000003c0)={0x10, 0x2, 0x0, 0x511}, 0x10) getsockopt(r1, 0x0, 0x3, 0x0, 0x0) closefrom(r1) (async) setitimer(0x2, &(0x7f0000000080)={{0x10000006, 0xa2b}, {0x112d, 0x40000000}}, 0x0) (async) r2 = open$dir(&(0x7f00000002c0)='./file0\x00', 0x80, 0x3c) (async) r3 = socket$inet6(0x18, 0x3, 0x7) setsockopt(r3, 0x29, 0x39, 0x0, 0x51) (async) r4 = getpgrp() pselect(0x40, &(0x7f0000000280)={0x7c, 0x1, 0xcdf, 0x1000, 0x1, 0x7, 0x85, 0xfffffffffffff5ed}, &(0x7f0000000400)={0x1, 0xffffffffd5e28b25, 0x4, 0x9a5d, 0xfffffffffffffffd, 0x7ff, 0x0, 0x9}, &(0x7f0000000440)={0x10, 0x8001, 0x899, 0x8, 0x7, 0x9, 0x10, 0x5}, 0x0, 0x0) r5 = getuid() (async) lstat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000240)={r4, r5, r6}, 0xc) (async) closefrom(0xffffffffffffffff) (async) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) (async) r7 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r7, 0x80105727, &(0x7f0000000080)={&(0x7f00000000c0)}) (async) socket$inet(0x2, 0x8000, 0x0) (async) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f00000000c0)='./file0\x00') 225.633993ms ago: executing program 1 (id=178): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000002500), 0x10, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000002580)={0x2, &(0x7f0000002540)=[{0x0, 0x4, 0x9, 0x86}, {0xfff1, 0x49, 0x80, 0x9}]}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$DIOCGETQUEUES(r1, 0xc148445e, &(0x7f00000000c0)={0x7400000, 0x3, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x4, 0x5}, {0x7, 0x800}, 0x7}, {{0x40, 0x9}, {0x5, 0x4}, 0xfffffffa}, {{0xf, 0x891}, {0x9, 0x800}, 0xafb}, {0x2, 0x5, 0x824e, 0x8a}, 0x0, 0x9, 0x7, 0x4, 0xbde143b4}}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x200) (async) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000340)={@local, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "75184a", 0x58, 0x3a, 0x0, @rand_addr="2a3b1ae57db8883fa6958273532df404", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, "a69fb6", 0x6, 0x2b, 0x7c, @empty, @local={0xfe, 0x80, '\x00', 0x0}, [@fragment={0x3a, 0x0, 0x3, 0x1, 0x0, 0xb, 0x66}], "832c9c9913cfd4f98197ede808fd25c39e9b269c8eefab1e1f2173ac022028fd"}}}}}}}) (async) geteuid() open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x2e) kqueue1(0x8000) 224.243875ms ago: executing program 6 (id=179): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) sysctl$kern(&(0x7f00000011c0)={0x1, 0x48}, 0x2, 0x0, 0x0, &(0x7f0000001280)="2ad513aa", 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000002540), 0x182, 0x0) ioctl$DIOCRCLRASTATS(r1, 0xc4504448, &(0x7f0000006ac0)={{'./file1\x00', './file1\x00', 0x0, 0x9}, 0x0, 0x34, 0x0, 0x5, 0x9, 0x7, 0x7fffffff, 0x0, 0x401}) ioctl$AUDIO_STOP(0xffffffffffffffff, 0x20004127) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DIOCGETTIMEOUT(r2, 0xc008441e, &(0x7f0000000040)={0x11, 0x400}) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) read(r3, &(0x7f00000000c0)=""/231, 0xe7) ioctl$DIOCSTART(r2, 0x20004401) ioctl$DIOCRGETTABLES(r2, 0xc450443f, &(0x7f0000001ac0)={{'./file0\x00', './file0\x00', 0x44, 0xff}, &(0x7f00000001c0)=[{'./file0\x00', './file0\x00', 0x0, 0x2}, {'./file0\x00', './file0\x00', 0x34111072514eaf5b, 0x8}, {'./file0\x00', './file0\x00', 0x0, 