last executing test programs: 2.678640868s ago: executing program 1 (id=2): r0 = msgget$private(0x0, 0x396) msgsnd(r0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0xe1, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/166}, 0xae, 0x1, 0x1000) msgsnd(r0, &(0x7f0000000340)={0x2}, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x3, 0x1000) syz_emit_ethernet(0x2e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800480000200067000000119078ffbfffffac1400aa440c6e610000000c00000006"]) 2.673994729s ago: executing program 6 (id=7): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x6c, 0x6, 0x3, 0x5}, {0x80, 0xf0, 0x9, 0xfffffffe}, {0x6, 0x4, 0x11, 0xfffff802}]}) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0xbe, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1", 0x1, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (async, rerun: 32) r1 = socket$inet(0x2, 0x1003, 0x9) (rerun: 32) sendto$inet(r1, 0x0, 0x0, 0xa, &(0x7f0000000100)={0x10, 0x2, 0x3, 0x7}, 0x7) (async) write(r0, &(0x7f0000000100)="f8f4b8c47efc79f6e3210a3ddb78", 0xe) (async) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @broadcast, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @local, @local={0xac, 0x14, 0x0}, @broadcast, @remote={0xac, 0x14, 0x0}}}}}) futimens(0xffffffffffffffff, &(0x7f0000000000)=[{0x10001, 0xfffffffffffffffe}, {0x2, 0x7fffffffffffffff}]) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) futimens(0xffffffffffffffff, &(0x7f0000000000)=[{0xffff, 0xfffffffffffffffe}, {0x22, 0x7fffffffffffffff}]) (async) r2 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) bind(r2, &(0x7f00000001c0)=@in={0x10, 0x2, 0x3, 0x8000}, 0x10) ioctl$WSDISPLAYIO_GETEMULTYPE(r2, 0xc014575e, &(0x7f0000000180)={0x1ff, './file0\x00'}) 2.668125764s ago: executing program 5 (id=6): mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r0 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/202, 0xca}], 0x1) (async) readv(r0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/202, 0xca}], 0x1) setuid(0x0) unveil(0x0, &(0x7f0000000480)='x\x00') (async) unveil(0x0, &(0x7f0000000480)='x\x00') setrlimit(0x8, &(0x7f0000000980)={0x421344b7, 0x7}) (async) setrlimit(0x8, &(0x7f0000000980)={0x421344b7, 0x7}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000880)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x9}, 0x38, 0x0, 0x0) syz_open_pts() ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x40, 0x100, {[0xfffffbfffffffff9, 0x4, 0x2, 0xc, 0x6, 0x2, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x2, 0xa, 0xffffffffffffffff, 0x0, 0x8, 0x4, 0x2, 0x100], [0x5304, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe, 0xffffffffffffffff, 0x0, 0x9467], [0xfffffffffffffffe, 0x0, 0x1, 0x5, 0xb, 0x11000, 0xffffffff00000000], [0x100, 0xffd6, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe], [{0x1000, 0x7}, {0xfff9, 0x2, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0xffff, 0x5, 0x6, 0xffffffffffffffff}, {0x3, 0x2, 0x9, 0xfffffffffffffff9}, {0x0, 0x28291c58, 0x9, 0x2000000000000004}, {0x0, 0x0, 0x4}, {0xfffc, 0x100, 0x0, 0x8}], {0x9, 0x5, 0x800}, {0xfffe, 0x80000000, 0x8, 0x9}}}) r2 = kqueue() kevent(r2, &(0x7f0000000240), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) (async) kevent(r2, &(0x7f0000000240), 0x96, &(0x7f0000000540), 0xfffb4961, 0x0) ioctl$DIOCXEND(r0, 0xc0044464, &(0x7f0000000240)=0x9) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) socket$inet(0x2, 0x2, 0x0) (async) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x200100000001d, 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0xff, 0x1, 0x9}, {0x0, 0x1, 0x2, 0x1}, {0x9b1e, 0x2, 0xf6, 0x40007ff}]}) (async) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0xff, 0x1, 0x9}, {0x0, 0x1, 0x2, 0x1}, {0x9b1e, 0x2, 0xf6, 0x40007ff}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) (async) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800455cfe2b07194f2edb9febef8af0a100300066000000019078ac1400bbe000000105029078ac1400bb451c0009006500030b003a9d00000053ac1400aa"]) syz_extract_tcp_res(&(0x7f0000000200), 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0xbed, 0x8, r2}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)={0xbed, 0x8, r2}) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000180)='./file1\x00', r2, 0x1}) ktrace(0x0, 0x2, 0x0, 0x0) ioctl$DIOCRGETTABLES(r3, 0xc450443f, &(0x7f0000000e00)={{'./file1\x00', './file1\x00', 0x50, 0x2}, &(0x7f00000009c0)=[{'./file1\x00', './file1\x00', 0x2, 0x7}], 0x8, 0x1, 0x618, 0x10000, 0x7000, 0x2, 0xc, 0xe}) 2.653429745s ago: executing program 7 (id=8): sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x3f}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0xfffffffffffffda3) r0 = socket(0x18, 0x3, 0x3a) r1 = syz_open_pts() ioctl$TIOCNXCL(r1, 0x2000740e) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0x69, 0x0, 0x0) 2.502426188s ago: executing program 6 (id=9): mknod(&(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0xd02) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file0\x00') (async) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60) (async) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0xc0) (async) mknod(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x5) (async) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0xf6) 2.495570183s ago: executing program 7 (id=10): sysctl$hw(&(0x7f00000000c0)={0x6, 0xf}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x4a}, 0x2, &(0x7f0000000040)="d325ab8557d0fc21f0be4a713bee2a9e30455de37914c322", &(0x7f0000000080)=0x18, &(0x7f0000000180)="2b508544742fd4d8dd0dd7f718258215a3f8cefbed333f56638e427e95682b55ad10a69e02d123026481fd160c4aa0954148103db411f0f1320675b72670df85be66c64e175b3cb37efc5c04c048ec6af9a464680a9bd32ebb6946847784", 0x5e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x12, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x18, 0x2, 0x0) sysctl$hw(&(0x7f0000000100), 0x2, &(0x7f0000000200)="45645529ebd1f8e2ba747861762e0295e28ed1122f9883a137bcf35e5416646f66ad5a2b3483e36d900d1fa885616ff7c75d80c45521a834d3fd05109b4ddd44f089ad287b6b38f95cf3d91d63085f0e86b842a16b9a16a049b652ee68e2cb231e9ca0088f117c045507f10bc297468cfa9e43498746bcf4b1a43cb68fb312ecf484c2691550220350e83682cb08f544eec78949804f86f95c1d9f1dc86021e5", &(0x7f0000000340)=0xa0, &(0x7f0000000380)="967092964e5a4e408bfa7681616a9b40c24f66519fb128088d5a955a6f3587ca960c3591c2d886f2a445d97d604ac07369b85cea", 0x34) getsockopt(r0, 0x29, 0xffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003f00)={0x9, 0x20fdc7}) sysctl$net_inet6_icmp6(&(0x7f00000002c0)={0x4, 0x18, 0x3a, 0x9}, 0x4, &(0x7f0000000300)="3ae5ee9a82fe", &(0x7f0000000140)=0x6, 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$DIOCRGETTABLES(r1, 0xc450443f, &(0x7f0000000f80)={{'./file0/file0\x00', './file0\x00', 0x23d8699d9d59d26f, 0x43}, 0x0, 0x428, 0x0, 0xdb3, 0x80000001, 0x1ff, 0x741, 0x72, 0x4}) truncate(&(0x7f00000003c0)='./file0\x00', 0x3ff) 2.495213655s ago: executing program 6 (id=11): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) read(r1, &(0x7f00000001c0)=""/24, 0x18) ioctl$KDSETRAD(r1, 0x20004b43) close(r0) read(r1, &(0x7f0000000040)=""/42, 0x2a) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000000c0)={0x1e, 0x5, 0xfffdff80, 0x160350d, "04f0ee091a0004be1fa614e0ff22700907ffdd00", 0x7fffffff, 0x46}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r3 = socket$inet6(0x18, 0x1, 0x6) r4 = dup(r3) setsockopt$sock_int(r4, 0xffff, 0x200, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYRES64=r0]) 2.494139982s ago: executing program 2 (id=3): sysctl$kern(&(0x7f0000000140)={0x1, 0x32}, 0x2, &(0x7f0000000280)="cde4837f6e", &(0x7f00000001c0)=0x5, &(0x7f0000000200)="82ad1b2d", 