last executing test programs: 678.284248ms ago: executing program 0 (id=1): futimens(0xffffffffffffff9c, &(0x7f0000000000)=[{0x7, 0x1}, {0x400, 0x2}]) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$WSDISPLAYIO_GINFO(r0, 0x40185741, &(0x7f0000000080)) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$DIOCGETTIMEOUT(r1, 0xc008441e, &(0x7f0000000100)={0x9, 0x80000000}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0) ioctl$DIOCSTOP(r2, 0x20004402) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f0000000180)=0x1) ioctl$DIOCRADDADDRS(r2, 0xc4504443, &(0x7f0000000200)={{'./file0\x00', './file0\x00', 0xa, 0xf8}, &(0x7f00000001c0)=[{@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x4, 0x7, 0x0, 0x8, 0x0, 0x7, 0x46}], 0x779, 0x1, 0x47, 0x4, 0x800, 0x5cb4, 0x40, 0x401}) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000680), 0x400, 0x0) ioctl$VNDIOCGET(r3, 0xc4104603, &(0x7f00000006c0)={'./file0\x00', 0xe9e9, 0x1, 0x2}) ioctl$DIOCSETIFFLAG(r2, 0xc0284459, &(0x7f0000000bc0)={'./file0\x00', &(0x7f0000000b00)=""/139, 0x8, 0x8, 0xfa, 0x9}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000c00), 0x80, 0x0) ioctl$DIOCSETHOSTID(r4, 0xc0044456, &(0x7f0000000c40)=0x80) ioctl$DIOCRSETTFLAGS(r1, 0xc450444a, &(0x7f0000000c80)={{'./file0\x00', './file0\x00', 0x2b, 0x8}, 0x0, 0x0, 0x0, 0x3f6, 0x5, 0x1, 0x4, 0x40, 0x3}) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000001100), 0x20000, 0x0) ioctl$DIOCGETTIMEOUT(r5, 0xc008441e, &(0x7f0000001140)={0xf, 0x8}) ioctl$DIOCSETIFFLAG(r1, 0xc0284459, &(0x7f0000001280)={'./file0\x00', &(0x7f0000001180)=""/218, 0x7, 0x7, 0x200, 0x3ff}) ioctl$DIOCRDELADDRS(r2, 0xc4504444, &(0x7f0000001400)={{'./file0\x00', './file0\x00', 0x2a, 0x9}, &(0x7f00000012c0)=[{@multicast1, '\x00', './file0\x00', 0x3, 0x4, 0x2, 0x1, 0x5, 0x9, 0xff}, {@broadcast, '\x00', './file0\x00', 0x2, 0x5, 0x0, 0x3c, 0x7, 0x1, 0xd}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x0, 0x6, 0x2, 0x80, 0x5, 0x2, 0x5}, {@broadcast, '\x00', './file0\x00', 0x2, 0x3, 0x2, 0x6, 0x2, 0x15, 0x2}, {@remote={0xac, 0x14, 0x0}, '\x00', './file1\x00', 0x7, 0x7fff, 0xc, 0x69, 0x53, 0xc9, 0xe8}], 0x2, 0x5, 0xffffb9bc, 0xec7, 0xa8, 0x3, 0x18, 0x1}) r6 = open(&(0x7f0000001880)='./file0\x00', 0x8, 0x14c) ioctl$TIOCSCTTY(r6, 0x20007461) sysctl$vfs_nfs(&(0x7f00000018c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000001900)="f2b0f5238634e652d788f017959dd53601403adfe7f6204a6dac4ba0d103de", &(0x7f0000001940)=0x1f, &(0x7f0000001980)="992e9f86f2a2f03712ce1f952d2eacfdf757b1936b7f3018621f99340d47d0d6328c4af180830dba78899cb535f982058ef1c604bd188bc5", 0x38) fchmod(r2, 0xb2) ioctl$DIOCRGETADDRS(0xffffffffffffffff, 0xc4504446, &(0x7f0000001c00)={{'./file1\x00', './file0\x00', 0x0, 0x40}, &(0x7f00000019c0)=[{@empty, '\x00', './file0\x00', 0x7, 0x40, 0x18, 0xb1, 0x9f, 0x8, 0x7}, {@multicast1, '\x00', './file1\x00', 0x5, 0x3, 0x0, 0xfb, 0x2, 0xc, 0x6}, {@multicast2, '\x00', './file0\x00', 0x9, 0x1000, 0x18, 0x80, 0x9, 0x7, 0xf2}, {@rand_addr=0x9, '\x00', './file1\x00', 0x200, 0x4, 0x0, 0x0, 0xff, 0x1, 0x3}, {@multicast2, '\x00', './file1\x00', 0x2, 0xfff1, 0x0, 0xe, 0x93, 0x2, 0xc0}, {@empty, '\x00', './file1\x00', 0x2, 0x6, 0x18, 0x0, 0x0, 0xb5, 0x6}, {@rand_addr=0x38, '\x00', './file1\x00', 0x3, 0x8, 0x18, 0x53, 0x8, 0x7}, {@empty, '\x00', './file1\x00', 0x0, 0x9, 0x1a, 0x14, 0xfd, 0x0, 0x9}, {@multicast2, '\x00', './file1\x00', 0x9, 0xffff, 0x0, 0xf, 0x1, 0x2, 0x5}, {@local={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x7, 0x2, 0x1a, 0x4, 0x0, 0xda, 0x9}], 0x4, 0xa, 0x5, 0xb, 0x6, 0x6, 0x48, 0x9053}) ioctl$DIOCADDQUEUE(r4, 0xc148445d, &(0x7f0000002080)={0x8, 0xffffffff, {'\x00', './file1\x00', './file0\x00', './file1\x00', {{0xbe, 0x2}, {0x10000, 0xb7b}, 0xc}, {{0x8, 0x1}, {0x5, 0x8}, 0x5}, {{0xffffffffffffffff, 0x7c}, {0x4}, 0x5}, {0x4, 0x6, 0x7fffffff, 0x2}, 0x0, 0xf, 0x8, 0x6}}) ioctl$DIOCSETHOSTID(r4, 0xc0044456, &(0x7f0000002200)=0x3) ioctl$WSDISPLAYIO_USEFONT(r0, 0x80585750, &(0x7f0000002240)={'./file0\x00', 0x5, 0x5, 0x0, 0x0, 0x7, 0x1, 0x6, 0x0, 0x1, 0x0, 0x8}) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f00000022c0), 0x10000, 0x0) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000002340)={0x6, &(0x7f0000002300)=[{0x7ff, 0x17, 0xf7, 0x6}, {0x78, 0x4, 0x2, 0x6}, {0x9, 0x7b, 0x4, 0x200}, {0x0, 0x2, 0x46, 0x2}, {0x4, 0x81, 0x4, 0x5687}, {0x7, 0xb5, 0x8, 0x1}]}) write(r3, &(0x7f0000002380)="0625932b3fa9d70ea04f72d979ced2d4c112e7953adb5dabdf5f873a8d27a65268e5af574768a7d8d4192406be51cd", 0x2f) 654.531007ms ago: executing program 2 (id=3): socket(0x24, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x2, 0x0, 0x0, 0x8000003}, {0x0, 0x0, 0x40}, {0x46, 0x0, 0x0, 0x37f}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x200, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x36, &(0x7f0000000040)="03000000", 0x4) connect$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0x10001, "fe800500000000000000000500", 0x8}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa17f7193403c6ab5, 0x0) r2 = socket(0x11, 0x3, 0x0) getsockname$unix(r2, 0x0, &(0x7f0000000080)) r3 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) fstatat(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x3) execve(0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r4, 0xc0104451, &(0x7f0000000040)={0x2, 0x408, &(0x7f0000001a40)=[{0x0, './file0/file0/file0\x00', 0x7fff}, {0x0, './file0/file0/file0\x00', 0x1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0xf94a14e19cec2761, 0x0) ioctl$TIOCSETA(r5, 0xc0104453, &(0x7f0000000040)={0x474, 0x408, 0xfeff, 0x10070, "456000004fcb420865abbf000200000000000001", 0x8, 0x7}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f58f10939603ad903abf65b18d01000000000000000000000001000000af776665d4cd12c60034", 0x31}], 0x1, 0x0, 0x0, 0x2}, 0x4) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r7 = syz_open_pts() syz_open_pts() syz_open_pts() fchown(r7, 0x0, 0x0) ioctl$TIOCSETA(r6, 0xc4504448, &(0x7f0000000740)={0x6, 0x3, 0x2, 0xe, "6efc228529a9d556c71d6e4726553ed3ae36c1d1", 0x8000}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) open$dir(&(0x7f0000000180)='./file0\x00', 0x800, 0x49) socket(0x18, 0xc003, 0x3a) 621.341775ms ago: executing program 4 (id=5): ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x9, 0x3, 0x8fe, 0x35, 0x5, 0x3, 0x10, [{0xfffff000, 0x20000002, 0x6, 0x71800}, {0x3, 0x2000b7fe, 0x100}, {0x100006, 0xc7, 0x205, 0x2}, {0x2, 0x80ff, 0x200, 0x8}, {0x10000, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x14000009, 0x10}, {0x1, 0xbffffff9, 0x1, 0x6d}, {0x24009, 0x3, 0xfdf0, 0x4}, {0x7f, 0x6, 0x8003, 0x9}, {0xa1, 0x0, 0x8001, 0x7}, {0x401, 0xfff9, 0x4, 0x8}, {0xcb, 0x2, 0x8, 0x8}, {0x0, 0x29, 0x5, 0x3ff}, {0x8, 0xfffffffc, 0xfffffff5, 0xffffffb8}, {0x6, 0x5, 0x26, 0x7}, {0xfffffffd, 0xd654, 0x3, 0x6}]}) r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) setitimer(0x2, &(0x7f0000000140)={{0x1ce0, 0x3}, {0xb1c0, 0x10000000000011}}, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) r1 = syz_open_pts() ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000040)=0xfffffffb) syz_open_pts() syz_open_pts() 554.45805ms ago: executing program 4 (id=9): r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x20, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x4) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) write(r2, &(0x7f0000000180)="f81ad3010006000000650200000000000000", 