last executing test programs: 1.500780583s ago: executing program 7 (id=12): mkfifo(&(0x7f00000000c0)='./file0\x00', 0x110) (async) seteuid(0xffffffffffffffff) (async) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='w\x00') 1.500027454s ago: executing program 4 (id=5): r0 = syz_open_pts() syz_open_pts() flock(r0, 0x8) mkfifo(&(0x7f0000001800)='./file0\x00', 0x8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000003540)={&(0x7f0000003500)=[0x7, 0x8, 0x2], 0x3, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000003580)={0x0, 0x1}) unveil(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='w\x00') open(&(0x7f0000000280)='./file0\x00', 0x0, 0x49) r2 = fcntl$dupfd(0xffffffffffffff9c, 0xc, 0xffffffffffffff9c) ioctl$FIOSETOWN(r2, 0x8004667c, &(0x7f0000000000)=0x20000000) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x5380) ioctl$WSDISPLAYIO_SVIDEO(r2, 0x80045745, &(0x7f0000000140)=0x1) recvmmsg(r2, &(0x7f0000003480)={{&(0x7f0000000080)=@in, 0x10, &(0x7f0000003340)=[{&(0x7f00000001c0)=""/224, 0xe0}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/49, 0x31}, {&(0x7f0000002300)=""/57, 0x39}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x6, &(0x7f00000033c0)=""/188, 0xbc}, 0xd38}, 0x38, 0x1001, &(0x7f00000034c0)={0x1ac, 0xf6}) r3 = syz_open_pts() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) r4 = kqueue() closefrom(r4) syz_open_pts() futimens(r3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) accept$inet6(r5, &(0x7f00000000c0), &(0x7f0000000100)=0x1c) closefrom(r5) 1.442450031s ago: executing program 2 (id=3): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt(r0, 0x0, 0x20, &(0x7f0000000100), 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x19b) seteuid(0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0/file0\x00', 0xe1) chdir(&(0x7f0000000000)='./file0\x00') chmod(&(0x7f00000000c0)='./file0\x00', 0x19b) 1.39759707s ago: executing program 5 (id=6): r0 = open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) truncate(&(0x7f0000000080)='./file0\x00', 0x100000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x8010, r0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setresuid(r2, r2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(r4, 0xffffffffffffffff, 0xffffffffffffffff) (async) chown(&(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r2, r4) (async) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) (async) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4828a, 0x80) pwritev(r5, &(0x7f0000000580)=[{0x0, 0xe}], 0x1, 0x53) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) (async) r6 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x4b) ioctl$DIOCGETQUEUES(r6, 0x80184404, &(0x7f00000006c0)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x525}, 0x4}, {{0xc, 0x2}, {0x9, 0x1004}, 0x1}, {0x7, 0x79, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) ioctl$DIOCGETQUEUES(r6, 0x80044403, &(0x7f0000000040)={0x8, 0x9, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x9, 0x7}, 0x4}, {{0x9, 0x1}, {0x7, 0x7ff}, 0x3}, {{0x8, 0x2}, {0xc, 0x1000}, 0x3ffffffd}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x2, 0x9, 0x4}}) mknod$loop(&(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$FIOASYNC(r7, 0xc0286988, &(0x7f0000000580)=0x7) (async) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x8) 1.37703041s ago: executing program 6 (id=7): mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) (async) r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) ioctl$DIOCGETQUEUES(r0, 0x80184404, &(0x7f0000000040)={0x100, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x8, 0x13}, 0x2}, {{0x9, 0x8}, {0x2f1c, 0x526}, 0x4}, {{0x4000000000000c, 0x2}, {0x9, 0x1000}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4000004}}) ioctl$DIOCGETQUEUES(r0, 0x80044403, &(0x7f0000000040)={0x8, 0x9, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x9, 0x7}, 0x4}, {{0x9, 0x1}, {0x7, 0x7ff}, 0x3}, {{0x8, 0x2}, {0xc, 0x1000}, 0x3ffffffd}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x2, 0x9, 0x4}}) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6f012c0000140601fec2b4f340297221e7ce2d18c7814ceafe8000000000000000000000000000aa4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="3cf0220538a6e4601e0200009078073b19a731f561016a8030adb1a23215956583cf2cfecdd9513076b57f47b28332eaebb007f6476f7b48cf9739bfb1b20d73d301d1563c5f568c6f97e9bee878f54b57235fc5700b42c61c009e739a85dcd0c55e97438d1e4e77dc97b39db3bb95fc3dd2f1b054af3fbd022c968a68ffba9ec5c8b1dee3a8b6bfe2fde0fd9f5c5a03a88ca6ddd7cd006285428c2c9302d4fa22a190ad53bb222e9501a85ba7fd09cf122c4f541408d297d7fcd609523bed005d73508a775d22e5827603ec4014ffa104147ff4000ec377d41b18415e630ac3e83b"]) (async) r1 = kqueue1(0x10000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x66, &(0x7f0000000240)={@broadcast, @local, [], {@ipv6={0x86dd, {0xf, 0x6, "75184a", 0x30, 0x33, 0x0, @empty, @loopback, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, '\x00', 0x6, 0x2b, 0x7c, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}}) (async, rerun: 32) writev(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)="f27a41", 0x3}], 0x39) (async, rerun: 32) write(r2, 0x0, 0xffe6) (async, rerun: 64) open(&(0x7f0000000180)='./file0\x00', 0x19083084ca9cf73d, 0x2) (async, rerun: 64) truncate(&(0x7f0000000000)='./file0\x00', 0x88100) (async) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) (async, rerun: 64) kevent(r1, &(0x7f0000000040), 0xfffffff9, 0x0, 0xffff4b51, 0x0) (rerun: 64) 1.375346597s ago: executing program 7 (id=13): r0 = socket$unix(0x1, 0x2, 0x0) closefrom(r0) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) r1 = syz_open_pts() sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)="d61baff1c32bcc7346ac3d180405358f6009d033a45b1c3ff31f7c73fe04b7acbb7c77700830e963f31364b7777b2538e11b003be550badca2b98d5ef5b4e0671b3fde8e590e00467f15d5092b1966ca42c0fc95dda0f340684538faeb4a89121c4a9f4da41db935302ca20085722fbc6180de4c4cbdda83bfb71a80d93cb8ecb3fce8df0788a19c50f68bbd", 0x8c}, {&(0x7f0000000280)="fdf625b37c55533420b46246bf0d22538bb0c63b12dee62c42e140e877735141ca911d06267efd1bf8d4907c7dd3fd2ce1e5a861f20a7f5e6585153c4d77d3219e76ddb0097ab43bcc1b7ab9504c33ea40ab33df98f16b38657e327349d89841b76af9e16bf1f4ae920f89b585488a54d7579c2d5ae6e3cd68066a43ed5a5f8653a01141dc079b3a2b35caf9", 0x8c}, {&(0x7f0000000340)="c06784ae38beb3412d5d131511924495300a045a045daf573f30bf6d8432d581eec4bcb8a58db1a15b", 0x29}, {&(0x7f0000000380)="c862795b8bca5dff82ec0d2964bbd2fa946a50f39d5928a614bc3c4d80292a9c70a72bca95da1d1235a8cb534d2333eab46fbe4bfc84a3902dc9b680617f2fa096911a521f6bd428f73a86152a74f35c591097d0a370133498b3e4da3662b3da21673d39dd30bff3789dff52252607391ea092de4d417bf139be57f32a31e1a86007542f49cdb213089b3130944e49e31d299e2dcf5cd9fd798e698d6236f11cca1c65c517e12ccc9c23d5974d7fb510a41024aca359e6f86189f1e8387d2e7ed859e88e3f188ec81eba37b2586df78801636b7cd41ef949dc3728fa54827798e423b76bd6aad228beeadd8cc2f5999b2df6823bb115733300a8b01b142506df32e89908d7b8fee06f33ac0cbaae0cf60c355713e762e50df14517da9dab670f12996f8682fe63f9d9b918598c7348a7106face377515795823ed8b4b6413797a22bebe483de9fa4cb1319715d0339bcfe8b46fab93aabb2b65048865ba989c965852afd9ae6310fca7553d71b9ea7ecd50cb1c74cf97b5f401cbab8885652a93aa313c19aafc1593d867b3277eae8fb283a430d1cfdca9bf21023d3cde445d5a151fc2b2bc6828d79cee19eae179938dcd73eb851c8a767df7a0a01da2ebf9e87176265773477ec1fe0870de00d0daafcab56146f24c1f0ba283a9618dd8234d578378c1b4bfcaa5357ec63c770fc30e93156a1ac82ddb2c0af5615f241280ce4058fc4f21c0f549ef29d5eae23afbc657a73eddf2e542c3b55177a74c1184fe36694de66887326e9f9e15105d3756173b2c330ed07ac9bb78cfa45b6a0885a395504dcee7cab5bf2329518e575afbbca78acd9a9409644317cb474f27a8e011f78e7d1c5173a2d9fc37aad422ea41e33b578c757c28c46cc06c3d301453b189400d747a26a0cb1070c7008dcbc400619f8ee10453e3fef22f407dcb1a68b7e8d438c6378f026c2d579254d47c1419fe53822a09c3efa1a405da9180062f2baa019111be911bc2004decd2f28e167dd3e19f6afa7f226b1aa76d4b23ec2b56eb151daa0e12237c98bec59cfe461c09f5e74a607e9f4487538bce54f9ab98dc64c4ef66e82d84f79d69547a394a751cc1d09b1331dd91571de8fdbd5dbdca287154d09b2066ef672e673076fe76b491ab34fe269fc60d1505e12f336d37c6b5a842b1d99dac0306a869419bd3a4f3bb551bc90b6f161afac04a34ea93deb55e1a463808492a7210578de896f23fe709a36778cce34ab242b72b69e1858aa3db6b8a33cfbc5babb66ffe45f504749ec4c8740e44e98faff8fefe0c1264a1353e33204dc72efe5e20b023c6564e0ea