0x4) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0x800c745b, &(0x7f0000000080)) sysctl$kern(&(0x7f0000000000)={0x1, 0x13}, 0x2, &(0x7f0000000040)="1cf0febfc2f06b40665bbac223a041d80aaa3cdcc503823ab36c538414c5ce9dbfa2988cf7487e3e8759ba915e9d1b2dcc0f13c1abfb8367702ee270425cb84f823b89e67e78ae0d167518e9ac4d9a26c9019ee7ff090aa44a2f9eddc7db6f140cd833eabcc61a9bd71a0042b22997802b64ee53f6402b0cd3875588343593e13bcc4fc1b3d44a2d14b5a27713930f351464f816c8fcdb409d67619a28033f76c2be092a0cb59dfdaae4d2f6f9951a3d53905202199bb95c305f1389de3e359c826ffe520d42f1ab8e0d389bdb968780c55ba7e1f334870eaaa2d9fd95df52ae3c94ecc198d5498583c8eabfd19ab140", &(0x7f0000000180)=0xf0, &(0x7f00000002c0)="3c80b896ea5af764873f6f13b05845687884e9686f7ca180ffbae8b504fbe0d3f790e9bc2056ceaae12b292764d66b03a1ae82f0a35ea704ef98feb5ee6659ddfba4e0ced51cd2a71865de433d6fd1f651562e2f3a7abed011e61a4706be5c0fc778b5346c888dcf742826b7d89dbb20a91e64986d892f68ad7fcb040d0ebb55527c745e774e4a1f471e37cea311250ce5e27c635a42ece9b51b524f946c47df08efeb9354848dd2b687360dcdf49975030bde805f53c7478edbef6053c3c6542584f1f8b472628272b631377cbde492aa7ce0e9e08887e1e38786475afc0c9f296a54c518cb4c6aafbf46e2a08fdb", 0xef) 2.493853157s ago: executing program 4 (id=5): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000080)={0x1, 0x7a8, 0xffffffffffffff9c}) ioctl$AUDIO_GETSTATUS(r0, 0x40204128, &(0x7f00000000c0)) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x44, 0x67, 0x0, 0x9, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x2, 0x8000, 0x0, 0xfffc, {[@generic={0x5, 0x12, "3f21e1764e0b992c571ead9af472dccc"}, @window={0x3, 0x3, 0x2}, @generic={0x3, 0x2}, @generic={0x8, 0x2}]}}}}}}}) r1 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0x13) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000140)="5f572d9a1dbca64b3b4c1a0e0c4e348a076a78189d5ae556d72b58f8b4504e9daf8cb3d3450b710ab910ee83ec5ccff4cef6158ea990f2b460d0778db6adf63017a7859f144fd8d00850c0eae87d8d5119d4b93e2b1c85", 0x57) 2.490366256s ago: executing program 2 (id=12): sysctl$vfs_fuse(&(0x7f0000000000)={0xa, 0x12, 0x1}, 0x3, &(0x7f0000000080)="8970e3e00cbbe0696190245a2988a2c77a4d0d59f849a19fc628b12222135fed41fd13de787b702cdfd2ba62489f7be76183b3ca33820db7de901513a28f5ab9cc636f0f33816b1af63dd4a6e9de4a6a6b68e20c4dc9f9fb67cb6b2a557657caf38777612c5384531e1e3b2cb189e5b78051df8a22abe09ebda9bfdce37737d7024a15013464115ecc4716bb41aa868f39ec5ae07a8855b5d40703bd70709ea76433c2c1dd306580372d27ed9a21a729f60885a4365b5105b86b8a63eea044647921a323157427c14d13f053038877987fbdc6c8479fa5119cc075c5106bfee1f7446ccbeba12db9314974c961f9dc7f4e441245f1f23188", &(0x7f0000000180)=0xf8, &(0x7f00000001c0)="e3f2fdc4209f9767b3f5538dadda1dfe38a05f9d6ddec70d610f91e5cec04244d2c9487444b809c915652d2e0fd76c075fda76881780af95fd942e231ab83241f8ddd5b17c9de7b393cb0fe74c6bc3634e55f43df91885af80fff6708bb4a19e11f2f43dd9ef2ff1126315ac33c691323a491fb91b5d5b9ccde037006559f9fc2beceb8490bf18989cc5a84ce7202fc896317e74b3d9317b75893f9ed7c74e998338d9d7da400336f70812d7a9398e846b4710b5235504e8e194f37530ea51d9678fb8f5ef4cc753ad236560422677484a41f86e23993dbd019ae0866b10f87c355d46", 0xe3) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2d018000000000005e00"}) sysctl$hw(0x0, 0x0, 0x0, &(0x7f0000001880), 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x8020699d, &(0x7f00000001c0)) sysctl$vm_swapencrypt(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000001180)="678314c7", 0x4) fchown(r0, 0x0, 0x0) 2.484842154s ago: executing program 4 (id=13): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x8) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x8, 0xfffffff2, 0xffff35eb, 0x9d27, 0x5, 0x8000, 0x5, 0x10, [{0x9, 0x6, 0xd24c, 0xfffffff7}, {0xc, 0x401, 0x5, 0x401}, {0xffffff00, 0xb453, 0x3, 0x10001}, {0x4e7, 0x5, 0x9, 0xfff}, {0x1, 0x86, 0x2, 0x38b}, {0x7, 0x8001, 0x9, 0x3}, {0x101, 0x0, 0x8, 0x4}, {0x388e, 0x9, 0x3, 0x1fce3c22}, {0x8, 0x7ff, 0x1, 0xfffffff7}, {0x3, 0x8, 0x0, 0x3adc}, {0x9, 0x9, 0x3, 0x5}, {0x5a70, 0xffffffff, 0x9000000, 0xfffff1e4}, {0xd5, 0x3ff, 0x7, 0x10000}, {0x100, 0x6f9, 0x836c, 0x2d1f}, {0xa, 0x8, 0x4}, {0x401, 0x9, 0x5, 0x9}]}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b9", 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x12, r1, 0x4) ioctl$TIOCFLUSH(r0, 0xc0107004, &(0x7f0000000080)=0x7f) 2.479700143s ago: executing program 2 (id=14): getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0) r0 = open(0x0, 0x10000, 0x172) openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x9, [{&(0x7f00004a3000/0x3000)=nil, &(0x7f00001cc000/0x4000)=nil, 0x637d}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000628000/0x3000)=nil, 0x7ffffffffffffbfb}, {&(0x7f0000209000/0x1000)=nil, &(0x7f00001fc000/0x4000)=nil, 0x9}, {&(0x7f00006b5000/0x2000)=nil, &(0x7f00000eb000/0x4000)=nil, 0xfdf7fffffffff7fa}, {&(0x7f00004c0000/0x4000)=nil, &(0x7f0000180000/0x4000)=nil, 0x8}, {&(0x7f00001a5000/0x1000)=nil, &(0x7f0000095000/0x3000)=nil, 0xfffffffffffffffc}, {&(0x7f000056a000/0x2000)=nil, &(0x7f0000688000/0x2000)=nil, 0x101}, {&(0x7f00003ba000/0x4000)=nil, &(0x7f000063b000/0x2000)=nil, 0x5}, {&(0x7f0000242000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x7fffdffffffffff9}, {&(0x7f0000476000/0x4000)=nil, &(0x7f00007ce000/0x1000)=nil}, {&(0x7f000064b000/0x2000)=nil, &(0x7f00000eb000/0x3000)=nil, 0x8}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, 0x5}, {&(0x7f00003ca000/0x1000)=nil, &(0x7f0000108000/0x3000)=nil, 0x238}, {&(0x7f0000271000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffff7}, {&(0x7f0000148000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000039fd}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000019f000/0x2000)=nil, 0x3}], './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000180)="41c6", 0x2}], 0x2) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) pread(r1, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) r2 = syz_open_pts() syz_open_pts() fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x3, 0x1, 0x4, 0x8}) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000440)="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"/488, &(0x7f0000000000)=0x41, &(0x7f0000000180)="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", 0x98) readv(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_pts() r4 = dup2(r2, r3) getdents(r4, 0x0, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) r5 = open(&(0x7f0000000000)='./bus\x00', 0x80, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f000014c000/0x4000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000124000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff9}, {&(0x7f00000f4000/0x3000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f0000028000/0x2000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000026000/0x4000)=nil, 0x6}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f00001db000/0x3000)=nil, 0xc6}, {&(0x7f0000392000/0x1000)=nil, &(0x7f00003a6000/0x3000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f0000688000/0x4000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000508000/0x2000)=nil, 0x51c}, {&(0x7f000068b000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc0}, {&(0x7f0000239000/0x4000)=nil, &(0x7f0000754000/0x4000)=nil, 0x4000009e}], './file0\x00', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r5, 0x8010427f, &(0x7f0000000240)={0x0, 0x0}) execve(0x0, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004806003400640003069d9078ffffffffffffffff070b1eac1400aa7f800001000e009078000b0008000003fc0000000400000009"]) syz_emit_ethernet(0x81, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat(r0, &(0x7f0000000ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x10, 