0xfea2) setsockopt$inet_opts(r1, 0x0, 0x13, &(0x7f0000000000), 0x48) 554.153496ms ago: executing program 4 (id=10): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$DIOCSETLIMIT(r1, 0xc0084428, &(0x7f0000000880)={0x0, 0xffffffff}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DIOCGETQUEUES(r2, 0xc148445e, &(0x7f0000000200)={0x8, 0xf9a, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x9}, {0x6f7, 0xfffffbff}, 0x5}, {{0x4, 0x5}, {0x9f64, 0x3}, 0x3ff}, {{0x8001, 0x7}, {0x7, 0x2}, 0x2}, {0x2, 0x7, 0x0, 0x1ff}, 0x0, 0x9, 0x3, 0x8, 0x5}}) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x20, 0x3c, 0x0, @empty, @rand_addr=0xffffff}}}}}) 553.401204ms ago: executing program 4 (id=11): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x160) setuid(0xee01) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="7fc50500000000000000b710aa9500e752b000000a52e92a24d18f070008bb11bafcdc24ff4c5d0b5c7b1ad1a2ec434c50019377fa0000000000000000", 0x3d}, {&(0x7f0000000040)="1551e6", 0x3}], 0x2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x8) r2 = syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsid() listen(r1, 0x4) ioctl$TIOCSCTTY(r2, 0x20007461) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000100)="71d2338877aada9873324b9a6fad38f800564dfbbeffb40a309f309ef2264634e287f1db450456cb7d086b58f72154f897a54544fd5e093feb9396cb7c1be7ecacab886fd81d7b68bc48ad12d39c5ef6facc4799a988d6f492d6a5e450bb3ed1342384ea6fc947eadd1267dd7dda0063ced3cb71b816d64de8f7645135fbe5fbde623d107131a05aea67ff661e829acf2d4ab1465d9d55fd00ac2a927ae68254f850e2da0b569256490f0bf13334583665bec82b061e220890d7910fac440d5a3d9936ff5d08be680c01148de99a216c9e7d89251df1dc021456e3ac3238eba4017481a8c841f7bb", 0xe8}, {&(0x7f0000000300)="3b1df484b11c432cc7b886c823734bf33d0df2e0262a7f0a5b15e39e0584b64f7f9ef4d9226d42d801e7e9e68ba9a98a0553f4ebbc7858e301a22b8e1b4ffd1eabbcc73ed3d49b", 0x47}, {&(0x7f0000000380)="422a2ae58f895afd4b69db3fb0158cbdf7f6af453cf0b4be427445b331e25045a5b2b122f3981ae68c478c8601448c2af6f450f9f67049ca0170ce9edd314584b2f7f1c739e34bd9e9e89665284f846e263e1e16c345e5c7a50e78fa222b9db0e38bb03fb153214461ba4ba19dde4992bbef7c423c560410064a81f4aebf8f1fb8c05b1243b1a09c3198c916086254544abb711112a303af5d9d51ed38ccf3a7781605494a83a01203e525862d39c496a8c7aa6ba5633a7cb8e7dc6e6cfd5db6e26cfc288bb63d68c0ba9e7b09c24cdf264dd2b28ddf1cfa8f759c9d28592b4f92a0b8ee3a99edfc5f4a55bbd48abc2a414f2fa67bdb616eea", 0xf9}, {&(0x7f00000004c0)="de76bca9076cd6494815f998f37eee44c44fd33014b344dda651433a7a8ae6922e5344d83f60feab2da6af1c1d2ae617e7b959fb1f3e26e46d8e08c81f8548e2d4fc028bdf0025ef29946270113652568fb87649db7d75fa3291db6c2ee17f3cab6c4de378652ab2ac8fc201ae92bb24829204ba2b4c47f9edc426bea358b517e93687d269b08253e820a6bf4ed87fa57898", 0x92}, {&(0x7f0000000580)="a39e6d7a212e7b9c94679de17a1b6a2b98a4697564d9fe95597bb32a493d2548d3016c48b1a122add2127038739662eba5c8569537de20fe0de02d504709b44938b60c347dea72c1f71f5d4335c96b022fdeaa439d8b6107eab236d427b7340efbadba03c882", 0x66}, {&(0x7f0000000600)="e9d245f9a7ae0644648689280d9a5a8f05f013863efea0c39fee918432ed1ca49b31718c0759f838268fd1e45f361aa0b5669c8a69277744e5b4fbac44a3f53f9828f0e8a043e2abe8d06e73e2fcb3dbfda1c6d59f2e1afa4f230dd45029aee50beec3aeb1b973056305838d8e26d60a212f51372945d927ab67a2604e0476f446ec06d3d7a96ddd6e3b9107abb30530dfb65c75617ec7b9a978c331eba82f1d765cd6bd1de150586ad751c5fb186333fa8fec66e941a949ae67af5b2b7e0d0d539edfc8fa21b0f913b3bf6a", 0xcc}], 0x6) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0x468f, 0x200, 0x3, 0xe0e, "de8599a1c1b9d9b149e1ddbfe399f81b98f3a918", 0x0, 0x4}) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="2f40cb367982f7cdab58e205caf3c950d05ed86a3e289db94d5394", 0x1b}], 0x1, 0xfffffffffffffff8) ktrace(&(0x7f00000002c0)='./file0\x00', 0x5, 0x40001022, 0x0) 497.768302ms ago: executing program 3 (id=4): select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) r0 = kqueue() r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f00000000c0)) kevent(r0, &(0x7f0000000100)=[{{r1}, 0xffffffffffffffff, 0x0, 0x20, 0xffff, 0x7}, {{r0}, 0xffffffffffffffff, 0x30, 0x1, 0x5, 0x3}], 0x8, &(0x7f00000001c0)=[{{r0}, 0xfffffffffffffff7, 0xbe, 0x1, 0xe8a8, 0x8}, {{r0}, 0xfffffffffffffffc, 0x0, 0x20000000, 0x3027, 0x100000000}, {{r0}, 0xfffffffffffffff8, 0x81, 0x40000000, 0x6, 0x9}], 0x2, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r2 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x787, 0xfffffff9, 0x3, 0x1, 0x44ad, 0x7fffffff, 0x100007, 0x2, 0x0, 0xfffffffffffffffe, 0x3ff}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) r3 = socket(0x18, 0xc003, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0x66, 0x0, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getresgid(&(0x7f00000002c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) fchown(r3, r4, r5) 480.213845ms ago: executing program 6 (id=7): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x1}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x3}, {0x2, 0x8}, {0x2}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {0x0, 0x5}, {0x4, 0x7b0b}, {0x0, 0x10001}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x2800}, {}, {}, {}, {0x0, 0x7}, {0x2, 0xa}, {0x1, 0x1ff}]}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) (async) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0xb}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x800) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xb}, 0x4, &(0x7f0000000180)="0fab6dd99d9e2a64326dbafde36b631cba69c671cd7cad6d54c993bfe264e47e44fb3a0e9af9e3baa75187dd3822c53b4a4847878060da39a9c0b94e5765699bc67d5396a16746a776953832c1208a24417f75b72abadf1c49519174a55dd14a0f2c8fa546809823b58cb18b786f892445bb24fcb9636d0caea255c10d3cc32eaa96bb892ebf521ccc7dd34411d66c5fbd1845ed9693ff958d5e2e097c3bd207669f47c595bdf6225f6006de8441e44ec4aa47a2d789a1604cb4d68d2e05c6c5e7da315a8d33af5224d0dc2fc37cef02eb95908042823729432b", &(0x7f0000000280)=0xda, &(0x7f00000002c0)="20b5c942f80c9a1ef197c33cfce285a0b8f562c42903ffbb8da84bc6bb287e3857a7ad465e3fa240b8326ec5661264daa5e47f6c2176e68c6453b7ac8876603df8323190a8e964563d1fbbda18fb2c23fe3d88d6cc32c5fa109fe4a86d4ac479c16b0c4956f7e889eaae5673cb43d05a3c52f9fd14a0197b4ed2fa424d302350c85838c0ca3579fb1d452003eeed4d24bc0eaae5bc30f0a6a9fcbc598d5fcd9c", 0xa0) 438.822342ms ago: executing program 1 (id=12): r0 = socket(0x10, 0x1000, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x0, "fe80029400fdff00", 0x20}, 0x1c) bind(r0, &(0x7f0000000040)=@un=@file={0xe, 0x1, './file0\x00'}, 0xa) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000980), 0x800, 0x0) ioctl$BIOCLOCK(r1, 0x20004276) ioctl$BIOCFLUSH(r1, 0x20004268) futimes(r1, &(0x7f0000000740)=[{0x1, 0x2}, {0x8000, 0xfffffffffffffff9}]) 413.804622ms ago: executing program 6 (id=13): mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) r0 = open(&(0x7f0000000080)='./file2\x00', 0x0, 0x51) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbeffffffffb, 0x1, 0x2, 0x2, 0x8001, 0xfffffffffffffffe, 0xd, 0x7fffffffffffffff, 0x0, 0x9, 0x800, 0x3, 0xffffffffffffffff, 0x400000008000000, 0x3, 0xffffffffffffffa3, 0x82, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffff6, 0x2, 0x0, 0x7b98, 0x6, 0x0, 0xfffffffffffffffe], [0x5ad8, 0x6, 0x40000002, 0xa, 0xfffffffffffffffb, 0x11003, 0x4], [0xd, 0x9, 0xfffffffffffffffc, 0x8040000100000000, 0xfffffffffffffff6, 