638a0ad33e469d23a3dc121e0081f7d18ba6240f36bc86cd4ec5909335c5b7a84fc7c651e05d156470fd3dbf9655857a8ba18152db915f684c643726a84b9d26bddea8f55ef79eacbd2ad9aebf27b32a3661f15a9fd2cd6b82c1441a5a946733f1699e8b0748362a3f2ef3e09721d15445d9e47f6f296795c53451659cbbe2e9869f336c6178d7c75eb19b2109204c69a01f93eadbfeb4f80b24a84b76bba6d0ad548bdbcdc91cb773f11adcaa0bfe635c20bae08083d200b54d9fa102fccdeda7ba5c175160b2e7d35c5b8f59fd313b4d5401cb55f257a8d20e245408a3ebce0cb1687bd32903725573f2fa2a15f0cfa326a18b1cd2ca4456f2c184f8a69cf9ce1d5bdfde85b3862a1488b7b158de6eec8302f1a5035dd85142a08dcb43af9befbf5c9dd78d7f13141bcb5466360af3c0e3c89e9982c821157809adc87311c681a49a6f6221cf9e586f583f035af228a54b223558d7e7c46e93a4fffc07e9f4c91c9913fb3b11c885c21fee325bf759ee9283b0a7f059f24a440cc010bf02393284f2db2f161b8e4670ab2518da7d985738f10e0c439b0e91e99df5f0ee820c09fe933af2c4f2fd6e43e18d9a10743496faa3824950a16b314987617f3fb34f2f792a6c149e5ce77194dd7a77ddd87075bd0765ca58cea959bad063ff40697b5601a3e434525328f83120188adc20562990dc8615aeea34dddb080cb765652c85f5e332420e337af15a950f2e3691f1da7281dc63702dd48ba2f31127d4564f0923fa8ec0d9af8203c4f93ea524edec52a76398999c473b7914002aa4ad80f7404823aced327dc7b00458cad3128665aab4a977e25206b2a95babbea4e34556b2b01f607bf6fb8ba081b1a480f4d8759bee2bcfd082095f8d165554b3ea034621b5e3630ebc55caef8704a316963a8edbb3d7cd6c8e7f68f27e975371b5013b77002e5005aaf059396b985d1ca418b96efa59330cbf2f75beb35e3b220244669d3585aacb7f7ae19924291e835093f82814f999967b34221bc3fa79365ac75f0fa82969dea1202c5af5dbd9834baa099aeaec7fe2e94b5e4da07c96d431accdabb46baa4f31665d25f8b8b217b6c8c14d40d664b5140fe9c791fc970cfc2339ac368ad33c16570031e7324c0e5810a4a30bef508117818190281801e290f3f99ebb2336c29d0f9dae6c0f2a40957d231ee1d4407eb877d3b972", 0x708}], 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000ffff0000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="10000000ffff000001", @ANYRES32, @ANYRES16=r0], 0x58, 0x6}, 0x5) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0xd, 0x9, 0x7ff, 0x100094b, "01000000000700000000000000ff53d508aa00", 0x5, 0x412}) r2 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000000)=0x3, 0x4) shutdown(r2, 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) write$audio(r3, &(0x7f0000000ac0)="fc5ceb56e9a736f4e98e225fa65fe48e2164add3f93f9362c771862329ed2d1c52c65b7ffd31dae76306fa4e27926dd6ad42bfa355001679dde4bc07e4bb051049adce2e2a3b7c91600c32b1b38cd81bf54bba0fe70f41039db52705fb49ee5e0458a732aac7e0a85f568feede8a15cb2f0a6de4dd65aeef2c9cd53f6a0aa3baf7e13d1fc5c9284f8eff822dee30440a9df2369374308ca54a5c017bd69852614997c2b52f6d38f5dc96f67869136b27262afad0c8e4b03ad7cf0b89a2d5d123efc59b159b", 0xc5) ioctl$TIOCSTOP(0xffffffffffffffff, 0x2000746f) write(0xffffffffffffffff, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d18802000000000000003ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe8d) sysctl$hw(&(0x7f0000000580)={0x6, 0x8}, 0x2, &(0x7f00000005c0)="e5867ecdf75530316376221c2d4b85ae0d9cb2d2f7", &(0x7f0000000640)=0x15, &(0x7f0000000680), 0x0) 1.241957154s ago: executing program 1 (id=2): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xd01) r0 = socket$inet6(0x18, 0x3, 0x7) setsockopt$sock_int(r0, 0xffff, 0x1021, 0x0, 0x0) socketpair(0x10, 0x2, 0x37, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$FIOASYNC(r1, 0x8004667d, &(0x7f0000000200)=0x7) r2 = open(&(0x7f0000001980)='./file0\x00', 0x800, 0xc3) ioctl$TIOCSETD(r2, 0x80086d01, &(0x7f0000000080)=0x6) syz_emit_ethernet(0xfc, &(0x7f0000000100)={@empty, @empty, [], {@generic={0x867b, "ed578bee7aa6918d17ae8858afaf0ced800dcdaf8c4282796815989d4d514d941b5499ebfecadcae631040d2e94390091012ca675ec6f4a7982cfa4128b0465cb692d9e0fde6bc4a648433d4502d66cc2695b13367ff7ce7eb62f79037cd2d318037fafe04528b715b9845ef754257dd89193fe019c3b9f626051077df7bcb4b0a978483d7ca9f07c030e8d5ee0e6383b3"}}}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x8}, 0x4, 0x0, 0x0, &(0x7f0000000040)="4361206c650e000000000000004fc1e852df73799115758f1c74a05c3cb00d7bfffc03904c8828509c81c7b185789c411e983541600cb5a8718a68c8f044ac209da3c86bae07d6dc24b73e9a009a2b1080c3c838e2a1d90fdfcab8eca43bbdbb061e0d6bb31e82a26d1566eef801b044cf10145a24d183726b46ee086c51a93391ac046dad8fd438a40aaa38b9b41fb475e1987b3f66253441458b6a6d59f823dee4", 0xa2) 1.238779489s ago: executing program 2 (id=14): getgroups(0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setreuid(0xffffffffffffffff, r3) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="3d0300c86311e70712ccfbacc10111cf9e00000000000000a94a20376e89a8f17cd3161f437261ad6fd122bbda20d7fc41cf028f9102cfba3d7bd517c9aaf1b53b9a2a5ea65cbba78c1a057a014c3cfebbcb2307e023dc97", 0x58) mkfifo(&(0x7f0000001380)='./file0\x00', 0x8) r4 = open(&(0x7f0000000180)='./file0\x00', 0x7c6, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$FIOASYNC(r4, 0xc0206981, &(0x7f0000000580)=0x7) setresuid(0x0, r3, r3) 1.153941235s ago: executing program 7 (id=15): setuid(0x0) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="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", 0x177}], 0x1) r1 = syz_open_pts() r2 = socket$unix(0x1, 0x5, 0x0) closefrom(r2) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) r3 = syz_open_pts() ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000100)={0xa67, 0x77ffffff, 0x17, 0x3b6d6738, "fe011e637497896b00a70000001efe02bfabb686", 0x2, 0x2}) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xca605601, &(0x7f0000000180)={0x10, 0x6, [{&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x200}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x684}, {&(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7484}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x9}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffd32}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xb96}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xffffffffffff8000}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1400000}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xfff}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1}], './file0\x00', 0xa90d, 0x8, 0x8, 0x2, [0x6, 0x7, 0x1, 0x1, 0x7e34, 0x7, 0x8, 0x9, 0x12, 0x2, 0xe8, 0x2, 0x4, 0x8, 0x4, 0x800, 0xb, 0x5, 0x9, 0x9, 0x4, 0x0, 0xfffffffd, 0x4, 0xfffffff7, 0xc7f9, 0x6, 0x8, 0x279, 0x4, 0x5, 0xd, 0x3ff, 0x28c6, 0x401, 0x0, 0xd, 0x7, 0x1, 0xd129, 0x80000000, 0x10000, 0x7, 0x3, 0x5, 0x9, 0xfffffffa, 0x3, 0xc3, 0x3, 0x6, 0x3, 0x4a, 0x48d, 0x1, 0x6, 0x5, 0x1, 0x81, 0xa46, 0x1ac400, 0x9, 0x1, 0x3, 0x6f, 0x3, 0x10001, 0x6, 0x1, 0x7, 0xffffffff, 0x101, 0x80000000, 0xe7, 0xd, 0xe, 0x0, 0x0, 0xb, 0x5, 0x7, 0xf, 0x101, 0x6, 0x3, 0xffff4dce, 0x80, 0x6, 0x100, 0x3, 0x7, 0x29f, 0x4, 0x400, 0x81, 0x6, 0x4, 0x8, 0xbf, 0x9, 0x200, 0x9, 0x7, 0xa, 0x101, 0x1000, 0x8, 0x5, 0x40000, 0x8, 0xb, 0x62d, 0x4, 0x0, 0x8, 0x8, 0x0, 0xf, 0xd63, 0x3, 0xb, 0xc4, 0xffffff1c, 0x3, 0xffffffba, 0x8, 0x2, 0x7, 0x81, 0x8, 0x0, 0x1, 0x80000000, 0x8001, 0x7, 0x2, 0x80000001, 0x6, 0xa, 0x401, 0x0, 0x97ed, 0x10, 0x4, 0x1000, 0x2, 0x1800000, 0x101, 0x768f, 0x1, 0xffffff46, 0x0, 0x5, 0x5, 0xd0000000, 0x4, 0x2, 0x0, 0x0, 0xc, 0x4, 0x5, 0x547, 0x80000001, 0x1, 0xd46, 0xffff0000, 0x7001, 0x80, 0x0, 0x5, 0x4, 0x6, 0x7, 0x8000, 0x7fffffff, 0x6, 0x8, 0x3, 0x7, 0x1, 0x4, 0x9, 0x5, 0x6, 0x6, 0x5, 0x1, 0x0, 0xa14, 0x50000, 0x2, 0x9dc6, 0x1, 0xde, 0x10000081, 0x3, 0xffffffff, 0x4, 0x2, 0x5d9e030, 0x208, 0x8c3, 0x8, 0x1, 0xffff0001, 0xfffffeff, 0x6, 0xab, 0x75, 0x5b, 0x91a5, 0x9, 0x200, 0xa28, 0x1ca7, 0xcc52113b, 0x4, 0x6, 0x0, 0xe, 0x1, 0x800, 0x10000, 0x3, 0xcb725aa, 0x3, 0x6, 0x6d6, 0x9, 0x0, 0x0, 0x9, 0x7e7, 0x7ff, 0x7, 0x1, 0x8, 0x2, 0x78c, 0x5, 0x660f2d7c, 0x1d6, 0x5, 0xfff, 0x5, 0xd, 0x80000001, 0x101, 0xf8, 0x4, 0x29b, 0x5, 0x7, 0x100, 0xffff8001, 0xec8, 0x8, 0xd0b, 0x25, 0x8001, 0x1, 0x5, 0x4, 0x7, 0xf0, 0x2, 0x3, 0x2, 0x1, 0x7ff, 0x6c98f8f3, 0x1, 0x2, 0xd252, 0x0, 0x0, 0x2, 0x8000, 0xb, 0x1a1, 0x4, 0x3, 0x200, 0x7, 0xa51, 0x9, 0x80, 0x400, 0x2, 0x3, 0x1, 0x80, 0x6, 0x0, 0xfffffffe, 0x3, 0x20000000, 0xfffffff7, 0x6, 0x7f, 0x0, 0x400, 0xdb2, 0x8, 0x2c32b8, 0x40, 0xb9d, 0x0, 0x4, 0x3, 0x7fff, 0x8001, 0x1, 0xc9, 0x2c, 0x2, 0x8000, 0x5, 0x4, 0x4, 0x200, 0x7, 0x5, 0x1, 0x2, 0x6, 0x9, 0x2, 0x81, 0x5, 0x9, 0x3, 0x2, 0x4b09, 0x0, 0x8, 0x10, 0x1, 0x0, 0x9, 0xfff, 0xc, 0x1, 0x0, 0x7, 0x1, 0x6, 0xe62, 0x1, 0x80, 0x3, 0x8, 0x5, 0x7, 0xe368, 0x8, 0x6, 0xf8, 0x1, 0x2, 0x239, 0x4, 0x7, 0x10000000, 0x200, 0x905a, 0x5, 