0x40) utimes(&(0x7f0000000c80)='./file0aaaaaaaaa\x00', &(0x7f0000000cc0)={{0x3}, {0x4, 0x100}}) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) 2.226019395s ago: executing program 4 (id=15): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000780)={'tap', 0x0}) r1 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1003, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000240)=[{0x84, 0xc, 0x9, 0x50}, {0x16, 0x6, 0x56, 0x7fffffff}]}) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[]) ioctl$DIOCGETQUEUE(0xffffffffffffffff, 0xc148445f, &(0x7f0000000e00)={0x7fff, 0x1, {'\x00', './bus\x00', './bus\x00', './file0/../file0', {{0x5, 0x81}, {0xaed6ebe, 0x7}, 0xfffffffa}, {{0x3, 0x4}, {0x8, 0xffff}, 0x5}, {{0x1, 0x1}, {0x80000004, 0x4}, 0x7fffffff}, {0x1000, 0x6, 0x6, 0xef}, 0x0, 0x9, 0x4e, 0xc, 0xfff}}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000200)="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", 0xb1, 0xe, 0x0, 0x78) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000000)) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f00000001c0)={0x10000000, 0x2, 0x878, 0x2f, "2800180000020002000000000068ab5ade800600", 0x6, 0x5}) 2.224749355s ago: executing program 2 (id=16): clock_getres(0x4, &(0x7f0000000000)) (async) clock_getres(0x4, &(0x7f0000000000)) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) (async) r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000080)={0x6, 0xd6af, 0xa340, 0x4, 0xb, 0x8, 0x80000000, 0x10, [{0x100, 0xb, 0xfffffff9, 0x7}, {0xff, 0x5, 0x7b, 0x9}, {0x1000, 0x1, 0xfffffff9, 0x6}, {0x6b, 0x8, 0x4, 0x8000}, {0xffffffff, 0x6, 0xfffffff8, 0x6}, {0x2, 0x80, 0xfffffffc, 0x75fa}, {0x7, 0x6, 0x630, 0x1}, {0x8, 0x4, 0x2}, {0x5, 0x8, 0x7, 0x7f}, {0x1, 0x1, 0xb, 0x8215}, {0x3, 0x1, 0x7, 0x9}, {0x2, 0x0, 0x401}, {0x1, 0x4, 0x6, 0xfffff70a}, {0x4, 0x0, 0x3, 0xa6}, {0x2, 0x0, 0x3, 0x1}, {0x1, 0x7, 0x4, 0x8}]}) openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) futimens(r1, &(0x7f0000000200)=[{0xd}, {0x81, 0x7}]) fcntl$setown(r1, 0x6, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) (async) getresuid(&(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) setuid(r2) (async) setuid(r2) close(r0) open(&(0x7f0000000300)='./file0\x00', 0x800, 0x10) (async) r5 = open(&(0x7f0000000300)='./file0\x00', 0x800, 0x10) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000340)=0xffff) (async) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000340)=0xffff) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1) r6 = socket(0x18, 0x4, 0x6) ioctl$VMM_IOC_RESETCPU(r5, 0x82405605, &(0x7f0000000380)={0x7, 0x8, {[0xfffffffffffffff8, 0x3, 0xbc52, 0x1, 0x8, 0x3, 0x3, 0x3, 0x8000, 0xa5ad, 0xa6, 0xdf6, 0xc8a, 0x9, 0x9, 0x3, 0x8000, 0x2], [0x4, 0xff, 0x9, 0x14, 0xffff, 0xfffffffffffffff2, 0x10, 0x5, 0x1, 0x9a2b], [0x5, 0xf37, 0x6, 0xb, 0x21715011, 0x3, 0x9], [0xffffffffffff3a80, 0x6b, 0xe97, 0x6c20d83d, 0x6, 0x1], [{0x6, 0x40, 0x0, 0xcba1}, {0x401, 0x9, 0xfffffffc}, {0x5, 0x9, 0x80000001, 0x7}, {0x5, 0x52cf, 0x3}, {0x8, 0x5, 0x1}, {0xfff7, 0xffff8000, 0x6, 0xfffffffffffffffa}, {0x4, 0x9, 0xb, 0x100}, {0x400, 0x8, 0x2, 0x5}], {0x2, 0x7fff, 0xf5, 0x40}, {0x4, 0x9, 0x1, 0x73}}}) ioctl$VMM_IOC_CREATE(r5, 0xca605601, &(0x7f00000005c0)={0x10, 0x9, [{&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffff}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb3}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xc}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x100}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x6000)=nil, 0x80000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1000}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0x3}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x8}], './file0\x00', 0x480, 0x4, 0x9700b6f, 0x9, [0xb, 0x8, 0x1000, 0x2, 0x7, 0x4, 0xfffffffa, 0x2, 0xe, 0xd7, 0x8000, 0x1ff, 0x4, 0x88, 0xd02, 0x4, 0x0, 0x12, 0x0, 0x3, 0x6, 0x1, 0x2, 0x7e0, 0x5, 0xfffffffb, 0x7fffffff, 0xfffffff0, 0x8, 0x5, 0x7, 0x7, 0x8a, 0x3, 0xfffffffb, 0x3, 0x1, 0x1, 0x8, 0x9, 0x3f, 0x9, 0x400, 0x98, 0xb11, 0x6, 0x7ff, 0x838, 0x8, 0x9, 0x4, 0xa918, 0xa, 0xb, 0x1, 0x6, 0xc, 0x18, 0x9, 0x0, 0x6, 0x80000000, 0x2, 0xff, 0x6, 0x3, 0x6, 0x1037dc77, 0x0, 0x5, 0x6, 0x8, 0x5, 0x4, 0x3b8, 0x11049ec5, 0x7, 0x6, 0x5, 0xf, 0x4, 0x2, 0x2, 0x5b683e5d, 0x7fff, 0x6, 0x10001, 0x6, 0x0, 0x7, 0xd, 0xfffff9b5, 0x6, 0x1, 0x1ff, 0x2f41adc7, 0xf, 0x7, 0x9, 0x9, 0x80000000, 0xffffe5b4, 0x9a3, 0x4, 0x9, 0x4, 0xb, 0x200, 0x5, 0x5, 0x6, 0x9, 0x0, 0x8, 0xa, 0x7, 0xffff, 0xe18, 0x0, 0xa, 0x5, 0x1, 0x9, 0x9, 0x7, 0x1ff, 0x3f03d6e0, 0x2e, 0x4, 0x5, 0xce9, 0x3, 0x0, 0x4, 0x100, 0x1, 0xfffffffa, 0x4981cf7b, 0xb, 0x3, 0x10000, 0x1, 0xc, 0xf, 0xffffffff, 0x1, 0x8, 0x9ff, 0xc45e, 0x7, 0xa4ec, 0x7, 0x7, 0x9, 0xfffffffe, 0x6, 0x3ff, 0x7ff, 0x7f, 0x8, 0x7ff, 0xffffffff, 0x800, 0x1, 0x9, 0x10, 0x0, 0x7f, 0x71eb, 0x1, 0x6, 0xf2, 0x10f320, 0x7, 0x1f, 0x9, 0x7e6, 0xffffffff, 0xf9, 0x761a, 0x4, 0x6, 0x4, 0xec, 0x8, 0x4, 0x4, 0x9, 0x7bac, 0x21058914, 0x1, 0x1, 0x163df82b, 0x974, 0x8001, 0x4, 0x10000, 0x1bbae431, 0x7, 0xd6, 0x0, 0x7, 0xffffffff, 0x9, 0xd, 0x8, 0xfffffffc, 0x0, 0x8, 0x8, 0x101, 0x5, 0x3, 0x5, 0x80000001, 0x9, 0x2, 0x0, 0x1, 0x6, 0x5, 0x7, 0x6, 0x7fff, 0x3, 0xb89c, 0x6, 0x4, 0xfc6, 0x3, 0x7, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x9, 0x1ff, 0x18000, 0x3, 0x74a97da5, 0x5, 0xe0000, 0x1, 0x4, 0x7fff, 0x2, 0x7, 0x7, 0x0, 0x80000001, 0x0, 0x4, 0x7fffffff, 0x1, 0x6, 0x9, 0x5753, 0x9, 0x6, 0x10000, 0x2, 0x4, 0x6, 0xddde, 0x4, 0x2, 0x6, 0x9, 0x9, 0x8, 0x6, 0x1, 0x2, 0x9, 0x98c, 0x31, 0x8, 0xde000, 0x3, 0xef8, 0xffffff11, 0x5, 0x2, 0xe, 0x6, 0x200, 0x7, 0x9, 0x782, 0xfffffffb, 0x5, 0x7f, 0x3af6, 0xbb6, 0x2, 0x4a9d00, 0x5, 0x6, 0x1, 0x80000001, 0x9, 0x6, 0x800, 0x2, 0x6, 0x5, 0x9, 0x4, 0x3, 0xfffffffa, 0xfffffff9, 0x58f, 0x7, 0x401, 0x7fffffff, 0x200, 0x7, 0xfffeffff, 0x2, 0x1, 0x0, 0xfffff66a, 0x6, 0x3ff, 0x8, 0x1, 0x6, 0x3e57, 0x4, 0x9, 0x582db783, 0xffffffff, 0xaa, 0x3, 0x7, 0x8, 0x200, 0x2, 0x80000001, 0x3, 0x7fffffff, 0x0, 0x6, 0xffffffff, 0x1000, 0x5, 0x4, 0x3ff, 0x0, 0x0, 0x7, 0x9, 0x81, 0xbc44, 0x4137eed0, 0x0, 0x7, 0xeaf, 0x8, 0x4f, 0x1, 0x81, 0x1, 0xfffffff6, 0xa8bb, 0x0, 0xffff7d5b, 0x2, 0x9, 0x4, 0x1, 0x6, 0x9, 0x2, 0x4, 0x400, 0xffffffcf, 0x8000, 0x1, 0x0, 0x8, 0xcf4, 0x5, 0x1, 0x40000000, 0xf2, 0xfffffffe, 0x6, 0x1535624e, 0x2, 0x80000000, 0x0, 0x9, 0x4, 0x2, 0xfffffffa, 0x3, 0xf, 0xfffffffe, 0x5, 0x8001, 0x96a, 0x401, 0xcbe, 0x7, 0x1, 0x9, 0x77, 0x6, 0x0, 0x800, 0x0, 0x7, 0x8, 0x8001, 0x200, 0x6, 0x5, 0xc, 0xfffffff8, 0x60, 0x5, 0x10001, 0x4, 0xd, 0x7, 0x6, 0x5, 0x4, 0x0, 0x4, 0x10001, 0x4, 0x208ec90a, 0xc7, 0x2, 0x8, 0xf, 0x9, 0xa, 0x0, 0xfffffffd, 0x81, 0x401, 0x8, 0xf, 0x3, 0x8001, 0xc, 0x8, 0x2, 0x5, 0x8001, 0x70000, 0x4, 0x35, 0xffff1993, 0x7, 0xff, 0x3, 0x2, 0x9, 0x6, 0x1, 0x2, 0x343a, 0x7fff, 0x2, 0x67, 0x3, 0x1000, 0x0, 0x4, 0x5a3, 0x8001, 0x5, 0xb, 0x1, 0x4, 0x98, 0x2, 0x8c, 0x6, 0x3, 0x9, 0x41634f9a, 0xf36d, 0x7fff, 0x0, 0x4, 0x9301, 0x2, 0x6, 0x7, 0x57e7, 0x8d92, 0x4, 0x7, 0x9, 0x1, 0x1000, 0x8, 0xff, 0xae, 0x8, 0xb, 0x7ff, 0x1]}) setitimer(0x2, &(0x7f0000000fc0)={{0x4, 0x7}, {0x8001, 0x1ff}}, &(0x7f0000001000)) ioctl$TIOCSTOP(r5, 0x2000746f) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000001040)={0x2, 0xffffffff, 0x2, 0x9, "9d7f263333d94ce5c394ce2a67b9fb09b89a10f5", 0x3d44e885, 0x101}) symlinkat(&(0x7f0000001080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00') (async) symlinkat(&(0x7f0000001080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00') r7 = setsid() getresuid(&(0x7f0000002440), &(0x7f0000002480), &(0x7f00000024c0)=0x0) r9 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000002500), 0x100, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000002580)={&(0x7f0000002540)=[0x1, 