last executing test programs: 3.94513531s ago: executing program 1 (id=301): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r2 = msgget(0x2, 0x600) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000080)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) getuid() (async) r4 = getuid() getgroups(0x6, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r6 = getppid() getpgrp() (async) r7 = getpgrp() msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x2, r3, 0x0, r4, r5, 0x100, 0x8}, 0x9, 0x80000000, r6, r7, 0x9, 0x7, 0x0, 0x4}) (async) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000180)={{0x2, r3, 0x0, r4, r5, 0x100, 0x8}, 0x9, 0x80000000, r6, r7, 0x9, 0x7, 0x0, 0x4}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x200000001, 0x80000000000000c, 0x4, 0x7}) r8 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r8, 0xffff, 0x1000, &(0x7f0000000280)=0x8cf04, 0x4) bind$unix(r8, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@random="8f6f77ede655", @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "5f6ad9", 0x30, 0x37, 0x0, @empty, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "06c32e", 0x6, 0x6, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @loopback}}}}}}}) fcntl$setstatus(r0, 0x4, 0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) (async) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r9 = socket$inet(0x2, 0x3, 0x0) ioctl$FIONREAD(r9, 0x80206979, &(0x7f0000000100)) 3.575319115s ago: executing program 1 (id=316): clock_gettime(0xa, 0xfffffffffffffffe) r0 = syz_open_pts() kevent(0xffffffffffffffff, 0x0, 0x7f, 0x0, 0x80000001, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000080)=0x2) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0xc0206981, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x1}, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x5b}, 0x2, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x5d) chdir(&(0x7f0000000100)='./file0\x00') open$dir(&(0x7f0000000140)='./bus\x00', 0x80, 0x80) setuid(0xffffffffffffffff) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') mknod(&(0x7f00000000c0)='./bus\x00', 0x2006, 0x4f4b) r2 = open$dir(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) ioctl$FIOASYNC(r2, 0xc2c04200, &(0x7f00000001c0)) clock_gettime(0x2, &(0x7f00000000c0)) syz_open_pts() 3.212368623s ago: executing program 1 (id=321): sysctl$kern(&(0x7f0000000000)={0xa, 0x4}, 0x7, &(0x7f0000000040)="fe747e421f032be37006e10e39246c2df91905f823d85bb54ae3d4a91f541c46502e59a8d054fe7d6a93c0bfec6382b43ee9d7b9df2f9943fc2c25b6bbd6358b2fd20a7cbc9a40301525e116", 0x0, 0x0, 0xfffffffffffffff4) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2000007, 0x101, 0x80000001, 0x81b0, 0x10001, 0x10, [{0x0, 0x2890, 0x4, 0x71002}, {0x6, 0x9, 0x8, 0xfffffff9}, {0x104, 0xf88, 0x0, 0x7f}, {0x4, 0x7fe, 0x8007, 0x7}, {0x401, 0x3, 0x2800, 0x7}, {0x1, 0x650, 0x3, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6d}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x5}, {0x6a75, 0x8001, 0x1000, 0x4}, {0x1cc, 0x10001, 0xc, 0x3}, {0x8, 0x9, 0x8, 0x2}, {0xb94, 0x7, 0x4, 0x1}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x1000c, 0x5, 0x5, 0x10000000}, {0x0, 0x1, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x8, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x9, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0xc, 0x2a2, 0x0, 0x0, 0x4, 0x800000000000013, 0x8000000200, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x21, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000001780)='./file0\x00', 0x3c, 0x160) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2d}, 0x2, &(0x7f0000000100)="75d2755e623805c6f985d13cfa9adc53a6ae9fe1986e8b823b71c61d20e414", &(0x7f0000000140)=0x1f, &(0x7f0000000180)="288ad13241b73b8bde9c55bc0c334695c3544d0fa83cf044ffe41746f157d0d8937aacfe41a487082c9b79cd5f4eea940529c25672275870efd06cb8425e3a09662b46a47d3fca7181aaf16599456c2c18ad9776eab66c39b4ef136f9a443ef2d065c77de642c6b0e2492fc78be794154bf371821de8ab50231ea9c53e9a4edb2c078a1651dbd8a9b7a82fb1256015441c74", 0x92) 3.206776612s ago: executing program 1 (id=325): syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) r0 = socket(0x6, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt(r0, 0x1000000000029, 0xe, &(0x7f00000001c0)="03000000", 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000), 0x10) ioctl$FIOGETOWN(0xffffffffffffffff, 0x4004667b, &(0x7f0000000080)) connect$unix(r1, &(0x7f0000000000), 0x10) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) write(r2, 0x0, 0x0) 3.131243751s ago: executing program 1 (id=327): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) (async) r0 = open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) rename(&(0x7f0000000440)='./file1\x00', 0x0) readlink(&(0x7f0000000240)='./file1\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000100)={&(0x7f0000000080)='./file1\x00', 0x5, &(0x7f00000000c0)='./file1\x00', 0x8}) 2.329710146s ago: executing program 2 (id=366): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000ec0), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000f40)={&(0x7f0000000f00)=[{0x3, 0x8}, {0x2, 0x4}], 0x2}) r1 = syz_open_pts() ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f0000000000)) (async) ioctl$TIOCGTSTAMP(r1, 0x4010745b, &(0x7f0000000000)) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socket(0x1, 0x2, 0x0) (async) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) r3 = socket(0x18, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc1206951, &(0x7f0000000100)) (async) ioctl$FIONREAD(r3, 0xc1206951, &(0x7f0000000100)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x2c, 0xf, 0xfe, 0x9}, {0x6, 0x6, 0x1, 0xfffffff2}]}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="00231b000f40008f043f0080000000000700262bbf82bf3ebec576596bdc24c6c7000817c53fcb7c7d40b558750008005c000ab6257fe82e5fd758394fcbb322887f0255dc23ffee4502f09de7000000", &(0x7f0000000000)=0x4d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unlink(&(0x7f0000000280)='./file0\x00') ioctl$BIOCSETWF(r4, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r4, &(0x7f0000000240)="d81ad30100000000000100000000", 0xe) (async) write(r4, &(0x7f0000000240)="d81ad30100000000000100000000", 0xe) sysctl$kern(&(0x7f0000000240), 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000240), 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x4a}, 0x2, &(0x7f0000000080)="25bcf4d5c9438c9eee4df1d7694f767c53c9a015cc6b7419ea46ec192dcfde7c978d1394d0da7c90ba5781c3d9b1d2de4a35bec4f907a0c401f4b245663f5cecb9c46388efe2e471706c7e717b43423ae76d41775e823d925ad2394c46f227d4e228085c139335d037a0a8bd859db47f8eac941571a1dd687c6cd39907c3177fb0814a55561c088125f027672c3945fe9aa26c8704d0434783d0a5ed704b83cd919b71be360a57d8b167428146e62bdb58fb5849017e93e5e3ff526fcfafcdffd04fc5625655e84c828347f89404fb99aeda77352e050d", &(0x7f0000000180)=0xd7, &(0x7f00000001c0)="1095ab8ea312bb832202a96960fa08909229065e06d66fefc34777c30d48f464f1de17147c32e7ba09c3e6fa04bb74311e9693d8f13ab43ed82d4351f72017f3f8db11885e5d5723e11153c3fbb84268c89dec6d8fe5ce54d94331f49915e0b64614f3717f3bbb4fdc16b33ff293a3f10979", 0x72) 2.178541968s ago: executing program 2 (id=368): writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x10000000000001b4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = semget(0x0, 0x1, 0x281) semctl$GETVAL(r0, 0x4, 0x5, &(0x7f0000000000)=""/239) r1 = socket(0x2, 0x3, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)=[&(0x7f0000000140)='\x06dev/bpf\x00', &(0x7f00000002c0)='*)\xff}\x00', &(0x7f0000000300)='/dev/bpf\x00', &(0x7f0000000380)='/dev/bpf\x00', &(0x7f00000003c0)='tap', &(0x7f0000000400)='tap', &(0x7f0000000440)='/dev/bpf\x00'], &(0x7f0000000640)=[&(0x7f00000004c0)='/dev/bpf\x00', &(0x7f0000000500)='{,\x00', &(0x7f0000000540)='.