0x3}, {'./file0\x00', './file0\x00', 0x5, 0x6}, {'./file0\x00', './file0\x00', 0x2, 0x3}, {'./file0\x00', './file0\x00', 0x15, 0xd7}], 0x0, 0x6, 0x2, 0x5, 0x4, 0x6, 0x70, 0x7}) ioctl$DIOCSETSTATUSIF(r2, 0xc0284414, &(0x7f0000002040)={'./file0\x00', &(0x7f0000001f40)=""/199, 0x4, 0x40, 0x10, 0x4}) r4 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r4, 0x80105728, &(0x7f0000000080)={&(0x7f0000000440)=[{0x5, 0x5}], 0x1}) sysctl$ddb(&(0x7f0000000080)={0x9, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) closefrom(r5) ioctl$WSDISPLAYIO_GETSCREENTYPE(r5, 0xc028575d, &(0x7f0000002080)={0x7fff, 0x8, './file2\x00', 0x5, 0x2, 0xda77, 0x101}) r6 = dup(r0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000035c0)={0xfdfd, 0x1, r6}) 223.802153ms ago: executing program 3 (id=180): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x672) r1 = open(&(0x7f0000001980)='./file0\x00', 0x10000, 0x0) seteuid(0xffffffffffffffff) setrlimit(0x3, &(0x7f0000000000)={0x100000, 0x100000}) semctl$SETVAL(0x0, 0x0, 0x8, 0x0) getgid() ioctl$TIOCSTOP(r1, 0x2000746f) ioctl$DIOCXROLLBACK(r0, 0xc0104453, &(0x7f0000001940)={0x0, 0x408, 0x0}) 221.097309ms ago: executing program 6 (id=181): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = syz_open_pts() open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) kqueue1(0x30004) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8, 0x8) closefrom(r2) ioctl$TIOCSTOP(r1, 0x2000746f) r3 = dup(r1) ioctl$TIOCSTART(r3, 0x2000746e) r4 = syz_open_pts() syz_open_pts() ioctl$TIOCSETAF(r4, 0x802c7416, &(0x7f0000000000)={0x81, 0x0, 0xffffffc0, 0x4d, "9012b30900", 0x401, 0x956e}) ioctl$TIOCSTAT(r4, 0x20007465) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x4, 0x48, 0x0, 0x2000003}, {0x3c, 0x6, 0x5, 0x4}, {0x6, 0xe, 0x5, 0xfe}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[]) 131.727415ms ago: executing program 1 (id=182): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r0, 0x400c570a, &(0x7f0000000040)) ioctl$WSKBDIO_GETENCODING(r0, 0x4004570f, &(0x7f0000000080)) r1 = semget(0x0, 0x3, 0x11) semctl$GETVAL(r1, 0x0, 0x5, &(0x7f00000000c0)=""/241) (async) r2 = syz_open_pts() ioctl$TIOCCONS(r2, 0x80047462, &(0x7f00000001c0)=0xfffffffb) (async) r3 = semget$private(0x0, 0x0, 0x490) semctl$GETPID(r3, 0x1, 0x4, &(0x7f0000000200)=""/4096) (async) semctl$GETPID(r3, 0x3, 0x4, &(0x7f0000001200)=""/40) (async) r4 = open$dir(&(0x7f0000001240)='./file0\x00', 0x938, 0x1a1) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000001280), 0x80, 0x0) ioctl$FIOSETOWN(r5, 0x8004667c, &(0x7f00000012c0)=0xf46f) (async) getgroups(0x9, &(0x7f0000001300)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) (async) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0xc) setresgid(r6, r8, 0xffffffffffffffff) (async) r9 = dup(r0) sendto$inet6(r9, &(0x7f0000001380)="70d544f3d2a35fe875e210fea4fe15", 0xf, 0xe, &(0x7f00000013c0)={0x1c, 0x18, 0x1, 0x9df, "d7bf57d3bbb54ff837cad8a810c438d7"}, 0x1c) (async) ioctl$DIOCGETSTATUS(r5, 0xc2084415, &(0x7f0000001400)) (async) ioctl$DIOCCLRSTATUS(r4, 0xc0284416, &(0x7f0000001680)={'./file0\x00', &(0x7f0000001640)=""/64, 0x5, 0x0, 0xa, 0x100000}) (async) ioctl$TIOCSCTTY(r2, 0x20007461) (async) semctl$GETPID(r3, 0x0, 0x4, &(0x7f00000016c0)=""/22) poll(&(0x7f0000001700)=[{r9, 