0x10, 0xd, 0xd39, 0xfffffff7, 0x0, 0xd4ab, 0x9, 0x0], 0x9, 0x10004, 0x0, 0xffffffffffffffff}) r11 = fcntl$dupfd(r5, 0xa, r6) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f00000025c0)={0x0, 0x0, 0x0}, &(0x7f0000002600)=0xc) stat(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getppid() sendmsg$unix(r5, &(0x7f00000027c0)={&(0x7f0000001100)=@file={0x7, 0x0, './file0\x00'}, 0xa, &(0x7f00000023c0)=[{&(0x7f0000001140)="e135463bb52ff2acc1c6de40a5a8a639ca", 0x11}, {&(0x7f0000001180)="6ce3994c7f6492df32a2bf1a03f2516d9ea3d26aad0d83e4d9788af0ec86eccd97c4dcb1f29950e2763071fc9f78bb1d0fcd5023fad3e04de2cf3b8a0b777ea4983caac3fe66eb56246428e9526576a1ff515897be040187fc612cf2450e28d4ac34f57f879a619758d8a9e0e174bef4d34ab8a01a81f2655196a7fcf14eafa3a6827593bc964c4ab9d5b883f43f47f6ac97eb3640a95c76d374428b7ab73f46c5131f06bf203a3d6ad1445b7254185025b594a07bffb99c426937bda43256eb59f030206718da2fb81fa4a1638e17aef38276ea7a8cfd", 0xd7}, {&(0x7f0000001280)="37445d7f536432aa2a387447d5ce010f4fa976ac418311b0bb40b4f362826e831b673c85d31941656074b3f760b115f35bec7d844cf71ee4d9a7e6cb50866dbaa8fa5aae926a9d04cd8ab3e404d7a5f86864ffd9ae19d656b76bee5d7f5856a2e855985206ccdeff22fa70b72d122d28cfe797c5fcfc9a4bc236bd98f56cb51c149fc957111ed68a1d948ea37a89b431cf61e2eda24ff5cf6936070fd43d8ebdf976541826885f680098044abd27c059d55001471c4eb5de83b41682b20e9d715380982a54213c2e8ff15530133beaf64115dad1983b7b4ecb2e4abbad0004da1d89733faa4576d2383caad5116fcd65217f6524372b4fa88a5c367422e4598906ecdde1ed9f4499353ab10cb243212ea1b93befa15d4b9bf5b3cb40e42459262649c1a8b7df0237e4ef1a01d825163cae8321388e8bb3525a92e5c1f86a191ddc7a7d1c776ac93a4358851444c4ff7ef2f1b926c81a9241620706ebe920282bd7cb067498c530cd1095b1430d090580b4ca8ade8ebcfbd0abe4c04ff8d3bad3629904279c69df3398419b5078280e743717911ac5b0c2a8f4cba2118753023e22bbe7cfba3a13d2805cd058f14a6e00ba98ee0f353555af8bfa6be4989ff6fbe3e0c87febb48a60a1811b01d8d773c65ba5e60fcc547294c54ef556b80f9d16e9862302a5447070ce52c9ab5206d9aebafefe31347e8f2f7252bd9c3a6305756212ce15c7ddadc43c46f283bedbba120cfb2c25d7993730cf75e40d8386b763ba1b707a3566706aa2b5d3067d4ef69d81989dd9f8dd9497d760efd39d1b8f4ef952b67723e87ce473c1abc0f0b18abdbf3f0994cb6bec3f25bee482e34c5b37c350700d8afbc4bd7ad64fdcb9ea3077d44d7848f8aa76ec0ec58813c57c8c21e7f0505df8cf215c445fdc20010dc615c0e01e501fbb4db9da7e0cebd6e5e3b66e91c5248562b49033a7afa6e92d4b6aa3219595e99090cb3d6fb94fb047ed565552ebf4dc133578aafcb198f6c5c7c6e37ba6c47b86004c975f1a116d8ef3876524fdf82ea2de902953f26fe06c406c78cc74c6529b13daa7d6619de9e0c4d2240e1724ba93e68fc7769d7bc3fabcdbc56359ea637dbc307953c9a5925c4d0e93a525814714c7c72125a6f7496e7cf97994ed09b6b1b53b99ec70800782281327f4d8481e6fafccd3813500426b81b0cd5f76eda273910641a935cda54a3a90aa9d20f6341004217ad6cb97c6047afcf0fe3f126ad597ba7045173300131157c095f63027fae25bdc28c66139dcb83ba50928dfe9ac217bee2a20d48b1a2ba2903dfc95bbe9f69111609351b0d663d5a728b78e3e18a417973a9399c711592336a9962e5b1a5ea160efb2c759b6c8a221e03179b0d8e4e05c6b4baa6cb1992a60e7a3432e5bba988e32af923a7b032b9ef73fc3a8f14bd35bcb6579c3e2ab63285f9c2f00656d9436782e53e857e17f6b121e4c5a0f437289325b351abaf6a0bc8de3459eeedd5eb29455a27c0522a8b379b5f1d5baa98d16177b5e06e68566809d96924d2722848e6397c387e131e31225260cc6ae9f211f911e706348e0e4c29b743ecb5037cd4d332df4a85f5d478cd6c2f8906b40d4975ee34e1d7e68341861787579db403970444b9581f6b092f05e6fee0dbc91b9bbcbfc647cc82ab28d5b804cc76690953d9aea118615d7eae299d2c701a7291b4ff5e3779d0c0d26261836428a02d61eeee7164c84f8882e70aef28ed8d2066c66e8027843e6d8b092713d2949d1342940388c4cb732c6590a7e38c3ff7b1595179b1e86781d3271bc641bc5265d817e7a0a714ea70f4c4e84bef585bf9031aa04f0c8df9bd6ad36d15706fb608f88ed6f3bcb51fae281da1c63525fcb9f3b74bdcda6c330708c87cdb172e393b44ad2e008875bcb4753fd32f463e92d6101c95af00181a34bb355f22949e1a0ad3d6698bc0de26b1f23a6481c86d8bb8781b12016d9bf50f66ef0ecb2580a0d583361f93e552cbc9a77e1c8066a2f262e17da26e1c45318aa0ad787c8a68e5ebc89653bf1cb3ed0fe78f711034923bf586cd23f73678f5bc1a68287038f07d705c9a3f11a8da97c1709fe24652ba01822bd4764051a175f954f49c466de1988bb2de2942d493b54fc217db9bb5027d56b4c2353600d1767e3d556970614f3adf50d27f5abecce5cdbf3d99a74f359ddca7419b90da4395f013282f81aec519f1e31929ab7b821966478cf1603d1b6d34570e459bbe53803930ce2c1c0a680bb8638c9a76c5fe03f339b2b7f0c741bd4df88a59e45824a3e77aa7b5dce23634f9af638428944ead885ca1f681076a3f0e420c799f3f1279d62c0e0332b6124c698e5344675b855c4739e216aa2a32ec4b6e54979759d5c134200f77f5f98b85648b3a53ebda44b34498d1cfdaed56c3cfddea8f75a622f87b0e23b9385411473f726b9056c6710efb80832594afc1f7317da6102d569ab27e44c215f9ddba47b595c2d8bb09a9b0e102740a73455ecd61a75e8ae9092c6047eaeaed93a07188d66008abd3e71942d3fceb7f06ace159bd6115d1cd8228ada690219f2d0b77e5cb3e96200cf5a2831e72fa331eaa8c523a68a987a9c2ffc076e140b40542c1a88086eb01de5089d6bc9ed1660fa83a5fcd01b5065c5f2d8fd71a558909ad29b78565e02b00f932a598ac62e395253e3f38045fa290a69dfc086bc9c766e0cd73379d28f026545ec091f3cdc43868a2dc4010da201ec39e9c551fb6cd3dc8537e20e89c55100d168a3663f33ebe248c61a57120d953f3f4897e79f8046478f751a7a647764043dcd4fab562a57195dfd9bf5a847d0df2bb8065ea9f5e4b1550977a679d49f580226469ec61427cacc01d39333820e5003b34618e8af084dc3b4a85f80b0da79cf62c47c76c0b2225dc670fa383ffd24cecd55d3c156bb8071a51b647a0277aa829ea2e367277f1d71cfa019fb4e681be6babd8130f4091004318050891fc5c4d884f828ebcdc6907c0286d42bc2102bfd6f804020841d75ed309b0af711fb52944fb3f04b40cc84f3af66ed7017105449f32b8c0dbe4926a4f3012512e0b1e12bff433955d29f4825df1ca35e2b4ae89d487f1501fe9cea0745b3fccbb40f61cc781d617c7a7948f75a166bb4270bd44b0fdf4ee19c010e46976110905597d92a17cd61070791bcea80593a41fe6b562cdb300f8b8a56b83e24958129eebd8934ef2ca47f139788df19c05df0f34a3cb4156847964574c082224a86387240b29c37fcd435e55dddbaffb18707780b3ca95613a6b80945f437d1bd97b33eac6534be865e061aa0b79fe4bdf6c67cd8e155a983ee05c7c45ac1ec28fc4686ff03b6f4cbe5c1d7285ffcda4cf53937b0588add03a7d6c508cea80a69875fe90082bf2aae4ef810eeeb8b8807ac6714ea1ddc6fb8b6093d1083024f634f5070e76b7d7adb5a2f3fa9f2ecc7998cbd8d7ce1dd326d58449627cc62ade88b537b11538509126c2c62f920900316ce4c317a0239c9e9c3b90d144be370b0746e64379ffea59aa67d1bef55f23918a70ab95f00b9ea9d89fe7e759d941ef92bca4363b04235fa6debcf11e1e50225a3242adaf672fa40271153ef1dc0c228492342f31ba5587ba87a8128bc879c7a5d93ceb27ffa331f9b547b2cec53d47a16fe6c7c490af8026ad10f23a3f1d2c666de841dd71d3a1c2f53eaccf5c1178a37cb65d4da079b4849032d91915c95805c7f54d602b6fd0db395ca25eb14a53acca613b17fba4f5a796788e865941904a2c75c0ecf5015fd70a4b4906091a6ed81afdfbe6cbc7f5320dd885b8253a2695e9eb88bcd253bfc0b4e384fae236c1822ab83515565d65a59260a26a4cfe982144d64a70ec2064a32f149d7e6502b0e0de047830f52edba3403859108fa495e208c7eb980922931a765c6429348f35e2a87bc9b8afffd23f35c9dc69b7db0c15757152c01f9c14bfb6c88b9182698fff157348ca76e905bbda18a9be777d72ddc712e163f2a85a65d457b906e54e9ad0ab22ba7dc96c79527a2e538176cad0fbb146ac2a8243a088df428c762c78753f0549b0d52c749df9c43eb73ab0f81747b2a15a289f070e2df8f77ee14b3a71bb8cebf06723ab2d14399f2a8dfebc52c4144b2505ad6cdf61283ad7c1f3652b1b8e173c1428dd673038b456b30444f9db3fe87c014163f6d58e8a1e31d6f7b9fafe49dbc42c2f121bee377984b896f62515a5bdbdc33687d301e2ed8cfae3970e1fd4ee7673871554343df35636f58d77521ca65607e0ba3c472140993575e99ae9173ea36fb6d8460e70eb82e5be1801cb7049d79bd6c556789846a2948653b15d36868b20b0b2e785e65a8491c3c674c22d236c570585314cab6d57e58284c9b41a8ce14e4c52b247935d083a76c90b7c4122b60c7345193a51882cd3566d9daff771a04de1ea8f45d0509ad65ed2a781a2f927f4c0871f0ef3208346d37cb98bd1e3047e16b185c61b73475b12e04af86813e00a65a4e25bfc6dffcb465dc2badc1fb5a52d837c721a7506df2fdb98f3cfe4bde7daa06c7ee573b2c48cf866819d362c8af5e88718679333fb2efd81e04bba0723fd0a5b6880962acf0c33c08650bdb962c8de1e4b906936de9b3db373d0b1d377c36e1faf7d43fc6095dd98754e03621dfd22b804dcd965c36c1bc37671d411072f779d39936bddc9a73042b9f095a024f17c57b72b0