\x00', &(0x7f00000005c0)='\x00', &(0x7f0000000600)='/dev/bpf|']) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x4, &(0x7f0000000680)=[{0x3, 0x1, 0x7f, 0x40000007}, {0x59d, 0xc, 0xd5, 0x20004006}, {0x16, 0x9, 0x1, 0xfffffff2}, {0x2, 0x1, 0xe, 0xab5}]}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="50041b02003e807447ff000800000000000000000f000000000000003c7c3087de4ada9a933366b344db9d5fea", &(0x7f0000000000)=0x2d, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[]) r4 = dup(r1) setsockopt$inet_opts(r4, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) write(r1, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x7e34, 0x0, 0x0, 0x0, 0x0, 0xcbdf4d1d31039a48, 0xdfc}, 0x10, 0x4000000000000004, 0x0, 0x0, 0x800004, 0x2, 0x1, 0x3}) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$kern(&(0x7f0000000100)={0x1, 0x50}, 0x3, &(0x7f00000011c0)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0xfffffffffffffff9) openat$diskmap(0xffffffffffffff9c, &(0x7f00000006c0), 0x200, 0x0) pwrite(r3, &(0x7f0000000700)="9f74d8a2cdc604d422ec4b665f66c957817cd1bcc37352a99fbb927e2aba38161b1c124c1a6fe1028d77ea86e3245ce80ef54bb2ba6b1fbdf485ce0ef9dd7fe3a92f0560075262b357837b3c03adbe164ebf2a23566827e3fbd4005933569dafa8b2a9393e53e189971691255708b5a4013e9beac00c56bcd651a130f18a4680929b03d93e751faf3219aea3d54734cc6175d04a74f192cffa1af6634fa9d79da2a1f3159ea5dd9987a9ac40d998eddb3d9ed54bacd9efa6661c315c0a73c6233e7bf8539f14bdc10c30351c28a569e7b604881bece277ef8868494cf1", 0x1, 0x379c) 1.984668412s ago: executing program 4 (id=371): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x10, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80, 0x150) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, 0x0, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f00000006c0)="12e6285f8c1c5b04fbe43f8d388f5f7b9a53fd67df2bb63b96c58b3bab2104a48acc11b08a48e4b2382a5e8607bccddc6ea9615642ab4304af9458505fdbc996593f0720926a2aa8daccb67a55c08c8b9170f76c9207af73f903b635657966823f61be77c045d15ba42e3b0c6565cd04ae153c0f252972ab1178a25f2052c3a9b41b8a905e96eb4db650d423b678eebb83e730be4394203cc7309377801e76190228364551197709addb4b01cf56b006165edeaa844135c62ddb9e4e0a85a2a608577c049e88f65bb5951e4f3bd0df0211834e", 0xd3}, {&(0x7f0000000280)="321a0dba87196331e47bb9e53fc69cc48ad0f40934074f772d65", 0x1a}, {&(0x7f00000002c0)="948f34565db1d68696d10acab8d63bc66282ff647dd5b9e48ff97d2c96a539227b328a0b5b576541ad6c4a9e368bcbe1b93113650054062e548fa4cbd8faa376bed1f7e582afe3db1f511a624742e35effcd79da39648a926affa46ff267c303c95255434039323d4914f52780410793981ce02364baa18e0d372837b191", 0x7e}, {&(0x7f0000000340)="60a680c9258317c82f7d6b6f4c26c2cc36a459f33c2cdfdb07a33b9812d443ede23af999055b37d31c3b3059765cc16bb9f422b2926befc81e0f4face4bbc4a9e2fe168afb59d7032a5ddefb9f75fb4f2ceacf934f588b9ed5024d8aface279e0214530e66ef5ed2d62a02b2591e7eb5103585c9814800df116611b5edcfd39d2cc27a27437966c784b6cd47da", 0x8d}, {&(0x7f0000000400)="e6ad47b8a36f3533a2", 0x9}], 0x5) unveil(0x0, &(0x7f0000000140)='r\x00') r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) fcntl$lock(r2, 0x9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300000003}) close(r0) 1.980654813s ago: executing program 2 (id=374): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) rename(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x2, 0x100}, {0xa201d90e6a17be06}, {0x2}, {0x2, 0xffffffff}, {0x3, 0x4}, {0x0, 0xfffffffc}, {0x0, 0x3ffffd}, {0x0, 0x7}, {0x3, 0xfffffffd}, {0x1, 0x332}, {0x0, 0xffff}, {0x0, 0x1}, {0x0, 0x3}, {0x1, 0xfffffffd}, {0x2, 0x800000}, {0x1, 0x6}, {0x3, 0x3}, {0x1}, {0x2, 0x7f}, {0x2, 0x4}, {0x3, 0xfffffff7}, {0x3}, {}, {0x0, 0x20}, {0x1, 0xfffffffd}, {0x0, 0x9}, {0x2}, {0x2, 0x8}, {0x1}, {0x0, 0x1}, {0x1, 0x8}, {0x1, 0x83}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) getsockname$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) truncate(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) close(r0) r1 = socket(0x18, 0x2, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f00000001c0)=[{r3, 0x2}], 0x1, 0x7) close(r2) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) sendmsg$unix(r0, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) rename(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.941925839s ago: executing program 7 (id=377): r0 = syz_open_pts() (async) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000080)={&(0x7f00000000c0)='./file0\x00', r1, 0x1}) (async) close(r1) (async) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000440)={0x0, 0x0, 0x6fde, 0x1, "0100012d29005e00", 0x1000000, 0x8}) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x4f}, 0x2, 0x0, 0x0, 0x0, 0x0) pledge(0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x0, &(0x7f00000000c0)="3bf2ee74e547c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e49fdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000000)=0xa1, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86711dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xee) (async) r2 = socket$unix(0x1, 0x5, 0x0) connect(r2, &(0x7f0000000080)=@un=@abs={0x1, 0x0, 0x1}, 0x8) (async) sysctl$kern(&(0x7f0000000180)={0x1, 0x50}, 0x2, &(0x7f00000001c0)="ab286e2e1f1f4da636827c1acd8bc34a5d90c097003e53261a2e5fe31ac4fc119b3449b80997f19c59871c992beafec5b7d6b738693a5f721b667bdde11364744a06c667dc134e61d2f11bbceed6c0cecafe02f910753aae5fd15b3228a7d4ed5f8624bfad4776e3ce9e", &(0x7f0000000240)=0x6a, &(0x7f0000000280)="8bfe4dfca1924c3217b35bcb7375effe7e2884dd124f6fbbffabc7baa87bb512770fd61b33c619b1d27bc6e6b1093babdb327a40ed277ccba15dae36f29e9e2e3f0ed25b604f84a2e43e850c1b9d12599a542eecec271341159937977d694ee41fb7e73c4353c57bccfaa8db6e2a5a01527df472bdc1220ca65948b4340d81162df7715bc78e54e1faab23d0b72e2134ecd408c98a2f548f7609c09cbf1205d5f179", 0xa2) 1.846773391s ago: executing program 0 (id=378): setrlimit(0x8, &(0x7f0000000000)={0x8, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000100)={0x9789, 0xfffffffb, 0x3, 0x80a19e, "bb081aa9000800f7beae58beff0f00", 0x71, 0x4}) sendto$unix(0xffffffffffffffff, &(0x7f0000000100)="b10005016000009f05000500070000000018", 0x12, 0x2, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x20, 0x0) pread(r2, &(0x7f0000000480)="3cd15db7c3", 0x5, 0xfffffffffffffffd) 1.846462001s ago: executing program 2 (id=379): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = socket(0x2, 