last executing test programs: 270.876534ms ago: executing program 1 (id=2): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x40, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="a7a6d61de4a1090992003b47915d8156c41fe591026c9e82b38988f5b063c973", &(0x7f0000000000)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @random="b55d145e54af", [], {@ipv4={0x88e7, {{0x5, 0x4, 0x1, 0x8, 0x1c, 0x65, 0xfff, 0x0, 0xf0, 0x0, @local={0xac, 0x14, 0x0}, @loopback}, @udp={{0x0, 0x3, 0x8}}}}}}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) socket(0x6, 0x8000, 0x9b) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x12, 0xfe, 0x3ff}, {0x87, 0x1, 0x25}, {0x6, 0x24, 0x5, 0xfffff802}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) getentropy(0x0, 0xffffffffffffff91) setsockopt$inet_opts(r0, 0x6, 0x1, &(0x7f0000000340)="04000000", 0x4) 264.505579ms ago: executing program 3 (id=4): sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x24, 0x0, 0x37) (async) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x15bc43323d032eae) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{0x7, 0xff, 0x1, 0x800000b}, {0x2d, 0x1, 0x2, 0xfffffffe}, {0x9, 0x6, 0xf3, 0x7b9}, {0x8, 0xfb, 0x9, 0x8000009}, {0x9b1e, 0xfe, 0xf6, 0x40007ff}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) (async) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='w\x00') (async) r1 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x83) ioctl$TIOCGETA(r1, 0x402c7413, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x10000301, 0x0, 0xfffffffffffffdd9}, 0x9}, 0x38, 0x3042, 0x0) (async) mkdir(&(0x7f0000000700)='.\x00', 0x40) (async) ioctl$DIOCRCLRADDRS(r1, 0xc4504442, &(0x7f0000000280)={{'./file0\x00', './file0\x00', 0x30, 0x7f}, 0x0, 0x0, 0x0, 0x10001, 0xa728, 0x9, 0x200, 0x70, 0x6}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x48}, 0x2, &(0x7f0000000040)='T', &(0x7f0000000140)=0x1, &(0x7f0000000180)="cb435e3a0437d892ea0b0723a8a986bf7e064e9e2632d17f0093b9d8895f08de1c8000aa1851a5ffe2137d0b66814ca6cbf9e80fd4f10a14b31a4c128438cfb586f699cfdace2f5e11d7cbe79111e033c22cbd22f47d76a3bc2c4fecbdf8717c7d19ac3a85a47acc03fc8bf194d1072f5b3e68949406902518f869c56555abb633fbe34d6a01c0e89232a91e969364f6d8bba8304a300bb53608b70f7a8a34287aee9ab3eb1a1789b5ecdaf3573dfc5519fbb1cc0bb31b18023b969971e17338c1b1ee7401f27f06727db1c192d19836b0", 0xd1) 246.222064ms ago: executing program 4 (id=5): r0 = open(&(0x7f00000000c0)='./file1\x00', 0x400, 0x1) chmod(&(0x7f0000000040)='./file0\x00', 0x111) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$BIOCSDLT(r1, 0x8004427a, &(0x7f0000000080)=0x81) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="2321be", 0x3}, {&(0x7f0000000240)="5c7b2f343194653769bb0302e50600a4ea0cfa53fb01a7778944de83e6764496a7f78482e68bad7a9702aab7172aeba73f8bccd468d8c346d182f9719766b578492f894027a738c211b0a106602bcd9c91d62c8015855f434630553704e25841da28bdcc9ca12074283a4d7095c57ef3be", 0x71}, {&(0x7f0000000300)="f6ff079dd987359a8628af9e43d7a45bf56f06d7f3dbf81a76a4c673dce3de3f704d82d8f29c301c616404845bef73d108edda24a142410dbe05a2288854fe162da0042679eeef432018d467e0ec503c7d4050a49c20ccbf51ffef199afacd336d4d25990598123184b7d08637b85f66906e4ed74f5f1633d0d44687884903447a624d91a40322e2626290e54ef3e12e4f88b6a10ed1efb4b50cd5beae0490b062388a589b2530b511a921919d8d0a5f6a7e03aa620f0d3970f871ad6e", 0xbd}], 0x3) ioctl$DIOCGETRULESET(r0, 0xc444443b, &(0x7f0000000400)={0x9, './file0\x00', './file0\x00'}) openat(r0, &(0x7f0000000000)='./file0\x00', 0x40000, 0x0) r2 = socket(0x11, 0x4, 0x4) open(&(0x7f0000000080)='./file0\x00', 0x800, 0x40) fchdir(r2) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="20050000009c0a", 0x7}], 0x1) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 202.018272ms ago: executing program 3 (id=9): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0/../../file0\x00') unveil(&(0x7f0000000300)='./file0/file0/..\x00', &(0x7f0000000400)='r\x00') r0 = socket(0x18, 0x1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x5, 0x1, './file0/file0/..\x00'}, 0x13) mknod(&(0x7f0000000040)='./file0\x00', 0x1ffa, 0x0) write(r0, &(0x7f00000000c0)="446365081dd2b621526816b0c8a4c6806335c4abb1d632b76201385ef2b037aa9e9c1e8788a708315256f8bc0f585bdbcb9993768b5e4e14197cca95481668ed7d40afbcdd08397b5170c8f3a74201b22a5f4597573b6c6f8cf1c2", 0x5b) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x1c5) syz_emit_ethernet(0x36, &(0x7f0000001b80)=ANY=[@ANYBLOB="af13c83ac8dfaaaaaaaaaabb86dd6d2e783b0000670800000000000000000000fff00000000000000000000000000000000000e0b5"]) close(r0) 198.957948ms ago: executing program 2 (id=3): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x6, 0x5, 0x101, 0x1, 0x1, 0x3, 0x10, [{0x5, 0xfe3, 0xffffff26, 0x71800}, {0x1, 0xb7fe, 0xf, 0x7}, {0x100004, 0x4, 0x1fc000, 0x2}, {0x2, 0x9, 0x200, 0xfffffffb}, {0x4, 0x3, 0xe, 0x7}, {0x2, 0x20048000, 0x7d457398, 0xff}, {0x5, 0xbffffff5, 0x4, 0x6d}, {0x99d, 0x8, 0xfdf0, 0x4}, {0xf, 0x44c7, 0xbfa9, 0x8000}, {0xfffffc00, 0x0, 0x10001, 0x1}, {0xa44f, 0xfff8, 0x488, 0xe1}, {0x8000, 0x5, 0x8, 0x8}, {0x2000df, 0x9, 0x5, 0x3ff}, {0xfffffffe, 0x0, 0xffff0001, 0xfffffff8}, {0x2, 0x5, 0x172000, 0x2000b}, {0x81, 0xf3, 0x7, 0x4}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x3, 0x122800000000009}, {0xffffdff0, 0x8020000000000001}}, 