283a12cb7989797a762bb8553e1fc2354cf9742a4a4794a6e289b22b8c56995bbecfc7b648d81afa28613e156c90eabbc91977069617735f9d2a5eea27ad316cb3007df7bd31f02b7914c62a1a147c161e2f4564de82aca7d6000fa7c6127b8b1a800b9b143cc7d35d5bcc88c95ed8f125885f5e39b7da2e5dd5c83b81f10bf7de4ca9c420f095706a1f955b662cf0e80918f446ed0e2b495112285d4649b262034baebd4ab17dbb5c5239923e17e9748ee6e6cda7a7de0a2eda2511133ea930e94d721d0580bbb566b263229f65913526cac09b6bbdabfe4eab0df03a6c4063048415a711d80f15f44c604d2b142230eb05d8d670a1d5245f040193b55d4a3181474cfdc55f877be68d6bcd48e4aa4b80d77383ac77d761e2af9c0e9881fef798bb514c9f6c11f906609456efff6ba3ef162e6165da4c043123cec275539fa3e924fbf7234e1c11d85a97b352b1319b96fc65b90c919958dd841ff4a2787a245f3a6cadb10154e36c475863bb90c9500972a8583655e495e84120f7ac4293a975cdf5ef16fdca058f250919ce27098dc514b2839f1f68b074483d3d4fc332f9966e051ebe083ebec99d1b994e367cbb967082795508cfae023ebe52ef9fce1dea4015eb7c2e281c0bd4347336d205882c9eb34e48b342b610b98b9beac00ce2a318c7792ba7bbf6ddcc5513b729c47c8f4d539c0f2aab72dda4abe9beb18e556f9df4b0f5745d75969fd4a6493e66acde720b88052a6a6311121a4db201eb3db86a8a4fbbea82f5985ee67d0990553ebda2192bd4f44d481be533bfd73ccd01ff26d7eb98cdf78d15a31b48950e8a5d7f83970022c258761327725d2fc5615ad5a9c7df43860b108396da5d1364adc61ed464b7f545a7366c1f73e5ba55ec8720d129f131514f0df626578d8897fd5cc3ecd48b078a5c6730ed1031c7ff94bd8e420b70b48f4be1c43a735751cbda5029dbd3e4a16aaf15bed945e1acc9c1963ba20c96b51cdb2d0acfc787b0c891f4a6499e4ea3575c86f2d40fb66441cae3d5d662d33fde23acd5a514f1c8daa915", 0x1000}, {&(0x7f0000002280)="b48856f10d0806299c5c698bc7c73d0a9e4d8de608c51737e901a7261c3c566b9c57d37f8b4fbbb0e8e5f26e50fa518f1009c1e0d0157535b9b2443711087905f50c66e9d0a1a64e21ea49f35ac3d3492a03e30941947c325ed4fa6cb807", 0x5e}, {&(0x7f0000002300)="8c6df157921636d1a6e0400ca4cb815c5faa3e3f037ff5ba42d910e131492c74561ae7eec01fa472df125c46826f210423073ead97007662e425f9db9e4e328fcb7d568031c5e9cc", 0x48}, {&(0x7f0000002380)="e680bee3f7da239b35c1c8a162e2f99b2abaf4fc17014ee72866e42e16d0cbf0398a968984e5f54d1b5d173c00727519cb09e3fa43ec99b1c46f2b", 0x3b}], 0x6, &(0x7f0000002700)=[@cred={0x18, 0xffff, 0x0, r7, r8, 0xffffffffffffffff}, @rights={0x34, 0xffff, 0x1, [r9, r5, r10, r1, r5, r5, r1, r11, 0xffffffffffffff9c, r5]}, @cred={0x18, 0xffff, 0x0, r12, r3, r14}, @cred={0x18, 0xffff, 0x0, 0x0, r2}, @cred={0x18, 0xffff, 0x0, r15, r4}], 0x94, 0x4}, 0xc0850e3336877e6a) chown(&(0x7f0000002800)='./file0\x00', r2, r13) (async) chown(&(0x7f0000002800)='./file0\x00', r2, r13) ioctl$VMM_IOC_READREGS(0xffffffffffffffff, 0xc2485607, &(0x7f0000002880)={0x9, 0x0, 0x7, {[0x7, 0xad5, 0xfffffffffffffffe, 0x40, 0x2, 0x2, 0x4, 0xe, 0x210e, 0x48000000000000, 0x627b, 0xf86, 0xb8, 0x0, 0xffff, 0x9, 0x7, 0xd], [0x4, 0x1, 0xc04d, 0x7, 0xc, 0x3c7, 0x7, 0x9, 0xffffffff7fffffff, 0x100000001], [0x4, 0x5c1, 0x3, 0xf, 0x2, 0x1ff], [0xffffffffffffffff, 0x10000, 0x8, 0x81, 0x3, 0xf], [{0x0, 0x3, 0xd, 0x8000000000000001}, {0x8, 0x1, 0x0, 0x10001}, {0x1, 0xfffffffb, 0x7, 0x39d}, {0xf252, 0xbf, 0x1, 0x8}, {0x10, 0x6, 0x9, 0x8}, {0x3, 0x0, 0x6c3, 0x8}, {0x7, 0xffff7fff, 0x1, 0x6}, {0x2000, 0x9, 0x20000000, 0x7}], {0x8, 0x7, 0x8, 0x4}, {0x6, 0xfffffff8, 0x3, 0x800}}}) (async) ioctl$VMM_IOC_READREGS(0xffffffffffffffff, 0xc2485607, &(0x7f0000002880)={0x9, 0x0, 0x7, {[0x7, 0xad5, 0xfffffffffffffffe, 0x40, 0x2, 0x2, 0x4, 0xe, 0x210e, 0x48000000000000, 0x627b, 0xf86, 0xb8, 0x0, 0xffff, 0x9, 0x7, 0xd], [0x4, 0x1, 0xc04d, 0x7, 0xc, 0x3c7, 0x7, 0x9, 0xffffffff7fffffff, 0x100000001], [0x4, 0x5c1, 0x3, 0xf, 0x2, 0x1ff], [0xffffffffffffffff, 0x10000, 0x8, 0x81, 0x3, 0xf], [{0x0, 0x3, 0xd, 0x8000000000000001}, {0x8, 0x1, 0x0, 0x10001}, {0x1, 0xfffffffb, 0x7, 0x39d}, {0xf252, 0xbf, 0x1, 0x8}, {0x10, 0x6, 0x9, 0x8}, {0x3, 0x0, 0x6c3, 0x8}, {0x7, 0xffff7fff, 0x1, 0x6}, {0x2000, 0x9, 0x20000000, 0x7}], {0x8, 0x7, 0x8, 0x4}, {0x6, 0xfffffff8, 0x3, 0x800}}}) 2.224178404s ago: executing program 4 (id=17): socket(0x24, 0x8000, 0x6) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, [{[{0x88a8, 0x1, 0x0, 0x3}], {0x8100, 0x0, 0x0, 0x3}}], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x1, 0x20, 0x64, 0x2, 0x8, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@noop, @noop, @noop, @noop]}}, @udp={{0x1, 0x0, 0x8}}}}}}) mknod(0x0, 0x2000, 0x412dff) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000100)="dce299da98d1f894c797426d561ad286293bad1a7661f62607a3697d5b83cf0c1408075aa6d2d73d2c166e495d5916e8af", 0x31}, {0x0}, {&(0x7f0000000240)}, {&(0x7f0000000300)="6f958300b455", 0x6}], 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) mlock(&(0x7f000019a000/0x3000)=nil, 0x3000) syz_emit_ethernet(0x1000e, &(0x7f0000000180)=ANY=[]) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x403, 0x9) syz_emit_ethernet(0x3e, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffffffdff86dd6036ea0700083afffe8000000000000000000000000000aaff", @ANYRES16, @ANYRES32]) r0 = socket$inet(0x2, 0x1, 0x0) clock_getres(0x5, 0xffffffffffffffff) setsockopt$inet_opts(r0, 0x0, 0x13, 0x0, 0x0) syz_emit_ethernet(0xfb, &(0x7f0000000780)={@random="e702f2ffef1f", @random="97b0ae1a006b", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0xc5, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "00de00", 0x6, 0x1, 0x8, @rand_addr="26651f52e2840a3a68632730c0fc4357", @mcast1, [@routing={0x50, 0x0, 0x0, 0x5, 0x7879}], "cdc7d5f435179c8a3a2c30b63fae67cf8a5370c9ff870a9bff7e06613f148d95c9c8a454451e63dae9ce7126b5130fb4e1c3e21832e515326477ca06a0e8bbabfdf38dfc2e6660e36d9cb7101af879ae96ee100e71deed49ea8a28886533da262df047b4a9b7d02f78abc0501c467a88c312d39b559acac8dce47ce4246496e7503b3d21d328e9db2943ebe15f"}}}}}}}) setsockopt(0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000000)='\v\x00\x00\x00', 0x4) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0) sysctl$vm(&(0x7f0000000040)={0x2, 0x7}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETA(r1, 0xcd60441a, &(0x7f0000000040)={0x1, 0x2, 0xe6, 0x10000, "5e0800008a00000f000000b0f0338a6b4fc6d780", 0x6, 0x9}) syz_emit_ethernet(0x0, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) 1.158974226s ago: executing program 5 (id=18): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x65, 0x3, 0x7, 0x7}, {0x40, 0xf0, 0xff}, {0x6, 0x80, 0xb6, 0xfffff802}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="a7a6d61de4a10909926243003b47915d8156c41f83d57d6801f6d333c4ecbbccda3c7d2df1a7fe967bf291aad3", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) r1 = syz_open_pts() ioctl$TIOCSTSTAMP(r1, 0x8008745a, &(0x7f0000000080)={0x6, 0x5f7}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) syz_emit_ethernet(0x3e, &(0x7f00000001c0)=ANY=[@ANYBLOB="ec00000000000000ffffffff0800450000300067000000119078ffffffffac1400aa03049078000800004576000400660ecf043b0005e0000001e0000001"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x18, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r3 = kqueue() mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x200, 0x104) r4 = socket(0x18, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) kevent(r3, &(0x7f00000001c0)=[{{r5}, 0xfffffffffffffffb, 0x45, 0x80000000, 0x8, 0x6}], 0x1007, 0x0, 0x37, 0x0) acct(0x0) acct(&(0x7f0000000280)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0xfff8, 0x0, 0x0, 0x1, 0x0, @broadcast, @multicast2}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x7fff, 0x5, 0x3, 0xcaf9, 0x6}}}}}) setuid(0xffffffffffffffff) unveil(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='x\x00') unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000140)='x\x00') setsockopt(r2, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sysctl$kern(&(0x7f00000000c0)={0x1, 0x18}, 