0x2}], 0x1, 0x5) (async) mkdir(&(0x7f0000001740)='./file0\x00', 0x90) (async) fstat(r5, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000001780)='./file0\x00', r7, r10) ioctl$DIOCGETRULE(r5, 0xcd604407, &(0x7f0000001840)={0x2, 0xc, 0x5, './file0\x00', './file0\x00', 0x0, "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"}) (async) semctl$IPC_RMID(r1, 0x0, 0x0) (async) semctl$GETVAL(r1, 0x2, 0x5, &(0x7f00000025c0)=""/4096) semctl$GETPID(r1, 0x3, 0x4, &(0x7f00000035c0)=""/139) 128.911849ms ago: executing program 6 (id=183): sysctl$kern(&(0x7f0000000000)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x2d5, "feffffaa8cffffff00000000edffff00"}, 0x1c) sysctl$kern(&(0x7f0000000000)={0x1, 0x3f}, 0x7, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x4}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x18}, 0x4, 0x0, 0x0, &(0x7f00000004c0)="283e36a035f9ff13a8d487475e16c64427099f60677601358baacb4b3f786506c1cdeb390e11d01660213d98a5e16504881542b39600"/69, 0x45) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSDIRFILT(r1, 0x8004427d, &(0x7f0000000080)=0x5) pledge(0x0, &(0x7f0000000140)='\x1a~\b\xb7\xae\xcb\xc4\xac\xa7S\x11\x92\xd3\x1c\x06\x17n\x97q\x9cR/\x8f\xb4J\xc4\\^hk\xcc\xed\xff\x15\xe4\xb7\x80\xcd\xab\xe1\x7f\x9f\xc9\xa9N\xe6\f\x1bS5:g\x8dG\x82\x8fa\xe2\xfa\xd8\x95)\xf6\xe0\xc6\xca\x94,\x9a\x88 \xec\xbf\x11\xfc\x8d\xd7^\x15\x87\xb7\xb1\x96OW<\xfc}q\xdd\xd0\b\xc5\r\xb2\x9dH\xe5TKx\\\xcb\x88r\x18\x81{\xc9\xaf_D\xc9c^\x94\"\xeb\xe6@\xb1X+\xe7s\xed\xaf\x1b\x0e@R\x9d-\xc5\x84\xde[\xf0\x91\xa6\x9b\xbc\xf3\x1em\xabj)\xd4s\xab\x8c\n\xb6\xbb\x81*\x99.7\xba\xd0\r`\x9a\x876\xccxSH`\xcf\xb1\xd8\x1c\xb4k\xfb\xc8\xa2\xb3%\xc43\xa8w,B\xd0\x99\x1e\xe9\xa2l\x13k\xf5\xd8\xdf\xfb\xbd\xa9NcN\xad\xd3\x97&\x9e\xab\xb8\fh\xddv\xf6K\xe9\xc9\xd7^\x88P\xb1p+s7+>\x8d\x95\x95\x11\x9f6\x8c4\xde\xdb\x1e') r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) umask(0xa) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x4, 0x1, './file0\x00'}, 0xa) seteuid(0xffffffffffffffff) connect$unix(r4, &(0x7f0000000000)=@file={0xfc, 0x1, './file0\x00'}, 0xa) bind$unix(r3, &(0x7f0000000080)=@file={0x4, 0x1, './file0\x00'}, 0xa) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$DIOCNATLOOK(r5, 0xc0504417, &(0x7f0000000ec0)={@v6=@loopback, @v6=@rand_addr="00000000f6ffffff8081000000e900", @v6=@local={0xfe, 0x80, '\x00', 0x0}, @v4=@rand_addr=0xfffd, 0x7ff, 0x9, 0x7, 0x1, 0x2, 0x7, 0x18, 0x2}) connect$unix(r3, &(0x7f00000000c0)=@file={0xfc, 0x1, './file0\x00'}, 0xa) closefrom(r2) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000480)={'tap', 0x0}) sysctl$kern(&(0x7f0000000100)={0x1, 0x2a}, 0x2, &(0x7f0000000200)="cf36e0a4b495a38d39542a8fa2b9da766da7cb0d8e60e601b86ac7064fcb54691f0e4fcda6c6b397db972d01ba8dc72e0ccfb9cdb9bdbc6841ea2388ff73e8f8a232fb2d2d8069003c214c3d913b12e59596c1a474c8f36e5f8dd7267ec094b9dd9a26e1a1c7a6d3eb0d4881c40fcc6f85035de2292df80a8b13b6442b5da96a48839d0898f54a329e236676b25c9c88844f6befc4c7da0985ab0372ee859c60d0d07dec0efc6ce787af773ef805a7a7e3eac25159452bca", &(0x7f00000002c0)=0xb8, &(0x7f0000000300)="39690e5112", 0x5) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) syz_emit_ethernet(0x107, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) syz_extract_tcp_res(&(0x7f00000000c0), 