0x0) accept(r0, &(0x7f0000000000)=@in, &(0x7f0000000040)=0x10) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x800009, 0xb3f, {[0xfffffbfffffffff8, 0xfffffffffffff000, 0x2, 0x100000000, 0x6, 0x5, 0xdf60, 0xfffffffffffffffe, 0x4, 0x6, 0x4, 0x3, 0x38, 0x0, 0xffffffffffffffff, 0x2, 0x3, 0xfffffffffffffffa], [0xfffffffffffffffa, 0x80000000, 0xf, 0x9c7, 0x5b, 0x1, 0x1fe, 0x0, 0x0, 0x2], [0xfffffffe, 0x2, 0x0, 0x4, 0xb, 0xffffffff, 0xffffffff00000000], [0x100, 0x5, 0x7fffffffffffffff, 0x100000000, 0xfffffffffffffffa, 0x2], [{0x0, 0x20000004, 0x0, 0x7d06}, {0xfffc, 0x2, 0x9}, {0x6, 0x2, 0xfffffffc}, {0x4009, 0x5, 0x4, 0xffffffffffffffff}, {0x6, 0x3ff, 0x1000, 0x8}, {0x0, 0x2007, 0x9, 0x2000000000000000}, {}, {0x0, 0x100, 0x0, 0x8}], {0x0, 0x5, 0xffff}, {0x2, 0x80000000, 0x6d5, 0x2}}}) sendto$unix(r1, &(0x7f0000000080)="88c37177120f744bd245476407481aa3d396d8a941fcc731daca4194650bee7746022b1e34acca1a6eaf", 0x2a, 0xd, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x0, 0x2}, 0x8) r2 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) 179.688925ms ago: executing program 5 (id=6): syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000000800082b04fe8000000000000000000000000000bb000040"]) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r0, 0x81406947, &(0x7f00000001c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0x400, 0xfffffffffffffff9, 0x0, 0x0, 0x200000001, 0x800000000000108, 0x24, 0x4}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) 171.434032ms ago: executing program 7 (id=8): r0 = syz_open_pts() ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000080)=0x84c) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000040)=0x4) r1 = syz_open_pts() closefrom(r1) 161.421891ms ago: executing program 6 (id=7): r0 = syz_open_pts() ioctl$TIOCCBRK(r0, 0x2000747a) (async) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x2, 0x100200000, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x100000000007b98, 0x800, 0x9, 0x0, 0xfffffffffffffffe], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x9a92, 0x0, 0x0, 0x7d06}, {0x9, 0x22, 0x5}, {0x4, 0x0, 0xfffefffe, 0x280}, {0x3, 0x4, 0x5, 0xffffffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) sysctl$hw(&(0x7f0000000280)={0x6, 0x19}, 0x2, 0x0, &(0x7f0000000240), 0x0, 0x14) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000), &(0x7f0000000240), 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) (async) sysctl$net_inet_divert(&(0x7f0000000100), 0xb, &(0x7f0000000280)="a7c1290f17722447b2c63e743f6b379fa5267a394a5d94db9417b6982f519b111f61ad994119ba843799517c2ddf4c65594fb3b55a5fce717f619f904ce7b41e4296cf777a1db4747703440100000023e48310b779f9619c7642d6d7f500000000000000000000000000000000c37a11ae4dbe56deeb1ccae6d8e73f8976b460abc78bfdf1bf11c3ec2956f559e2ae95b19752a20f358e90edd96264cbc18906750f34e7e595d09e4e313414f688d6388b713904a7996cc92a328db185299eeabc8e35147498451c4a84a9d41bf693affdc27f4569379570f4", &(0x7f0000000180)=0x67, &(0x7f0000000640)="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", 0xee) 133.823635ms ago: executing program 4 (id=10): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x65b3) r0 = open(&(0x7f0000001480)='.\x00', 0x20, 0x4ebfac6bbaf7894) syz_emit_ethernet(0x4e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaab2c53986dd65370c8902182b01fe800000000000000080000000000000feff"]) fcntl$setstatus(r0, 0x4, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) listen(r1, 0x1) r2 = socket$unix(0x1, 0x1, 0x0) fcntl$setstatus(r2, 0x4, 0x40) connect$unix(r2, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) 130.819781ms ago: executing program 1 (id=11): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xd6) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000004c0)="2321af7777f62a61338c2545c1b4208f65ca8e655826f60135dcfd78d69d812b06c8f7fb03e4065b57b63af9ed6fbd476ea83b7e7d6528d768a257e7d581d57f4b2cf7754c4ca160fc9c0f86f4b340723e84a1f9251e41f7b5fcb1642f5e9b356193a10a441d70d72f33932d9eeac0130e90ed482fa5d0ca66", 0x79}], 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x2a}, 0x2, 0x0, 0x0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 130.297676ms ago: executing program 7 (id=12): sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0xd002, 0x0) setpgid(0xffffffffffffffff, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x2c}, 0x3, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa43029cb73dbf1a1f7a2065ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031faef03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fbde0652f35e45bdaa3afd86c4fe557d3d069433e9890b017ceefabee7e3ebe806fdb4f6af569ae9448677cc2fb7f6443f259859ce3763cc529071cda7a4b61a7b639e519f422a7be0c5da0f0eae59d00"/202, &(0x7f0000000080)=0x5a, &(0x7f0000000280)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496852a9ad15fa4b0bc2c6ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b5", 0xfffffffffffffe19) close(r0) 129.3225ms ago: executing program 5 (id=13): ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0xdf6, 0x9, 0xffffffffffffff9c}) fchmod(r0, 0x172) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000140)={0x100, 0x1, &(0x7f0000000040)=[0x5], &(0x7f0000000080)=[0x0, 0x380000, 0x8, 0x1, 0x6], &(0x7f00000000c0), &(0x7f0000000100)=[0x81, 0x9], 0x0, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000180)=[0x4, 