0x4001, 0x0) r2 = fcntl$dupfd(r1, 0x2, r1) close(r2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000040)={0x0, 0x0}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r3 = syz_open_pts() close(r3) syz_open_pts() r4 = socket(0x2, 0x3, 0x0) setsockopt$sock_linger(r4, 0xffff, 0x80, 0x0, 0x0) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r3, &(0x7f0000000780)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}], 0x2) r5 = socket(0x18, 0x1, 0x0) setsockopt(r5, 0x1000000029, 0xb, &(0x7f0000000080)="10d36191", 0x4) 1.845440763s ago: executing program 7 (id=380): mknod(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x4406) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r1 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x3, 0x7fffffff}) sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) kevent(r2, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000140)) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000580)={0x3, &(0x7f0000000000)=[{0x84, 0x5, 0x0, 0x20000001}, {0x14, 0x80, 0x8, 0x8}, {0x6, 0x3b, 0x9, 0x10000000}]}) syz_emit_ethernet(0x62, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0000000000000800451f005400670005062c9078ac1400aa0000000075f38b7b290c3479e89a2f573843d70e0e7460c3ed176ebf8db24a11c73702786b74b528024bfc8ffdc5777a7688cb72b1c5febdb1a174f9"]) open$dir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x101) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) write(r3, &(0x7f0000000140)="4eafc59606f44547f5aa8fc53ffe87968da24d2abe58b6c812eafd2c27ca7ae5a7f92188575f69c159c6e49167212df44c8e863131ad07", 0x37) 1.615266544s ago: executing program 3 (id=382): r0 = syz_open_pts() pwritev(r0, 0x0, 0x0, 0x10002eb5) (async) pwritev(r0, 0x0, 0x0, 0x10002eb5) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x437bfffffffffc, [{&(0x7f0000695000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x200007fffffffffe}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffbfffff7d}, {&(0x7f0000e63000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x206}, {&(0x7f0000385000/0x3000)=nil, &(0x7f00001ac000/0x3000)=nil, 0xfffffffffffffffd}, {&(0x7f00006c6000/0x4000)=nil, &(0x7f0000188000/0x2000)=nil, 0xffffffffffff7611}, {&(0x7f000060b000/0x2000)=nil, &(0x7f0000095000/0x3000)=nil, 0x8000000000000000}, {&(0x7f000032b000/0x2000)=nil, &(0x7f00008c4000/0x4000)=nil, 0xb}, {&(0x7f00003e3000/0x2000)=nil, &(0x7f000074b000/0x1000)=nil, 0x5}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000f44000/0x3000)=nil, 0x51}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f0000257000/0x1000)=nil, &(0x7f0000a6b000/0x1000)=nil, 0x12b}, {&(0x7f000057c000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x3fffc0000000}, {&(0x7f000024b000/0x1000)=nil, &(0x7f00003e4000/0x2000)=nil, 0x100000000}, {&(0x7f000024b000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffff7ffbffffff7}, {&(0x7f0000e07000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x2}, {&(0x7f00004b8000/0x1000)=nil, &(0x7f00005c5000/0x2000)=nil, 0x7f}], './file0\x00', 0x4}) msgget$private(0x0, 0x127) (async) r1 = msgget$private(0x0, 0x127) msgrcv(r1, 0x0, 0x0, 0x0, 0x3000) (async) msgrcv(r1, 0x0, 0x0, 0x0, 0x3000) msgctl$IPC_RMID(0x0, 0x0) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0106924, &(0x7f00000001c0)) 1.614942579s ago: executing program 5 (id=383): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x200, [{&(0x7f0000448000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil, 0xe9c}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x40000000006}, {&(0x7f000077c000/0x1000)=nil, &(0x7f000011c000/0x3000)=nil, 0x4}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x82}, {&(0x7f0000ff5000/0xa000)=nil, &(0x7f0000a40000/0x4000)=nil, 0x1}, {&(0x7f0000328000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f00000c0000/0x1000)=nil}, {&(0x7f0000760000/0x3000)=nil, &(0x7f0000fea000/0x3000)=nil}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000142000/0x1000)=nil, 0xa}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil, 0x1}, {&(0x7f0000801000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000014c000/0x4000)=nil, &(0x7f00009b1000/0x4000)=nil, 0x6}, {&(0x7f0000622000/0x1000)=nil, &(0x7f00002f9000/0x4000)=nil, 0xfffffffffffffff7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x4000000000003}], './file0\x00'}) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"]) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) ioctl$TIOCSETA(r0, 0xc0284459, &(0x7f0000000040)={0x2, 0xffffffff, 0x3, 0x10000000, "00000000000000000f0000ee0900", 0x6, 0xfffffff7}) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='x\x00') syz_extract_tcp_res(&(0x7f0000000000), 0x77b, 0x2) 1.47000803s ago: executing program 2 (id=384): select(0x0, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x7ff, 0xa6, 0x7fff, 0x101, 0x80000001, 0x4, 0x10001, 0x10, [{0x2, 0x6, 0x5, 0xd2}, {0x238ab, 0x9, 0x8, 0xfffffff8}, {0x104, 0xf88, 0xfffffffc, 0x9}, {0x4, 0x7, 0x8007, 0x7}, {0x401, 0x200003, 0x2800, 0x7}, {0xfb8f, 0x650, 0x3, 0x86}, {0xce1, 0xb, 0x3b2, 0x10002}, {0x6, 0x800, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x6}, {0x6a76, 0x8001, 0xffe, 0x4}, {0x1, 0x10003, 0xc, 0x3}, {0x8, 0xa, 0x8}, {0x9, 0x40, 0x4, 0x4}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0x1000c, 0x5, 0x5, 0x4}, {0x0, 0x6, 0x6, 0x30004}]}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000040)={0xf66d, 0xd, 0x9, 0x5fffff5d, "9cfb000200002f9e68cd330400", 0x400, 0x45a}) write(r1, &(0x7f0000001080)="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", 0x525) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4) setrlimit(0xa00a2adee21ce02b, 0x0) mlock(&(0x7f0000ff8000/0x4000)=nil, 0x4000) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = openat$wskbd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fchdir(r0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f0000000100), 0x8) ioctl$WSKBDIO_SETMAP(r3, 0x8010570e, &(0x7f0000000040)={0x0, 0x0}) execve(0x0, 0x0, 0x0) 1.468967226s ago: executing program 5 (id=385): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setown(r0, 0x6, r2) ioctl$WSKBDIO_GETMAP(r0, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r3 = socket(0x18, 0x1, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) utimensat(r1, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={{0x6e, 0x1}, {0x0, 0x2}}, 0x2) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x9, 0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0\x00', 0x248f, 0x80, 0xffff, 0x0, 0x21, 0x2, 0x4000001, 0x2, 0x2, 0x1, 0xf1d}) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x2) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@random="afd88e32e048", @empty, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x14, 0x6, 0x8, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x70b7, 0x0, 0x1}}}}}}}) syz_emit_ethernet(0x4d, &(0x7f0000000080)={@local, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "03816a", 0x17, 0x6, 0x30, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[], @tcp={{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x11, 