0x7, 0x5) 128.459985ms ago: executing program 3 (id=184): sysctl$ddb(&(0x7f00000016c0)={0x9, 0x8}, 0x2, 0x0, 0x0, &(0x7f0000001840), 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000040)=0x9, 0x4) bind(r0, &(0x7f0000000000)=@in={0x10, 0x2, 0x1, 0xa7}, 0x10) 127.997645ms ago: executing program 1 (id=185): mkdir(&(0x7f0000000640)='./file0\x00', 0x40) unveil(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='r\x00') chdir(&(0x7f0000000200)='./file0\x00') r0 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) closefrom(r1) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r2 = syz_open_pts() r3 = dup2(r2, r2) ioctl$TIOCSETAF(r3, 0x80047460, &(0x7f0000000a00)={0x5d5, 0x2, 0x3, 0x7ff, "101b4de661f650e3a02777680ca2a9cf653197f2", 0x5, 0x98}) nanosleep(&(0x7f0000000000)={0x0, 0x8001}, 0x0) clock_getres(0x0, &(0x7f0000000040)) write(r0, &(0x7f0000000440)="77d5b6", 0x3) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000680)="abd7453f9950b84fba95b1b61c60075cc39796a110f1aca0e0c3c9396b6f8cbd63e10842750ec4f55b1fa662e657103d5890ab8dc4aed3a9f3299eb13292cc98e0d978a872ee2bf0144f6d90dbaf6d8b0be88af964d110a8773bfd80c5921ba7f32c7c3374b6e4c8cba372ff107a5bcfc7979e30f1c489c85c8d4e517ca0f8197780e4de3b3103a44db3b0fa29973c938914a10ff639e495b6b4b703dca2f1b7b96f720e9b33ba939a16ec071a35c53267358bffa2f5f0353290882113f4a8c44f2a51a9196d5c9e4215defca36329a096dc1a91c99a29c8ea9f7d60418b0032af273ec958ab46d4bc51b7df861ea32f7b7482ce714e565daeadf68d60bd96612b09c513d161a565247639b2437b75095466765c2906000000000000000000000000000000000000000000000000000000000000c7af66471c9ad0097afa71956ea259604c065d98f238f681e6db1d22efbfa9fc29b9123bf1cc8883bad613ab3787f9a2c9d9942689278c63cb4ce24985b22d476781b23986ffa098b600a9c1ca6f85a9f520eb3383db38420b3904feafb8108166ae4dea285190338e833e028ccd04a153d98075976d5ce35c7bdabc294a34baeb05c4a6e6fb1df05fe09d30327a823db4ec0fb81f306199dcb8ddb5c146296b6b68c29d40082389f70c78aed6c71ae6f4505a6ae55749403c6fcdbbb9ed1b1ef25070a9ed04185979ae70e6303d09da75a7eb173e897a", 0x20b}], 0x1) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) openat$wsmouse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 10.797892ms ago: executing program 3 (id=186): syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6f61184a0020060100000000090000000afe000000000000fe8000000000000000000000000000aa4e224e22fe089078cac7994a8602"]) 10.34617ms ago: executing program 6 (id=187): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000005240), 0x2, 0x0) ioctl$DIOCIGETIFACES(r0, 0xc0284457, &(0x7f0000000200)={'\x00', &(0x7f0000000140)=""/119, 0x100, 0x2, 0xff, 0x1a3}) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='w\x00') 0s ago: executing program 0 (id=188): open$dir(&(0x7f00000001c0)='./file0\x00', 0x200, 0x80) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x814, 0x0) r0 = socket$inet6(0x18, 0x3, 0x7) r1 = socket$inet6(0x18, 0x3, 0x3a) r2 = dup(r1) sendto$inet6(r2, &(0x7f0000000340)="d3735a6a6ea10c2180ac220d7d5974a001b332432904f3636ffdeaa8cc7ba5f245bbca1e77ad0521ee593c91a2ffcce63bbdfa2d783123fdc9246e4f37aeedd3aa8ddf599bea491c39a0f5eb53ff037008129aae571724afcd0d01a0b27838c0d882d8676e41bc7d55cdf3a516f8c994e5260362436031ad4841e10420be4c4d161f475119de63d518a20ed3551444efc9bde6f33801b21b9a3bea", 