0x800, 0x6, 0x5], 0x4, 0x800c, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000580)={&(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0xa, 0x2, 0x0, 0x0, 0xd, 0x4, 0x1, 0x6, 0x6, 0x2b4e}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000600)={r2, 0x9, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000680)={&(0x7f0000000640)="f415d9624ac9e9c55943ade39bd072", 0xf}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000740)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}], 0x1, 0x0, ""/32, 0x5, 0x1}) r3 = dup(r1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000780)) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00000007c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000800)={r4}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = getthrid() getresuid(&(0x7f00000009c0), &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0) r9 = getsid(0xffffffffffffffff) r10 = getuid() getgroups(0x7, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) r13 = openat$tty(0xffffffffffffff9c, &(0x7f0000000ac0), 0x200, 0x0) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b00), 0x20000, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000b40)={0x0, 0x0}, &(0x7f0000000b80)=0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0xc) r19 = getgid() r20 = getpgid(0xffffffffffffffff) stat(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstatat(r0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) sendmsg$unix(r5, &(0x7f0000000e40)={&(0x7f0000000840)=@file={0xfd, 0x0, './file0\x00'}, 0xa, &(0x7f0000000980)=[{&(0x7f0000000880)="612d848d8be6182b5f6fb27952c2251401ea4566908c396aeb15183d514bafd91cb58b715fc2283d72f8e28b6971a58596862f7b64021a1ca7eb23d710e91f2a5844e03c7394b560c37365fb9abe02b7ce4524e754881f95ac974485740c70d8d2fda7039b5b18484a4b8084d0055eec1a9f60410f7f825b1a63d42774a907d4b74897dc7a05ce4d20474e06425af02dce592b6bc65ceb192f22f0769b009d9fbbc59d74c8ca5064161f7208b95c9d19ffa18b8ebf6f03b49496862ab7e8af05a4af18905fbb7967e93e2e71d94b19aee8", 0xd1}], 0x1, &(0x7f0000000d80)=[@rights={0x18, 0xffff, 0x1, [r1, r0, r0]}, @cred={0x18, 0xffff, 0x0, r6, r8}, @cred={0x18, 0xffff, 0x0, r9, r10, r12}, @rights={0x24, 0xffff, 0x1, [0xffffffffffffff9c, r13, r14, r3, r1, r0]}, @cred={0x18, 0xffff, 0x0, r15, r17, r19}, @cred={0x18, 0xffff, 0x0, r20, r21, r23}], 0x9c, 0x400}, 0x401) r24 = msgget$private(0x0, 0x22) msgctl$IPC_SET(r24, 0x1, &(0x7f0000000e80)={{r16, r11, r7, r18, 0x100, 0x2, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0x74e, 0x7fffffffffffffff, 0x8, r9, r9, 0x1c0, 0x0, 0x5, 0x0, 0x5}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000f80)={{0x0, r19, r22, 0x0, 0x100, 0x1, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x4, 0xff, 0x8, 0x0, r15, 0x3, 0x0, 0x4}) 128.421607ms ago: executing program 2 (id=14): mknod(0x0, 0x2000, 0x6381) select(0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(0x0, 0x10, 0x100) (async) kqueue() ioctl$FIONBIO(r0, 0x82907003, &(0x7f0000000140)=0x1) (async) setuid(0xee01) (async) r1 = semget$private(0x0, 0x1, 0x391) (async) socket(0x24, 0x2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1, 0x0, 0x0) (async) getgroups(0x0, 0x0) (async) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 0xc4, 0x1, 0x0, 0x0, 0x400}, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1}) (async) semop(r1, &(0x7f00000000c0), 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0xd1) (async) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) poll(&(0x7f00000000c0)=[{r2, 0x8}], 0x1fffff60, 0x0) (async) mknod$loop(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2100, 0x1) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) (async) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETA(r3, 0x40204103, 0x0) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 58.859485ms ago: executing program 6 (id=15): r0 = socket(0x2, 0x2, 0x0) syz_emit_ethernet(0x138, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206979, 0x0) dup(0xffffffffffffffff) (async) r2 = dup(0xffffffffffffffff) ioctl$BIOCPROMISC(r2, 0x20004269) setuid(0x0) (async) setuid(0x0) kill(0x0, 0x20) mknod(0x0, 0x10, 0x884) (async) mknod(0x0, 0x10, 0x884) semget(0x0, 0x1, 0x206) (async) r3 = semget(0x0, 0x1, 0x206) semctl$IPC_STAT(r3, 0x0, 0x2, 0x0) ioctl$TIOCCLRVERAUTH(0xffffffffffffffff, 0x2000741d) r4 = openat$dri(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dri/renderD128\x00', 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffff9c, 0xc01c64ad, &(0x7f0000000100)={0x0, 0x7, 0x66, 0x0, 0x6, 0x916c, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000140)={r5}) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[]) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) (async) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x19, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB]) close(0xffffffffffffffff) r6 = socket(0x2, 0x2, 0x0) connect$unix(r6, &(0x7f0000000000), 0x10) write(r6, 0x0, 0x0) (async) write(r6, 0x0, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001f00)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x1378}}, 0x38, 0xc) socket(0x18, 0x2, 0x0) (async) r7 = socket(0x18, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) (async) setsockopt$sock_int(r7, 0xffff, 