0x4], [{0xdb6e, 0x4, 0x0, 0x40007d06}, {0xfffc, 0x2, 0x5}, {0x0, 0x0, 0xfffffffe, 0x80}, {0x4, 0x4b72, 0x3, 0xffffffffffffffff}, {0x0, 0xfffff3d8, 0x0, 0x8000000000000008}, {0xfffe, 0x2006, 0x40000, 0x6}, {0x6b7, 0x0, 0x2}, {0x0, 0x7, 0xfffffffc, 0xa}], {0x2000, 0x7, 0x8}, {0x29, 0x0, 0x4, 0x2}}}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x56, 0x0, 0x7fff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) bind$unix(r2, &(0x7f00000000c0)=@file={0x4, 0x1, './file0\x00'}, 0xa) r3 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000440)=@file={0x95, 0x1, './file0\x00'}, 0xa, &(0x7f0000000880)=[{&(0x7f0000000480)="ece01b8d6f66d519ae6b75d1d68f34637037c1b5137dc4c23091fe47cb67ac786c46585ec4b3c4c0bbb0f14e4e95afd42752f38e82b6c3681af8c377db2fa3f40d6807a2cc158a1a85a4deb52467fcf91ce9996c6ca4ccb37693dcf11dd3dcc5feecb1ce7b81fe070545eefc5a02", 0x6e}, {&(0x7f0000000500)="56d964f363b42cfc53e4087f96c1945c44df5035d8d1c20578d07af087cf1e1b3bc8c5b6a34623c326f3949376aa9d499d90e2eb894f1c70e9debb4a5e655ae15dd0c4f047e365a81ef47c0611d32c91493898f2a1d325cc37b87eefcce294ff6ef0f5d9153ada0846564ba929ffbcfa66ad832b1efb317baef75e2df19d008a1f0c2304d0bf980cba3d8f9753e6a00ee9a88f51f8ae33610ee91216393eca388f2fb87cedce43a609c97de5677a7dd6f205fdc99111bddb5974078dff20d6ed0592", 0xc2}, {&(0x7f0000000600)="655a6b776da435c0aaf6f7d3bd85dd4c2022c40019173059dccd6566805787c97d7bb23dbe92aa8b8d653cc61d45c59e27279ddd5344836ab07d4890034a0e00174d02c5d159d79028dbc76d98dd2af34ea5cebc9a06a082f6c5b0ee2bb3a0ccbd2c924e2e65eb07b1de4b8caca888356ef0f8c50bbec1b4f381fc0ea25490a71c75a3acfbd00815adc02f", 0x8b}, {&(0x7f00000006c0)="cfd49c468fb1f1172187a1d57f917915419659a29b84ba93a99d1c3c40ef56b84272bbee57148ba5f00b4f7d28052476a02881e0988be605bb62a6dc8eb86ec0d0f9303b3eba2ae19ef993eee5dd75ecb833cd22d642a49c0a34e1abc736b5f8d4f63e8b92380c891fa608f895b877c3c1f6acd696ba5dfcbe2a10524a05ba192f31e827090087ab6efe6fe515bec5693c8467a32f1da8f4d199c7c9ad81f4efbe5ce32ce7270f9521dfeffe9cfe7b30c2896158b99b251fab2fe31cc3a1efc8fed3c0d2fdf41320ef8665502ebb", 0xce}, {&(0x7f00000007c0)="ee5c699d913475364476032db790f7c82ae643d0700353cde801cdc8e5f8194d55e9e483d5b628919d79f26daedd1ed68fae21ba92a856d21d16701709bb42328300999a73b970aee21cfd1a5ee1afee12585e1b6cfeaa1a78bb387709b40c5c89957f154aa91f1b9aa9981ab8e71000ef44f2c97746316420bd88395e7d5f07b35fd959323631f3722524371d75688d8c589a", 0x93}], 0x5, 0x0, 0x0, 0x5}, 0x4) connect$unix(r3, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) getresgid(&(0x7f0000000000), 0x0, 0x0) sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000140), 0x0, &(0x7f00000001c0), 0x0) ioctl$DIOCKILLSTATES(r0, 0x0, &(0x7f0000000340)={{0x8, 0xe2f}, 0x2, '\x00', 0x6, {@table={'./file0\x00', 0x0, 0x3, 0x7}, [0x9, 0xe2], 0xf8, 0x5, 0x8}, {@any={'\x00', 0x0, 0x7, 0x6}, [0xb], 0x9, 0x5, 0x291}, './file2\x00', './file2\x00', 0xf7e7, 0x401}) syz_open_pts() 413.369112ms ago: executing program 7 (id=14): mkfifo(&(0x7f0000000000)='./file0\x00', 0x5) (async) mkfifo(&(0x7f0000000000)='./file0\x00', 0x5) rmdir(&(0x7f0000000040)='./file0\x00') 411.305133ms ago: executing program 3 (id=15): r0 = socket$inet6(0x18, 0x2, 0xc) getsockopt(r0, 0x29, 0x28, 0x0, 0x0) 352.222432ms ago: executing program 1 (id=16): mknod(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1e5f) (async) r0 = open(&(0x7f0000000040)='./file0\x00', 0x80, 0x95) ioctl$BIOCSETWF(r0, 0x80184404, &(0x7f0000000000)={0xffffffffffffffa0, 0x0}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x40000928, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x8010, r1, 0x0) (async) select(0x40, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x1}, &(0x7f00000024c0)={0x8, 0x20008000000000, 0x0, 0x2300000000000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 351.880944ms ago: executing program 3 (id=17): sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x13}, 0x4, 0x0, 0x0, &(0x7f00000011c0)="01000000", 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=""/255, 0xff}, 0x2300) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 351.361448ms ago: executing program 7 (id=18): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) r1 = kqueue() kevent(r1, &(0x7f0000000240)=[{{r0}, 0xfffffffffffffffc, 0x2b, 0x4, 0x0, 0x5}], 0x8, 0x0, 0x15, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) select(0x40, &(0x7f0000000040)={0x1, 0x100, 0x6166, 0x6, 0x6, 0x1, 0xffffffffffffffff, 0x6}, &(0x7f0000000080)={0x6, 0x805, 0x0, 0x7, 0x4, 0xfffffffffffffff9, 0x4, 0xd8}, &(0x7f00000000c0)={0x8, 0xffffffffffffffff, 0x8, 0x3, 0x4, 0x35, 0x5, 0x9}, &(0x7f0000000100)={0x13, 0xfffffffffffffeff}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) (async) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) (async) kqueue() (async) kevent(r1, &(0x7f0000000240)=[{{r0}, 0xfffffffffffffffc, 0x2b, 0x4, 0x0, 0x5}], 0x8, 0x0, 0x15, 0x0) (async) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) select(0x40, &(0x7f0000000040)={0x1, 0x100, 0x6166, 0x6, 0x6, 0x1, 0xffffffffffffffff, 0x6}, &(0x7f0000000080)={0x6, 0x805, 0x0, 0x7, 0x4, 0xfffffffffffffff9, 0x4, 0xd8}, &(0x7f00000000c0)={0x8, 0xffffffffffffffff, 0x8, 0x3, 0x4, 0x35, 0x5, 0x9}, &(0x7f0000000100)={0x13, 0xfffffffffffffeff}) (async) 350.847718ms ago: executing program 1 (id=19): r0 = shmget$private(0x0, 0x2000, 0x18, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0x4) (async, rerun: 32) umask(0x68) (rerun: 32) 350.420149ms ago: executing program 5 (id=6): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async) r0 = shmget$private(0x0, 0x2000, 0x3b4, &(0x7f0000001000/0x2000)=nil) (async, rerun: 32) sendmmsg(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0xfffffffffffffe36, 0x0, 0x0, 0x0, 0xfffffffffffffff6}}, 0x42, 0x410) (rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) (async) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) (async) shmdt(0x0) 350.096681ms ago: executing program 3 (id=20): r0 = socket(0x1, 0x2, 0x0) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) (async) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f00000001c0)) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0) 349.662464ms ago: executing program 7 (id=21): setresgid(0xffffffffffffffff, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000040)="27a8053275cbb3c7514a5ad3264c61519ca77fb3614d1d68ed0dad154e4e8576cf9f3ea69260a50b37dd78515ad70adf16e0ec7b40a69ebd2786f8c21dbeb2480409781d2cb113048a6febd86f0af77fdaf598", &(0x7f00000000c0)=0x53, &(0x7f0000000100)="c974b92a", 0x4) 188.48627ms ago: executing program 1 (id=22): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xffffffffffffffff) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000000)='./file2/file0\x00', 0x40) chdir(&(0x7f0000000340)='./file2/file0\x00') rename(&(0x7f00000003c0)='.\x00', 0x0) ioctl$KDSETMODE(0xffffffffffffff9c, 0x20004b0a, &(0x7f0000000000)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x11, 0xffff63d6, 0x6, 0x4, 0x8, 0x5, 0x20000007, 0x10000000000000f2, [{0x1, 0x10000, 0xfffff114, 0x2}, {0x7fffffff, 0x3, 0x2, 0x10}, {0xcd7, 0x0, 0x2, 0x3}, {0x7, 0x7f, 0x2000000f, 0x2000100}, {0x104, 0x2, 0x0, 0xfffffffe}, {0x388d, 0x40fff9, 0x1, 0x4}, {0x2, 0xa00, 0x4, 0x1}, {0x4, 0x1, 0x28005, 0x9}, {0x9, 0xf7ffffff, 0x4, 0x8003}, {0x4, 0x40, 0x3ff, 0xf}, {0x3, 0x0, 0x8a3a0004, 0x401}, {0xfffe, 0x13e, 0x40000d, 0x10001}, {0x401, 0x0, 0xfffffffc, 0x8}, {0x4, 0x2, 0x400, 0x7}, {0xfffffffe, 0xd, 0x8000003, 0x200}, {0x9be2, 0x1, 0x23, 0xffff}]}) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x26}, 0x3, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000001c0)='.