0x0, 0x0, 0x1}, {"9faccb"}}}}}}}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$FIONBIO(r5, 0x82907003, &(0x7f0000000140)=0x1) close(r5) socket(0x2, 0x1, 0x0) kqueue() open(&(0x7f0000000080)='./file0\x00', 0x10, 0x100) sysctl$kern(&(0x7f0000000040)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x2, 0x5, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001180)="2cb304c7", 0x4) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x0, 0x200007, 0x7, 0x101, 0xb, 0x8, 0x10001, 0x10, [{0x0, 0x7, 0x1, 0x35}, {0x7, 0xfffffffc, 0x10000008, 0xfffffff8}, {0x9, 0xf86, 0x200004, 0xaf9}, {0x1, 0x800, 0x8}, {0x401, 0x7fffffff, 0xe, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xcdf, 0x1, 0x4f8, 0x101}, {0xa, 0x7ff, 0x14, 0x7}, {0x800005, 0x81, 0x1, 0x9}, {0xfffffffe, 0x2166, 0xc8, 0x88}, {0xfff, 0x10001, 0x9, 0xaeb}, {0x80, 0x9, 0x200008, 0x4}, {0xb8c, 0x4, 0x85, 0x6}, {0x29a71717, 0xfffffffa, 0x6, 0x6}, {0x4, 0x80000000, 0x6}, {0x0, 0x1, 0x2, 0xfe}]}) sysctl$vm_swapencrypt(&(0x7f00000000c0)={0x2, 0x5, 0x1}, 0x3, &(0x7f0000000280)="408705abb4839b74d907c5a839c8bbdb9b647cf74082a6566f89fb961eac0f7472e8e9ae2645a52b8bc6018c14777fa38076513ac7917ff22d62ce9a248636a8e72a33b72c77ad5d1c32d6aa163205502871bcdeebf718669738183eaf64d3c77b9ffa6a2ae44d514ae86d336ed5d7f2d8a75bb15ea80f16519674a9ce71c152fed27a5d89f3d26d72204355ac207b4007d2711d05be94a010c99e83ee6120d4866b1bf720399812d74e3cea47a468b9b82c82fc512dd5da08bfa12a8ff8410454e86c469394f9fca9668a54e8ecec3da4c0afcbea8e846232005dea5b44fcb6d3ec1121dd14bf63018c", &(0x7f0000000380)=0xea, &(0x7f00000003c0)="ff490d9623ab6e562f9ebb54f8407236828933df921af9e762b9bddb6ea10d3cc3557c7ccd2702b533f07792be7881ae0f21529ed6c308afbb5341a4f0c18a3651dff4f00b817422ac144faedf348f65c4533b74bc7f77e989f47f35bd00809f0eb43a0393307b09393c16bdc2e19edf60e11cff3573539d7f079a6b5a3d82ac28ebcf75f25f63124559bc810015758dff8d51fea008f929455b54bb55b85a8ad52a4558a1f9be554e2b5e2b947bb6f64570c7939fb852f1d3", 0xb9) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000240)=[{r3, 0x2}], 0x1, 0x0) 1.468753381s ago: executing program 0 (id=386): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r2, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x1}, {0x2, 0x3}, {}, {0x1}, {0x3}, {0x2, 0x20000000}, {0x1, 0xffffffff}, {}, {0x6}, {}, {0x1}, {0x0, 0x3b6}, {0x3, 0x400000}, {}, {0x2, 0x3}, {0x3, 0x800}, {0x1}, {0x0, 0x7ff}, {0x5}, {0x0, 0x7}, {0x3}, {0x3, 0x3fe}, {}, {0x2, 0x3}, {0x0, 0xfffffffd}, {}, {0x3}, {}, {0x1, 0xa}, {0x1}]}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x1086, 0x0, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff}) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VMM_IOC_INTR(r4, 0xca605601, &(0x7f0000000040)={0x5, 0x0, 0x200d}) listen(r2, 0x3) fcntl$setstatus(r0, 0x4, 0xc0) write(r1, &(0x7f00000002c0)="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", 0xfffffdaf) execve(0x0, 0x0, 0x0) 1.467747905s ago: executing program 0 (id=387): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r0, &(0x7f0000001480)=[{&(0x7f0000000100)="cc60d3d7", 0x4}], 0x1) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 64) r1 = socket(0x2, 0x3, 0x0) (async, rerun: 64) chmod(&(0x7f0000000040)='.\x00', 0x35e) (async) setuid(0xee01) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) ioctl$FIONREAD(r1, 0x80286987, &(0x7f00000001c0)) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x40) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xf1a) open(&(0x7f00000004c0)='./bus\x00', 0x100, 0x0) r3 = socket$inet(0x2, 0x5, 0x2e) getsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f0000000300)=""/27, &(0x7f0000000340)=0x1b) (async, rerun: 32) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) (async, rerun: 32) faccessat(0xffffffffffffffff, 0x0, 0x100, 0x3) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0, 0x3}) (async) semget$private(0x0, 0x0, 0x2a9) (async, rerun: 32) r4 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x8) (rerun: 32) dup2(r4, r4) 417.243576ms ago: executing program 3 (id=388): sysctl$kern(&(0x7f0000000300)={0x1, 0x46}, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105727, &(0x7f0000000300)={&(0x7f0000000000)=[{0x100, 0x3}, {0x21, 0x100}, {0x6, 0xb113}, {0x20, 0x8}], 0x4}) 413.879474ms ago: executing program 7 (id=389): r0 = socket(0x18, 0x2, 0x0) (async) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r1 = socket(0x1, 0x2, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @local, [], {@ipv4={0x800, {{0x8, 0x4, 0x2, 0x1, 0x34, 0x64, 0x3, 0x6, 0x9d, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xb, 0x1e, [@local={0xac, 0x14, 0x0}, @loopback]}]}}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0xb, 0x8, 0x3fc, 0x4, 0x9}}}}}) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x18, 0x2, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000000)={0xbfffffff, 0x6, 0x0, 0xffffd6c8, "e435b3ff00000030c300046291bf9400", 0x543, 0x2}) (async) setsockopt(r2, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) (async) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) (async) r4 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r4, 0xc0206917, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x8020699d, &(0x7f00000001c0)) 413.36596ms ago: executing program 4 (id=390): chmod(&(0x7f0000000140)='./file2\x00', 0x2d4) setuid(0xee01) (async) r0 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, 0x0, 0x0) (async) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x1, 0x7f, 0x40000007}, {0x59d, 0xc, 0xd5, 0x20004006}, {0x16, 0x9, 0x1, 0xfffffff2}]}) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)="a99616ac80ccb429333143c45b35e66709ba6c96a60e83fd36a30dd5bee2f6d36f2c9c06be45c2843ac38698", 0x2c}], 0x1) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000340)="50041b02003e807447ff000800000000000000000f000000000000003c7c3087de4ada9a933366b344db9d5f", &(0x7f0000000000)=0x2c, 0x0, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[]) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) symlink(&(0x7f0000000000)='.\x00', 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) (async) rename(&(0x7f0000000080)='./file2/file0\x00', &(0x7f0000000000)='./file2\x00') 410.364651ms ago: executing program 5 (id=391): r0 = syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000080)) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800, 0xfffffffffffffffe) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000000), 0x2cfea}], 0x1000000000000013) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r2, 0x0) r3 = socket(0x2, 0x2, 0x0) r4 = dup(r3) setsockopt$inet_opts(r4, 0x0, 0x24, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x1) sysctl$net_inet_udp(&(0x7f0000000040)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000000c0), 0xffffffffffffff67) ioctl$TIOCSPGRP(r4, 0x40047477, &(0x7f00000000c0)) 365.89957ms ago: executing program 4 (id=392): r0 = socket(0x1, 0x3, 0xf1) chmod(&(0x7f0000000040)='.