0x1023, &(0x7f0000000040)=0x4, 0xd4) 55.972195ms ago: executing program 7 (id=16): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4}, {0x2, 0x0, 0x0, 0xffffffff}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x2000, 0x6d4) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8, 0x80) mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x800) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x2, 0x3, 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x8e) setuid(0xffffffffffffffff) kill(0x0, 0x1d) link(&(0x7f0000000340)='./bus\x00', 0x0) close(r4) ioctl$TIOCGETA(r1, 0x402c7413, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000000)="01", 0x1) write(r5, 0x0, 0x0) recvfrom(r6, &(0x7f0000000340)=""/1, 0x1, 0x40, 0x0, 0x0) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$FIOASYNC(r0, 0x80047470, &(0x7f00000001c0)=0x401) select(0x40, &(0x7f0000000040)={0xd, 0x9, 0x9434, 0x7fffffffffffffff, 0xfffffffffffffff9, 0x6, 0x1825, 0x56c7}, &(0x7f0000000140)={0x6, 0x4f, 0x33, 0x6, 0x11, 0x1000000000009, 0x0, 0x8}, &(0x7f0000000180)={0xa, 0x2, 0x41, 0x1, 0x3, 0x2, 0xb3ce, 0xfffffffffffffff4}, 0x0) r7 = socket(0x11, 0x3, 0x0) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000501600000040000000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000008008d9810361b1257aba8c500002012", 0x8a, 0x808, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$unix(r7, &(0x7f0000000000)="b10005016000009f0500000007000000331c13fecea10500fef96ecfc72fd3357a36acf20b7804be38164991f7cccf5f882b297b42aa5b23edeb51e2f0ac3ebbc257699a6cad05f8f3197674223e7d026ba8af630037282112000000720fd38bfbb770c1f5a872c881e2772ec5a10400000000000000361b1257aea8c5d0002012020000000000880d6633c50000000000000004372000"/177, 0xb1, 0x0, 0x0, 0x0) 55.172968ms ago: executing program 4 (id=17): kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x5, 0x10}], 0x0, 0x0, 0x4, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xd, 0x7d, 0x3, 0x48}, {0x40, 0x8, 0xff}, {0x6, 0x80, 0x6, 0xfffff805}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000001a80)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea10070000000000", 0x8) r2 = kqueue() sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) getresuid(0xfffffffffffffffe, &(0x7f0000000140), &(0x7f0000000080)) kevent(r2, &(0x7f0000000080)=[{{}, 0xfffffffffffffff9, 0x1b, 0x12}], 0x4, 0x0, 0x0, 0x0) kevent(r2, &(0x7f0000000040), 0x4, 0x0, 0x20, 0x0) 42.09578ms ago: executing program 5 (id=18): setreuid(0x0, 0xee01) r0 = geteuid() setresuid(r0, 0x0, 0x0) (async) setreuid(0xffffffffffffffff, r0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) (async) syz_open_pts() (async) close(0xffffffffffffffff) (async) syz_open_pts() (async) open(0x0, 0x400, 0x1) (async) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$VMM_IOC_CREATE(r1, 0xca605601, &(0x7f0000001280)={0x10, 0x1ff, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000095000/0x1000)=nil, 0x6}, {&(0x7f0000543000/0x1000)=nil, &(0x7f00004b8000/0x4000)=nil, 0x4}, {&(0x7f0000307000/0x4000)=nil, &(0x7f0000216000/0x3000)=nil, 0x5}, {&(0x7f0000606000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2}, {&(0x7f00004a5000/0x4000)=nil, &(0x7f000025f000/0x3000)=nil, 0x7}, {&(0x7f00007aa000/0x4000)=nil, &(0x7f0000541000/0x2000)=nil, 0x6600000000000}, {&(0x7f0000ff8000/0x6000)=nil, &(0x7f00003c3000/0x4000)=nil, 0xbc2}, {&(0x7f0000706000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x3}, {&(0x7f000021b000/0x3000)=nil, &(0x7f0000429000/0x4000)=nil, 0x4}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f000012d000/0x2000)=nil, &(0x7f0000018000/0x1000)=nil, 0x9}, {&(0x7f000054f000/0x2000)=nil, &(0x7f00004d1000/0x2000)=nil, 0xffff}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f00005be000/0x3000)=nil, 0x5}, {&(0x7f0000501000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2}, {&(0x7f0000580000/0x4000)=nil, &(0x7f0000258000/0x4000)=nil, 0x6}, {&(0x7f00000ac000/0x1000)=nil, &(0x7f00002fe000/0x2000)=nil, 0xffffffffffffffff}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x1, 0xd51, 0xc, 0xe01, [0x77a80000, 0xffff8001, 0x6, 0x10, 0x8, 0xfffffe83, 0x80000000, 0x7, 0x800, 0x1, 0x5979, 0x11d, 0x6c, 0x5, 0x400, 0x7fffffff, 0x2, 0x2, 0x5, 0x7f, 0x1, 0x9, 0x56, 0x1, 0x6, 0x80000000, 0x15ae, 0x5, 0x7, 0x8, 0x7f, 0x0, 0x3, 0xb, 0x0, 0x1, 0xfff, 0x7, 0xb, 0x5, 0x400, 0x2, 0x7, 0x8, 0x96600e0, 0xf, 0x1, 0x8001, 0xf, 0x9, 0x2, 0x6, 0x0, 0x3, 0x5, 0x8001, 0x7fff, 0x8001, 0x9eb, 0x6, 0x7, 0x8, 0xa794, 0x5, 0x7, 0x9, 0x100, 0x7, 0x6, 0x1ff, 0xfffffffa, 0x1, 0x6, 0x3, 0x2, 0xe, 0xfffffffa, 0x7fff, 0xd, 0x3, 0x6, 0x8, 0x5, 0x1, 0x1, 0xb5e, 0x8, 0x4, 0x1, 0xb, 0x2, 0xffffff01, 0xfffffff7, 0xe92, 0x1, 0x8, 0xffffff1b, 0x1f, 0x30c, 0xc4, 0x5, 0x5505, 0x908, 0x3, 0x9, 0x1, 0x40, 0x81, 0xd1f, 0xd80, 0x3, 0xffff8001, 0x0, 0x1, 0x6, 0x40, 0x9, 0x9, 0x80000000, 0x9f, 0xfff, 0x4, 0x1, 0x6, 0x8001, 0xfff, 0x2, 0xe0c, 0x9, 0x99, 0x7ff, 0x5, 0xf, 0xffffffff, 0x9b0c, 0x3, 0x8, 0xfffffff9, 0x8, 0x60, 0x8, 0x0, 0x8, 0x40, 0x1, 0x3ff, 0xa857, 0xff, 0x7, 0xd, 0x4, 0x8, 0x800, 0x2, 0x68600000, 0x7, 0x8a55, 0x5, 0x10001, 0x3, 0x0, 0x4, 0x7, 0xfffffffa, 0x5, 0x7ff, 0x6b, 0x2, 0x6, 0x1000, 0x4, 0x4, 0xdb1a, 0x4f3a, 0x6, 0x7, 0x7fffffff, 0x3, 0x200, 0x1, 0x201, 0x7ff, 0xffffffff, 0x8, 0xe, 0x8, 0x3, 0x3, 0x100, 0x8, 0x9, 