\x00', &(0x7f00000002c0)='r\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000240)={0x1000f66c, 0x1, 0x200000f, 0x5fffff83, "9cdcb99375947dacb0253c0000002f9e68de3204", 0x3, 0xd}) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000009c0)="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", 0x9ef}], 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xffffffffffffffff) (async) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) (async) mkdir(&(0x7f0000000000)='./file2/file0\x00', 0x40) (async) chdir(&(0x7f0000000340)='./file2/file0\x00') (async) rename(&(0x7f00000003c0)='.\x00', 0x0) (async) ioctl$KDSETMODE(0xffffffffffffff9c, 0x20004b0a, &(0x7f0000000000)=0x1) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x11, 0xffff63d6, 0x6, 0x4, 0x8, 0x5, 0x20000007, 0x10000000000000f2, [{0x1, 0x10000, 0xfffff114, 0x2}, {0x7fffffff, 0x3, 0x2, 0x10}, {0xcd7, 0x0, 0x2, 0x3}, {0x7, 0x7f, 0x2000000f, 0x2000100}, {0x104, 0x2, 0x0, 0xfffffffe}, {0x388d, 0x40fff9, 0x1, 0x4}, {0x2, 0xa00, 0x4, 0x1}, {0x4, 0x1, 0x28005, 0x9}, {0x9, 0xf7ffffff, 0x4, 0x8003}, {0x4, 0x40, 0x3ff, 0xf}, {0x3, 0x0, 0x8a3a0004, 0x401}, {0xfffe, 0x13e, 0x40000d, 0x10001}, {0x401, 0x0, 0xfffffffc, 0x8}, {0x4, 0x2, 0x400, 0x7}, {0xfffffffe, 0xd, 0x8000003, 0x200}, {0x9be2, 0x1, 0x23, 0xffff}]}) (async) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x26}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) unveil(&(0x7f00000001c0)='.\x00', &(0x7f00000002c0)='r\x00') (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) (async) syz_open_pts() (async) close(r0) (async) syz_open_pts() (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000240)={0x1000f66c, 0x1, 0x200000f, 0x5fffff83, "9cdcb99375947dacb0253c0000002f9e68de3204", 0x3, 0xd}) (async) writev(r0, &(0x7f0000001c80)=[{&(0x7f00000009c0)="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", 0x9ef}], 0x1) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x400) (async) 176.412244ms ago: executing program 5 (id=23): r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0xd27d43220c7ff9d, 0x0) futimens(r0, &(0x7f0000000000)=[{0x8, 0xffffffeffffffffe}, {0x4, 0x1}]) open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) (async) ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0xd27d43220c7ff9d, 0x0) (async) futimens(r0, &(0x7f0000000000)=[{0x8, 0xffffffeffffffffe}, {0x4, 0x1}]) (async) 175.956321ms ago: executing program 7 (id=24): r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) minherit(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3) shmget$private(0x0, 0x2000, 0x17e, &(0x7f0000ffc000/0x2000)=nil) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x7, 0x7, 0x6, 0x5}, {0x7, 0xff, 0x7, 0x5}, {0x6, 0x2, 0x1, 0x2}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x9, 0x3, 0x8fe, 0x4, 0x5, 0x3, 0x10, [{0xfffff000, 0x2, 0x6, 0x71800}, {0x3, 0x2000b7fe, 0x6, 0x40020000}, {0x0, 0xc7, 0x208, 0x2}, {0x2, 0x80ff, 0x200, 0x5}, {0x10000, 0x3, 0x5, 0x7}, {0x2002, 0x83, 0x14000009, 0xf}, {0x5, 0xbffffff9, 0x1, 0x6d}, {0x2400a, 0x3, 0xfdf0, 0x4}, {0x1, 0x6, 0x3, 0x9}, {0x401, 0x0, 0x8001, 0x7}, {0x401, 0xfff9, 0x48a, 0x13}, {0xce, 0x7584, 0x8, 0x8}, {0x2000df, 0x2b, 0x5, 0x3ff}, {0x2, 0xfffffffc, 0xfffffff5, 0x3}, {0x6, 0x5, 0x26, 0x40000003}, {0xfffffffd, 0xd654, 0xffffffff, 0x6}]}) r2 = socket(0x18, 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) symlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0xd02) link(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000240)='./file0\x00', 0x6000, 0x215b9a) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r2, 0x8020699d, &(0x7f00000001c0)) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x20}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x4, &(0x7f0000000200), 0x0, 0x0, 0x0) ioctl$FIONREAD(r1, 0x4004667f, &(0x7f0000000040)) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8020690c, &(0x7f0000000100)) 175.496964ms ago: executing program 3 (id=25): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2, &(0x7f0000000ec0)=[{0x200, 0x4e, 0x8, 0x80000001}, {0x41, 0x6, 0x9, 0xff}]}) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, 0x0) r0 = socket(0x18, 0x3, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setresuid(0x0, 0xee00, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x3fff) ktrace(&(0x7f0000000280)='./file0\x00', 0x1, 0x40000928, 0x0) accept$inet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x10) r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)="48a27d96c72cd6", 0x7}], 0x1, 0x0}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105727, &(0x7f00000000c0)={0x0}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) socket(0x20, 0x8000, 0x0) connect$unix(r0, &(0x7f0000000040)=@file={0xc0, 0x1, './file0\x00'}, 0xa) 174.481283ms ago: executing program 1 (id=26): sysctl$net_inet_tcp(&(0x7f00000005c0)={0x4, 0x2, 0x6, 0xf}, 0x4, 0x0, 0x0, &(0x7f0000000700), 0x0) 160.533186ms ago: executing program 1 (id=27): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x4, 0xfd, 0x0, 0xfffffffe}, {0x2, 0x0, 0x0, 0xffffffff}, {0x17f, 0x0, 0x0, 0xbc2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, 0xfffffffffffffffe, &(0x7f0000000080)=0xff0a, 0x0, 0xffffffc9) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2}, {0x0, 0xfffffffe}, {}, {}, {}, {0x3, 0x3}, {0x2, 0x1}, {0x3}, {0x0, 0x9}, {0x1}, {}, {0x2, 0x4800000}, {}, {}, {0x3, 0x10000000}, {}, {0x0, 0x4}, {0x4, 0x7b0b}, {0x0, 0x10001}, {0x1, 0x2}, {0x0, 0x3}, {0x3}, {}, {0x0, 0xfffffffd}, {0x0, 0x1}, {0x0, 0x27fe}, {}, {}, {}, {0x0, 0x7}, {0x2, 0xb}, {0x1, 0x1ff}]}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f000014c000/0x4000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f000004a000/0x2000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff9}, {&(0x7f0000312000/0x2000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000064c000/0x4000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000026000/0x4000)=nil, 0x6}, {&(0x7f00001dc000/0x1000)=nil, &(0x7f00001db000/0x3000)=nil, 0xc6}, {&(0x7f0000392000/0x1000)=nil, &(0x7f00003a6000/0x3000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x51c}, {&(0x7f000068b000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc0}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x4000009e}], './file0\x00', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x800000, 0x0, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x600000, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x7, 0x0, 0x9, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffc]}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = semget(0x0, 0x1, 0x281) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) mkdir(&(0x7f0000000100)='./file0\x00', 0x100) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) unveil(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='c\x00') unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') semctl$IPC_STAT(r1, 0x0, 0x2, 0x0) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) futimes(r0, &(0x7f0000000ac0)=[{0x8, 0x7ff}, {0x8, 0x70}]) mquery(&(0x7f0000ff4000/0x1000)=nil, 0x7ed841f1e000, 0x0, 0x0, 0xffffffffffffffff, 