0x2, &(0x7f0000000180)="93012fa2b57f9c07fec801d1dc7e2add3c30b39214da3109510bc296160b2dbcb276e972862471f192be0f490c9dc960b6989223259ff484e5f06c0bed7c5d4bc4977204fda510217c61f45c9e53f313fa68a4a57f17212487a9266e3fe8848f7fa9a207d715a8d550266f5d4c1906408b62fd6f5ac4974a1f0349138de2120f13a0fe33615ae7bef0842498cad3911f0e29d76666d354e7e0f19836385162659deee264bee294cd4a5c29a154c4b07d904d2e6fc7a923ba0ca6db4f97f6f4cd", &(0x7f0000000100)=0xc0, &(0x7f0000000240)="934fa833ed46418f4806a72ad1a39a06eebabb4d453ffd3239e37bc6606dde737b0b30dbbecf42e499fd2b50defb93b02b88fd59aade6321a7489f957bb58c6a850b2638b5f59e6f1a67717410e2ad4c41752305bfda8820af67b060fd555da7", 0x60) sendto(r2, &(0x7f00000002c0)="57d05dfd301da5f5bba319e2aba3c5e59d584a36ee1ac425287ca003ec2a3f2d06aaec9cdc64901a2035379ebf5fbea4f06b977900d6d18b8d73fa14b7bc2bbca81debf0bf80e619b4cb9a705404e33b84634f42900c557346cd7f4c22fa83e3b0bde6548ee774ce85", 0x69, 0x1, &(0x7f0000000340)=@un=@abs={0x6, 0x0, 0x0, 0x1}, 0x8) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) 1.157002818s ago: executing program 3 (id=4): pwritev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000500)="e29c5e7d77b14e836c49f8a48e4bd92eefe415", 0x13}], 0x1, 0x9) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) setrlimit(0x4, &(0x7f0000000000)={0xa0}) r0 = syz_open_pts() close(r0) syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 1.156555418s ago: executing program 6 (id=19): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000b40)="00000000c21e6ed7eda4f5903abf65b18d7c51f78b06cc3a5840c04c2a649b1400000000fafd3493776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0xd}, 0x2) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xfe, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0xc3, 0x83, 0xfffffff5}, {0x40, 0xf0, 0x9, 0x4}, {0x6, 0x4, 0x12, 0xfffff800}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) write(r1, &(0x7f00000003c0)="f81ad30100060000000100000000", 0xe) r2 = getuid() ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f00000000c0)=0x3ff) setreuid(0xee00, r2) seteuid(r2) ioctl$TIOCSETA(r0, 0xc4504446, &(0x7f0000000740)={0x2f, 0x2, 0x2, 0x5, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x810}) 1.133362483s ago: executing program 5 (id=20): r0 = socket(0x2, 0x1, 0x0) sysctl$kern(&(0x7f0000000140)={0x1, 0x3b}, 0x2, 0x0, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r2, &(0x7f0000000240)="a32c2aa3085e1749abedbfe5", 0xc) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040), 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3, 0x7}, {0x2, 0xff03}, {0x1}, {0x0, 0x800}, {0x3}, {0x5}, {0x0, 0xaa59}, {0x3, 0xb59}, {0x1, 0x1}, {0x3, 0x100}, {0x1, 0x1}, {0x3, 0x80000000}, {0x2, 0x3}, {}, {0x0, 0x5}, {0x1, 0xffffffff}, {0x3, 0x1}, {0x1}, {0x3, 0xfffffffe}, {0x3, 0x7ff}, {0xbb08c0840fa32129, 0x6}, {0x0, 0x1}, {0x1}, {0x0, 0xf208}, {0x2, 0x1000000}, {0x1, 0x1}, {0x0, 0x1ff}, {0x0, 0x200}, {0x2, 0xffffffff}, {0x0, 0x9}, {0x1, 0x5}, {0x3}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 1.129435095s ago: executing program 6 (id=21): r0 = socket$inet(0x2, 0x1, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) setsockopt(r0, 0x3, 0x7, &(0x7f00000000c0)='\x00\n\x00\x00', 0x4) mquery(&(0x7f0000574000/0x4000)=nil, 0x4000, 0x1, 0x10, 0xffffffffffffffff, 0xb) r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) dup(r1) 64.259739ms ago: executing program 2 (id=22): r0 = semget(0x1, 0x1, 0x282) semctl$IPC_RMID(r0, 0x0, 0x0) 63.582686ms ago: executing program 4 (id=23): r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x1c) fstat(r0, &(0x7f0000000080)) fchmod(r0, 0x80) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x5d827e8d1509ea2b, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') shutdown(r1, 0x1) getsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f0000000280), &(0x7f00000002c0)=0x4) sendto$inet(r1, &(0x7f0000000300)="4ced45801db9895b6f5bc39ec1846f9c62f7a4d85e4be04697c479c0042a78f8bbbe8dcf0b", 0x25, 0x7, 0x0, 0x0) setsockopt(r1, 0x5, 0x9e, &(0x7f0000000340)="4b5ecb2bf2cccd572f5bd21a4be8165cba", 0x11) execve(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)=[&(0x7f00000003c0)='\x00'], &(0x7f0000000540)=[&(0x7f0000000440)='/::^O&[#\'],]-[$@\x00', &(0x7f0000000480)='*[\x00', &(0x7f00000004c0)='/dev/null\x00', &(0x7f0000000500)='/dev/null\x00']) lseek(0xffffffffffffffff, 0xf37, 0x2) r2 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x7, &(0x7f0000000580)={0x2, 0x2, 0x7f, 0xfffffffffffffbff, r2}) r3 = openat$dri(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/dri/renderD128\x00', 0x3, 0x0) r4 = dup(r0) ppoll(&(0x7f0000000600)=[{r1, 0x20}, {r3, 0x80}, {r0, 0x2}, {r1, 0x40}, {r4, 0x4}, {r0, 0x20}, {r1, 0x40}, {r0, 0x20}], 0x8, &(0x7f0000000640)={0x4, 0x1}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000006c0)={&(0x7f0000000680)=[0x401, 0x7cb2], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DIOCSETDEBUG(r1, 0xc0044418, &(0x7f0000000700)=0x6) r6 = dup2(r1, r0) socket(0x18, 0x4000, 0x11) ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000780)={0x1, &(0x7f0000000740)=[0x0]}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f00000007c0)={0x3, 0x6, 0x0, 0x8, 0xfff, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000800)={0x2, 0x1, 0xba39, 0x100, 0x7f, 0xfffffff8, r7}) execve(&(0x7f0000000840)='./file0\x00', &(0x7f0000000900)=[&(0x7f0000000880)='/dev/dri/renderD128\x00', &(0x7f00000008c0)='\x00'], &(0x7f0000000b00)=[&(0x7f0000000940)='{\x00', &(0x7f0000000980)='$\x00', &(0x7f00000009c0)='&\x00', &(0x7f0000000a00)='/dev/null\x00', &(0x7f0000000a40)='%\x00', &(0x7f0000000a80)='*[\x00', &(0x7f0000000ac0)='/::^O&[#\'],]-[$@\x00']) write(r5, &(0x7f0000000b40)="fcd1dcb1b4091c76440b0e22beb5d755ac44b9aa4e3e2295c755a172c968a1cb23dd7596f1d6d13bf3a80c3f121ecb521850e4642c01cfc60b76ee442cf6638f43a692983e1629fea2fb7135674b26681fc3e994a26016baeb0c4e2e9ab3f5b83191cb5b1596", 0x66) ioctl$WSDISPLAYIO_GINFO(r6, 0x40185741, &(0x7f0000000bc0)) r8 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000c00), 0x40, 0x0) r9 = getppid() fcntl$setown(r8, 0x6, r9) 23.052502ms ago: executing program 1 (id=24): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r0 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x83) setuid(0xee01) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000040)=0x10004) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x11, 0x3, &(0x7f0000000340)="12000000", 0x4) r2 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$WSDISPLAYIO_USEFONT(r2, 0x80585750, &(0x7f0000000240)={'./file0\x00', 0xb7d, 0xe, 0x7f, 0x1, 0xf0, 0x6, 0xfffffff7, 0x2, 0x0, 0xe367, 0x8000000000000000}) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000180)="b1000504600000000000180007000000331c13fecea10500fef9ed061ddd1efb7ae320b37b673051d2d236073705ae04be38164991f7b85143222b297be1aa5b2354eb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907a900000200361b1257aea8c5000020020000000000ffbb27c501f1306c7f008a09ba09006574ffffffffff35b5710426037503682ce371a30080", 0xb1, 0x0, 0x0, 0x0) 5.719937ms ago: executing program 5 (id=25): syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd605f6a9900382ca902000013000000000000000000000000fe8000000000000000000000000000aa3a000005000000008f"]) r0 = syz_open_pts() syz_open_pts() syz_open_pts() fchmod(r0, 0x26) sysctl$kern(&(0x7f0000000040)={0x1, 0x45}, 0x3, &(0x7f0000000440)="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"/488, &(0x7f0000000000)=0x41, &(0x7f0000000180)="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", 0x98) socket(0x20, 0x4000, 0x7f) mknod(&(0x7f0000000340)='./file0\x00', 0x2000, 0x1e5f) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9e, 0xffffff7fffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x2000c, 