\x00', 0xfc) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fchdir(r1) unveil(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='x\x00') ioctl$FIONREAD(r0, 0xc028698d, &(0x7f00000001c0)) getsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x8) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) close(r3) r4 = socket(0x2, 0x2, 0x0) connect$unix(r4, 0x0, 0x0) r5 = socket(0x18, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000140)={0x18, 0x3, 0x1000, 0xfe000000}, 0xc) r6 = fcntl$dupfd(r5, 0x2, r5) close(r6) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xb, 0x0, 0x0, 0x0, 0x0, 0x84, 0x3ff}, 0x400, 0x40000010000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x6}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) sysctl$kern(&(0x7f0000000000)={0x1, 0x4d}, 0x2, 0x0, 0x0, &(0x7f0000001440)="02000000", 0x4) 365.612452ms ago: executing program 0 (id=393): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2100007, 0x101, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x8, 0x4, 0x71000}, {0x8, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0x2, 0x6, 0x3, 0x99}, {0xce1, 0xfffffffe, 0x4f8, 0x6d}, {0x6, 0x300, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x9, 0x8001, 0xd1b, 0x88}, {0x1ce, 0x10001, 0xc, 0x3}, {0x7ff, 0x9, 0x0, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0x7f, 0x1, 0x6}, {0xc, 0x7, 0x5}, {0x8000, 0x20001, 0xfff, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x1700) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) select(0x2463432e6e402b04, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9f, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x504) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) execve(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)=[&(0x7f0000000340)='!U,\\-\xcc\x00', &(0x7f0000000380)='#^]-^\x00', &(0x7f00000003c0)='/dev/bpf\x00', &(0x7f0000000400)='/dev/bpf\x00', &(0x7f0000000480)='\x97^&^%!\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='s&\\+&\x00', &(0x7f0000000540)='tap', &(0x7f0000000580)=']#+\x00', &(0x7f00000005c0)='/dev/bpf\x00'], &(0x7f0000000900)=[&(0x7f00000006c0)='/dev/bpf\x00', &(0x7f0000000700)='/dev/bpf\x00', &(0x7f0000000740)='tap', &(0x7f0000000780)='W\x00', &(0x7f00000007c0)='/dev/bpf\x00', &(0x7f0000000800)='tap', &(0x7f0000000840)='/dev/bpf\x00', &(0x7f0000000880)='W\x00', &(0x7f00000008c0)='/dev/bpf\x00']) execve(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) setpgid(0xffffffffffffffff, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x8e, 0x7e, 0x40000007}, {0x7, 0x11, 0x3, 0x5}, {0x6, 0x9, 0x6, 0xfffffff2}]}) r1 = semget(0x0, 0x1, 0x281) setuid(0xffffffffffffffff) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000200)) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="7778434c574e9f19887fcca62900231b000f400095043f0080000000001f00385c046200000817c5", &(0x7f0000000000)=0x28, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f0000000600)="d81ad30100000000000100000000", 0xe) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6fd, 0xac, 0x80, 0x7}]}) 365.144832ms ago: executing program 4 (id=394): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0xfffffdff, 0x0, 0x0, 0x0, 0x0, 0x1e0, 0x3}, 0xfffffffffffffff8, 0x8000800000045, 0x0, 0x0, 0x2, 0x2008005, 0xfffffffffffffffc, 0x2}) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000100)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3080000000000000003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b5c2f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400001200008000361b4cf3fbfac500002021fbfa0c0f00008abfba22db7e87293ad8fe738a1554f4e0f668246c0900000008e371a3f834371207d145c8318db5673a55996b01f4903f71856aea38830f7ee47af3c01f8bcae6c95b027ce83fc22c2c36236a2551d38dd8b3474beb13459d2b2c34e8dfaebc0f950ab6b4", 0xf5, 0x0, 0x0, 0x0) 364.820355ms ago: executing program 7 (id=395): r0 = open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7929) ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000140)=0xe) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, &(0x7f0000000040)={0xfffffffd, 0xc, {0x0, 0xfffffffffffffffd}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) setuid(0xffffffffffffffff) (async) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) 312.281815ms ago: executing program 3 (id=396): fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x3, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff}) setsockopt$sock_timeval(0xffffffffffffffff, 0xffff, 0x1005, &(0x7f00000000c0)={0x0, 0x1ff}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) close(r0) r1 = socket(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000000), 0x10) connect$unix(r1, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$inet(r0, 0x0, 0x0, 0x406, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x0}, 0x8) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) bind(r0, &(0x7f0000000100)=@un=@abs={0x1, 0x0, 0x1}, 0x8) mprotect(&(0x7f000020c000/0x3000)=nil, 0x3000, 0x2) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000840), 0x11821, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r2, 0xc0504417, &(0x7f0000000740)={0x0, 0x3, 0x5, 0x400003, "0000000000fdac7d8f00", 0x11, 0x1000a}) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r3 = socket(0x18, 0x1, 0x0) close(r3) r4 = socket(0x18, 0x3, 0x0) setsockopt(0xffffffffffffffff, 0x1000000029, 0x8, &(0x7f00000001c0)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) madvise(&(0x7f000049e000/0x2000)=nil, 0x2000, 0x5) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0xa) write(r4, &(0x7f0000000180)='\fO', 0x2) connect$unix(r1, &(0x7f0000000040)=@abs={0x0, 0x0, 0x0}, 0x8) sysctl$vfs_nfs(&(0x7f00000002c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000300)="cce47d35", &(0x7f0000000380)=0x4, &(0x7f0000000000), 0x0) 311.4113ms ago: executing program 3 (id=397): setrlimit(0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) clock_gettime(0x3, &(0x7f0000001640)) r0 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0}, 0xc) fcntl$lock(r0, 0x9, &(0x7f0000000500)={0x3, 0x0, 0x10000000000000, 0x1000381a10087, r1}) r2 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1000, &(0x7f0000000240)=0x6, 0x4) r3 = socket(0x800000018, 0x2, 0x0) fcntl$lock(r3, 0x9, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff, 0x100000000}) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) bind$unix(r2, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) flock(r0, 0x2) r4 = open(&(0x7f0000000000)='./file0\x00', 0x411, 0x50) ioctl$TIOCDRAIN(r0, 0x2000745e) open(&(0x7f0000000200)='./file0\x00', 0x10, 0xc0) dup(r4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='r\x00') 311.076987ms ago: executing program 3 (id=398): r0 = open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) (async, rerun: 64) ktrace(&(0x7f0000000400)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (rerun: 64) setitimer(0x0, &(0x7f0000000000)={{0x0, 0x80}, {0x0, 0x4}}, 0x0) getitimer(0x0, &(0x7f0000000380)) unveil(0x0, 0x0) (async) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0xc) kevent(r0, &(0x7f00000000c0)=[{{r0}, 0xffffffffffffffff, 0x0, 0x2, 0x7f, 0xfffffffffffffff9}, {{r1}, 