0x9b, 0x2, &(0x7f0000000300)={0x1c, 0x18, 0x3, 0x2, "febfe132beaada1fcc9fa0df76735576"}, 0x1c) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000001100)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(0x0, r4) r5 = geteuid() setresuid(0x0, r4, r5) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000200), 0xc) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) setuid(r4) r6 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffff9c, 0x80105728, 0x0) munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000) minherit(&(0x7f0000f3a000/0x2000)=nil, 0x2000, 0x2) r7 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x104) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x2011, r7, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x10004) getsockopt$SO_PEERCRED(r8, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) r10 = getgid() fchown(r6, r9, r10) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0x68, &(0x7f0000000340)={{0x1c, 0x18, 0x1, 0x8000, "1450bee83afec0a0fbedec064ce3089d", 0x9}, {0x1c, 0x18, 0x0, 0x8, "eb9e6784711df7cfeea787ca5790ea01", 0x1}, 0x4, [0x7fffffff, 0x8, 0x8d0, 0x1, 0x2, 0x3, 0xfd9, 0x9]}, 0x5c) getegid() recvmmsg(r0, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x8}, 0x38, 0x1040, 0x0) sysctl$net_inet_carp(&(0x7f0000001340)={0x4, 0x2, 0x70, 0x3}, 0x4, &(0x7f0000001380)="c4b18b5c", &(0x7f0000002380)=0xffffffcc, &(0x7f00000023c0)="ec8dbebd", 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.132' (ED25519) to the list of known hosts. pckbd_enable: command error Connection to 10.128.1.132 closed by remote host. pty: table is full OpenBSD/amd64 (ci-openbsd-kasan-5.us-central1-f.c.syzkaller.internal) (tty00) login: vnd0: sloppy read from proc 35932 (syz-executor): blkno 0 bcount 231 panic: sleep: syz-executor[54211] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND 22746 54211 0 0 0 0 syz-executor *344855 54211 0 0 0x4000010 1K syz-executor db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bd6220,11,ffffffff84692f80) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bd6220,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c biowait(ffff800001bd6220) at biowait+0xe6 bwrite(ffff800001bd6220) at bwrite+0x4e1 ffs_update(ffff800001c28ab8,1) at ffs_update+0x619 ffs_truncate(ffff800001c28ab8,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff800029a78380) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001caf2c0,ffff800029a7f4e8) at VOP_INACTIVE+0x1bb vrele(ffff800001caf2c0) at vrele+0x16a ktrsettrace(ffff800029917500,80000814,ffff800001d62950,ffff8000001197b8) at ktrsettrace+0x16c ktrops(ffff800029a7f4e8,ffff800029917500,0,80000814,ffff800001d62950,ffff8000001197b8) at ktrops+0x338 doktrace(ffff800001d62950,4,814,0,ffff800029a7f4e8) at doktrace+0xa72 end trace frame: 0xffff800029a78870, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: sleep: syz-executor[54211] slept inside a no-sleep walk bracket (raw pointer held across sleep, wmesg "biowait") ddb{1}> show kasan kasan: no report recorded this boot ddb{1}> trace db_enter() at db_enter+0x17 panic(ffffffff84d8d160) at panic+0x270 sleep_setup(ffff800001bd6220,11,ffffffff84692f80) at sleep_setup+0x3b2 tsleep_nsec(ffff800001bd6220,11,ffffffff84692f80,ffffffffffffffff) at