0xaa9, 0x3, 0xd, 0x400, 0x7f, 0xd, 0x8, 0x5a, 0x1, 0x58a9, 0x3, 0x1, 0x5, 0x0, 0x4, 0x8b10, 0xff, 0x6, 0x4, 0x4d3, 0x401, 0x4, 0x3, 0x5, 0xffffffff, 0xf1, 0x8, 0x8, 0xb, 0x8001, 0x27e3800, 0xe3, 0x3a1e00, 0x8001, 0x6, 0x4a37, 0x9, 0x7, 0x3, 0x9, 0x3, 0x9, 0x3, 0x3, 0x96b, 0xeed, 0xfffffffe, 0x7, 0x7f3, 0x50d2, 0x4, 0x0, 0x7fffffff, 0xfffffd6e, 0x2, 0xffffff96, 0x4dd6, 0x113, 0x1, 0x3, 0x3cb, 0xffffffff, 0x3, 0x61d1, 0x7, 0x80, 0x1, 0x5, 0x80000000, 0xdd96, 0x1, 0x1, 0x1, 0x2, 0x9918, 0x6, 0x4, 0xfffffff7, 0xd81, 0x4, 0x9, 0x3, 0x7ff, 0x9, 0x580000, 0xfffffffd, 0x10001, 0x4cf, 0x9a5, 0xb, 0x3, 0x1, 0x4e9, 0x0, 0x5, 0x2, 0xe, 0x1, 0xa, 0x4, 0x2, 0x2, 0x1, 0x7, 0x8001, 0xa8f, 0x8000, 0x0, 0x9, 0x1, 0x8753, 0xffff0000, 0x10001, 0x2, 0x79, 0x81, 0x3, 0x7, 0x7ff, 0x2, 0x1ca000, 0x6, 0xbf, 0x7, 0x0, 0x34, 0x4, 0x6, 0x2, 0x3, 0x4698, 0xffffffff, 0x0, 0x5, 0xffffffff, 0x3b, 0x1ff, 0x8, 0x8, 0xa96e, 0x9, 0x7, 0x7, 0x10001, 0xfffffff7, 0x5, 0x7, 0x8, 0x8001, 0x6, 0x4, 0xfffffff8, 0x9, 0xd19, 0x3, 0x3454, 0x7, 0x0, 0x2, 0x1, 0x7, 0x80000000, 0xb, 0x0, 0x6, 0x0, 0x9, 0xc00, 0x7a, 0x6, 0x1, 0x80000000, 0x7, 0x0, 0x1, 0xfffeffff, 0x51e6, 0xa, 0x6, 0x101, 0xd3, 0x6, 0x7, 0x79be, 0x4, 0x5, 0xe, 0xd963, 0x3, 0x9, 0x6, 0x9, 0x9, 0x3, 0x1, 0x6cea, 0x9, 0xe, 0x436, 0x9, 0xd, 0x0, 0xf, 0x9, 0x5, 0x9, 0x6, 0x11000000, 0x8, 0x8, 0x2, 0x3, 0x7f, 0xc3, 0x100, 0x8001, 0x2, 0x2, 0xb18, 0x5, 0x8, 0x48, 0xe, 0x20000000, 0x288, 0x4, 0x3, 0x4544740e, 0x8, 0x1, 0x9, 0xff, 0x94, 0x7, 0x0, 0x8001, 0x800, 0x0, 0x7fff, 0xc088, 0x80, 0x6, 0x352, 0x4, 0x15, 0x4, 0x6, 0x2, 0x4, 0x6cb, 0x400, 0xa, 0x4, 0x4, 0xdf0, 0x7, 0xd, 0x5, 0x5, 0xf, 0xa0000, 0x9, 0xffff, 0x8, 0x8, 0x3ff, 0x101, 0x6, 0x200, 0x5, 0x40, 0x4, 0x8, 0x4459, 0x7fff, 0x7, 0x0, 0x6, 0xc00000, 0x2, 0x7c47490b, 0x8, 0x1, 0x660, 0x7, 0x2, 0x8, 0x4, 0x3, 0x4fff3ca1, 0xfffffff8, 0x2, 0x3, 0xffffffff, 0x7, 0x7f, 0xff, 0x2, 0x75af, 0xffffffff, 0x3, 0x5, 0x5ae, 0xf, 0x9, 0x6, 0x0, 0x1, 0xc0000000, 0x4, 0x2, 0xffffffff, 0x8, 0xfffffffe, 0x8, 0x1, 0x400, 0x0, 0x4, 0x6, 0x7]}) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) close(0xffffffffffffffff) (async) setsockopt(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)="e9f6d779", 0x4) setgid(0xffffffffffffffff) (async) socket(0x1, 0x2, 0x0) (async) r2 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000019c0)={0x3, 0xfffff501, {[0xfffffffffffffffc, 0xa, 0x5, 0x10000, 0xffffffffffffffff, 0x80008000, 0x21a5d806, 0xe8b5, 0xffffffff, 0x2f01, 0x2, 0x3, 0xfffffffffffffffe, 0x40000002, 0x4, 0x2, 0xfffffffffffffff5, 0x100], [0x9, 0x5, 0xfffffffbfffffff8, 0x0, 0x87c3, 0x80000000, 0x800ee4, 0x0, 0xfffffffffffffffc, 0x800000047], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x1ffffffffff, 0x0, 0x100000002, 0xfffffffffefffffc, 0x189], [{0x0, 0xc, 0x4, 0x7d08}, {0x4, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xffc}, {0x80, 0x0, 0x3, 0xfffffffffffffffe}, {0x9, 0xb0, 0x11, 0x40}, {0x7ffe, 0x50000, 0x40003, 0x1}, {0x6, 0x1, 0x7, 0x9}, {0x9, 0x1095b, 0x200, 0xf}], {0x9b8f, 0x5, 0x20000, 0x6d1c}, {0x203, 0x12, 0x1, 0x1}}}) (async) kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) r3 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) r4 = semget(0x0, 0x1, 0x2c6) ioctl$DIOCGETLIMIT(r3, 0xc0084427, &(0x7f0000002000)={0x6, 0x75714c6}) (async) setuid(0xee01) (async) semctl$GETVAL(r4, 0x4, 0x5, &(0x7f0000001180)=""/249) (async) link(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000240), 0x20, 0x0) ioctl$TIOCNXCL(r5, 0x2000740e) (async) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000003c0)={&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfa}) 41.609255ms ago: executing program 6 (id=19): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$DIOCGETSTATE(r0, 0xc1084413, &(0x7f0000000e40)={{0xa, './file0\x00', [{[@v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v6=@mcast1], [0xee, 0x8554], 0x101, 0x1a}, {[@v6=@loopback, @v6=@empty], [0x5, 0xb8], 0x7ff, 0x18}], {{0x7, 0x0, 0xfc, 0x7}, 0x4, 0x80, 0x5, 0x0, 0x0, 0x5, 0xd}, {{0xb, 0x7, 0xc, 0x5}, 0x400, 0x7, 0xde, 0x1ff, 0x5798, 0xf0, 0x8}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0xfffffffe, 0x8, 0xffffffeb, 0x7, 0x4, [[0x8, 0x7], [0xfec, 0x7fffffff]], [[0xffff, 0x64e2], [0x80, 0x80000001]], 0x80, [0xea, 0xfffffffd], 0x0, 0x356f35eb686ffcc9, 0xe1, 0x1, 0x4, 0x7, 0x7, 0x91, 0x6, 0x1, 0x1, 0x3, "6a17"}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, 0x0) ioctl$DIOCGETRULES(r1, 0xcd604406, &(0x7f00000000c0)={0x101, 0x7fffffff, 0xa, './file0\x00', './file0\x00', 0x0, "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"}) ioctl$TIOCSETA(r1, 0xcd604406, &(0x7f0000000040)={0x7fff, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1d100", 0x84, 0x5}) ioctl$TIOCSETA(r1, 0xcd604406, &(0x7f0000000040)={0x6, 0x0, 0xfffbffed, 0x0, "d6a249000400000079486b47c1d100", 0x4, 0x5}) closefrom(r0) 41.173722ms ago: executing program 0 (id=1): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x80, 0x0) setrlimit(0x3, &(0x7f0000000080)={0x1fb, 0x4}) ftruncate(r0, 0x48001000007) (async) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000000) (async) open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x10) 31.361487ms ago: executing program 4 (id=20): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) r1 = getppid() setuid(0xffffffffffffffff) ktrace(0x0, 0x5, 0xa38, r1) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x4c, 0x0, 0x0, 0x5, 0x6, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0xa7, 0x0, 0x0, {[@md5sig={0x13, 0x12, "065a26671c4a2dcd091bb02983fc332f"}, @md5sig={0x13, 0x12, "96d5419f6701000000000000003cfb78"}]}}}}}}}) 7.729922ms ago: executing program 0 (id=21): mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) (async) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) (async) setuid(0xee01) (async) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) (async) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x3c) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x1e, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) 4.692066ms ago: executing program 6 (id=22): r0 = socket(0x18, 0x2, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000640), 0x3, &(0x7f0000000680), 0x0, 0x0, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e50000b9", 0x4) r1 = socket(0x18, 0x2, 0x0) bind(r1, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c) setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x98, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) recvmmsg(r1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/6, 0x6}, 0x3ae}, 0x38, 0x1000, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000380)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "975203", 0x20, 0x3c, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@dstopts={0x33, 0x2, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1]}]}}}}}) fchown(r0, 0xffffffffffffffff, 0x0) socket(0x18, 0x2, 0x0) (async) sysctl$vm_swapencrypt(&(0x7f0000000640), 0x3, &(0x7f0000000680), 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) (async) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e50000b9", 0x4) (async) socket(0x18, 0x2, 0x0) (async) bind(r1, &(0x7f0000000000)=@in6={0x1c, 0x18, 0x0, 0x9, '\x00', 0x80000001}, 0x1c) (async) setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0x98, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) (async) recvmmsg(r1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/6, 0x6}, 0x3ae}, 0x38, 0x1000, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000380)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "975203", 0x20, 0x3c, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[@dstopts={0x33, 0x2, '\x00', [@ra={0x5, 0x2, 0x1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1]}]}}}}}) (async) fchown(r0, 0xffffffffffffffff, 0x0) (async) 2.654611ms ago: executing program 4 (id=23): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000000800)={{'./file0\x00', './file0\x00', 0x8, 0x47}, 0x0, 0x428, 0x2c, 0x6, 0x3, 0x200, 0xd, 0x2, 0x8}) r1 = socket(0x2, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) (async, rerun: 64) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) setsockopt(r1, 0x6, 0x8, &(0x7f0000001300)="6d2322a0", 0x4) (async) connect$unix(r1, &(0x7f0000000000), 0x10) 736.631µs ago: executing program 5 (id=24): r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000501600000041600000007000000087c156610c18125d7f96ecfc73fd3d89815a9c61d3952ddb06b36ac970bff03000000000000000000000000ebe1aa5323edeb51e2f0ca3ebbc2c4699a09000000acb5b302000d7d010000000100000021020000742fe2458bfbb770c1f5a8aec872ea772ec58904000000008d9810361b1257aba8c500002012010000de5000000000000000000000000000000000000000000000000000001f00000000000000", 0xb1, 0x808, 0x0, 0x0) setresuid(0xee00, 0xffffffffffffffff, 0x0) r1 = semget(0x1, 0x1, 0xa1) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = shmget$private(0x0, 0x3000, 0x41, &(0x7f0000003000/0x3000)=nil) semctl$GETPID(r1, 0x0, 0x4, &(0x7f0000000b40)=""/116) getresgid(0x0, &(0x7f00000000c0)=0x0, 0x0) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, r4, 0x87, 0x7, 0x0, 0x0, 0x417}, 0x2, 0x0, 0x0, 0x8, 0x0, 0x2, 0x4, 0x10, 0x20000003, 0x6, 0x1}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000200)={{r2, r4, 0x0, r5, 0x0, 0xb, 0x0, 0x0, 0x9}, 0x0, 0x2, 0x0, 0x0, 0xd, 0x0, 0x3}) r6 = fcntl$dupfd(r0, 0xc, r0) ioctl$DIOCRADDTABLES(r6, 0xc450443d, &(0x7f00000006c0)={{'./file0\x00', './file0\x00', 0x0, 0x9}, &(0x7f0000000280)=[{'./file0\x00', './file0\x00', 0x50, 0x9}], 0xe, 0x1, 0x9f, 0x2, 0x1c0000, 0x6}) 0s ago: executing program 1 (id=25): symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') setresuid(0x0, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$TIOCSETA(r0, 0xc4504442, &(0x7f0000000300)={0xffffffff, 0x0, 0xa98, 0x94, "08ff000000000000000000005d00", 0x2, 0x9}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x800, 0x6b881aef, 0x2000007, 0xfe, 0x80000001, 0xffff79a9, 0x8, 0x10, [{0x3, 0x7, 0x1, 0x71000}, {0x200007, 0x88, 0x8008, 0x7}, {0x101, 0x9, 0x0, 0x9}, {0x9, 0xd, 0xe}, {0x4, 0xa, 0x10002800, 0x7}, {0x2, 0x27f3, 0x3, 0x5}, {0xce3, 0x4, 0x4f5, 0x2}, {0xe, 0x801, 0xc, 0x8b}, {0x2, 0x82, 0x5, 0x9}, {0x4007, 0x100, 0xd1a, 0x11088}, {0x1e9, 0x5, 0x1, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0x10001, 0x4, 0x8, 0x2}, {0x29a7171c, 0x8, 0x1, 0x7}, {0xc, 0x7, 0x1, 0x8001}, {0x0, 0x1, 0x1001, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) r4 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$VNDIOCSET(r4, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r4, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) r5 = socket(0x2, 0x8002, 0x0) r6 = fcntl$dupfd(r5, 0x2, 0xffffffffffffffff) closefrom(r6) ioctl$FIONREAD(r1, 0x80206910, &(0x7f00000001c0)) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8) pwritev(r1, &(0x7f0000000040), 0x0, 0x7bdc) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCSETA(r1, 0xc450444d, &(0x7f0000000740)={0x0, 0x3, 0xfffffffd, 0x4, "97a2224ff1c14649ebb17a926cc9795a6b47c1d1", 0x4, 0x5}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.183' (ED25519) to the list of known hosts. uvm_fault(0xffffffff839b9a10, 0xffff80000160d00a, 0, 1) -> e kernel: page fault trap, code=0 Stopped at arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx TID PID UID PRFLAGS PFLAGS CPU COMMAND * 80817 75050 0 0 0x4000000 0 syz-executor arp_rtrequest(ffff8000002a2058,1,fffffd806d28ab40) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8fd300,0,ffff80003c8fd270,16) at rtrequest+0xdc1 rtm_output(ffff80000160a200,ffff80003c8fd3a8,ffff80003c8fd300,0,16) at rtm_output+0x91a route_output(fffffd807ece4300,ffff8000015fb7c8) at route_output+0xa6a route_send(ffff8000015fb7c8,fffffd807ece4300,0,0) at route_send+0xd7 sosend(ffff8000015fb7c8,0,ffff80003c8fd558,0,0,808) at sosend+0x804 sendit(ffff80003c90aa80,3,ffff80003c8fd650,808,ffff80003c8fd6f0) at sendit+0x5a5 sys_sendto(ffff80003c90aa80,ffff80003c8fd7a0,ffff80003c8fd6f0) at sys_sendto+0x8d syscall(ffff80003c8fd7a0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf4894a339e0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault(0xffffffff839b9a10, 0xffff80000160d00a, 0, 1) -> e ddb> trace arp_rtrequest(ffff8000002a2058,1,fffffd806d28ab40) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8fd300,0,ffff80003c8fd270,16) at rtrequest+0xdc1 rtm_output(ffff80000160a200,ffff80003c8fd3a8,ffff80003c8fd300,0,16) at rtm_output+0x91a route_output(fffffd807ece4300,ffff8000015fb7c8) at route_output+0xa6a route_send(ffff8000015fb7c8,fffffd807ece4300,0,0) at route_send+0xd7 sosend(ffff8000015fb7c8,0,ffff80003c8fd558,0,0,808) at sosend+0x804 sendit(ffff80003c90aa80,3,ffff80003c8fd650,808,ffff80003c8fd6f0) at sendit+0x5a5 sys_sendto(ffff80003c90aa80,ffff80003c8fd7a0,ffff80003c8fd6f0) at sys_sendto+0x8d syscall(ffff80003c8fd7a0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf4894a339e0, count: -10 ddb> show registers rdi 0xffff800035cd4000 rsi 0x93e rbp 0xffff80003c8fd150 rbx 0xde rdx 0xffff800035cd4000 rcx 0xffff80000160cf20 rax 0xfffffd807ece4be0 r8 0x1000 __ALIGN_SIZE r9 0 r10 0xb5a95eeaa6da4570 r11 0x8975108ada6fb10b r12 0x19 r13 0xfffffd807ece4b00 r14 0xfffffd806d28ab40 r15 0xffff8000002a2058 rip 0xffffffff82888f74 arp_rtrequest+0x6a4 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c8fd0d0 ss 0x10 arp_rtrequest+0x6a4: movzwl 0xc(%rcx,%rbx,1),%ecx ddb> show proc PROC (syz-executor) tid=80817 pid=75050 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=51, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c90afb0,0xffffffff83959c80 process=0xffff8000ffff8d98 user=0xffff80003c8f8000, vmspace=0xfffffd806ca2ba28 estcpu=1, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 75050 273484 88908 0 2 0 syz-executor *75050 80817 88908 0 7 0x4000000 syz-executor 71637 18442 12015 0 3 0x80 nanoslp syz-executor 71637 183426 12015 0 3 0x4000080 fsleep syz-executor 71637 60347 12015 0 3 0x4000080 fsleep syz-executor 71637 277531 12015 0 3 0x4000080 fsleep syz-executor 43953 342777 34154 0 2 0 syz-executor 43953 393072 34154 0 3 0x4000080 fsleep syz-executor 45677 207527 89959 60929 3 0x90 nanoslp syz-executor 45677 158789 89959 60929 3 0x4000090 kqsel syz-executor 45677 425616 89959 60929 3 0x4000090 fsleep syz-executor 45677 391603 89959 60929 3 0x4000090 fsleep syz-executor 8334 332126 23599 0 2 0 syz-executor 8334 227238 23599 0 3 0x4000080 fsleep syz-executor 34154 126424 79846 0 3 0x82 nanoslp syz-executor 12015 369390 79846 0 2 0xc82 syz-executor 88908 207096 79846 0 3 0x82 nanoslp syz-executor 43714 389633 79846 0 2 0x2 syz-executor 23599 347660 79846 0 3 0x82 nanoslp syz-executor 89959 400759 79846 0 3 0x82 nanoslp syz-executor 15136 137463 79846 0 2 0x2 syz-executor 56887 99401 79846 0 2 0x2 syz-executor 79846 101339 63423 0 3 0x82 kqread syz-executor 63423 74705 38838 0 3 0x10008a sigsusp ksh 38838 197056 85286 0 3 0x98 kqread sshd-session 85286 296830 56125 0 3 0x92 kqread sshd-session 16342 101067 1 0 3 0x100083 ttyin getty 56125 148804 1 0 3 0x88 kqread sshd 94625 368241 18120 73 3 0x1100090 kqread syslogd 18120 288404 1 0 3 0x100082 sbwait syslogd 23475 149071 1 0 3 0x100080 kqread resolvd 48542 522306 16185 77 3 0x100092 kqread dhcpleased 90891 521416 16185 77 3 0x100092 kqread dhcpleased 16185 274655 1 0 3 0x80 kqread dhcpleased 83135 163611 0 0 3 0x14200 bored smr 21689 165587 0 0 2 0x14200 zerothread 22845 482168 0 0 3 0x14200 aiodoned aiodoned 67148 111302 0 0 3 0x14200 syncer update 283 314244 0 0 3 0x14200 cleaner cleaner 90493 4043 0 0 3 0x14200 reaper reaper 6452 387579 0 0 3 0x14200 pgdaemon pagedaemon 97821 252946 0 0 3 0x14200 bored viomb 44603 108794 0 0 3 0x40014200 acpi0 acpi0 72417 454433 0 0 3 0x14200 bored softnet0 4162 234886 0 0 3 0x14200 bored systqmp 1924 328828 0 0 3 0x14200 bored systq 83005 506469 0 0 3 0x40014200 