0x0) minherit(&(0x7f00003aa000/0xf000)=nil, 0xf000, 0x0) semget(0x0, 0x3, 0x54e) r2 = syz_open_pts() fcntl$lock(r2, 0x8, &(0x7f0000000000)={0x2, 0x0, 0x31a, 0x1000300000080}) openat$pf(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1100, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) writev(r3, &(0x7f0000000240)=[{&(0x7f0000000300)="00000001", 0xffffff0a}], 0x1) r4 = socket(0x2, 0x8002, 0x0) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000b00), 0x8000, 0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) 130.528786ms ago: executing program 0 (id=28): syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[@ANYRES64]) (async) r0 = setsid() (async) open(0x0, 0x18289, 0xa0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r2, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$VMM_IOC_RESETCPU(r1, 0x82405605, &(0x7f0000000100)={0x6, 0x9, {[0xfffffbfffffffff9, 0x1, 0x2, 0x2, 0x6, 0x7, 0x3, 0xffffffffffffffff, 0x5, 0x8, 0x100000001, 0x8000, 0xffffffffffffffff, 0x200000000002, 0xffffffffffffff93, 0x3, 0xfffffffffffffffe, 0xed7], [0x5, 0x70000, 0xfffffffffffffffa, 0x20200001, 0x5e, 0x5, 0x0, 0x9, 0xb3, 0xfffffffffffffffc], [0x100000001, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xffffffff00000000], [0x5, 0x1, 0x7, 0x4000000, 0x2, 0x90000000], [{0x200, 0x0, 0x9, 0x7d06}, {0xfc5e, 0x22, 0x4008}, {0x4, 0x0, 0xfffefffe, 0x282}, {0x3, 0x4, 0x1, 0xfffffffffffffffc}, {0x14, 0x2, 0x7f, 0x8}, {0x0, 0xc, 0x5, 0x2000000000000000}, {0xea, 0x219, 0xfffffff4}, {0xe, 0x2, 0x1, 0x4}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0xbc2, 0x406d5, 0x8000000000006}}}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) chroot(&(0x7f0000000340)='./file0\x00') (async) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0xa, &(0x7f00000002c0)='\x00\x00\x00\x00', 0x4) sendmmsg(r3, &(0x7f0000000380)={{&(0x7f0000000040)=@un=@abs={0x2, 0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0}}, 0x38, 0x608) (async) chroot(&(0x7f0000000740)='.\x00') r4 = socket(0x18, 0x3, 0x4) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) r5 = socket(0x18, 0x3, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, 0x0}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x3, 0x2, 0x8000000000000001, 0x2001000300000000}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DIOCXBEGIN(r6, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, &(0x7f0000000c40)}) (async) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000100)) (async) wait4(r0, &(0x7f0000000000), 0xa, &(0x7f00000000c0)) (async) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000180), 0x1, 0x0) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x1, 0x2, 0x1, 0xa9}, {0x5c, 0x81, 0xfc, 0x8}, {0x9b1e, 0x1f, 0x0, 0x350e4000}]}) (async) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaa8ffffffffffff08004600002cfffe000000019078e000000200000000830380000d00907800020005010000000b0000010000000b70ba07145535acfa26de76ab487cbd80e5b1ddf7b9f17e2725e5d6b5e1ba02a121d3ac771683502b5c45"]) 129.062955ms ago: executing program 3 (id=29): r0 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETIF(r0, 0x40384900, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0x80184901, &(0x7f0000000180)={0x0, './file0\x00'}) r1 = accept$unix(r0, 0x0, &(0x7f0000000080)) dup3(r0, r1, 0x10004) ioctl$VNDIOCGET(r0, 0xc4104603, &(0x7f0000000340)={'./file1\x00', 0x8, 0x7fffffff, 0x400}) sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x2b}, 0x4, &(0x7f0000002740)="abf734f1", &(0x7f0000000100)=0x4, 0x0, 0x0) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='c\x00') writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x2, 0x0) sendmmsg(r2, &(0x7f0000000200)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x0, 0xfffffffb, "ff0200000000008000ffff0100", 0x4}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') 128.49562ms ago: executing program 5 (id=30): r0 = shmget$private(0x0, 0x4000, 0x520, &(0x7f0000038000/0x4000)=nil) setgid(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$DIOCRDELTABLES(0xffffffffffffffff, 0xc450443e, &(0x7f0000003540)={{'./file0\x00', './file0\x00', 0x30, 0x7f}, &(0x7f0000000fc0)=[{'./file0\x00', './file0\x00', 0xa0, 0x37}, {'./file0\x00', './file0\x00', 0x13, 0xb}, {'./file0\x00', './file0\x00', 0x5, 0x54}, {'./file0\x00', './file0\x00', 0x1, 0x5}, {'./file0\x00', './file0\x00', 0x20, 0x30}, {'./file0\x00', './file0\x00', 0x41}, {'./file0\x00', './file0\x00', 0x15, 0x61}, {'./file0\x00', './file0\x00', 0x4, 0xfe}, {'./file0\x00', './file0\x00', 0x49, 0x5}], 0x3, 0x9, 0x8, 0x8, 0x6, 0x7b, 0x2, 0x7}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r2 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0206937, &(0x7f0000000100)) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000140)=0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000f40)={{0x0, 0x0, r3, 0x0, 0x167, 0xb, 0x0, 0x0, 0xc3}, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x80, 0x8, 0x7, 0x6, 0x8}) setgroups(0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x4}, 0x2, &(0x7f0000000040)="9c306107e6e51b016bfd217a7f42763e04bf3918c2845ae63de6ceffac657837fccacaabf5d634f3d7e86b39e5431f488300483b3d18504c15c71446952a510f8248f7b70271c92a8ebd", &(0x7f00000000c0)=0x4a, &(0x7f0000000240)="fc3f75798c97e50dddabab4cc3acc19f7720f3e3f0bc17ed466cc37d8232a6a6576be69970a48ff0ee58484e6d322220d62b3470d89460951da7e892c90406ac91f146c95624538676722ec440f44861f082c81e3e393a94d7fcb2131cb5d6e70c0c203adc8f83206339302038d4892459c270bbc8999875e3c6236f444199042ca4acf3981172698dd3c53160cdd2d69e204674c7b0b1a498b4f91ab1a61103c521354dd72c3b2c05b085cbe532325385d988bebba8c02ffe3d5f6a70237e8e37228620b88f35db0538bf4c5766a806f3aa5db2468369e7dfe0d1d413b120f7df19a3e09e3a12dcfccffd75", 0xec) setuid(0xffffffffffffffff) shmat(r0, &(0x7f0000038000/0x3000)=nil, 0x2000) 83.28686ms ago: executing program 6 (id=31): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0xffffffff, 0xfffffffc, 0x3, 0xffffff80, "0120002d29497f07af80d6df356bbb612c0800", 0x3, 0x3}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0xfffffff9, 0xffff63db, 0x17, 0x808, 0x8, 0x0, 0x7fffffff, 0x10, [{0x8, 0x10000, 0xfffff115, 0x101}, {0x0, 0xffffffff, 0x200100, 0xffd}, {0xcd8, 0x4b8a, 0x4, 0x3}, {0x7fff, 0x8020fe, 0x13, 0x2000100}, {0x6, 0x2000007, 0x8, 0x5}, {0x7f, 0xfffd, 0x6, 0x40000029}, {0x10004, 0xa00, 0x3, 0xfffffffb}, {0x207, 0xffffffff, 0x4, 0xffffe2e9}, {0x9, 0x1004, 0x5, 0x7fff}, {0xfe29, 0xfffff001, 0x7, 0xfffffd76}, {0x3, 0x0, 0x8a3a0004, 0x2000a}, {0x8010000, 0x7, 0x1, 0xa6a}, {0x401, 0x3, 0x7f, 0x4}, {0x3, 0x400022, 0xfffffffd, 0x6f5fc48f}, {0x3, 0xff, 0x3, 0x9}, {0x6, 0x7d, 0xfffffffe, 0xb}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x18, 0x0, 0xffffffffffffffb8) sysctl$kern(&(0x7f0000000040)={0x1, 0x2c}, 0x3, &(0x7f0000000180)="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", &(0x7f0000000080)=0xaa, &(0x7f00000007c0)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be3894fd3229fe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e45570700000080000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d8012d63631b2fbedef9d152fa0609c5a47380657b90f7ad4a8987a947d8f2ca5defd3b7f83aacecee70cce8eb3935b0033196d24c5dd4bf604c03185ed97e16587ddcfaf72b4d8d5b903ee", 0xffffff33) 82.824992ms ago: executing program 6 (id=32): r0 = socket(0x18, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x0, "fe80029400fdff00", 