0x9, 0x9, 0x6, 0xfffffff7, 0x2, 0x6, 0x2, 0x84, 0xffffffff, 0x1, 0x7ed, 0xa, 0xc68, 0x201, 0x7, 0x3, 0x7fffffff, 0x6, 0x10, 0x1000, 0x4, 0xffff0151, 0x4, 0x401, 0x1d, 0x1, 0x10000, 0x3, 0xf, 0x3, 0x2, 0x3, 0x8, 0xfa18, 0x40, 0x1000, 0x4, 0x4, 0x26425a14, 0x1, 0xf3f5, 0x4, 0x6, 0x0, 0x6, 0x18, 0x9, 0x40, 0x401, 0x3, 0x6, 0x6, 0x7, 0x6b, 0x4, 0x7f, 0x3, 0x7f, 0x4, 0x9901, 0x80000001, 0xfffffffe, 0x2, 0x4, 0x1, 0x4, 0x2, 0xcdc5, 0x1, 0x1, 0x1, 0x401, 0x0, 0x4, 0x9, 0x9cc7, 0x0, 0x7ff, 0x4, 0x8000, 0x0, 0xfffffffe, 0x2, 0xbe, 0x0, 0x0, 0x40, 0xacf0, 0x5, 0x8, 0x3, 0x1, 0x7ff, 0x4, 0x7fffffff, 0x56, 0x4, 0x9, 0x8, 0xdd, 0x1, 0x0, 0x8, 0x5, 0x1, 0x1, 0xa, 0x63, 0x7fff, 0x4, 0xfffffffc, 0x20c, 0xfffffbcc, 0x8, 0x1, 0x6, 0x1, 0x10004, 0x4, 0x7ff, 0xe, 0x106e, 0x6, 0x3, 0x6, 0x1b, 0x4, 0x9, 0x7, 0x77, 0x80, 0x0, 0x0, 0x0, 0x5, 0x56, 0x9, 0xa, 0xe458, 0x5, 0xa, 0x5, 0xf8b, 0x4]}) write(r1, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) r4 = socket$inet6(0x18, 0x3, 0x7) setsockopt$sock_int(r4, 0xffff, 0x1021, &(0x7f0000000040)=0x9ee, 0x4) execve(0x0, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x80) setsid() mknod(&(0x7f0000000000)='./file0\x00', 0x2008, 0x1ea8) r5 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) ioctl$DIOCGETQUEUES(r5, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x291, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1000}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) ioctl$DIOCGETQUEUES(r5, 0x80044403, &(0x7f0000000040)={0x108, 0x9, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x9, 0x7}, 0x4}, {{0x9, 0x1}, {0x7, 0x7ff}, 0x3}, {{0x8, 0x2}, {0xc, 0x1000}, 0x3ffffffd}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x2, 0x10000009, 0x4}}) r6 = socket$inet6(0x18, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r6, 0x29, 0x23, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xa094, 0x24}, 0x8) sendmsg(r6, &(0x7f0000000a00)={&(0x7f0000000400)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000840)=[{0x10, 0xffff, 0x3d, "8078"}], 0x10}, 0x402) r7 = syz_open_pts() r8 = dup2(r7, r7) ioctl$TIOCSCTTY(r8, 0x20007461) openat$tty(0xffffffffffffff9c, &(0x7f0000000340), 0x20, 0x0) close(r8) kqueue1(0x10000) 1.121178186s ago: executing program 3 (id=4): sysctl$net_inet_ipip(&(0x7f00000015c0)={0x4, 0x2, 0x4, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x94, 0x65, 0x4, 0xec}, {0xfffe, 0x5, 0x1a, 0x1000}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x1bb, &(0x7f0000000480)={@local, @remote, [], {@ipv6={0x86dd, {0x8, 0x6, "7333fa", 0x185, 0xc, 0xfb, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@routing={0x8, 0x2, 0x0, 0xfb, 0x0, [@remote={0xfe, 0x80, '\x00', 0x0}]}, @routing={0x2e, 0xa, 0x0, 0x1, 0x0, [@mcast1, @mcast1, @empty, @mcast2, @empty]}, @routing={0x3a, 0x12, 0x0, 0x6, 0x0, [@mcast2, @local={0xfe, 0x80, '\x00', 0x0}, @loopback, @remote={0xfe, 0x80, '\x00', 0x0}, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @local={0xac, 0x14, 0x0}}, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @multicast1}]}], @generic="336cef499425fdffc2235160d2f114de5e566df65655091dc9ba8c014d87bfef9c62e8dc9ed1e47d530c5adbf5b9b4721ee5ade85085655cb8eae6bfa4d73da93d95dbe67a538c5d21019a6c8ea2c8172143e96af7205a984de434db575bf5b471a4c4ba86518a82d0d59825bdf58be1349e1fae70893379ff9473e4fa"}}}}}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = syz_open_pts() r4 = dup2(r3, r3) ioctl$TIOCSCTTY(r4, 0x20007461) r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000340), 0x20, 0x0) ioctl$TIOCCLRVERAUTH(r5, 0x2000741d) ioctl$DIOCRGETADDRS(r2, 0xc4504446, &(0x7f00000013c0)={{'./file0\x00', './file1aaaaaaaaaaaaaaaaaaaaaaaaa', 0x56, 0xff}, 0x0, 0x34, 0x0, 0x203, 0xcfd, 0x2ec, 0x7, 0x0, 0x5de520cf}) r6 = socket$inet(0x2, 0x3, 0xfe) sendmsg(r3, &(0x7f00000003c0)={&(0x7f0000000200)=@in6={0x1c, 0x18, 0x0, 0x0, "c94ac22d465578117bd8dfd18e1eb71b", 0x5}, 0x10, 0x0, 0x0, 0x0, 0xfffffffffffffd3f}, 0x409) pselect(0x40, &(0x7f0000000080)={0xff, 0x3ff, 0x5, 0x8, 0x9, 0xb, 0x3, 0x80000009}, 0x0, 0x0, 0x0, 0x0) listen(r6, 0x2) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x4c, 0xa, 0x25, 0x204}, {0x4, 0xd, 0x2, 0x3}, {0x6, 0x34, 0x6, 0x8}]}) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[]) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) r8 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$PCIOCREAD(r8, 0xc0107004, &(0x7f00000000c0)={{0x4, 0x3}, 0x48cc, 0x4, 0x2}) sysctl$kern(&(0x7f0000000180)={0x1, 0x47}, 0x3, &(0x7f0000000280)="ee8f409198157e3b0d482cd811439e226a5747b2732f263368b73a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d2700"/100, &(0x7f0000000140)=0xa3, 0x0, 0x0) syz_emit_ethernet(0x9d, &(0x7f0000001980)=ANY=[@ANYBLOB="00000000000000000000000081001600080048d1008b00640002043c9078ac1400aaac1400bb83070eac1400bb830fc77f0000017f000001e00000029404000200070de4100855cc9190b96e51459404000083073e56a845b50707e9ac1400aa0082109e51e723b84da519acf2dbbd30e800000090780067009954c6439e18ad52320096e130b6d7b1be232d466772762d9105dccffa694486199b26c886ba282c56a12147fe61586407e4c86dd6a6642c1fc9814534910d"]) closefrom(r0) syz_open_pts() 1.12057177s ago: executing program 0 (id=16): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xc0, 0x7, 0x1, 0x3}, {0x50, 0x5, 0xf9, 0x4}, {0xd9e6, 0x2, 0x8, 0x400808}]}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xc0, 0x7, 0x1, 0x3}, {0x50, 0x5, 0xf9, 0x4}, {0xd9e6, 0x2, 0x8, 0x400808}]}) futimes(r0, &(0x7f0000000040)=[{0x200, 0xf39}, {0x1000, 0x200}]) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[]) 1.11911917s ago: executing program 2 (id=17): sysctl$hw(&(0x7f0000000000)={0x6, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) madvise(&(0x7f0000001000/0x9000)=nil, 0x9000, 0x2) sysctl$vm(&(0x7f0000004180)={0x2, 0x8}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$ddb(&(0x7f0000000000)={0x9, 0x5}, 0x2, 0x0, 0x0, &(0x7f0000001100), 0x4) syz_emit_ethernet(0xea, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd67d6c7c300b42cc5fe8000000000000000000000000000bbfe80000000000000000000bcb10000bb330000010000254a336f"]) socketpair(0x10, 0x8000, 0x2, &(0x7f0000000040)={0xffffffffffffffff}) write(r0, &(0x7f0000000080)="7eda29dbc4762c3f47f7bb4ef99a529e852b075216cdc1ab459619198a36cbd0e5863012a0c36712e4a77fce9b", 0x2d) 1.118899816s ago: executing program 0 (id=18): mkdir(&(0x7f0000000400)='./file0\x00', 0x148) mkdir(&(0x7f0000000040)='./file0/file1\x00', 0x10) (async) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0/file1\x00') r0 = socket$inet(0x2, 0x3, 0x2) sendmsg(r0, &(0x7f0000000c80)={&(0x7f0000000040)=@un=@abs={0x9, 0x1, 0x0, 0x3}, 0x8, 0x0, 0x0, 0x0}, 0x0) 1.064817425s ago: executing program 5 (id=19): r0 = syz_open_pts() r1 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x112) pselect(0x1f, &(0x7f0000000040)={0x9, 0xfffffffffffffff8, 0x327c, 0x9, 0x7, 0x8, 0x11, 0x3}, 0x0, &(0x7f0000000140)={0xb, 0xc, 0xffff, 0xfffffffffffffff7, 0x7, 0x5, 0xb3, 0x6}, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000940)=0x5) socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind(r2, &(0x7f00000000c0)=@un=@file={0x0, 0x1, './file0\x00'}, 0xa) chmod(&(0x7f00000000c0)='./file0\x00', 0x19b) setegid(0xffffffffffffffff) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r3 = kqueue() ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000000)=0x80000000) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) closefrom(r2) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x8, 0x0, 0x0, 0x3}, 0x8) ioctl$DIOCRSETADDRS(r1, 0xc4504445, &(0x7f00000004c0)={{'./file0\x00', './file1\x00', 0x11, 0xf}, &(0x7f00000002c0)=[{@multicast2, '\x00', './file0\x00', 0x9, 0x8, 0x2, 0x8c, 0x0, 0x96, 0x7}, {@empty, '\x00', './file0\x00', 0x4b, 0x9, 0x18, 0x4, 0x7, 0xfb, 0x8}, {@multicast2, '\x00', './file0\x00', 0x2, 0x7, 0x18, 0x1, 0x5, 0xf7, 0x4}, {@multicast2, '\x00', './file0\x00', 0x7ff, 0xc9dd, 0x0, 0x15, 0x9, 0x80, 0x2}, {@broadcast, '\x00', './file0\x00', 0x100, 0x8a9, 0x2, 0x78, 0x8, 0x1, 0x7}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x9, 0x7a, 0x18, 0xc7, 0x0, 0x8, 0x7}, {@multicast1, '\x00', './file0\x00', 0x7, 0x3, 0x18, 0x6, 0xe5, 0x9, 0x3}, {@rand_addr=0x3, '\x00', './file0\x00', 0x8001, 0x9, 0x0, 0x0, 0x5, 0x8}, {@multicast2, '\x00', './file0\x00', 0x8000, 0x2, 0x2, 0xd8, 0x8, 0x4, 0xfb}], 0x1, 0x9, 0x8, 0x604, 0x7, 0x4, 0x4, 0x3}) r4 = socket$inet(0x2, 