0xffffffffffffffff, 0xb1, 0x1, 0x8, 0xa2d5}], 0x4, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffd, 0x0, 0x4, 0x1, 0x9ad2}, {{r0}, 0xfffffffffffffff8, 0x81, 0xfff7f, 0x5325d165, 0xffffffffffffff80}], 0x8, &(0x7f0000000140)={0x69, 0xc7c7}) (async, rerun: 64) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) (rerun: 64) r2 = kqueue() kevent(r2, &(0x7f0000000240)=[{{r0}, 0xffffffffffffffff, 0x19, 0x1, 0x10000, 0x1}], 0xe4a, 0x0, 0x4000a9fa, 0x0) 174.09394ms ago: executing program 4 (id=399): sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x6}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0xa}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) kevent(0xffffffffffffff9c, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x0, 0xfffff, 0x200000000000005, 0xfffffffffffefffd}], 0x203, 0x0, 0x80000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x3, 0x0) r1 = socket$inet6(0x18, 0x8000, 0x5) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000b80)="c451c737bca1596897", 0x9}], 0x1) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) ioctl$TIOCSETA(r2, 0xc4504444, &(0x7f0000000740)={0x2f, 0xffff, 0x101, 0x20000003, "040009100000000000004800", 0xb, 0xfffffffe}) getpeername(r1, &(0x7f0000000000)=@in6, &(0x7f0000000080)=0xc) setsockopt(r0, 0x1000000000029, 0xa, &(0x7f0000000040)="03000000", 0x4) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x4) 173.270905ms ago: executing program 4 (id=400): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r0 = getppid() r1 = kqueue() select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x1, 0xfffffffffffffff7}) kevent(r1, &(0x7f0000000000), 0x403, 0x0, 0x8000800, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x8, 0x0, r0, 0x0, 0x0, 0x4, 0x0, 0x77}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) fcntl$setown(r2, 0x6, r0) ioctl$WSKBDIO_GETMAP(r2, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r4 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) close(r4) 173.120026ms ago: executing program 5 (id=401): syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYRES8]) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037280200000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000", 0x89, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 169.778737ms ago: executing program 7 (id=402): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) syz_open_pts() r1 = geteuid() r2 = getegid() fchown(r0, r1, r2) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0xffff, 0x10000, 0x3, 0xfffffb85, "9ddcac75317d44020000000000002643c77a00", 0x4, 0x90}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000009c0)="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", 0x19b}], 0x1) 165.82672ms ago: executing program 3 (id=403): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x100000000000000, 0x10040000000001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) sendmsg(0xffffffffffffffff, 0x0, 0xe) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x0, 0x7f, 0x5}, {0x7e, 0xc, 0xd5, 0x3}, {0x6, 0x9, 0x1, 0xfffffff2}]}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x0, 0x7f, 0x5}, {0x7e, 0xc, 0xd5, 0x3}, {0x6, 0x9, 0x1, 0xfffffff2}]}) openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) socket$inet(0x2, 0x3, 0x0) (async) socket$inet(0x2, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000003c0)="16fe1b78f966fd37420dc84587e09c6650bc2700f309ce710638f87148943fd2aea3c88fb1a40b40", 0x28}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000003c0)="16fe1b78f966fd37420dc84587e09c6650bc2700f309ce710638f87148943fd2aea3c88fb1a40b40", 0x28}], 0x1) sysctl$hw(0x0, 0x0, &(0x7f0000000280)="00231b000f40000093060080000000001f00385c046200000817c5fd3f622c86b24f989d30d8da11204f5a4992935979f7c945ce088813e4f6564df382c448fb443166c158e097de0382b6bef6374a23b885d845c82abe20b9617d4459432ff2dd8c08e4c3472b8b6f2fe4dbb04ab1fe95c0b015fb4e4801cab597c4ebbf278a758a6d6a39f1cb", &(0x7f0000000000)=0x87, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[]) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbdf13b9fd812eaa4e713048e69931929648", 0x14) syz_open_pts() (async) syz_open_pts() syz_open_pts() (async) r3 = syz_open_pts() r4 = syz_open_pts() kqueue() r5 = socket$unix(0x1, 0x5, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) (async) r6 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r6, 0x0) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) kevent(r6, &(0x7f0000000080)=[{{r3}, 0xfffffffffffffff9, 0x2, 0x8, 0x1083, 0x8000}, {{r3}, 0xfffffffffffffffd, 0x42, 0x80, 0x7, 0x9}, {{r5}, 0xfffffffffffffffb, 0x20, 0x1, 0x1fe7, 0x4}], 0x0, &(0x7f0000000180)=[{{r7}, 0xfffffffffffffffe, 0x80, 0x20000000, 0xfffffffffffffff8, 0x7f}, {{r4}, 0xfffffffffffffffb, 0x8, 0x2, 0x8000, 0x568}, {{r0}, 0xfffffffffffffff8, 0x6, 0x1, 0x0, 0x2}], 0x1, &(0x7f0000000200)={0x2000000000006, 0x2ce7c40d}) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x90, 0xdc4, 0x564, 0x9cea, 0x0, 0x8000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x90, 0xdc4, 0x564, 0x9cea, 0x0, 0x8000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 159.097423ms ago: executing program 5 (id=404): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='o4', 0x2}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)='o4', 0x2}], 0x1) r0 = dup(0xffffffffffffff9c) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x3d}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x4) 9.359337ms ago: executing program 7 (id=405): execve(0x0, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chroot(&(0x7f0000000100)='./file0\x00') syz_open_pts() 8.257824ms ago: executing program 5 (id=406): openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xf1a) open(&(0x7f00000004c0)='./bus\x00', 0x100, 0x0) openat$speaker(0xffffffffffffff9c, 0x0, 0x2, 0x0) kqueue() ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0x66, &(0x7f00000003c0)={0x3f, 0x1, 0x10, 0x3, 0x6c0d}, 0xc) pipe(&(0x7f0000000640)={0xffffffffffffffff}) close(r1) r2 = socket(0x2, 0x3, 0x0) close(r2) r3 = socket(0x18, 0x2, 0x0) close(r3) r4 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x80000002000007, 0x7, 0x0, 0x0, 0x3, 0x2, 0xfa5, 0x100}) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_open_pts() r5 = socket(0x18, 0x2, 0x0) r6 = dup2(r3, r5) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0xffffffff, 0xb, {0x0, 0x3}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x18, 0x1, 0x0) setsockopt(r7, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r7, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r6, 0x1000000029, 0x23, &(0x7f00000000c0)="b211d7170d816684c8e360f2fa41c1a0946988b272d2dd3dc90142a84231a746e337b372e93320cff6669cbe7868de45ed3fc33719ca6df71ecec8a918458b2c10a1f8c66653b276e7aae9cb9b21f9982230f575295d48889c9a920796b2dd92fc8575680b37ba955d2c15e6d7c9198ed900ab006ddfb67869b51a2216114d1ece85f593e74035f5bc054eb1dbddf42a", 0x90) 5.851077ms ago: executing program 0 (id=407): sysctl$kern(&(0x7f0000000380)={0x1, 0x32}, 0x2, &(0x7f0000000400), 0x0, 0x0, 0x0) 5.55138ms ago: executing program 1 (id=408): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9def) r1 = open$dir(&(0x7f00000001c0)='./file1\x00', 0x80, 0x2) openat(r1, &(0x7f0000000080)='./file1\x00', 0x10, 0x180) r2 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000540)='./file0\x00', 0x184) renameat(r2, &(0x7f00000025c0)='./file0\x00', r2, &(0x7f0000002600)='./file1\x00') renameat(r2, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000280)='./file1\x00') r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r4 = kqueue() r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x22) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) close(r5) execve(0x0, 0x0, 0x0) dup2(r4, r5) ioctl$TIOCSETA(r3, 0xc028445a, &(0x7f0000000100)={0x8, 0x0, 0x741, 0x10000002, "b3080deeaa8e70ec8c7b000000fffffff500", 0x900, 0x7}) r6 = socket(0x11, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x400, 0xa) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) sysctl$kern(0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffff9e) recvmsg(r6, &(0x7f00000002c0)={&(0x7f0000002400)=@un=@file={0x0, ""/4116}, 0x1016, 0x0, 0x0, &(0x7f0000001400)=""/4085, 0xff5}, 0x1042) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="1cd2d176f4b8f82c1d09936270286ea75b958983a9f15438392f4d2feb0900000000000ef962", 0xa8269}], 0x1, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x200, 0x10) 352.793µs ago: executing program 2 (id=409): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async) mquery(&(0x7f00001cf000/0x3000)=nil, 0x3000, 0x4, 0x0, r1, 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x8) (async) syz_open_pts() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIONBIO(0xffffffffffffffff, 0xc0107008, 0x0) (async) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000240)=0x8) setgid(0xffffffffffffffff) (async, rerun: 32) poll(0x0, 0x0, 0x9) (async, rerun: 32) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x4000000000000003}}) (async) socket(0x1, 0x1, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x7, 0x7, 0x6}, {0x2, 0x9, 0x5, 0x1}, {0x9e, 0x0, 0x1, 0x86}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) (async) sysctl$hw(0x0, 0x0, &(0x7f0000000180)="000484742b65009b6943c1daa555adc3d19b376a", &(0x7f0000000000)=0x14, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, @empty, @multicast1}}}}}}) 0s ago: executing program 0 (id=410): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000200), &(0x7f0000000240)=0xc) setsockopt(r0, 0x4, 0x7, &(0x7f0000000280)="4bd05e20ecd951cfaf121f7e66199f5729524b2c747c4b129c6ed2a14458ba26863dcaa18db8512d45", 0x29) sysctl$kern(&(0x7f0000000000)={0x1, 0x30}, 0x2, &(0x7f0000001940), &(0x7f0000000080), 0x0, 0x0) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa6585f5121e188e238a435bf223e0ccaa74d6e6b85b6cfeed70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde8652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce90bcefd3e022d30a37fceefabee7e3ebe806f6af569ae94b5d1275bf4c1bfa6d40c007d505900f9daa99e4278fdd58df04f053518a71fe5f644b3abc08bfecc1e27d71e1740789b4fecdac35dddfa17a309698ee26a1debc2a6cc8d7e0963f72f8a0ec3eef1beefa7ffdb4871974381c9148f9f15db2f87fb959fae", 0x0, 0x0, 0x0) r1 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r1, 0xc0106978, &(0x7f00000001c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) setsockopt(r2, 0x82fe, 0x7, &(0x7f00000000c0)="1427ee7909d3801af05b16192db9774d681dc737033c91aac92f1484bdb3f93c4b94", 0x22) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-0.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts. login:                  malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 panic: ufsdirhash_lookup: bad offset in hash array Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *310755 77715 0 0 0x4000000 1K syz-executor db_enter() at db_enter+0x25 panic(ffffffff833d79bd) at panic+0x1e5 ufsdirhash_lookup(fffffd80711c05f0,ffff80002a264002,5,fffffd80711c06d4,ffff800031fe0110,0) at ufsdirhash_lookup+0xb9a ufs_lookup() at ufs_lookup+0xf76 VOP_LOOKUP(fffffd806bde57f8,ffff800031fe03b8,ffff800031fe03e8) at VOP_LOOKUP+0x6e vfs_lookup(ffff800031fe0388) at vfs_lookup+0x93a namei(ffff800031fe0388) at namei+0x7ca dorenameat(ffff80002a27a7e0,4,200000000040,3,200000000280) at dorenameat+0x144 syscall(ffff800031fe0630) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6a9fc8c83f0, count: 5 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: ufsdirhash_lookup: bad offset in hash array ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833d79bd) at panic+0x1e5 ufsdirhash_lookup(fffffd80711c05f0,ffff80002a264002,5,fffffd80711c06d4,ffff800031fe0110,0) at ufsdirhash_lookup+0xb9a ufs_lookup() at ufs_lookup+0xf76 VOP_LOOKUP(fffffd806bde57f8,ffff800031fe03b8,ffff800031fe03e8) at VOP_LOOKUP+0x6e vfs_lookup(ffff800031fe0388) at vfs_lookup+0x93a namei(ffff800031fe0388) at namei+0x7ca dorenameat(ffff80002a27a7e0,4,200000000040,3,200000000280) at dorenameat+0x144 syscall(ffff800031fe0630) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6a9fc8c83f0, count: -10 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800031fdff30 rbx 0xffff8000299eee07 rdx 0xffff800001484240 rcx 0xffff80002a27a7e0 rax 0xffff8000299edff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x8d8b309037c8adf7 r11 0xbd65147a3237341e r12 0xffff8000299eec08 r13 0 r14 0 r15 0x1 rip 0xffffffff82ea1115 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800031fdff20 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=310755 pid=77715 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=71, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffd6fb8,0xffff8000fffecd28 process=0xffff8000ffff0018 user=0xffff800031fdb000, vmspace=0xfffffd806c91f7c0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 77715 438562 91658 0 2 0 syz-executor *77715 310755 91658 0 7 0x4000000 syz-executor 93892 375401 31927 0 2 0 syz-executor 93892 268307 31927 0 3 0x4000080 fsleep syz-executor 39969 364639 41147 0 2 0 syz-executor 39969 225264 41147 0 3 0x4000080 fsleep syz-executor 39969 40330 41147 0 3 0x4000080 fsleep syz-executor 72205 227675 15363 0 2 0x3000 syz-executor 70106 411065 95918 0 2 0 syz-executor 70106 186347 95918 0 2 0x4000000 syz-executor 23613 178538 30272 0 2 0xc80 syz-executor 23613 80122 30272 0 3 0x4000000 smrbar syz-executor 91658 107835 64887 0 2 0xc82 syz-executor 31927 70392 64887 0 2 0xc82 syz-executor 81782 316618 10907 0 3 0x100082 sbwait arp 10907 307217 80866 0 3 0x10008a sigsusp sh 15363 90189 64887 0 2 0xc82 syz-executor 80866 356525 64887 0 3 0x82 wait syz-executor 41147 520353 64887 0 3 0x82 nanoslp syz-executor 30272 339607 64887 0 2 0xc82 syz-executor 95918 426936 64887 0 2 0xc82 syz-executor 29087 488998 64887 0 2 0xc82 syz-executor 64887 212638 69028 0 3 0x82 kqread syz-executor 69028 51196 32794 0 3 0x10008a sigsusp ksh 32794 482445 66966 0 3 0x98 kqread sshd-session 66966 494509 83328 0 3 0x92 kqread sshd-session 6034 148473 1 0 3 0x100083 ttyopn getty 83328 356566 1 0 3 0x88 kqread sshd 78713 416320 23181 74 3 0x1100092 bpf pflogd 23181 224989 1 0 3 0x80 sbwait pflogd 