tsleep_nsec+0x29c biowait(ffff800001bd6220) at biowait+0xe6 bwrite(ffff800001bd6220) at bwrite+0x4e1 ffs_update(ffff800001c28ab8,1) at ffs_update+0x619 ffs_truncate(ffff800001c28ab8,0,0,ffffffffffffffff) at ffs_truncate+0x12f0 ufs_inactive(ffff800029a78380) at ufs_inactive+0x2cb VOP_INACTIVE(ffff800001caf2c0,ffff800029a7f4e8) at VOP_INACTIVE+0x1bb vrele(ffff800001caf2c0) at vrele+0x16a ktrsettrace(ffff800029917500,80000814,ffff800001d62950,ffff8000001197b8) at ktrsettrace+0x16c ktrops(ffff800029a7f4e8,ffff800029917500,0,80000814,ffff800001d62950,ffff8000001197b8) at ktrops+0x338 doktrace(ffff800001d62950,4,814,0,ffff800029a7f4e8) at doktrace+0xa72 sys_ktrace(ffff800029a7f4e8,ffff800029a78a00,ffff800029a78960) at sys_ktrace+0x1f6 syscall(ffff800029a78a00) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x33fbfebf7a0, count: -17 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800029a77c70 rbx 0xffff800029a77ce0 rdx 0 rcx 0xffff800028fe3ff0 rax 0xffff80000015ba80 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff800029a77a60 r11 0xffffffff83e54b70 x86_bus_space_io_read_1 r12 0xffffffff84d8d160 .str.9 r13 0xffff800028fe4c08 r14 0xffff800028fe4e07 r15 0x1 rip 0xffffffff82f1b577 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff800029a77c70 ss 0x10 db_enter+0x17: popq %rbp ddb{1}> show proc PROC (syz-executor) tid=344855 pid=54211 tcnt=2 stat=onproc flags process=0 proc=4000010 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800029a7efb8,0xffffffff85deb120 process=0xffff8000326ceb78 user=0xffff800029a6d000, vmspace=0xffff800001ad8b80 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 54211 22746 30025 0 7 0 0 syz-executor *54211 344855 30025 0 7 0 0x4000010 syz-executor 98413 317093 12094 0 2 0 0 syz-executor 98413 74700 12094 0 2 0 0x4000000 syz-executor 7449 274433 90355 0 2 0x2 0 syz-executor 7087 376721 88042 0 2 0 0 syz-executor 7087 269920 88042 0 3 0 0x4000080 fsleep syz-executor 75955 325652 43852 0 3 0x10 0x80 nanoslp syz-executor 75955 435508 43852 0 3 0x10 0x4000080 fsleep syz-executor 75955 113501 43852 0 3 0x10 0x4000080 lockf syz-executor 75955 374460 43852 0 3 0x10 0x4000080 fsleep syz-executor 15816 509412 54130 0 2 0 0 syz-executor 15816 385781 54130 0 2 0 0x4000000 syz-executor 58122 21714 82318 0 3 0 0x80 nanoslp syz-executor 58122 116695 82318 0 3 0 0x4000080 msgwait syz-executor 58122 422350 82318 0 3 0 0x4000080 fsleep syz-executor 58122 92222 82318 0 3 0 0x4000080 fsleep syz-executor 12094 259115 90355 0 3 0x2 0x80 nanoslp syz-executor 73944 1544 1 0 3 0x100003 0x80 ttyin getty 35828 141733 0 0 3 0x14000 0x280 nfsidl nfsio 76094 279118 0 0 3 0x14000 0x280 nfsidl nfsio 73274 311546 0 0 3 0x14000 0x280 nfsidl nfsio 98971 322640 0 0 3 0x14000 0x280 nfsidl nfsio 85221 417860 0 0 3 0x14000 0x280 nfsidl nfsio 7843 189510 0 0 3 0x14000 0x280 nfsidl nfsio 72498 81983 0 0 3 0x14000 0x280 nfsidl nfsio 68543 288080 0 0 3 0x14000 0x280 nfsidl nfsio 65229 443546 0 0 3 0x14000 0x280 nfsidl nfsio 93261 321904 0 0 3 0x14000 0x280 nfsidl nfsio 45448 169259 0 0 3 0x14000 0x280 nfsidl nfsio 5173 99596 0 0 3 0x14000 0x280 nfsidl nfsio 68292 27481 0 0 3 0x14000 0x280 nfsidl nfsio 49072 246128 0 0 3 0x14000 0x280 nfsidl nfsio 41055 337427 0 0 3 0x14000 