0x2000000000000004}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f0000000080)='./file1\x00', 0x80, 0xba) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r2, 0xc0307004, &(0x7f0000000140)=0x1) r3 = open(&(0x7f0000000240)='./file0\x00', 0x10000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(r3, 0x81205724, &(0x7f0000000100)={0x7fe, 0x16, 0x3, 0x5fe, 0x80000004, 0x80008003, 0x10001, 0x10, [{0x6, 0x2, 0x4, 0x71002}, {0x10000, 0x8, 0x4, 0x8001}, {0x7, 0x0, 0x203, 0xea89}, {0x8000001, 0x80c, 0x800005, 0x10}, {0x5, 0x4, 0x2840, 0x3}, {0x2, 0x0, 0xfffffffe, 0x7}, {0xa1, 0x1, 0x6, 0x9}, {0x106, 0x1803, 0x14, 0x8}, {0x0, 0x80, 0x5, 0x8683}, {0x0, 0x7fff, 0xd1b, 0x88}, {0x1ce, 0x4, 0x1000, 0x3}, {0x7ff, 0xb, 0x6, 0x9}, {0x400, 0x4, 0x40000008, 0xcd03}, {0x29a71717, 0xfffefffa, 0x1, 0x6}, {0xc, 0x7, 0x3, 0x8001}, {0x0, 0x1, 0x1002, 0x8000005}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0x8, 0x0}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$lock(r4, 0x8, &(0x7f0000000140)={0x0, 0x0, 0x7, 0x1004300002007}) r5 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x11, 0x3, 0x0) sendto$unix(r6, &(0x7f0000000100)="b1000501000000ae05000701072000000008000000000500fef96ecfc72fd3357ae30200004e30ffd2d236acf20bf404be01000000f7c8cf5f882b297de1aa050400ce94e2f0ad3ebbc257e4411f139b672f335c22db830c032bfa896443c32118210000720fd38bfb0000fd54c125191b1257aea8c500001602fbfe0c2300000100be1f25a2e791505c47f8343712cc11fffffffffffffc00"/177, 0xb1, 0x0, 0x0, 0x0) semget$private(0x0, 0x2, 0x442) 3.887883ms ago: executing program 6 (id=26): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0xfffffffefffffffe, 0x2000000000000000, 0x210, 0x8, 0x7}, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) write(r1, &(0x7f0000000240)="a32c2aa3085e1749abedbfe5", 0xc) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x59, &(0x7f0000000100)}) sysctl$kern(0x0, 0x0, &(0x7f0000000080)="a7a6d61de4a10909926243003b47915d8156c41f83d57d6801f6d333c4ecbbccda3c7d2df1a7fe967bf291aad372ea9ecf9ff32d60e261edb281e5bafdf82ce3b0f191b7cc90f6aa42a4daafe8", &(0x7f0000000000)=0x4d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x105e, &(0x7f0000000180)=ANY=[]) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x8f7) open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) 3.565551ms ago: executing program 1 (id=27): getpgid(0x0) r0 = socket(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x22, 0x0) fchdir(r1) utimensat(r1, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={{0xfffffffffffffffd, 0xffffffffffffff41}, {0x8, 0xd9}}, 0x0) r2 = getpid() ktrace(0x0, 0x5, 0x3812, r2) lstat(&(0x7f0000000040)='./file0aaaaaaaaa\x00', &(0x7f00000000c0)) r3 = semget(0x0, 0x1, 0x89) setgid(0xffffffffffffffff) dup(r0) setuid(0xffffffffffffffff) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) rename(&(0x7f0000000140)='./file2/file0\x00', &(0x7f0000000100)='./file2\x00') semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) semop(r3, 0x0, 0x0) lstat(&(0x7f00000003c0)='./file2/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000100)='./file0\x00', 0x615, 0x61) r5 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x1, 0x40000530, r5) syz_open_pts() fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r4, 0xffffffffffffffff, r6) ktrace(&(0x7f00000001c0)='./file0\x00', 0x2, 0x1006, 0x0) 0s ago: executing program 3 (id=28): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$net_inet_carp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x1}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="f8000000", 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.66' (ED25519) to the list of known hosts. pppx: unable to set addresses for pppx1, error=17 panic: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 211165 7773 0 0x14000 0x200 0 reaper db_enter() at db_enter+0x25 panic(ffffffff8344c870) at panic+0x1e5 __assert(ffffffff8348e3e5,ffffffff8349f0af,3bb,ffffffff834c7a2c) at __assert+0x29 refcnt_finalize(ffff8000fffdf770,ffffffff8344a1c9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff8000fffdf768) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff800036fbe028) at pppxclose+0xa0 spec_close(ffff80003afd9e90) at spec_close+0x417 VOP_CLOSE(fffffd806bfea018,2,fffffd80097fd410,ffff800036fbe028) at VOP_CLOSE+0x132 vn_closefile(fffffd806bfe2050,ffff800036fbe028) at vn_closefile+0x12b fdrop(fffffd806bfe2050,ffff800036fbe028) at fdrop+0x121 closef(fffffd806bfe2050,ffff800036fbe028) at closef+0x192 fdfree(ffff800036fbe028) at fdfree+0x116 exit1(ffff800036fbe028,0,0,1) at exit1+0x576 sys_exit(ffff800036fbe028,ffff80003afda200,ffff80003afda150) at sys_exit+0x1a end trace frame: 0xffff80003afda1f0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "refs != ~0" failed: file "/syzkaller/managers/multicore/kernel/sys/kern/kern_synch.c", line 955 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8344c870) at panic+0x1e5 __assert(ffffffff8348e3e5,ffffffff8349f0af,3bb,ffffffff834c7a2c) at __assert+0x29 refcnt_finalize(ffff8000fffdf770,ffffffff8344a1c9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff8000fffdf768) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff800036fbe028) at pppxclose+0xa0 spec_close(ffff80003afd9e90) at spec_close+0x417 VOP_CLOSE(fffffd806bfea018,2,fffffd80097fd410,ffff800036fbe028) at VOP_CLOSE+0x132 vn_closefile(fffffd806bfe2050,ffff800036fbe028) at vn_closefile+0x12b fdrop(fffffd806bfe2050,ffff800036fbe028) at fdrop+0x121 closef(fffffd806bfe2050,ffff800036fbe028) at closef+0x192 fdfree(ffff800036fbe028) at fdfree+0x116 exit1(ffff800036fbe028,0,0,1) at exit1+0x576 sys_exit(ffff800036fbe028,ffff80003afda200,ffff80003afda150) at sys_exit+0x1a syscall(ffff80003afda200) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7588cfb8fea0, count: -16 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003afd9c60 rbx 0xffff8000299bee07 rdx 0 rcx 0xffff800036fbe028 rax 0xffff8000299bdff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xa286b4f09fb1f159 r11 0x7f08f3b1ea4ff7ec r12 0xffff8000299bec08 r13 0 r14 0 r15 0x1 rip 0xffffffff815c8945 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003afd9c50 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=445051 pid=79049 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff800036fbe028 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff800036fbe7f0,0xffff800036fbf260 process=0xffff8000fffe5360 user=0xffff80003afd5000, vmspace=0xfffffd806c7f1d70 estcpu=0, cpticks=1, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 8465 9768 50474 0 2 0 syz-executor 53005 157750 7493 0 2 0 syz-executor 53005 172992 7493 0 3 0x4000080 fsleep syz-executor 44652 194560 7876 0 2 0 syz-executor 44652 511236 7876 0 3 0x4000000 smrbar syz-executor 48169 178133 0 0 3 0x14200 acct acct 14612 304689 67483 0 2 0 syz-executor 14612 338261 67483 0 3 0x4000080 fsleep syz-executor 4496 223709 71021 0 3 0x100082 sbwait arp 71021 137128 27495 0 3 0x10008a sigsusp sh 67483 352853 60571 0 3 0x82 nanoslp syz-executor 3742 297436 60571 0 3 0x82 nanoslp syz-executor 7876 228198 60571 0 3 0x82 nanoslp syz-executor 92860 29504 60571 0 2 0x2 syz-executor 50474 226508 60571 0 3 0x82 nanoslp syz-executor 54412 186922 60571 0 3 0x10000082 nanoslp syz-executor 7493 39777 60571 0 3 0x82 nanoslp syz-executor 27495 52705 60571 0 3 0x82 wait syz-executor 60571 201337 94193 0 3 0x82 kqread syz-executor 94193 16369 26607 0 3 0x10008a sigsusp ksh 26607 207503 19602 0 3 0x98 kqread sshd-session 19602 346253 37045 0 3 0x92 kqread sshd-session 34819 253295 1 0 3 0x100083 ttyin getty 37045 170970 1 0 3 0x88 kqread sshd 36797 215868 74713 74 3 0x1100092 bpf pflogd 74713 18971 1 0 3 0x80 sbwait pflogd 76240 502956 11106 73 3 0x1100090 kqread syslogd 11106 135887 