0x2, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0x80047308, &(0x7f00000001c0)={0x0, 0x0, 0x4}) closefrom(r6) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x20000674) r7 = getpgrp() ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0x40002330, r7) getsockopt$SO_PEERCRED(r5, 0xffff, 0x1022, &(0x7f0000000080)={0x0, 0x0}, 0xc) setsockopt$sock_cred(r4, 0xffff, 0x1022, &(0x7f0000000100)={r7, r8}, 0xc) open(&(0x7f0000001980)='./file0\x00', 0x10000, 0x11) pselect(0x40, &(0x7f0000000240)={0x7, 0x2000d, 0x0, 0x7, 0xfffffffffffffff8, 0x4, 0x1, 0x100009}, 0x0, 0x0, 0x0, 0x0) pselect(0x40, &(0x7f0000000280)={0x7f, 0x3, 0x121, 0x9, 0x400000000, 0x5, 0x9, 0x7}, 0x0, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000200)={0x10, 0x2, 0x2, 0xac1403aa}, 0x10) 1.064273495s ago: executing program 4 (id=20): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rmdir(&(0x7f0000000b80)='./file1\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x148) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x148) chown(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0xe6) seteuid(0xffffffffffffffff) stat(&(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe) (async) stat(&(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x8000, 0xf, r0}) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x8000, 0xf, r0}) ioctl$DIOCGETRULES(r1, 0xcd604406, &(0x7f0000000bc0)={0x8, 0xffffff81, 0x2, './file1\x00', './file1\x00', 0x0, "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"}) 1.063601765s ago: executing program 0 (id=21): unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='c\x00') mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r0 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r0, 0xc0206925, &(0x7f0000000580)=0x7) munlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) madvise(&(0x7f0000b4a000/0x400000)=nil, 0x400000, 0x6) munmap(&(0x7f0000c76000/0x4000)=nil, 0x4000) open(&(0x7f0000000040)='./file0\x00', 0x2, 0xea) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd68595b8100102c0400000000000000000000fafffffffe02000000000000000000000000000162"]) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) ioctl$VNDIOCSET(r1, 0xc0384600, &(0x7f0000000180)={0x0, 0xd9, &(0x7f0000000140)='./file0\x00', 0x8}) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 1.054341492s ago: executing program 1 (id=22): r0 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0xc9) ioctl$DIOCGETQUEUES(r0, 0xc0184406, &(0x7f0000000040)={0x8, 0x1, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x4}, {{0x9, 0x2}, {0x7, 0x7ff}, 0x4}, {{0x9, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) setitimer(0x1, &(0x7f0000000000)={{0x4, 0xe}, {0x0, 0x3}}, 0x0) 834.312397ms ago: executing program 4 (id=23): mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r0 = socket$inet(0x2, 0x3, 0x2) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000040)={0x1edc, 0x3, 0x5, 0x9, "4a003bbb9f5ecfb00c23dc770facf5c258f304fb", 0xfff, 0x8}) sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffc47) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_icmp(&(0x7f0000000040)={0x4, 0x2, 0x1, 0x5}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x6}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) r1 = kqueue1(0x10000) kevent(r1, &(0x7f00000001c0)=[{{r1}, 0xfffffffffffffff9, 0x7df6ffdf4f41cf1b, 0x1, 0x1, 0x8}], 0x9, 0x0, 0x4, 0x0) kevent(r1, &(0x7f0000000000), 0x86, 0x0, 0xfdff4b4d, 0x0) setsockopt(r0, 0x0, 0x5, &(0x7f0000000100)="9a355644", 0x4) 821.461902ms ago: executing program 6 (id=24): ioctl$DIOCGETQUEUE(0xffffffffffffffff, 0xc0804467, &(0x7f0000000480)={0x8, 0x802, {'\x00', './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0aaaaaaaaa\x00', './file1aaaaaaaaa', {{0xd20, 0x7}, {0x8000000000000001, 0x7}, 0x239d}, {{0xfffffffffffffff7, 0x4}, {0x6, 0x8}, 0x5}, {{0x2, 0x8}, {0x54, 0xfff}, 0x405}, {0x10d, 0xff, 0x0, 0x9}, 0x0, 0xfffa, 0xfefffffe, 0x9, 0x402}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) socket$inet6(0x18, 0x4000, 0x0) r0 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r0, 0x8020697f, &(0x7f0000000580)=0x7) mquery(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, r0, 0xfffffffffffffff7) 820.374559ms ago: executing program 6 (id=25): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000040)={0x0, 0x3, 0xffffffffffffffff, 0x0, 0x10}) getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(0x0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setresuid(r6, 0x0, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(r4, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0xc) r9 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x8c) r10 = setsid() fcntl$setown(r9, 0x6, r10) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000240)={{r6, r1, r7, r8, 0x4, 0x400, 0x0, 0x0, 0x31}, 0x0, 0x0, 0x8, 0x7, 0x1cbf, r5, r10, 0x3, 0x0, 0x50f47678, 0x0, 0x8}) fcntl$setown(r0, 0x6, 0x0) r11 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$DIOCGETRULESET(r11, 0xc444443b, &(0x7f0000000500)={0x49, './file0\x00', './file0\x00'}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0xd02) r12 = open(&(0x7f0000000080)='./file0\x00', 0x1, 0x22) ioctl$TIOCSETD(r12, 0x80045102, &(0x7f0000000040)=0x9) open(&(0x7f00000000c0)='./file0\x00', 0x400, 0xea) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) 816.148996ms ago: executing program 2 (id=26): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x64, 0x81, 0xfb, 0x6}, {0x28, 0x10, 0x2, 0x5619}, {0x261e, 0xa8, 0xd, 0x806}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[]) futimens(0xffffffffffffffff, &(0x7f0000002e40)=[{0x100, 0x100000001}, {0x5, 0xc36}]) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x64, 0x81, 0xfb, 0x6}, {0x28, 0x10, 0x2, 0x5619}, {0x261e, 0xa8, 0xd, 0x806}]}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) (async) syz_emit_ethernet(0x52, &(0x7f0000000200)=ANY=[]) (async) futimens(0xffffffffffffffff, &(0x7f0000002e40)=[{0x100, 0x100000001}, {0x5, 0xc36}]) (async) 815.649423ms ago: executing program 6 (id=27): r0 = setsid() r1 = syz_open_pts() r2 = dup2(r1, r1) ioctl$TIOCSCTTY(r2, 0x20007461) fcntl$setown(r2, 0x6, r0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BIOCGETIF(r3, 0x4020426b, &(0x7f0000000080)={""/16, @ifru_broadaddr=@in}) 600.227194ms ago: executing program 6 (id=28): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = kqueue1(0x10000) kevent(r1, &(0x7f0000000000)=[{{r0}, 0xfffffffffffffff9, 0x65, 0x2, 0x3, 0x200}, {{r1}, 0xfffffffffffffff6, 0x5, 0x4, 0xc, 0x56a}, {{r1}, 0xfffffffffffffff9, 0x2, 0x4, 0x100, 0x3}], 0xf00, 0x0, 0xffff4b54, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0x300, 0x0) pledge(&(0x7f0000000d80)='\xa1\x9e\\\xe3\x80\xd9|i\x1a\x8e\x97~\xa7e &\x97\xf0\xb7\x1e\xe7\x8eA\xb0j{\xc4z\xb7\xf7;\xa9\x8fK\x83Yh\xb5\xb4\x8eBbr\xfb\xc8\xf9G\x88\x1d\xb6\xce\f.\xa8P\xb6\x1a\x00\xfb\x80W\xa2\x1c\b\xeeT7\xbd\xeb`;\xf1~D\xca\x12\xeb\xbc\xc0,\x15\\\xc3\x11\xce\fQ\x1e\xc8\x1f`#X\xa5\xce\xf2\xb05=\xdb\xda0q\xd2u<\rV\x7fJ\xfd\x8eq\xd1b\xe0\xfcM\xda\x00\x81l\xd9\xb2r\xb2\xc8D\xf4\x99A\f\xa2\xaa_QW\x1d\xdc\f\xb9!\x11\xf3\xe3mT\xfa\xf7\xb5a\x9c\xca\x01\x1a\xcflo\xe3^]\xdf,u\xb8\x83\x18mi-\b\x9a\xbf\x19\x85[\x95\xeeU\xc3\xd7\xe5\'9;\x90\xf1\xf4\xc8cVD\xfd0xffffffffffffffff}) ioctl$VMM_IOC_RESETCPU(r7, 0x82405605, &(0x7f00000001c0)={0x1, 0xde380000, {[0x4, 0x6a, 0x3, 0x80, 0x6361, 0x2, 0x6135b1e7, 0x0, 0xf, 0xbe, 0x4, 0xffffffffffffffff, 0x6, 0x3, 0x7, 0x0, 0x3, 0xaa], [0xcd33, 0xf8, 0x9, 0x3, 0xc, 0xffffffffffff0005, 0x8000, 0xfffffffffffff000, 0x2, 0x6], [0x8000000000, 0x2, 0x9, 0x9, 0xc59, 0x6, 0xfffffffffffffffb], [0x7, 0x3, 0x1, 0xcb71, 0xffff, 0xa8a], [{0x8, 0x5, 0x20c5, 0xe4d}, {0x91e, 0xfffffffb, 0x3ff, 0x5e93cba8}, {0xffff, 0x9, 0x0, 0x2}, {0xe, 0x5, 0x6, 0x6}, {0x6, 0x1, 0xfffffffd, 0x100000001}, {0x9, 0x1ff, 0x9, 0x1000}, {0x7, 0x8001, 0x4, 0x7ffffffd}, {0x5, 0x9, 0xc00000, 0x66d211a8}], {0xfff9, 0x8, 0x10001, 0xfffffffffffff000}, {0x0, 0x2, 0x4, 0xfffffffffffffff8}}}) sysctl$kern(&(0x7f0000000680)={0x1, 0x29}, 