0x3}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000500)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x37, 0x0, @rand_addr="8fd8b0e5602493ff1f88b029e0ad0c35", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c32e", 0x6, 0x89, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}}}}) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f00000000c0)={&(0x7f0000000040)=[{0x21, 0x5}], 0x1}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) 81.646956ms ago: executing program 5 (id=33): kevent(0xffffffffffffffff, &(0x7f0000000240)=[{{}, 0xfffffffffffffff6, 0x28, 0xf27ff7791bbc9c0f, 0xfd, 0x13fff}], 0x1, 0x0, 0xfffffff8, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) (async) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000)="0000e65bc39e76ecc9ddb3c3cc6bbc2506870300ec", &(0x7f0000000240)=0x15, 0x0, 0x0) r1 = dup3(r0, r0, 0x10004) ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000000300)={{0x8000000000000000, './file0\x00', [{[@v4=@remote={0xac, 0x14, 0x0}, @v6=@empty], [0x8, 0x1]}, {[@v6=@mcast2, @v6=@empty], [0xf8e5, 0x101], 0x28e, 0x18}], {{0x4, 0x91, 0x8, 0x8}, 0xa8, 0x2, 0x401, 0x5, 0xb3, 0xd, 0x6}, {{0x7, 0xd, 0x3, 0x2}, 0x80000100, 0x7ff, 0x4, 0x5, 0x8000, 0x5, 0x5}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0xbfdb, 0x1, 0x0, 0x3, 0x8, [[0x7ff, 0xe], [0xf35, 0x4]], [[0x2, 0xa], [0x5]], 0x7ff, [0x9, 0x3a13], 0x8, 0x2a, 0x1, 0x3, 0xf, 0xf, 0xd, 0xf, 0x2, 0x25, 0x3, 0xfffc, 'R6'}}) (async) ioctl$DIOCGETSTATE(r1, 0xc1084413, &(0x7f0000000300)={{0x8000000000000000, './file0\x00', [{[@v4=@remote={0xac, 0x14, 0x0}, @v6=@empty], [0x8, 0x1]}, {[@v6=@mcast2, @v6=@empty], [0xf8e5, 0x101], 0x28e, 0x18}], {{0x4, 0x91, 0x8, 0x8}, 0xa8, 0x2, 0x401, 0x5, 0xb3, 0xd, 0x6}, {{0x7, 0xd, 0x3, 0x2}, 0x80000100, 0x7ff, 0x4, 0x5, 0x8000, 0x5, 0x5}, @v6=@local={0xfe, 0x80, '\x00', 0x0}, 0xbfdb, 0x1, 0x0, 0x3, 0x8, [[0x7ff, 0xe], [0xf35, 0x4]], [[0x2, 0xa], [0x5]], 0x7ff, [0x9, 0x3a13], 0x8, 0x2a, 0x1, 0x3, 0xf, 0xf, 0xd, 0xf, 0x2, 0x25, 0x3, 0xfffc, 'R6'}}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x2, 0xd, 0xa}, {0x20, 0x7f, 0xfd, 0x8}, {0x9b1e, 0x22, 0xd, 0x40203ff}]}) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000), &(0x7f0000001340)=0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r2, &(0x7f0000000140)="f81ad301000600004007fa7537b2", 0xe) (async) write(r2, &(0x7f0000000140)="f81ad301000600004007fa7537b2", 0xe) execve(0x0, 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000002640)=""/4121, 0x100f}, {&(0x7f0000003680)=""/4077, 0xff5}, {&(0x7f00000001c0)=""/23}], 0x1c) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$WSKBDIO_BELL(r1, 0x20005701) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x7, 0xf, 0x7, 0x5}, {0x40, 0x7}, {0x6, 0x2, 0x1, 0x9b}]}) (async) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x7, 0xf, 0x7, 0x5}, {0x40, 0x7}, {0x6, 0x2, 0x1, 0x9b}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$setstatus(r5, 0x4, 0x40) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000180)={0x6, &(0x7f0000000140)=[{0xf, 0x9, 0x1, 0xb}, {0x8, 0xff, 0x60, 0x7ff}, {0xfff8, 0xd, 0x3, 0xc2}, {0x1, 0x43, 0xff, 0x7ff}, {0x4, 0x2, 0x3, 0x9}, {0x1000, 0x27, 0x61, 0x6}]}) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) (async) openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) (async) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) 81.141706ms ago: executing program 7 (id=34): mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x85c48) acct(&(0x7f0000000000)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) ioctl$TIOCDRAIN(r0, 0x2000745e) ioctl$DIOCKILLSTATES(r0, 0x0, &(0x7f00000000c0)={{0xe7, 0x101}, 0x0, '\x00', 0xfffffff6, {@table={'./file0\x00', 0x0, 0x3, 0xf0}, [0x4], 0xd, 0x6, 0x5}, {@table={'./file0\x00'}, [0x7f, 0xf0ff], 0x0, 0x5, 0x4}, './file0\x00', './file1\x00', 0x54d0, 0x3ff}) (async) ioctl$WSDISPLAYIO_LDFONT(r0, 0x8058574d, &(0x7f00000001c0)={'./file1\x00', 0x5, 0x200, 0x7fff, 0x1, 0xa9a, 0x80, 0x100, 0x2, 0x1, 0xa0c, 0x8}) sysctl$kern(&(0x7f0000000080)={0xa, 0x6}, 0x5, &(0x7f0000000100), 0x0, 0x0, 0x7) 32.622791ms ago: executing program 2 (id=35): mkdir(&(0x7f0000000180)='./file0\x00', 0x119) setgid(0x0) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) chdir(&(0x7f0000000ac0)='./file0\x00') r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x10, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x10}, {r0, 0x80}, {r0, 0x1}, {r0, 0x40}, {r0}, {r1, 0x40}], 0x6, 0x0, 0x0) ioctl$TIOCSETA(r0, 0xc4504449, &(0x7f0000000140)={0x20008, 0xffffffff, 0x8, 0x4, "04650000000100", 0x5, 0x4}) mknod(&(0x7f0000000240)='./file0/file0\x00', 0x6000, 0x3) open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x1080, 0x3, 0xfe, 0x4, 0x5, 0x45, 0x10, [{0x3, 0x9, 0x8a, 0x3}, {0x2, 0xb7fe, 0x800000}, {0x100006, 0x402, 0x208}, {0xffffffff, 0x80ff, 0x3, 0xfffffffb}, {0x10000, 0x3, 0x80000001, 0x7}, {0x2, 0x7f, 0x14000003, 0xf}, {0x5, 0xbffffff9, 0x8, 0x6d}, {0x2400a, 0x3, 0xfdf0, 0x4}, {0x0, 0x2, 0x9, 0x9}, {0x401, 0xfffffffd, 0x8001, 0x20000004}, {0x800a450, 0xfff9, 0x166, 0x3fa3}, {0x8, 0x2, 0xa, 0x590}, {0x2000df, 0x29, 0x5, 0x3ff}, {0x8, 0x7, 0x7, 0x1fd}, {0xb3, 0x3ed, 0x26, 0x3}, {0xfffffffd, 0xd654, 0x3, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r2 = socket(0x18, 0x8000, 0xd7) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) ioctl$FIOSETOWN(r2, 0x8004667c, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x4, 0x2800c1, 0xf, 0x0, 0x80000001, 0x50001, 0x4, 0x0, 0x0, 0x8000000000000008, 0xbf}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$DIOCNATLOOK(r3, 0xc0504417, &(0x7f0000000080)={@v6=@loopback, @v4, @v6=@rand_addr="97e2629ded32af59ac14a54146d87ba7", @v6=@mcast2, 0x1a04, 0x8, 0x8004, 0x2, 0x0, 0x0, 0x18, 0x5, 0x3}) r4 = socket(0x0, 0x4, 0x40) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0x18, 0x1, 0x6) connect$inet6(r5, &(0x7f0000000340)={0x1c, 0x18, 0x2, 0x480000, "fee382d94ec14aa287550fb4db56d0f0", 0x8}, 0x1c) setitimer(0x1, &(0x7f0000000140)={{0x3, 0x100900000000009}, {0x7ffffffffffffffc, 0x1f50}}, 0x0) ioctl$FIONREAD(r1, 0x81206919, &(0x7f00000002c0)) ioctl$FIONREAD(r4, 0x8080691a, &(0x7f0000000100)) readv(r2, &(0x7f0000000280)=[{&(0x7f0000001540)=""/4093, 0xffd}, {&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f0000000100)=""/221, 0xdd}], 0x3) r6 = socket$inet(0x2, 0x3, 0x2) getsockopt(r6, 0x0, 0x64, 0x0, 0x0) lseek(r0, 0x2ca, 0x1) 29.203435ms ago: executing program 0 (id=36): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) setreuid(0x0, 0xee01) r0 = open(&(0x7f0000000040)='./bus\x00', 0x8000, 0x20) r1 = socket(0x2, 0x8000, 0x0) connect$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x2, 0x40000007}, 0x10) r2 = socket(0x18, 0xc003, 0x3a) setsockopt(r2, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0x67, &(0x7f0000000000)={0x57f2, 0x0, 0x0, 0x58cf, 0x3}, 0xc) ioctl$LIOCSFD(r0, 0x80046c7f, &(0x7f00000000c0)=r2) stat(&(0x7f0000000180)='./bus\x00', 0xfffffffffffffffe) 28.808016ms ago: executing program 6 (id=37): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$DIOCSETLIMIT(r1, 0xc0084428, &(0x7f0000000880)={0x0, 0xffffffff}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$DIOCGETQUEUES(r2, 0xc148445e, &(0x7f0000000200)={0x8, 0xf9a, {'\x00', './file0\x00', './file0\x00', './file0\x00', {{0x9}, {0x6f7, 0xfffffbff}, 0x5}, {{0x4, 0x5}, {0x9f64, 