1 0 3 0x100082 sbwait syslogd 59888 251107 1 0 3 0x100080 kqread resolvd 40491 515618 84683 77 3 0x100092 kqread dhcpleased 87333 438998 84683 77 3 0x100092 kqread dhcpleased 84683 180000 1 0 3 0x80 kqread dhcpleased 52310 519982 0 0 3 0x14200 bored smr 14108 421872 0 0 2 0x14200 zerothread 85481 290930 0 0 3 0x14200 aiodoned aiodoned 91118 109705 0 0 3 0x14200 syncer update 48411 237405 0 0 3 0x14200 cleaner cleaner 7773 211165 0 0 7 0x14200 reaper 415 161541 0 0 3 0x14200 pgdaemon pagedaemon 25142 214742 0 0 3 0x14200 bored viomb 3046 228692 0 0 3 0x40014200 acpi0 acpi0 73961 143711 0 0 3 0x40014200 idle1 62036 82694 0 0 3 0x14200 bored softnet1 15221 363785 0 0 3 0x14200 bored softnet0 11165 163879 0 0 3 0x14200 smrbar systqmp 87468 66861 0 0 3 0x14200 bored systq 49375 384176 0 0 3 0x14200 tmoslp softclockmp 33102 377394 0 0 3 0x40014200 tmoslp softclock 28194 510380 0 0 3 0x40014200 idle0 1 186939 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 7773 (reaper) thread 0xffff8000ffffcf98 (211165) exclusive rwlock kmmaplk r = 0 (0xffffffff839b79e0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvm_unmap+0x7d #4 km_free+0x87 #5 uvm_uarea_free+0x4f #6 reaper+0x1ca #7 proc_trampoline+0x10 Process 11165 (systqmp) thread 0xffff8000ffffe7c8 (163879) shared rwlock systqmp r = 0 (0xffffffff8392c6c8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11067 12151K 12303K 166960K 12189 0 pcb 17 13K 13K 166960K 30 0 rtable 225 6K 7K 166960K 339 0 pf 39 18K 18K 166960K 53 0 ifaddr 44 7K 7K 166960K 49 0 ifgroup 64 2K 2K 166960K 69 0 sysctl 1 1K 9K 166960K 5 0 counters 78 37K 37K 166960K 82 0 ioctlops 0 0K 4K 166960K 1489 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1293 81K 81K 166960K 1382 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 97K 166960K 153 0 proc 72 115K 180K 166960K 550 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 90 6K 6K 166960K 92 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 55 254K 254K 166960K 55 0 exec 0 0K 1K 166960K 376 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 218 162K 169K 166960K 3205 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 43 86K 106K 166960K 1284 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 14 0K 1K 166960K 29 0 temp 35 9074K 9139K 166960K 4108 0 kqueue 14 22K 24K 166960K 28 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 35 0 31 1 0 1 1 0 8 0 rtentry 176 106 0 3 5 0 5 5 0 8 0 unpcb 144 36 0 19 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 14 0 9 1 0 1 1 0 8 0 arp 136 17 0 0 1 0 1 1 0 8 0 inpcb 328 108 0 99 4 0 4 4 0 8 3 nd6 152 21 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1192 3 0 1 1 0 1 1 0 8 0 pppxif 1576 3 0 1 1 0 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 1 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 18 0 0 1 0 1 1 0 8 0 pfstkey 128 18 0 0 1 0 1 1 0 8 0 pfstate 448 18 0 0 2 0 2 2 0 8 0 pfrule 1360 23 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 423 0 0 27 0 27 27 0 8 0 art_table 40 424 0 0 5 0 5 5 0 8 0 art_node 32 106 0 10 1 0 1 1 0 8 0 sysvmsgpl 40 2 0 0 1 0 1 1 0 8 0 semapl 112 1 0 1 1 0 1 1 0 8 1 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1607 0 139 92 0 92 92 0 8 0 ffsino 296 1607 0 139 113 0 113 113 0 8 0 nchpl 144 1824 0 127 64 0 64 64 0 8 0 vnodes 216 1707 0 0 95 0 95 95 0 8 0 namei 1024 5539 0 5539 2 0 2 2 0 8 2 percpumem 16 56 0 2 1 0 1 1 0 8 0 kstatmem 264 32 0 2 2 0 2 2 0 8 0 scxspl 216 6138 0 6138 4 3 1 3 1 8 1 plimitpl 152 29 0 12 1 0 1 1 0 8 0 sigapl 424 467 0 418 7 0 7 7 0 8 0 knotepl 120 56 0 0 2 0 2 2 0 8 0 kqueuepl 224 26 0 15 1 0 1 1 0 8 0 pipepl 344 122 0 95 3 0 3 3 0 8 0 fdescpl 528 450 0 419 3 0 3 3 0 8 0 filepl 160 1661 0 1442 11 0 11 11 0 8 1 lockfpl 104 14 0 12 1 0 1 1 0 8 0 lockfspl 48 8 0 6 1 0 1 1 0 8 0 sessionpl 144 23 0 14 1 0 1 1 0 8 0 pgrppl 48 31 0 14 1 0 1 1 0 8 0 ucredpl 104 111 0 98 1 0 1 1 0 8 0 zombiepl 144 420 0 418 1 0 1 1 0 8 0 processpl 1232 467 0 418 5 0 5 5 0 8 0 procpl 664 504 0 452 6 0 6 6 0 8 0 sockpl 752 179 0 149 7 0 7 7 0 8 3 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 133 0 0 17 0 17 17 0 8 0 mcl2k 2048 29 0 0 4 0 4 4 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 204 0 0 13 0 13 13 0 8 0 bufpl 280 2302 0 105 157 0 157 157 0 8 0 anonpl 32 5584 0 0 45 0 45 45 0 246 0 amapchunkpl 152 9055 0 8521 25 0 25 25 0 158 2 amappl16 200 2001 0 1982 5 2 3 5 0 8 1 amappl15 192 10 0 10 2 2 0 1 0 8 0 amappl14 184 428 0 426 1 0 1 1 0 8 0 amappl13 176 119 0 105 1 0 1 1 0 8 0 amappl12 168 698 0 669 2 0 2 2 0 8 0 amappl11 160 164 0 164 1 1 0 1 0 8 0 amappl10 152 65 0 51 1 0 1 1 0 8 0 amappl9 144 266 0 266 1 1 0 1 0 8 0 amappl8 136 125 0 123 1 0 1 1 0 8 0 amappl7 128 177 0 163 1 0 1 1 0 8 0 amappl6 120 168 0 166 1 0 1 1 0 8 0 amappl5 112 123 0 113 1 0 1 1 0 8 0 amappl4 104 306 0 286 1 0 1 1 0 8 0 amappl3 96 1559 0 1462 3 0 3 3 0 8 0 amappl2 88 520 0 459 2 0 2 2 0 8 0 amappl1 80 9294 0 8676 15 0 15 15 0 8 1 amappl 88 2494 0 2353 4 0 4 4 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 450 0 419 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 450 0 419 1 0 1 1 0 8 0 vmmpekpl 168 5490 0 5460 2 0 2 2 0 8 0 vmmpepl 168 37456 0 35614 88 0 88 88 0 357 3 vmsppl 488 449 0 419 5 0 5 5 0 8 0 rwobjpl 80 13842 0 12817 24 0 24 24 0 8 1 pdppl 4096 907 0 838 99 24 75 87 0 8 6 pvpl 32 12436 0 0 101 0 101 101 0 265 0 pmappl 256 449 0 419 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 272 0 27 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83865ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 mtx_leave(ffffffff838a43f8) at mtx_leave reaper(ffff8000ffffcf98) at reaper+0x15b end trace frame: 0x0, count: 10 ddb{0}> trace x86_ipi_db(ffffffff83865ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 mtx_leave(ffffffff838a43f8) at mtx_leave reaper(ffff8000ffffcf98) at reaper+0x15b end trace frame: 0x0, count: -5 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff8344c870) at panic+0x1e5 __assert(ffffffff8348e3e5,ffffffff8349f0af,3bb,ffffffff834c7a2c) at __assert+0x29 refcnt_finalize(ffff8000fffdf770,ffffffff8344a1c9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff8000fffdf768) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff800036fbe028) at pppxclose+0xa0 spec_close(ffff80003afd9e90) at spec_close+0x417 VOP_CLOSE(fffffd806bfea018,2,fffffd80097fd410,ffff800036fbe028) at VOP_CLOSE+0x132 vn_closefile(fffffd806bfe2050,ffff800036fbe028) at vn_closefile+0x12b fdrop(fffffd806bfe2050,ffff800036fbe028) at fdrop+0x121 closef(fffffd806bfe2050,ffff800036fbe028) at closef+0x192 fdfree(ffff800036fbe028) at fdfree+0x116 exit1(ffff800036fbe028,0,0,1) at exit1+0x576 sys_exit(ffff800036fbe028,ffff80003afda200,ffff80003afda150) at sys_exit+0x1a end trace frame: 0xffff80003afda1f0, count: 0 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff8344c870) at panic+0x1e5 __assert(ffffffff8348e3e5,ffffffff8349f0af,3bb,ffffffff834c7a2c) at __assert+0x29 refcnt_finalize(ffff8000fffdf770,ffffffff8344a1c9) at refcnt_finalize+0x1db pppx_if_destroy(205b9a,ffff8000fffdf768) at pppx_if_destroy+0x3d pppxclose(205b9a,2,2000,ffff800036fbe028) at pppxclose+0xa0 spec_close(ffff80003afd9e90) at spec_close+0x417 VOP_CLOSE(fffffd806bfea018,2,fffffd80097fd410,ffff800036fbe028) at VOP_CLOSE+0x132 vn_closefile(fffffd806bfe2050,ffff800036fbe028) at vn_closefile+0x12b fdrop(fffffd806bfe2050,ffff800036fbe028) at fdrop+0x121 closef(fffffd806bfe2050,ffff800036fbe028) at closef+0x192 fdfree(ffff800036fbe028) at fdfree+0x116 exit1(ffff800036fbe028,0,0,1) at exit1+0x576 sys_exit(ffff800036fbe028,ffff80003afda200,ffff80003afda150) at sys_exit+0x1a syscall(ffff80003afda200) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7588cfb8fea0, count: -16