0x2, &(0x7f00000006c0)="c561d40933f9aa77a60cb16ecade5235fb43f8e3b5e0105ded64fc4bb5a78efc76799db23cc7621ccacdefa834b47b2f76836bfc2922b1ab9792cff9380fed2e43ece9fde723e6149aaaa7ecdb65aabc1f2fa85cf9314655404f7c378ea211b505ea9e7a3c3972d159235d51ebcdcdcb1d3f8a6b815c77cc5e65f17227a0fdc57df285e6e897c2646e24c1f48358b559d4ec6712b9531ac460d308a3a8d981c63cf73690c7b03c342bb4c2924cc83021dd0dcf252674e840fe6f", &(0x7f0000000780)=0xba, &(0x7f00000007c0)="b85448b4a7722332f4118347354292717395956eff3929fc4945f94afa5140ca565fccca9f74c7b52c5bac742011b72697fe09fc22f21416b72a169bb9a79f9de491f5a4abfbc872a62c8a357ca499b4438836e31e7c56103a4129924f9c6c51892574539f8676412bbbf5c67920", 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) r9 = openat$pf(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$DIOCSETSYNCOOKIES(r9, 0xc0014462, &(0x7f0000000640)=0x2) bind$unix(r8, &(0x7f0000000000)=@abs={0x1, 0x1, 0x0, 0x0}, 0x8) sysctl$vfs_ffs(&(0x7f0000000080)={0xa, 0x1, 0x13}, 0x3, 0x0, 0x0, 0x0, 0x0) closefrom(r8) r10 = socket$unix(0x1, 0x2, 0x0) connect$unix(r10, &(0x7f00000000c0)=@file={0xfc, 0x1, './file0\x00'}, 0xa) 599.806946ms ago: executing program 1 (id=29): getgroups(0x7, &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setregid(0x0, r0) getresgid(0x0, &(0x7f0000000040)=0x0, 0x0) setgroups(0x1, &(0x7f00000000c0)=[r1]) open$dir(&(0x7f0000000800)='./file0\x00', 0x200, 0xfdf98e28ba4af85) r2 = semget(0x1, 0x7, 0x200) semop(r2, &(0x7f0000000000)=[{0x2, 0x344d, 0x1800}, {0x1, 0x9, 0x1000}], 0x2) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000080)=""/43) sysctl$vfs_nfs(0x0, 0x0, &(0x7f00000000c0)="6359f204bf1013a1efead6fb8854fc6b13ee953963c44f42f07d12cb433f906a013aba1413e8a1819c032409637439b954e45b130f2138d4e9ddef2e44d11e15b8894d5a01b45a17eaa01abca0703645609b75f93d7340000144b6bdb4a25030b8a913972023761ada281233a5c03f1a3fd2a16b83d3f942a643b018980a0c061eb543ce4cfa6b0ef15e08a94ed089371d6f9f8564248de61c20c4e09146ee70f1c4fe0568568bef965782bc97415f10f77b2d83ee", 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x33a2) r3 = open(&(0x7f0000001980)='./file0\x00', 0x80, 0xc3) ioctl$TIOCCONS(r3, 0xc0a86b07, &(0x7f0000000140)=0x1) semctl$SETVAL(r2, 0x2, 0x8, 0x0) 599.246987ms ago: executing program 2 (id=30): mknod(&(0x7f00000004c0)='./file0\x00', 0xc000, 0x1aa8) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x7f, 0x0, 0x0, 0x0}, 0x8) sysctl$vfs_nfs(&(0x7f0000000400)={0xa, 0x2, 0x1}, 0x4000000000000210, 0x0, 0x0, 0x0, 0x0) semget$private(0x0, 0x2, 0x400) sysctl$kern(&(0x7f0000000000)={0x1, 0x2a}, 0x0, 0x0, 0x0, 0x0, 0x6) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x10, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = socket$inet(0x2, 0x4, 0x11) setsockopt(r2, 0x0, 0x21, &(0x7f0000000100)="9a355644", 0x4) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f00000002c0)={0x0, &(0x7f0000000040)}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[]) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f00000ed000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f00001c6000/0x4000)=nil, 0x4000, 0x1) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x10}, 0x4, &(0x7f0000000500)="c2990a43a7ab890a1396af399413847a3b9f258788fb50d04d4c7086d3f5c97f6c1b1ef3179d6ac5a7b08788b1956051359e3befe326a68a6e813b5fabf552930d4ecea91b82124e2a068a29af9db2a884a4b03e732ac0a83ce2eb0e1e049cc7e97a208fa690e8932e4596d338644739c49a4a99e2e123003f393570a57467e28c0d7f1df4381f9ea9bb8701642339763fb13c0fd8d508b6865ecc2ea9f76f79e4942a98767606a382e3c081fcdcb6b22ea86520248cd3d926952b82fb4ccff651dc2139456f0c50491a62238f758bfcc716347a9e63aebd5d09005f980fdd61f1f80ceca30791c22b313a8c95cc4aa46c9599963455239bf2ae301419", 0x0, 0x0, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000280)={0x3, &(0x7f0000000480)=[{0x46, 0x4c, 0x6, 0x2}, {0x8, 0xfe, 0xc7, 0x23}, {0x9, 0x3, 0xfa, 0x400003}]}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) sysctl$kern(&(0x7f0000000000)={0x1, 0x59}, 0x3, &(0x7f0000000180)="ee8f409198157e3b0d482cd811439e57ce10400116e4853368b7858dd5313a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d270400000000000000000000000000810000", &(0x7f0000000080)=0x5b, 0x0, 0xfffa) r3 = open(&(0x7f0000000200)='./file0\x00', 0x9da, 0x6) r4 = open(&(0x7f0000000240)='./file1\x00', 0x1, 0x48) syz_open_pts() socket$unix(0x1, 0x2, 0x0) ioctl$TIOCSWINSZ(r4, 0x80087467, &(0x7f00000000c0)={0x5, 0x801, 0xb, 0x7}) mkdir(&(0x7f0000000080)='./file0\x00', 0x204) chroot(&(0x7f0000000000)='./file0\x00') mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0) unveil(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='c\x00') ioctl$DIOCGETQUEUES(r3, 0xc0284408, &(0x7f0000000040)={0x8, 0x1, {'\x00', './file0\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x2, 0x13}, 0x4}, {{0x5, 0x6}, {0x6, 0x7ff}, 0x4}, {{0x9, 0x2}, {0x9, 0x1000}, 0x40000000}, {0x7, 0x6ee, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) 595.856047ms ago: executing program 1 (id=31): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x2add) sysctl$kern(&(0x7f0000000000)={0x1, 0x1b}, 0x2, &(0x7f0000000240)="6f2ca0f44cf4c5efef3015d2", &(0x7f0000000140)=0xc, &(0x7f0000000180), 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x31}, 0xa, 0x0, 0x0, 0x0, 0xfffffffffffffc47) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) open$dir(&(0x7f00000002c0)='./file0\x00', 0x80, 0xc2) socket$inet(0x2, 0x1000, 0x2) syz_emit_ethernet(0xaa, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd65e481e200740000000000000b00000000000000f9ff000000000000000000000000ffff00"]) r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000002300), 0x1, 0x0) r1 = dup2(r0, r0) ioctl$WSKBDIO_SETMODE(r1, 0x80045713, &(0x7f0000000040)=0x1) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) lseek(r2, 0x2, 0x1) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2) 595.353972ms ago: executing program 0 (id=32): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x3, 0xc, 0x3}, {0x80, 0x2, 0x3, 0x4}, {0x6, 0x16, 0x2, 0x1}]}) ioctl$DIOCRGETTSTATS(0xffffffffffffffff, 0xc4504440, &(0x7f0000000480)={{'./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0\x00', 0x42, 0x2}, 0x0, 0x4d0, 0x0, 0xb5, 0x3ff, 0x4, 0x74e5, 0x40, 0x9}) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2}], 0x1, 0x5) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x422, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000e80)=[{0x46, 0x3, 0x1, 0x74d629ae}]}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x4b) ioctl$DIOCGETQUEUES(r2, 0x80184404, &(0x7f0000000040)={0xf, 0x1, {'\x00', './file1\x00', './file1\x00', './file1\x00', {{0x7, 0x2}, {0x6, 0x13}, 0x2}, {{0x9, 0x5}, {0x2f1c, 0x526}, 0x4}, {{0xc, 0x2}, {0x9, 0x1000}, 0x1}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) ioctl$DIOCGETQUEUES(r2, 0x80044403, &(0x7f0000000040)={0x8, 0x9, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x7, 0x2}, {0x9, 0x7}, 0x4}, {{0x9, 0x1}, {0x6aa, 0x7ff}, 0x3}, {{0x8}, {0xc, 0x1000}, 0x3ffffffd}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x1, 0x2, 0x9, 0x4}}) ioctl$VT_RELDISP(r2, 0x20007604, &(0x7f0000000dc0)) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$DIOCCHANGERULE(r1, 0xcd60441a, &(0x7f0000000040)={0xfffffc01, 0x3, 0x9, './file0\x00', './file0\x00', 0x0, "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"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r3, 0xffff, 0x80, &(0x7f00000003c0)={0x6, 0xfffffff8}, 0x8) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x20) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[]) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x841d242141ed4436, 0x0) 594.959154ms ago: executing program 4 (id=33): mkdir(&(0x7f0000000640)='./file0\x00', 0x40) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0xffff6383) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0xc3) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) ioctl$WSDISPLAYIO_SVIDEO(r0, 0x82907003, &(0x7f00000000c0)=0x2) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6f75184a00703a0000d5e6b7b40700000200001000000000fe8000000000000000000000000000aa020056d864003373e12395000088000000000000000000000000000000160002b864000000620000000000000004014e0000000000500100"]) syz_emit_ethernet(0xab, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045da009d0068000005069078e0000001ac1400bb4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5110000190780001290ac9e59833c25f0377ea972b02d4c55bc02fb079d75b2e0ad92f7c3d393400a513b827c15e93cddf96156253db936aa17a3889eee75fca226643ec64b7f3ccdf3649eafecc1796fcc8cad9c69a7352911ec4641ec5285e24b46ba29d5b40795b24ce7f33a96a3fbc81106f697b7607ab54b9fc7df693907102bf5e2c"]) 192.868834ms ago: executing program 1 (id=34): semget(0x0, 0x4, 