0x280 nfsidl nfsio 92236 165503 0 0 3 0x14000 0x280 nfsidl nfsio 2257 50595 0 0 3 0x14000 0x280 nfsidl nfsio 68235 410824 0 0 3 0x14000 0x280 nfsidl nfsio 83079 174510 0 0 3 0x14000 0x280 nfsidl nfsio 84736 293617 0 0 3 0x14000 0x280 nfsidl nfsio 43852 206969 90355 0 3 0x2 0x80 nanoslp syz-executor 54130 56533 90355 0 3 0x2 0x80 nanoslp syz-executor 68782 117864 90355 0 3 0x2 0 biowait syz-executor 82318 335826 90355 0 3 0x2 0x80 nanoslp syz-executor 88042 119774 90355 0 3 0x2 0x80 nanoslp syz-executor 30025 338073 90355 0 3 0x2 0x80 nanoslp syz-executor 90355 495569 1 0 3 0x2 0x80 kqread syz-executor 45863 55636 95791 74 3 0x1100012 0x80 bpf pflogd 95791 264572 1 0 3 0 0x80 sbwait pflogd 16123 352610 0 0 3 0x14000 0x200 bored smr 3959 48761 0 0 2 0x14000 0x200 zerothread 25150 200533 0 0 3 0x14000 0x200 aiodoned aiodoned 9839 518449 0 0 3 0x14000 0x200 syncer update 3714 364316 0 0 3 0x14000 0x200 cleaner cleaner 9956 252102 0 0 3 0x14000 0x200 reaper reaper 84242 36349 0 0 3 0x14000 0x200 pgdaemon pagedaemon 60809 367160 0 0 3 0x14000 0x200 bored viomb 32380 159319 0 0 3 0x14000 0x40000200 acpi0 acpi0 80710 18584 0 0 3 0x14000 0x40000200 idle1 56146 17146 0 0 3 0x14000 0x200 bored softnet1 97517 168080 0 0 3 0x14000 0x200 bored softnet0 739 325142 0 0 3 0x14000 0x200 bored systqmp 30305 133806 0 0 3 0x14000 0x200 bored systq 44290 154395 0 0 3 0x14000 0x200 tmoslp softclockmp 35074 317513 0 0 3 0x14000 0x40000200 tmoslp softclock 76138 65352 0 0 3 0x14000 0x40000200 idle0 1 409829 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 54211 (syz-executor) thread 0xffff800029a7f4e8 (344855) Process 68782 (syz-executor) thread 0xffff800029913c98 (117864) ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11052 12308K 12534K 166960K 12450 0 pcb 17 26K 27K 166960K 51 0 rtable 222 12K 13K 166960K 486 0 pf 32 21K 32793K 166960K 64 0 ifaddr 39 11K 12K 166960K 65 0 ifgroup 51 2K 2K 166960K 79 0 sysctl 2 1K 13K 166960K 6 0 counters 68 42K 42K 166960K 82 0 ioctlops 0 0K 4K 166960K 1580 0 iov 0 0K 16K 166960K 12 0 mount 1 1K 1K 166960K 1 0 log 6 0K 0K 166960K 10 0 vnodes 1356 87K 87K 166960K 1628 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 6K 166960K 10 0 VM map 2 1K 1K 166960K 2 0 sem 9 0K 0K 166960K 9 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 15 57K 93K 166960K 387 0 sigio 0 0K 0K 166960K 3 0 proc 31 63K 177K 166960K 708 0 subproc 66 8K 9K 166960K 120 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 88 6K 7K 166960K 143 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 12 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 55 384K 384K 166960K 55 0 exec 0 0K 2K 166960K 449 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 139 140K 242K 166960K 5079 0 UVM aobj 14 4K 4K 166960K 16 0 pinsyscall 1046 1781K 1783K 166960K 1674 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 13 0K 2K 166960K 42 0 temp 34 9162K 9190K 166960K 5108 0 kqueue 1 4K 56K 166960K 52 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 43 0 43 1 0 1 1 0 8 1 rtentry 176 159 0 57 6 0 6 6 0 8 0 unpcb 144 161 0 157 1 0 1 1 0 8 0 syncache 336 4 0 4 2 2 0 1 0 8 0 sackhl 24 1 0 1 1 1 0 1 0 8 0 tcpcb 736 21 0 20 1 0 1 1 0 8 0 arp 136 26 0 10 1 0 1 1 0 8 0 inpcb 328 260 0 256 6 0 6 6 0 8 5 nd6 