0x3}, 0x3ff}, {{0x8001, 0x7}, {0x7, 0x2}, 0x2}, {0x2, 0x7, 0x0, 0x1ff}, 0x0, 0x9, 0x3, 0x8, 0x5}}) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x20, 0x3c, 0x0, @empty, @rand_addr=0xffffff}}}}}) 28.415263ms ago: executing program 7 (id=38): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000280), 0x10, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async) r1 = open(&(0x7f0000000100)='./file0/file0\x00', 0x40000, 0xb8) r2 = socket(0x18, 0x2, 0x0) setsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f0000000140)={0xfffffffffffffffc, 0xf4240}, 0x10) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f00000000c0)={0x101, 0xffffff01, 0x8a38, 0xfffffffc, "070609000013160000050800"}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x2, 0xffffffffffffffff, 0x0, 0x0, 0xc4, 0x7, 0x10, 0x0, 0x2}, 0x10, 0x3, 0xc, 0xff, 0x2, 0x2, 0x0, 0x6, 0x0, 0xfffffffffffffff9}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x7fffffff, 0x3, 0x5, 0xffff7df8, "ec7600b72802100006faef2be3d500e1ffffff00", 0x80000003, 0x5}) (async) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) (async) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) (async) listen(r3, 0x1) (async) r4 = socket$unix(0x1, 0x5, 0x0) connect$unix(r4, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) openat$audioctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) accept4(r3, 0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, 0x0) (async) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async) syz_open_pts() select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) (async) r5 = setsid() ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x41e, r5) (async) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x100, r5) 4.316416ms ago: executing program 0 (id=39): r0 = socket$inet(0x2, 0x1, 0x0) sysctl$hw(&(0x7f0000000280)={0x6, 0x10}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f78b06ccffb40500000000000000000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x406}, 0xa) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xc4504448, &(0x7f0000000740)={0x6, 0x3, 0x0, 0x0, "000001e3bb4e3447c1d100000000000000000a30", 0x4, 0xffff2bd9}) getsockopt$sock_int(r0, 0xffff, 0x1023, 0x0, 0x0) 0s ago: executing program 6 (id=40): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000240)={0x401, 0x100, {[0xfff, 0x80000000, 0x20, 0x2d6, 0x5f, 0x2, 0xfffffffffffff801, 0x2, 0x10001, 0x100000000, 0xa2, 0x8000, 0x8, 0x1c00000000000, 0x6, 0x459, 0x259af8c9, 0x4], [0x0, 0xb4d, 0x2, 0x1, 0x5, 0x6, 0x0, 0x5a3, 0x6, 0x7], [0x7f, 0x294f074a, 0x8, 0x5a3cd3f8, 0x8000000000000001, 0x600000000, 0x100000001], [0x350e, 0xd, 0x821, 0xe2b, 0x1ff, 0x7], [{0xe0, 0x1, 0x7ff, 0xffffffffffffff00}, {0x200, 0x0, 0x8, 0xff}, {0x1, 0x3, 0xfff, 0x80000000}, {0x4, 0x8, 0x9, 0x100}, {0x3, 0xe, 0xbaf, 0x9}, {0xa4b3, 0xffff, 0xffffffff, 0x3}, {0x5, 0xff, 0x80000001, 0x2}, {0x2, 0x0, 0x9fd8, 0x8}], {0x5, 0x2, 0x400, 0x2}, {0xffff, 0x2, 0x4}}}) sysctl$net_inet_carp(&(0x7f0000000100)={0x4, 0x2, 0x70, 0x2}, 0x4, &(0x7f0000000200)="a3c034f6", &(0x7f0000000140)=0x4, &(0x7f0000000180)="619e9c3c", 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. WARNING: thread `nfsio' (182317) exits with status -1 WARNING: thread `nfsio' (405838) exits with status -1 WARNING: thread `nfsio' (434626) exits with status -1 WARNING: thread `nfsio' (328381) exits with status -1 WARNING: thread `nfsio' (19330) exits with status -1 WARNING: thread `nfsio' (234438) exits with status -1 WARNING: thread `nfsio' (221780) exits with status -1 WARNING: thread `nfsio' (278150) exits with status -1 WARNING: thread `nfsio' (184947) exits with status -1 WARNING: thread `nfsio' (80628) exits with status -1 WARNING: thread `nfsio' (520962) exits with status -1 WARNING: thread `nfsio' (45783) exits with status -1 WARNING: thread `nfsio' (137698) exits with status -1 WARNING: thread `nfsio' (466410) exits with status -1 WARNING: thread `nfsio' (142326) exits with status -1 WARNING: thread `nfsio' (230601) exits with status -1 WARNING: thread `nfsio' (246611) exits with status -1 WARNING: thread `nfsio' (18086) exits with status -1 WARNING: thread `nfsio' (349203) exits with status -1 WARNING: thread `nfsio' (350868) exits with status -1 WuAvmR_NfIaNGul:t S(P0Lxfff NfOfT1 L806OWERc1E4D 80O2N0 SYSC,A 0LLx9 84,9 00, 1) E -X>I Te 0 ak Stopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *263798 1088 0 0 0 0 syz-executor 186046 5006 -1 0x10 0x4000000 1K syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x7224ad31ff20, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu1: uvm_fault(0xfffff1806c148020, 0x98, 0, 1) -> e ddb{0}> show kasan No such command ddb{0}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7224ad31ff20, count: -1 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80003b3b3eb0 rbx 0 rdx 0 rcx 0xffff80003c4442c8 rax 0x32 r8 0xffff80003b3b3de0 r9 0x80713 acpi_pdirpa+0x6c584 r10 0x849496f6c0708161 r11 0x42cd5959858dd2c9 r12 0 r13 0 r14 0xffff80003c4442c8 r15 0 rip 0xffffffff816803ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80003b3b3e30 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{0}> show proc PROC (syz-executor) tid=263798 pid=1088 tcnt=1 stat=onproc flags process=0 proc=0 runpri=50, usrpri=86, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003b7bad18,0xffffffff83aaa520 process=0xffff80002a37e698 user=0xffff80003b3ae000, vmspace=0xfffff1806c1487c0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND * 1088 263798 9990 0 7 0 0 syz-executor 97014 245318 25474 0 2 0 0 syz-executor 97014 283528 25474 0 3 0 0x4000080 fsleep syz-executor 4133 312549 35072 0 2 0 0 syz-executor 4133 76003 35072 0 3 0 0x4000080 fsleep syz-executor 4133 451222 35072 0 3 0 0x4000080 fsleep syz-executor 22086 520939 86603 -1 2 0x10 0 syz-executor 22086 407350 86603 -1 3 0x10 0x4000080 kqpoll syz-executor 28158 476467 88595 0 2 0 0 syz-executor 28158 252780 88595 0 3 0 0x4000080 fifor syz-executor 95065 270337 13424 0 2 0 0 syz-executor 95065 72587 13424 0 3 0 0x4000080 fsleep syz-executor 95065 463496 13424 0 3 0 0x4000080 fsleep syz-executor 5006 19556 52338 -1 2 0x10 0 syz-executor 5006 186046 52338 -1 7 0x10 0x4000000 syz-executor 24236 460705 92552 60929 3 0x11 0x80 nanoslp syz-executor 24236 342564 92552 60929 3 0x11 0x4000080 rest syz-executor 24236 218336 92552 60929 3 0x11 0x4000080 fsleep syz-executor 35072 229899 63850 0 3 0x2 0x80 nanoslp syz-executor 9990 483203 63850 0 3 0x2 0x80 nanoslp syz-executor 88595 311650 63850 0 3 0x2 0x80 nanoslp syz-executor 92552 184777 63850 0 3 0x2 0x80 nanoslp syz-executor 13424 452900 63850 0 3 0x2 0x80 nanoslp syz-executor 86603 296055 63850 0 3 0x2 0x80 nanoslp syz-executor 52338 409309 63850 0 3 0x2 0x80 nanoslp syz-executor 25474 193827 63850 0 3 0x2 0x80 nanoslp syz-executor 63850 40867 67110 0 3 0x2 0x80 kqread syz-executor 67110 279950 85542 0 3 0x100002 0x88 sigsusp ksh 85542 24256 90683 0 3 0x10 0x88 kqread sshd-session 90683 344585 71834 0 3 0x12 0x80 kqread sshd-session 56447 153117 1 0 3 0x100003 0x80 ttyin getty 71834 153127 1 0 3 0 0x88 kqread sshd 29026 230883 73430 74 3 0x1100012 0x80 bpf pflogd 73430 472852 1 0 3 0 0x80 sbwait pflogd 52210 463853 45764 73 3 0x1100010 0x80 kqread syslogd 45764 75775 1 0 3 0x100002 0x80 sbwait syslogd 33985 206444 1 0 3 0x100000 0x80 kqread resolvd 22373 61294 45826 77 