0x204) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$audio(r1, &(0x7f0000000040)=""/52, 0xffffff6d) closefrom(r1) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x20, 0x0) ioctl$BIOCLOCK(r2, 0x20004276) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000080)={0x0, 0x0}) (async) writev(r0, &(0x7f0000000780)=[{&(0x7f0000000440)="29d25f48fa", 0xfffffe54}], 0x1) semget(0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt(r3, 0x0, 0x8, 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000200)={0x10, 0x2, 0x2, 0xac1403aa}, 0x10) 190.671145ms ago: executing program 7 (id=35): r0 = socket$inet(0x2, 0x1, 0x0) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[{0x10, 0xffff, 0x0, "10"}], 0x10}, 0x1) (async) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0806000108"]) 68.092118ms ago: executing program 5 (id=36): ioctl$TIOCMBIC(0xffffffffffffff9c, 0x8004746b, &(0x7f0000000000)=0x7) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000040)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x2c8}) ioctl$TIOCSTART(r0, 0x2000746e) syz_emit_ethernet(0x3c, &(0x7f0000000080)={@broadcast, @remote, [], {@arp={0x806, @generic={0xf, 0x80c7, 0x6, 0xa, 0x8, @remote, "4cd824cf5ed581540376", @empty, "5dbb23f1b5a1711fdc39d10f37a5b69c"}}}}) 67.42928ms ago: executing program 0 (id=37): fstat(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000000c0)=[0xffffffffffffffff]) chown(&(0x7f0000000000)='./file0\x00', r0, r1) sysctl$net_inet_udp(&(0x7f00000039c0)={0x4, 0x2, 0x11, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x4) 63.432787ms ago: executing program 5 (id=38): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0xa4, 0xe, 0x3, 0x4}, {0x80, 0xe, 0xf9, 0x401}, {0x6, 0x16, 0x6, 0x1}]}) r1 = fcntl$dupfd(r0, 0xc, r0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSFILDROP(r0, 0x80044279, &(0x7f0000000040)) syz_emit_ethernet(0x66, &(0x7f0000000280)={@broadcast, @empty, [], {@ipv6={0x86dd, {0xf, 0x6, "75184a", 0x30, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @broadcast}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0xf, '\x00', {0x8, 0x6, '\x00', 0x6, 0x2b, 0x7c, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}}}}}}}}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[]) 63.024645ms ago: executing program 0 (id=39): r0 = socket$inet6(0x18, 0x3, 0x3a) getsockopt(r0, 0x29, 0x2a, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$TIOCSETAW(0xffffffffffffff9c, 0x802c7415, &(0x7f0000000140)={0xfffffffb, 0xf7, 0x8, 0x80, "a3575d86de7b48e04e86f3123de3850bb60f2545", 0x8, 0x4003}) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x108) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x0) ioctl$DIOCRTSTADDRS(r2, 0xc4504449, &(0x7f00000002c0)={{'./file0\x00', './file0\x00', 0x1, 0x3}, &(0x7f00000001c0)=[{@empty, '\x00', './file0\x00', 0x7fffffff, 0x3, 0x2, 0x4, 0xf, 0x2}, {@rand_addr, '\x00', './file0\x00', 0x7, 0x9, 0x2, 0x93, 0x80, 0x4, 0x9}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xaeb0, 0x4, 0x1a, 0x5, 0x0, 0x1, 0xf0}, {@rand_addr=0x300000, '\x00', './file0\x00', 0x80000001, 0xbb, 0x0, 0xff, 0x7b, 0x4, 0x9}], 0x7, 0x4, 0x0, 0x4, 0x9, 0x8, 0x10, 0x8001}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) getsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f00000011c0), &(0x7f0000000040)=0x4) r3 = syz_open_pts() read(r3, &(0x7f00000000c0)=""/50, 0x32) ioctl$TIOCGETA(r3, 0x402c7413, &(0x7f0000000180)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$kern(&(0x7f0000000000)={0x1, 0x55}, 0x1, 0x0, 0x0, 0x0, 0x39) openat$vnd(0xffffffffffffff9c, &(0x7f0000002a80), 0x80, 0x0) pselect(0x40, &(0x7f0000000000)={0x49f, 0x1, 0x8000000000000001, 0x1, 0x9, 0x6, 0x8, 0x8}, 0x0, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_GCALIBCOORDS(r2, 0x41205725, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) pselect(0x40, &(0x7f0000000080)={0xdc, 0x0, 0x2, 0x80, 0x2, 0x8, 0x9, 0x4003}, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r4 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SPKRTUNE(r4, 0x20005302, &(0x7f0000000100)={0x80000000, 0x8}) sysctl$vm_swapencrypt(&(0x7f0000000000), 0x3, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @random="4002dbfc87ad", [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x36, 0x28, 0x64, 0x0, 0x6, 0x1, 0x0, @empty, @multicast1}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x32c, 0x276d, 0x400, 0xd, 0x78}}}}}) syz_extract_tcp_res(&(0x7f0000000000), 0x7, 0x7) mmap(&(0x7f00003b8000/0x4000)=nil, 0x4000, 0x4, 0x813, 0xffffffffffffff9c, 0x101) 62.326513ms ago: executing program 1 (id=40): r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0) recvfrom$inet6(r0, &(0x7f0000000040)=""/227, 0xe3, 0x2842, 0x0, 0x0) r1 = socket$inet6(0x18, 0x1000, 0x3) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0x68, &(0x7f0000000140)={{0x1c, 0x18, 0x3, 0x80000000, "d5c2ff3396b70012ea81dabf21ef7b73", 0xff}, {0x1c, 0x18, 0x2, 0xff, "ee965639f8d08ac6a9aea0814e45518f", 0xfb7}, 0x5, [0x3, 0x5, 0x7, 0x4, 0x9, 0x7fffffff, 0x37, 0x8001]}, 0x5c) execve(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)=[&(0x7f0000000200)='*%\\\x00', &(0x7f0000000240)='(\\!\x00', &(0x7f0000000280)='{@)!}\x00', &(0x7f00000002c0)='$[-]\x00', &(0x7f0000000300)='::{[7((\x00'], &(0x7f0000000500)=[&(0x7f0000000380)='$\x00', &(0x7f00000003c0)='+!$\x00', &(0x7f0000000400)='-}\\[$)\xdb)-],]]\x00', &(0x7f0000000440)='++)&-\x00', &(0x7f0000000480)='.\':*\\\'\x00', &(0x7f00000004c0)='./t\x00']) ioctl$DIOCXEND(r0, 0xc0044464, &(0x7f0000000540)=0x101) preadv(r1, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/21, 0x15}], 0x1, 0x8f) ioctl$DIOCGETQUEUES(r0, 0xc148445e, &(0x7f0000000600)={0x9, 0x3, {'\x00', './file0\x00', './file0\x00', './file0/file0\x00', {{0xa, 0x9}, {0x5, 0x6}, 0x5}, {{0x2, 0x80000001}, {0x10, 0xb011}, 0x4}, {{0x8, 0x8}, {0x8000000000000001, 0x7}, 0x897}, {0x9, 0xec, 0x1, 0x7}, 0x0, 0x40, 0xe2f, 0x1, 0x8d}}) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) closefrom(r1) recvmmsg(r0, &(0x7f0000000b40)={{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000840)=""/173, 0xad}, {&(0x7f0000000900)=""/218, 0xda}, {&(0x7f0000000a00)=""/13, 0xd}], 0x4, &(0x7f0000000a80)=""/181, 0xb5}, 0x4}, 0x38, 0x802, &(0x7f0000000b80)={0x7, 0x40}) ioctl$FIOGETOWN(r1, 0x4004667b, &(0x7f0000000bc0)) pipe(&(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000c40), &(0x7f0000000c80)=0x10) ioctl$DIOCGETQUEUES(r3, 0xc148445e, &(0x7f0000000cc0)={0x70, 0x1, {'\x00', './file0\x00', './file0\x00', './file1\x00', {{0x4, 0x9}, {0x6, 0xffff0000}, 0x9f}, {{0xe, 0x6}, {0x8bc8, 0x6}}, {{0x400, 0xffffffff}, {0x6f04, 0x4}, 0x80000000}, {0xfffffffb, 0x3ff, 0x0, 0x4}, 0x0, 0xfffffffb, 0x2000, 0x3ff, 0xce8}}) shutdown(r0, 0x2) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000e40), 0x20000, 0x0) ioctl$AUDIO_START(r4, 0x20004126) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000e80), 0x8000, 0x0) ioctl$WSDISPLAYIO_ADDSCREEN(r5, 0x80245753, &(0x7f0000000ec0)={0x9, './file1/file0\x00', './file0/file0\x00'}) open$dir(&(0x7f0000000f00)='./file1\x00', 0x0, 0x40) openat$audioctl(0xffffffffffffff9c, &(0x7f0000000f40), 0x40881, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000fc0)={&(0x7f0000000f80)=[0x8000, 0x80000001, 0x0, 0x4c9, 0x8, 0x1, 0x8001], 0x7, 0x10000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000001000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000001040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01864c2, &(0x7f00000010c0)={0x0, 0x2, r1, 0x0, 0xb4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000001100)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r3, 0xc00864c0, &(0x7f0000001140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r6, 0xc01064c5, &(0x7f0000001200)={&(0x7f00000011c0)=[r7, r8, r9, r10, 0x0, r11, r12, 0x0], 0x8}) 61.793131ms ago: executing program 7 (id=41): r0 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) closefrom(r1) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) getrlimit(0x2, &(0x7f0000000100)) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000280)=0x7) sysctl$hw(&(0x7f0000002680)={0x6, 0x1}, 0x2, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x6d) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x2012, r3, 0x2000) select(0x40, &(0x7f00000001c0)={0x6, 0x4, 0x0, 0xb722, 0x0, 0x8, 0x10000, 0xffffffffffff4418}, &(0x7f0000001480)={0xa267, 