152 40 0 16 2 0 2 2 0 8 0 kcovpl 48 13 0 6 1 0 1 1 0 8 0 pffrent 40 1 0 1 1 0 1 1 0 8 1 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pfstitem 24 38 0 0 1 0 1 1 0 8 0 pfstkey 128 38 0 0 2 0 2 2 0 8 0 pfstate 448 38 0 0 5 0 5 5 0 8 0 pfrule 1360 87 0 82 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 643 0 225 30 0 30 30 0 8 1 art_table 40 644 0 225 5 0 5 5 0 8 0 art_node 32 159 0 66 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semupl 112 2 0 2 1 0 1 1 0 8 1 semapl 72 7 0 0 1 0 1 1 0 8 0 shmpl 112 13 0 2 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1876 0 388 94 0 94 94 0 8 0 ffsino 296 1876 0 388 115 0 115 115 0 8 0 nchpl 144 2339 0 616 65 0 65 65 0 8 0 vnodes 216 2193 0 0 122 0 122 122 0 8 0 namei 1024 7969 0 7968 1 0 1 1 0 8 0 percpumem 16 57 0 7 1 0 1 1 0 8 0 kstatmem 264 39 0 14 2 0 2 2 0 8 0 scxspl 216 8342 0 8340 7 4 3 3 1 8 2 plimitpl 152 111 0 99 1 0 1 1 0 8 0 sigapl 424 720 0 664 8 0 8 8 0 8 0 knotepl 120 112 0 0 4 0 4 4 0 8 0 kqueuepl 224 95 0 93 3 1 2 3 0 8 1 pipepl 344 169 0 142 3 0 3 3 0 8 0 fdescpl 528 684 0 664 3 0 3 3 0 8 0 filepl 160 2988 0 2824 11 0 11 11 0 8 1 lockfpl 104 133 0 130 1 0 1 1 0 8 0 lockfspl 48 65 0 63 1 0 1 1 0 8 0 sessionpl 144 37 0 33 1 0 1 1 0 8 0 pgrppl 48 52 0 40 1 0 1 1 0 8 0 ucredpl 104 289 0 282 1 0 1 1 0 8 0 zombiepl 144 664 0 664 1 0 1 1 0 8 1 processpl 1232 720 0 664 6 0 6 6 0 8 0 procpl 664 1029 0 963 7 0 7 7 0 8 0 sockpl 752 467 0 458 7 0 7 7 0 8 5 mcl64k 65536 3 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 120 0 0 15 0 15 15 0 8 0 mcl2k 2048 21 0 0 3 0 3 3 0 8 0 mextrefs 64 17 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 149 0 0 10 0 10 10 0 8 0 bufpl 272 2740 0 106 176 0 176 176 0 8 0 anonpl 32 3822 0 0 31 0 31 31 0 222 0 amapchunkpl 152 14672 0 14327 19 0 19 19 0 158 4 amappl16 200 2032 0 2012 5 3 2 5 0 8 0 amappl15 192 8 0 8 1 1 0 1 0 8 0 amappl14 184 496 0 496 1 0 1 1 0 8 1 amappl13 176 170 0 167 1 0 1 1 0 8 0 amappl12 168 956 0 937 2 0 2 2 0 8 0 amappl11 160 7 0 7 3 2 1 1 0 8 1 amappl10 152 98 0 94 1 0 1 1 0 8 0 amappl9 144 273 0 273 1 1 0 1 0 8 0 amappl8 136 124 0 123 1 0 1 1 0 8 0 amappl7 128 159 0 155 1 0 1 1 0 8 0 amappl6 120 194 0 194 1 0 1 1 0 8 1 amappl5 112 112 0 109 1 0 1 1 0 8 0 amappl4 104 321 0 314 1 0 1 1 0 8 0 amappl3 96 2868 0 2788 3 0 3 3 0 8 0 amappl2 88 597 0 583 2 0 2 2 0 8 0 amappl1 80 11825 0 11652 15 2 13 15 0 8 4 amappl 88 4229 0 4113 4 0 4 4 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 15 0 2 1 0 1 1 0 8 0 uaddrrnd 24 684 0 664 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 684 0 664 1 0 1 1 0 8 0 vmmpekpl 168 7510 0 7469 3 0 3 3 0 8 0 vmmpepl 168 52184 0 51253 87 2 85 87 0 357 36 vmsppl 488 683 0 664 5 0 5 5 0 8 1 rwobjpl 80 17716 0 17212 26 3 23 25 0 8 2 pdppl 4096 1376 0 1328 102 48 54 86 0 8 6 pvpl 32 9691 0 0 79 0 79 79 0 265 0 pmappl 256 683 0 664 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 120 454 0 53 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffffffff851e9ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff85d51b80) at __mp_lock+0x272 intr_handler(ffff800036ee8830,ffff800000170180) at intr_handler+0x113 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f end of kernel end trace frame: 0x7dadb0cd0d60, count: 9 ddb{0}>