tmoslp softclock 55876 73343 0 0 3 0x40014200 idle0 1 216869 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11029 12102K 12167K 166960K 12118 0 pcb 17 12K 12K 166960K 21 0 rtable 250 8K 8K 166960K 374 0 pf 30 12K 13K 166960K 33 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 33 17K 17K 166960K 33 0 ioctlops 0 0K 4K 166960K 35 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1291 81K 81K 166960K 1359 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 15 53K 97K 166960K 154 0 proc 60 67K 116K 166960K 498 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 4 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 367 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 205 158K 167K 166960K 3046 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 36 72K 96K 166960K 1235 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 27 2K 2K 166960K 27 0 temp 35 9066K 9130K 166960K 3829 0 kqueue 13 20K 22K 166960K 25 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 37 0 33 1 0 1 1 0 8 0 rtentry 136 114 0 1 4 0 4 4 0 8 0 unpcb 144 36 0 21 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 12 0 7 1 0 1 1 0 8 0 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 76 0 64 2 0 2 2 0 8 1 nd6 112 26 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 468 0 0 30 0 30 30 0 8 0 art_table 40 470 0 0 5 0 5 5 0 8 0 art_node 32 114 0 11 1 0 1 1 0 8 0 semapl 112 4 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1577 0 116 92 0 92 92 0 8 0 ffsino 256 1578 0 116 92 0 92 92 0 8 0 nchpl 144 1801 0 112 63 0 63 63 0 8 0 vnodes 216 1664 0 0 93 0 93 93 0 8 0 namei 1024 5211 0 5208 2 0 2 2 0 8 1 kstatmem 264 23 0 0 2 0 2 2 0 8 0 scxspl 216 5897 0 5897 2 0 2 2 1 8 2 plimitpl 152 26 0 10 1 0 1 1 0 8 0 sigapl 424 444 0 404 6 0 6 6 0 8 1 knotepl 120 2948 0 2901 2 0 2 2 0 8 0 kqueuepl 184 23 0 12 1 0 1 1 0 8 0 pipepl 304 118 0 91 3 0 3 3 0 8 0 fdescpl 448 431 0 404 5 0 5 5 0 8 1 filepl 120 1469 0 1257 7 0 7 7 0 8 0 lockfpl 104 8 0 6 1 0 1 1 0 8 0 lockfspl 48 5 0 3 1 0 1 1 0 8 0 sessionpl 144 21 0 13 1 0 1 1 0 8 0 pgrppl 48 30 0 14 1 0 1 1 0 8 0 ucredpl 104 84 0 72 1 0 1 1 0 8 0 zombiepl 144 404 0 404 1 0 1 1 0 8 1 processpl 1152 444 0 404 4 0 4 4 0 8 0 procpl 664 483 0 434 5 0 5 5 0 8 0 sockpl 552 150 0 119 3 0 3 3 0 8 0 mcl64k 65536 1 0 1 1 0 1 1 0 8 1 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2488 0 2433 15 0 15 15 0 8 7 mcl2k 2048 141 0 141 3 0 3 3 0 8 3 mtagpl 96 6 0 6 1 0 1 1 0 8 1 mbufpl 256 4278 0 4136 15 0 15 15 0 8 0 bufpl 280 2244 0 102 153 0 153 153 0 8 0 anonpl 24 99447 0 96491 23 0 23 23 0 187 3 amapchunkpl 152 8572 0 8167 19 0 19 19 0 158 3 amappl16 200 1896 0 1877 5 0 5 5 0 8 3 amappl15 192 4 0 4 1 0 1 1 0 8 1 amappl14 184 414 0 413 1 0 1 1 0 8 0 amappl13 176 123 0 113 1 0 1 1 0 8 0 amappl12 168 670 0 644 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 0 1 1 0 8 1 amappl10 152 131 0 121 1 0 1 1 0 8 0 amappl9 144 257 0 257 1 0 1 1 0 8 1 amappl8 136 111 0 110 1 0 1 1 0 8 0 amappl7 128 146 0 134 1 0 1 1 0 8 0 amappl6 120 153 0 151 1 0 1 1 0 8 0 amappl5 112 96 0 89 1 0 1 1 0 8 0 amappl4 104 254 0 239 1 0 1 1 0 8 0 amappl3 96 1464 0 1372 3 0 3 3 0 8 0 amappl2 88 511 0 458 2 0 2 2 0 8 0 amappl1 80 9048 0 8506 14 0 14 14 0 8 1 amappl 88 2367 0 2226 4 0 4 4 0 92 0 uvmvnodes 80 97 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 431 0 404 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 431 0 404 1 0 1 1 0 8 0 vmmpekpl 168 5183 0 5154 2 0 2 2 0 8 0 vmmpepl 168 35965 0 34311 80 0 80 80 0 357 1 vmsppl 368 430 0 404 4 0 4 4 0 8 1 rwobjpl 40 13403 0 12497 11 0 11 11 0 8 0 pdppl 4096 868 0 808 96 14 82 82 0 8 22 pvpl 32 218470 0 210420 71 0 71 71 0 265 1 pmappl 216 430 0 404 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 366 0 14 11 0 11 11 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace arp_rtrequest(ffff8000002a2058,1,fffffd806d28ab40) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8fd300,0,ffff80003c8fd270,16) at rtrequest+0xdc1 rtm_output(ffff80000160a200,ffff80003c8fd3a8,ffff80003c8fd300,0,16) at rtm_output+0x91a route_output(fffffd807ece4300,ffff8000015fb7c8) at route_output+0xa6a route_send(ffff8000015fb7c8,fffffd807ece4300,0,0) at route_send+0xd7 sosend(ffff8000015fb7c8,0,ffff80003c8fd558,0,0,808) at sosend+0x804 sendit(ffff80003c90aa80,3,ffff80003c8fd650,808,ffff80003c8fd6f0) at sendit+0x5a5 sys_sendto(ffff80003c90aa80,ffff80003c8fd7a0,ffff80003c8fd6f0) at sys_sendto+0x8d syscall(ffff80003c8fd7a0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf4894a339e0, count: -10 ddb> machine ddbcpu 1 No such command ddb> trace arp_rtrequest(ffff8000002a2058,1,fffffd806d28ab40) at arp_rtrequest+0x6a4 rtrequest(1,ffff80003c8fd300,0,ffff80003c8fd270,16) at rtrequest+0xdc1 rtm_output(ffff80000160a200,ffff80003c8fd3a8,ffff80003c8fd300,0,16) at rtm_output+0x91a route_output(fffffd807ece4300,ffff8000015fb7c8) at route_output+0xa6a route_send(ffff8000015fb7c8,fffffd807ece4300,0,0) at route_send+0xd7 sosend(ffff8000015fb7c8,0,ffff80003c8fd558,0,0,808) at sosend+0x804 sendit(ffff80003c90aa80,3,ffff80003c8fd650,808,ffff80003c8fd6f0) at sendit+0x5a5 sys_sendto(ffff80003c90aa80,ffff80003c8fd7a0,ffff80003c8fd6f0) at sys_sendto+0x8d syscall(ffff80003c8fd7a0) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xf4894a339e0, count: -10