0x10, 0xc33e, 0xfffffffffffffff7, 0x680, 0x10001, 0x3, 0xa6}, 0x0, &(0x7f0000001500)={0x3, 0x1}) write(r0, &(0x7f0000000040)="57242ac230ff0110a8997dcdea3d8fc44ad3f146c4cdd63b8d2d5ed52dccd440000a", 0x22) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000002c80), 0x80, 0x0) ioctl$DIOCRSETTFLAGS(r4, 0xc450444a, &(0x7f0000004f40)={{'./file0\x00', './file0/file0\x00', 0x0, 0x4}, 0x0, 0x428, 0x0, 0x5, 0xd, 0x7f, 0x7f, 0x2, 0x6}) socket$inet6(0x18, 0x1, 0x6) r5 = socket(0x10, 0x4000, 0x2) setsockopt(r5, 0x4, 0xbf8, &(0x7f0000000380)="c0b53a41f230b7a75f8b8dc342a73ca61da60234de3c02e467fac706a197c61fb7b0de01142a20199e9c639dbee78694803acd8ae000"/65, 0x41) mquery(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x6) r6 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r7 = socket$inet(0x2, 0x3, 0x6) r8 = shmget$private(0x0, 0x2000, 0x419, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_SET(r8, 0x1, &(0x7f0000000300)={{0x0, 0x0, 0x0, 0x0, 0x40, 0x6, 0x0, 0x0, 0x800}, 0x3, 0x0, 0x0, 0x1, 0x0, 0xe7, 0xfffffffffffffefb, 0x40, 0xfffffffffffffffe, 0x4, 0x5}) r9 = open(&(0x7f0000000180)='./file0\x00', 0x2, 0x8c) r10 = setsid() fcntl$setown(r9, 0x6, 0x0) fcntl$setown(r9, 0x6, r10) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x1, 0x2, 0x0, 0xfffffffffffffff9, r10}) setsockopt(r7, 0x0, 0x69, &(0x7f0000000100), 0x0) pread(r6, &(0x7f0000000040)="33b8a612e1af0a0c3297bf2b3d8a855b997e72e300e1e891828286ef10c5a8a8359ae22ac2917b3f4c9bae018ae01bbe54159e151566684d34a6ae19c173b577e2b707ccf91aef45a8401c91aa7d2d339634051457b0b7962c2e999584aa643c42800bd802624767c0a2b02d26a6f26195f0eace003ca27aee326285749464e60a035e1ee3b0392853407a18712e5cfd561ca2f4a8c586b1b94beea054abaafe641cb3", 0xa3, 0x2) 1.924056ms ago: executing program 4 (id=42): sysctl$hw(&(0x7f0000000000)={0x6, 0x6}, 0x2, &(0x7f0000000040)="3b8796ed", &(0x7f00000000c0)=0x4, 0x0, 0x0) openat$dri(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/card0\x00', 0x60b483dff680ce9d, 0x0) r0 = semget(0x3, 0x1, 0x0) r1 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f00000002c0)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xd, "0000000000000000000000001000", 0x1000004}, 0x1c) sendto(r1, 0x0, 0x0, 0xe, &(0x7f00000000c0)=@in6={0x1c, 0x18, 0x2, 0x3fd, "feaacad3d3188a1415d008ec5b71885b", 0x9}, 0x1c) semctl$SETVAL(r0, 0x1, 0x8, &(0x7f0000000000)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0xffdf}, 0x38, 0x3800, 0x0) 857.796µs ago: executing program 5 (id=43): getgroups(0x40000000000001f6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000000)=0xc) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@broadcast, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x2, 0x36, 0x2c, 0x68, 0x0, 0x5, 0x1, 0x0, @multicast1, @remote={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0x3, 0xfa}]}}, @icmp=@timestamp={0xd, 0x0, 0x0, 0x4000, 0x6, 0xb2a8, 0x693, 0x10}}}}}) setresuid(0x0, 0x0, r3) setsid() r4 = syz_open_pts() r5 = dup2(r4, r4) ioctl$TIOCSCTTY(r5, 0x20007461) openat$tty(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect(0x40, &(0x7f0000000000)={0x0, 0x21a, 0x8, 0x6, 0x1834, 0x140, 0x5, 0x5}, 0x0, &(0x7f0000000100)={0x7fff, 0x654, 0x10001, 0xffffffffffffffff, 0x2, 0x5, 0x7fffffff, 0x7fff}, 0x0, 0x0) setuid(r3) setsid() r6 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) closefrom(r7) getpgrp() setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) syz_open_pts() r8 = dup2(r6, r6) ioctl$TIOCSCTTY(r8, 0x20007461) ioctl$TIOCSPGRP(r6, 0x40047477, &(0x7f0000000200)) seteuid(r3) 568.422µs ago: executing program 4 (id=44): syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff000000000000080045da001c00680000020000fba5320e264d3c42b26890780000000000"]) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 0s ago: executing program 7 (id=45): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x800) r1 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x42) read(r1, &(0x7f00000000c0)=""/159, 0x9f) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt(r3, 0x6, 0x4, &(0x7f0000000080)="b468edfe", 0x4) connect$inet(r3, &(0x7f0000000400)={0x10, 0x2, 0x1, 0x1ff}, 0x10) write(r2, &(0x7f0000000100)="7436db", 0x3) getsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f00000001c0)=""/131, &(0x7f0000000280)=0x83) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0xac, 0x43, 0x7, 0xf}, {0x14, 0xc, 0xa2, 0x9}, {0x6, 0x9, 0xff, 0x9}]}) shmdt(0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x99, &(0x7f00000002c0)=ANY=[]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. witness: lock order reversal: 1st 0xffffffff84f17838 pf_lock (pf_lock) 2nd 0xffffffff85080698 netlock (netlock) lock order [1] pf_lock (pf_lock) -> [2] netlock (netlock) #0 rw_do_enter_write+0xc4 #1 uvn_io+0x6fe #2 uvn_get+0x494 #3 uvm_fault_lower_io+0x5cd #4 uvm_fault_lower+0x34e #5 uvm_fault+0x3ef #6 kpageflttrap+0x41e #7 kerntrap+0x1b6 #8 alltraps_kern_meltdown+0x7b #9 _copyin+0x50 #10 pfioctl+0x176d #11 VOP_IOCTL+0x131 #12 vn_ioctl+0x18c #13 sys_ioctl+0x868 #14 syscall+0x1089 #15 Xsyscall+0x128 lock order [2] netlock (netlock) -> [1] pf_lock (pf_lock) #0 rw_do_enter_write+0xc4 #1 pfi_attach_ifgroup+0x2b #2 if_addgroup+0x393 #3 if_attachsetup+0xe3 #4 if_attach+0xa6 #5 vio_attach+0x211a #6 config_attach+0x685 #7 virtio_pci_attach+0x84a #8 config_attach+0x685 #9 pci_probe_device+0xcfa #10 pci_enumerate_bus+0x3dc #11 config_attach+0x685 #12 acpipci_attach_bus+0x4f1 #13 acpipci_attach_busses+0x8b #14 mainbus_attach+0x3d9 #15 config_attach+0x685 #16 cpu_configure+0x3b #17 main+0x738 Stopped at db_enter+0x17: popq %rbp ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic the kernel did not panic ddb{0}> show kasan kasan: no report recorded this boot ddb{0}> trace db_enter() at db_enter+0x17 witness_checkorder(ffffffff85080698,9,0) at witness_checkorder+0x19db rw_do_enter_write(ffffffff85080680,0) at rw_do_enter_write+0xc4 uvn_io(ffff800001cf9ec0,ffff80003bba7200,1,202,0) at uvn_io+0x6fe uvn_get(ffff800001cf9ec0,2000,ffff80003bba7340,ffff80003bba7360,0,1,93f88,ffffffff84cdec80) at uvn_get+0x494 uvm_fault_lower_io(ffff80003bba7540,ffff80003bba74e8,ffff80003bba7448,ffff80003bba7438) at uvm_fault_lower_io+0x5cd uvm_fault_lower(ffff80003bba7540,ffff80003bba74e8,ffff80003bba7640) at uvm_fault_lower+0x34e uvm_fault(ffff800001c965d8,200000001000,0,1) at uvm_fault+0x3ef kpageflttrap(ffff80003bba7820,2000000015c0) at kpageflttrap+0x41e kerntrap(ffff80003bba7820) at kerntrap+0x1b6 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x50 pfioctl(44900,c4504441,ffff80000180d000,9,ffff800045ff4d18) at pfioctl+0x176d VOP_IOCTL(ffff800001c52a60,c4504441,ffff80000180d000,9,ffff8000001194e0,ffff800045ff4d18) at VOP_IOCTL+0x131 vn_ioctl(ffff800001ca19a0,c4504441,ffff80000180d000,ffff800045ff4d18) at vn_ioctl+0x18c sys_ioctl(ffff800045ff4d18,ffff80003bba8850,ffff80003bba87c0) at sys_ioctl+0x868 syscall(ffff80003bba8850) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x15f05b952f0, count: -18 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80003bba6ea0 rbx 0xffffffff8473c240 .str rdx 0xffff800000170b00 rcx 0x7ffff acpi_pdirpa+0x6be70 rax 0xffff800031eed000 r8 0xffff80003bba6c80 r9 0xffff80003bba6c20 r10 0x11 r11 0xffffffff8277a600 x86_bus_space_io_read_1 r12 0xffffffff8496a040 .compoundliteral.6 r13 0xffffffff84f17838 pf_lock+0x18 r14 0x3 r15 0xffffffff8496a020 .str.5 rip 0xffffffff82b18a07 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003bba6ea0 ss 0x10 db_enter+0x17: popq %rbp ddb{0}> show proc PROC (syz-executor) tid=32822 pid=48743 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=59, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ffc018,0xffff800045ffd4e8 process=0xffff800045ff1d00 user=0xffff80003bb9d000, vmspace=0xffff800001c965d8 estcpu=9, cpticks=2, pctcpu=0.2, user=0, sys=2, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 70470 10070 1187 0 7 0 0 syz-executor 15038 420522 11204 0 2 0 0 syz-executor 10910 177190 565 0 2 0 0 syz-executor 10910 140962 565 0 3 0 0x4000080 ttyin syz-executor 47344 164899 50064 0 2 0 0 syz-executor 47344 162346 50064 0 3 0 0x4000080 fsleep syz-executor 30523 276300 37405 0 2 0 0 syz-executor 30523 434264 37405 0 3 0 0x4000080 fsleep syz-executor 48743 202546 84915 0 2 0 0 syz-executor *48743 32822 84915 0 7 0 0x4000000 syz-executor 97756 30773 94863 0 2 0 0 syz-executor 97756 519753 94863 