3 0x100012 0x80 kqread dhcpleased 24093 408532 45826 77 3 0x100012 0x80 kqread dhcpleased 45826 400010 1 0 3 0 0x80 kqread dhcpleased 35912 148594 0 0 3 0x14000 0x200 bored smr 39593 484808 0 0 2 0x14000 0x200 zerothread 64814 328064 0 0 3 0x14000 0x200 aiodoned aiodoned 52324 419557 0 0 3 0x14000 0x200 syncer update 28747 274699 0 0 3 0x14000 0x200 cleaner cleaner 31229 226583 0 0 3 0x14000 0x200 reaper reaper 74480 14564 0 0 3 0x14000 0x200 pgdaemon pagedaemon 89198 280548 0 0 3 0x14000 0x200 bored viomb 68642 282789 0 0 3 0x14000 0x40000200 acpi0 acpi0 46690 463808 0 0 3 0x14000 0x40000200 idle1 55413 386220 0 0 3 0x14000 0x200 bored softnet1 93800 131369 0 0 3 0x14000 0x200 bored softnet0 76413 67104 0 0 3 0x14000 0x200 bored systqmp 46872 486641 0 0 3 0x14000 0x200 bored systq 21797 408899 0 0 3 0x14000 0x200 tmoslp softclockmp 93595 234001 0 0 3 0x14000 0x40000200 tmoslp softclock 93201 333689 0 0 3 0x14000 0x40000200 idle0 1 132370 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10010000 0x200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &map->flags_lock r = 0 (0xfffff1806c148938) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 vm_map_lock_ln+0x13f #3 uvm_mapanon+0x28f #4 uvm_mmapanon+0x1d0 #5 sys_mmap+0xa80 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 1088 (syz-executor) thread 0xffff80003c4442c8 (263798) exclusive rwlock vmmaplk r = 0 (0xfffff1806c1488c0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvm_mapanon+0x28f #4 uvm_mmapanon+0x1d0 #5 sys_mmap+0xa80 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive mutex &map->flags_lock r = 0 (0xfffff1806c148938) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 vm_map_lock_ln+0x13f #3 uvm_mapanon+0x28f #4 uvm_mmapanon+0x1d0 #5 sys_mmap+0xa80 #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 5006 (syz-executor) thread 0xffff80003c444560 (186046) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a8ed40) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11058 12151K 12214K 166960K 12162 0 pcb 17 12K 12K 166960K 31 0 rtable 239 6K 7K 166960K 353 0 pf 34 17K 24K 166960K 60 0 ifaddr 43 7K 7K 166960K 46 0 ifgroup 55 2K 2K 166960K 57 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 72 0 ioctlops 0 0K 4K 166960K 1492 0 iov 0 0K 0K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1290 81K 81K 166960K 1384 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 15 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 18 65K 89K 166960K 172 0 proc 75 131K 180K 166960K 557 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 in_multi 99 6K 6K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 384 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 240 167K 175K 166960K 3406 0 UVM aobj 39 2K 2K 166960K 39 0 pinsyscall 43 86K 104K 166960K 1328 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 2 0 NDP 28 2K 2K 166960K 29 0 temp 35 9114K 9178K 166960K 4226 0 kqueue 13 20K 22K 166960K 30 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 34 0 31 1 0 1 1 0 8 0 rtentry 176 112 0 1 6 0 6 6 0 8 0 unpcb 144 53 0 34 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 12 0 7 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 82 0 74 1 0 1 1 0 8 0 nd6 152 25 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 1 0 1 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 4 0 0 1 0 1 1 0 8 0 pfstitem 24 21 0 0 1 0 1 1 0 8 0 pfstkey 128 21 0 0 1 0 1 1 0 8 0 pfstate 448 21 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 460 0 0 29 0 29 29 0 8 0 art_table 40 461 0 0 5 0 5 5 0 8 0 art_node 32 112 0 11 1 0 1 1 0 8 0 semapl 72 1 0 0 1 0 1 1 0 8 0 shmpl 112 36 0 0 2 0 2 2 0 8 0 dirhash 1024 19 0 2 3 0 3 3 0 8 0 dino2pl 256 1633 0 163 93 0 93 93 0 8 0 ffsino 296 1633 0 163 114 0 114 114 0 8 0 nchpl 144 1877 0 172 64 0 64 64 0 8 0 vnodes 216 1733 0 0 97 0 97 97 0 8 0 namei 1024 5720 0 5720 2 0 2 2 0 8 2 percpumem 16 52 0 1 1 0 1 1 0 8 0 kstatmem 264 29 0 2 2 0 2 2 0 8 0 scxspl 216 6441 0 6441 4 1 3 3 1 8 3 plimitpl 152 31 0 13 1 0 1 1 0 8 0 sigapl 424 509 0 461 9 0 9 9 0 8 2 knotepl 120 53 0 0 2 0 2 2 0 8 0 kqueuepl 224 28 0 18 1 0 1 1 0 8 0 pipepl 344 126 0 99 3 0 3 3 0 8 0 fdescpl 528 473 0 441 3 0 3 3 0 8 0 filepl 160 1706 0 1487 10 0 10 10 0 8 0 lockfpl 104 15 0 12 1 0 1 1 0 8 0 lockfspl 48 9 0 6 1 0 1 1 0 8 0 sessionpl 144 26 0 16 1 0 1 1 0 8 0 pgrppl 48 34 0 16 1 0 1 1 0 8 0 ucredpl 104 122 0 106 1 0 1 1 0 8 0 zombiepl 144 461 0 461 1 0 1 1 0 8 1 processpl 1232 509 0 461 6 0 6 6 0 8 1 procpl 664 575 0 517 7 0 7 7 0 8 1 sockpl 752 171 0 141 4 0 4 4 0 8 0 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 3 0 0 1 0 1 1 0 8 0 mcl9k128 9344 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 122 0 0 16 0 16 16 0 8 0 mcl2k 2048 22 0 0 3 0 3 3 0 8 0 mextrefs 64 22 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 145 0 0 10 0 10 10 0 8 0 bufpl 272 2376 0 105 152 0 152 152 0 8 0 anonpl 32 3878 0 0 32 0 32 32 0 247 0 amapchunkpl 152 9350 0 8835 22 0 22 22 0 158 1 amappl16 200 1983 0 1959 5 0 5 5 0 8 3 amappl15 192 7 0 7 1 0 1 1 0 8 1 amappl14 184 432 0 430 1 0 1 1 0 8 0 amappl13 176 120 0 108 1 0 1 1 0 8 0 amappl12 168 722 0 691 2 0 2 2 0 8 0 amappl11 160 9 0 8 1 0 1 1 0 8 0 amappl10 152 92 0 78 1 0 1 1 0 8 0 amappl9 144 274 0 274 1 0 1 1 0 8 1 amappl8 136 100 0 98 1 0 1 1 0 8 0 amappl7 128 145 0 132 1 0 1 1 0 8 0 amappl6 120 157 0 156 1 0 1 1 0 8 0 amappl5 112 105 0 95 1 0 1 1 0 8 0 amappl4 104 295 0 276 1 0 1 1 0 8 0 amappl3 96 1663 0 1560 3 0 3 3 0 8 0 amappl2 88 583 0 507 2 0 2 2 0 8 0 amappl1 80 10582 0 9963 15 0 15 15 0 8 1 amappl 88 2672 0 2503 4 0 4 4 0 92 0 uvmvnodes 80 100 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 38 0 0 1 0 1 1 0 8 0 uaddrrnd 24 473 0 441 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 473 0 441 1 0 1 1 0 8 0 vmmpekpl 168 5944 0 5908 2 0 2 2 0 8 0 vmmpepl 168 39917 0 37962 87 0 87 87 0 357 1 vmsppl 488 472 0 441 5 0 5 5 0 8 1 rwobjpl 80 15127 0 14052 24 0 24 24 0 8 1 pdppl 4096 953 0 882 93 10 83 83 0 8 12 pvpl 32 10255 0 0 84 0 84 84 0 265 1 pmappl 256 472 0 441 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 418 0 13 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x7224ad31ff20, count: -1 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,65) at comcnputc+0xd0 cnputc(65) at cnputc+0x67 db_putchar(65) at db_putchar+0x36d kprintf() at kprintf+0x223 db_printf(ffffffff83545dde) at db_printf+0x9b db_ktrap(6,0,ffff8000317912d0) at db_ktrap+0xe3 kerntrap(ffff8000317912d0) at kerntrap+0x243 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff80003c444560,fffff1806b764970,ffff8000317914b0) at dovutimens+0x368 sys_futimes(ffff80003c444560,ffff800031791600,ffff800031791550) at sys_futimes+0x208 end trace frame: 0xffff8000317915f0, count: 0 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,65) at comcnputc+0xd0 cnputc(65) at cnputc+0x67 db_putchar(65) at db_putchar+0x36d kprintf() at kprintf+0x223 db_printf(ffffffff83545dde) at db_printf+0x9b db_ktrap(6,0,ffff8000317912d0) at db_ktrap+0xe3 kerntrap(ffff8000317912d0) at kerntrap+0x243 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff80003c444560,fffff1806b764970,ffff8000317914b0) at dovutimens+0x368 sys_futimes(ffff80003c444560,ffff800031791600,ffff800031791550) at sys_futimes+0x208 syscall(ffff800031791600) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x3f47abd85a0, count: -16