0 3 0 0x4000080 kqread syz-executor 97756 356291 94863 0 3 0 0x4000080 fsleep syz-executor 565 516677 7631 0 3 0x2 0x80 nanoslp syz-executor 84915 200077 7631 0 3 0x2 0x80 nanoslp syz-executor 11204 63890 7631 0 3 0x2 0x80 nanoslp syz-executor 1187 495763 7631 0 3 0x2 0x80 nanoslp syz-executor 94863 385650 7631 0 3 0x2 0x80 nanoslp syz-executor 48055 522735 7631 0 2 0x2 0 syz-executor 50064 181857 7631 0 3 0x2 0x80 nanoslp syz-executor 37405 344029 7631 0 3 0x2 0x80 nanoslp syz-executor 7631 374451 91729 0 3 0x2 0x80 kqread syz-executor 91729 318322 65864 0 3 0x100002 0x88 sigsusp ksh 65864 426853 51214 0 3 0x10 0x88 kqread sshd-session 51214 468278 22919 0 3 0x12 0x80 kqread sshd-session 38539 287143 1 0 3 0x100003 0x80 ttyin getty 22919 47601 1 0 3 0 0x88 kqread sshd 45077 87556 41729 74 3 0x1100012 0x80 bpf pflogd 41729 115562 1 0 3 0 0x80 sbwait pflogd 26614 217986 38248 73 3 0x1100010 0x80 kqread syslogd 38248 455222 1 0 3 0x100002 0x80 sbwait syslogd 86790 42297 1 0 3 0x100000 0x80 kqread resolvd 21851 303737 99127 77 3 0x100012 0x80 kqread dhcpleased 60155 81898 99127 77 3 0x100012 0x80 kqread dhcpleased 99127 70236 1 0 3 0 0x80 kqread dhcpleased 52596 434797 0 0 3 0x14000 0x200 bored smr 98920 4392 0 0 2 0x14000 0x200 zerothread 30581 328054 0 0 3 0x14000 0x200 aiodoned aiodoned 97598 34001 0 0 3 0x14000 0x200 syncer update 59402 455088 0 0 3 0x14000 0x200 cleaner cleaner 84950 192858 0 0 3 0x14000 0x200 reaper reaper 17339 26896 0 0 3 0x14000 0x200 pgdaemon pagedaemon 11889 508160 0 0 3 0x14000 0x200 bored viomb 99250 443606 0 0 3 0x14000 0x40000200 acpi0 acpi0 82931 387596 0 0 3 0x14000 0x40000200 idle1 70892 409844 0 0 3 0x14000 0x200 bored softnet1 67837 192512 0 0 3 0x14000 0x200 bored softnet0 68866 429934 0 0 3 0x14000 0x200 bored systqmp 4343 443857 0 0 3 0x14000 0x200 bored systq 25317 193178 0 0 3 0x14000 0x200 tmoslp softclockmp 52967 460146 0 0 3 0x14000 0x40000200 tmoslp softclock 15984 243686 0 0 3 0x14000 0x40000200 idle0 1 294966 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks Process 48743 (syz-executor) thread 0xffff800045ff4d18 (32822) exclusive rwlock pf_lock r = 0 (0xffffffff84f17838) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 pfioctl+0x16f7 #3 VOP_IOCTL+0x131 #4 vn_ioctl+0x18c #5 sys_ioctl+0x868 #6 syscall+0x1089 #7 Xsyscall+0x128 exclusive rwlock pfioctl_rw r = 0 (0xffffffff84f17938) #0 witness_lock+0x632 #1 rw_do_enter_write+0x53e #2 pfioctl+0x256 #3 VOP_IOCTL+0x131 #4 vn_ioctl+0x18c #5 sys_ioctl+0x868 #6 syscall+0x1089 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff854eb5c0) #0 witness_lock+0x632 #1 vn_ioctl+0x9e #2 sys_ioctl+0x868 #3 syscall+0x1089 #4 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11064 12317K 14195K 166960K 12712 0 pcb 18 24K 24K 166960K 23 0 rtable 237 12K 13K 166960K 359 0 pf 34 22K 24K 166960K 48 0 ifaddr 43 12K 12K 166960K 46 0 ifgroup 55 2K 2K 166960K 57 0 sysctl 3 1K 13K 166960K 7 0 counters 70 42K 43K 166960K 72 0 ioctlops 1 2K 4K 166960K 1493 0 iov 0 0K 1K 166960K 33 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1365 88K 88K 166960K 1528 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 2 2K 2K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 5 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 17 61K 93K 166960K 176 0 proc 70 128K 177K 166960K 561 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 6 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 49 344K 344K 166960K 49 0 exec 0 0K 2K 166960K 394 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 14 124K 124K 166960K 15 0 UVM amap 222 220K 239K 166960K 3506 0 UVM aobj 4 4K 4K 166960K 4 0 pinsyscall 1066 1730K 1731K 166960K 1372 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 12 0K 2K 166960K 29 0 temp 35 9162K 9176K 166960K 4248 0 kqueue 16 45K 49K 166960K 30 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 37 0 34 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 66 0 48 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 12 0 8 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 86 0 77 1 0 1 1 0 8 0 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 1 0 1 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 22 0 0 1 0 1 1 0 8 0 pfstkey 128 22 0 0 1 0 1 1 0 8 0 pfstate 448 22 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 3 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1634 0 164 93 0 93 93 0 8 0 ffsino 296 1634 0 164 114 0 114 114 0 8 0 nchpl 144 1891 0 187 64 0 64 64 0 8 0 vnodes 216 1878 0 0 105 0 105 105 0 8 0 namei 1024 5949 0 5949 1 0 1 1 0 8 1 percpumem 16 52 0 1 1 0 1 1 0 8 0 kstatmem 264 29 0 2 2 0 2 2 0 8 0 scxspl 216 7005 0 7005 4 2 2 2 1 8 2 plimitpl 152 32 0 15 1 0 1 1 0 8 0 sigapl 424 505 0 458 7 0 7 7 0 8 1 knotepl 120 65 0 0 2 0 2 2 0 8 0 kqueuepl 224 32 0 21 1 0 1 1 0 8 0 pipepl 344 133 0 106 3 0 3 3 0 8 0 fdescpl 528 489 0 458 3 0 3 3 0 8 0 filepl 160 1848 0 1620 12 0 12 12 0 8 2 lockfpl 104 149 0 146 2 0 2 2 0 8 1 lockfspl 48 76 0 73 1 0 1 1 0 8 0 sessionpl 144 27 0 18 1 0 1 1 0 8 0 pgrppl 48 35 0 18 1 0 1 1 0 8 0 ucredpl 104 135 0 122 1 0 1 1 0 8 0 zombiepl 144 458 0 458 1 0 1 1 0 8 1 processpl 1232 505 0 458 5 0 5 5 0 8 0 procpl 664 567 0 514 6 0 6 6 0 8 0 sockpl 752 189 0 159 5 0 5 5 0 8 1 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 113 0 0 15 0 15 15 0 8 0 mcl2k 2048 17 0 0 3 0 3 3 0 8 0 mextrefs 64 18 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 148 0 0 9 0 9 9 0 8 0 bufpl 272 2368 0 106 151 0 151 151 0 8 0 anonpl 32 4215 0 0 34 0 34 34 0 222 0 amapchunkpl 152 9649 0 9198 22 0 22 22 0 158 3 amappl16 200 1808 0 1783 5 1 4 5 0 8 2 amappl15 192 42 0 42 1 1 0 1 0 8 0 amappl14 184 476 0 475 1 0 1 1 0 8 0 amappl13 176 124 0 112 1 0 1 1 0 8 0 amappl12 168 745 0 716 2 0 2 2 0 8 0 amappl11 160 8 0 8 2 2 0 1 0 8 0 amappl10 152 82 0 68 1 0 1 1 0 8 0 amappl9 144 294 0 294 1 1 0 1 0 8 0 amappl8 136 127 0 125 1 0 1 1 0 8 0 amappl7 128 157 0 144 1 0 1 1 0 8 0 amappl6 120 154 0 153 1 0 1 1 0 8 0 amappl5 112 109 0 99 1 0 1 1 0 8 0 amappl4 104 307 0 289 1 0 1 1 0 8 0 amappl3 96 1731 0 1643 3 0 3 3 0 8 0 amappl2 88 620 0 545 2 0 2 2 0 8 0 amappl1 80 10729 0 10124 15 0 15 15 0 8 2 amappl 88 2745 0 2592 5 0 5 5 0 92 0 uvmvnodes 80 100 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 490 0 459 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 490 0 459 1 0 1 1 0 8 0 vmmpekpl 168 6089 0 6054 2 0 2 2 0 8 0 vmmpepl 168 40856 0 38988 87 0 87 87 0 357 4 vmsppl 488 489 0 459 5 0 5 5 0 8 1 rwobjpl 80 15219 0 14213 24 0 24 24 0 8 2 pdppl 4096 989 0 918 99 26 73 87 0 8 2 pvpl 32 13067 0 0 108 2 106 106 0 265 0 pmappl 256 489 0 459 3 0 3 3 0 8 0 extentpl 40 47 0 29 1 0 1 1 0 8 0 phpool 120 418 0 29 13 0 13 13 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x17 witness_checkorder(ffffffff85080698,9,0) at witness_checkorder+0x19db rw_do_enter_write(ffffffff85080680,0) at rw_do_enter_write+0xc4 uvn_io(ffff800001cf9ec0,ffff80003bba7200,1,202,0) at uvn_io+0x6fe uvn_get(ffff800001cf9ec0,2000,ffff80003bba7340,ffff80003bba7360,0,1,93f88,ffffffff84cdec80) at uvn_get+0x494 uvm_fault_lower_io(ffff80003bba7540,ffff80003bba74e8,ffff80003bba7448,ffff80003bba7438) at uvm_fault_lower_io+0x5cd uvm_fault_lower(ffff80003bba7540,ffff80003bba74e8,ffff80003bba7640) at uvm_fault_lower+0x34e uvm_fault(ffff800001c965d8,200000001000,0,1) at uvm_fault+0x3ef kpageflttrap(ffff80003bba7820,2000000015c0) at kpageflttrap+0x41e kerntrap(ffff80003bba7820) at kerntrap+0x1b6 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x50 pfioctl(44900,c4504441,ffff80000180d000,9,ffff800045ff4d18) at pfioctl+0x176d VOP_IOCTL(ffff800001c52a60,c4504441,ffff80000180d000,9,ffff8000001194e0,ffff800045ff4d18) at VOP_IOCTL+0x131 vn_ioctl(ffff800001ca19a0,c4504441,ffff80000180d000,ffff800045ff4d18) at vn_ioctl+0x18c sys_ioctl(ffff800045ff4d18,ffff80003bba8850,ffff80003bba87c0) at sys_ioctl+0x868 syscall(ffff80003bba8850) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x15f05b952f0, count: -18 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x19: leave ddb{1}> trace x86_ipi_db(ffff800028fe3ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __asan_load4_noabort(ffffffff854eb5b8) at __asan_load4_noabort+0xd __mp_lock(ffffffff854eadc0) at __mp_lock+0x27a syscall(ffff800035ef8820) at syscall+0x1048 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e35d59f7ad0, count: -7