53362 84571 94961 73 3 0x1100090 kqread syslogd 94961 511392 1 0 3 0x100082 sbwait syslogd 60941 421983 1 0 3 0x100080 kqread resolvd 95158 429653 71853 77 3 0x100092 kqread dhcpleased 14560 352206 71853 77 3 0x100092 kqread dhcpleased 71853 190050 1 0 3 0x80 kqread dhcpleased 85590 474008 0 0 2 0x40014200 smr 52407 423208 0 0 3 0x14200 pgzero zerothread 45786 115001 0 0 3 0x14200 aiodoned aiodoned 91225 199649 0 0 3 0x14200 syncer update 88906 506806 0 0 3 0x14200 cleaner cleaner 7204 170903 0 0 2 0x14200 reaper 49785 354007 0 0 3 0x14200 pgdaemon pagedaemon 28278 194514 0 0 3 0x14200 bored viomb 11440 325225 0 0 3 0x40014200 acpi0 acpi0 12378 486782 0 0 3 0x40014200 idle1 64525 55629 0 0 3 0x14200 bored softnet1 75829 139011 0 0 3 0x14200 bored softnet0 33792 502887 0 0 3 0x14200 bored systqmp 55355 76207 0 0 3 0x14200 bored systq 66105 435560 0 0 3 0x14200 tmoslp softclockmp 57442 291403 0 0 3 0x40014200 tmoslp softclock 81886 309458 0 0 3 0x40014200 idle0 1 470181 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &(curpg)->mdpage.pv_mtx r = 0 (0xfffffd80094814d0) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pmap_remove_ptes+0x29f #4 pmap_do_remove+0x589 #5 uvm_unmap_kill_entry_withlock+0x269 #6 uvm_map_teardown+0x117 #7 exit1+0x6fc #8 sys_exit+0x1a #9 syscall+0xb17 #10 Xsyscall+0x128 exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806c91e810) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pmap_do_remove+0xa9 #4 uvm_unmap_kill_entry_withlock+0x269 #5 uvm_map_teardown+0x117 #6 exit1+0x6fc #7 sys_exit+0x1a #8 syscall+0xb17 #9 Xsyscall+0x128 Process 77715 (syz-executor) thread 0xffff80002a27a7e0 (310755) exclusive rrwlock inode r = 0 (0xfffffd80711c0690) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 dorenameat+0x144 #8 syscall+0xb17 #9 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83962370) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10206 11021K 11849K 166960K 11945 0 pcb 17 14K 16K 166960K 193 0 rtable 159 7K 8K 166960K 489 0 pf 36 18K 19K 166960K 81 0 ifaddr 34 5K 7K 166960K 72 0 ifgroup 59 2K 3K 166960K 109 0 sysctl 3 1K 9K 166960K 13 0 counters 72 37K 38K 166960K 118 0 ioctlops 0 0K 4K 166960K 1621 0 iov 0 0K 16K 166960K 29 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1367 86K 86K 166960K 1892 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 23 0 dirhash 63 11K 12K 166960K 600 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 114K 166960K 574 0 sigio 1 0K 0K 166960K 12 0 proc 72 115K 164K 166960K 636 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 42 0 in_multi 57 4K 6K 166960K 131 0 ether_multi 1 0K 0K 166960K 3 0 mrt 1 0K 0K 166960K 5 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 91 413K 413K 166960K 91 0 exec 0 0K 1K 166960K 455 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 257 171K 191K 166960K 6988 0 UVM aobj 18 6K 6K 166960K 18 0 pinsyscall 44 88K 109K 166960K 1734 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 1K 166960K 55 0 NDP 12 0K 1K 166960K 45 0 temp 52 8673K 8743K 166960K 35280 0 kqueue 15 24K 28K 166960K 107 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 68 0 64 1 0 1 1 0 8 0 rtentry 176 144 0 83 5 0 5 5 0 8 0 unpcb 144 295 0 277 4 2 2 4 0 8 1 syncache 336 4 0 4 1 1 0 1 0 8 0 tcpqe 32 2 0 2 1 1 0 1 0 8 0 tcpcb 736 171 0 164 7 3 4 4 0 8 3 arp 136 24 0 12 1 0 1 1 0 8 0 inpcb 328 579 0 567 10 3 7 7 0 8 5 nd6 152 28 0 16 1 0 1 1 0 8 0 pkpcb 40 4 0 4 2 1 1 1 0 8 1 kcovpl 48 10 0 2 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1192 15 0 14 2 1 1 1 0 8 0 pppxif 1504 4 0 3 2 1 1 1 0 8 0 pffrag 232 1 0 0 1 0 1 1 0 482 0 pffrnode 88 1 0 0 1 0 1 1 0 8 0 pffrent 40 2 0 1 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfrktable 1344 5 0 5 1 0 1 1 0 8 1 pfstitem 24 45 0 3 1 0 1 1 0 8 0 pfstkey 128 45 0 3 2 0 2 2 0 8 0 pfstate 448 45 0 3 5 0 5 5 0 8 0 pfrule 1344 21 0 16 2 1 1 2 0 8 0 rttmr 136 1 0 1 1 1 0 1 0 8 0 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 621 0 342 28 5 23 28 0 8 2 art_table 40 623 0 342 5 1 4 5 0 8 0 art_node 32 144 0 90 1 0 1 1 0 8 0 sysvmsgpl 40 6 0 3 1 0 1 1 0 8 0 semupl 112 1 0 1 1 1 0 1 0 8 0 semapl 112 20 0 10 1 0 1 1 0 8 0 shmpl 112 13 0 0 1 0 1 1 0 8 0 dirhash 1024 216 0 182 5 0 5 5 0 8 0 dino2pl 256 2445 0 934 95 0 95 95 0 8 0 ffsino 296 2445 0 934 117 0 117 117 0 8 0 nchpl 144 3204 0 1501 64 0 64 64 0 8 0 rtmask 32 3 0 3 1 0 1 1 0 8 1 vnodes 216 2806 0 0 156 0 156 156 0 8 0 namei 1024 10473 0 10471 1 0 1 1 0 8 0 percpumem 16 74 0 23 1 0 1 1 0 8 0 vcpupl 3968 2 0 0 1 0 1 1 0 8 0 vmpool 840 2 0 0 1 0 1 1 0 8 0 kstatmem 264 56 0 28 3 0 3 3 0 8 1 scsiplug 72 3 0 3 1 0 1 1 0 8 1 scxspl 216 19243 0 19243 8 4 4 8 1 8 4 plimitpl 152 85 0 68 1 0 1 1 0 8 0 sigapl 424 871 0 822 7 0 7 7 0 8 0 knotepl 120 666 0 0 21 0 21 21 0 8 0 kqueuepl 224 158 0 145 1 0 1 1 0 8 0 pipepl 344 158 0 130 3 0 3 3 0 8 0 fdescpl 528 855 0 823 3 0 3 3 0 8 0 filepl 160 4625 0 4399 15 2 13 15 0 8 2 lockfpl 104 442 0 440 2 1 1 2 0 8 0 lockfspl 48 129 0 127 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 45 0 28 1 0 1 1 0 8 0 ucredpl 104 797 0 784 1 0 1 1 0 8 0 zombiepl 144 824 0 822 1 0 1 1 0 8 0 processpl 1232 871 0 822 5 0 5 5 0 8 0 procpl 664 1616 0 1560 6 0 6 6 0 8 0 sosppl 176 2 0 2 2 1 1 1 0 8 1 sockpl 752 1061 0 1027 11 1 10 11 0 8 6 mcl64k 65536 16 0 0 2 0 2 2 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 117 0 0 15 0 15 15 0 8 0 mcl2k 2048 34 0 0 5 0 5 5 0 8 0 mtagpl 96 17 0 0 1 0 1 1 0 8 0 mbufpl 256 185 0 0 12 0 12 12 0 8 0 bufpl 280 7900 0 1763 439 0 439 439 0 8 0 anonpl 32 9123 0 0 74 0 74 74 0 246 0 amapchunkpl 152 22810 0 22283 34 1 33 33 0 158 10 amappl16 200 3627 0 3401 18 3 15 15 0 8 0 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 6 0 5 1 0 1 1 0 8 0 amappl13 176 447 0 445 1 0 1 1 0 8 0 amappl12 168 1220 0 1176 3 0 3 3 0 8 0 amappl11 160 3 0 3 1 1 0 1 0 8 0 amappl10 152 79 0 65 1 0 1 1 0 8 0 amappl9 144 248 0 248 1 1 0 1 0 8 0 amappl8 136 126 0 124 1 0 1 1 0 8 0 amappl7 128 94 0 93 1 0 1 1 0 8 0 amappl6 120 309 0 294 1 0 1 1 0 8 0 amappl5 112 80 0 69 1 0 1 1 0 8 0 amappl4 104 439 0 408 1 0 1 1 0 8 0 amappl3 96 3774 0 3674 3 0 3 3 0 8 0 amappl2 88 955 0 877 2 0 2 2 0 8 0 amappl1 80 10837 0 10219 14 0 14 14 0 8 0 amappl 88 6160 0 5987 5 0 5 5 0 92 0 uvmvnodes 80 114 0 0 3 0 3 3 0 8 0 dma65536 65536 1 0 1 1 1 0 1 0 8 0 dma8192 8192 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 254 0 254 2 1 1 1 0 8 1 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 17 0 0 1 0 1 1 0 8 0 uaddrrnd 24 855 0 823 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 855 0 823 1 0 1 1 0 8 0 vmmpekpl 168 8502 0 8456 3 0 3 3 0 8 0 vmmpepl 168 61597 0 59411 99 1 98 98 0 357 0 vmsppl 488 854 0 822 5 0 5 5 0 8 0 rwobjpl 80 19854 0 18552 28 0 28 28 0 8 0 pdppl 4096 1722 0 1646 104 28 76 88 0 8 0 pvpl 32 19362 0 0 157 0 157 157 0 265 0 pmappl 256 856 0 822 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 292 0 42 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837eaff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_const_cmp4(0,1) at __sanitizer_cov_trace_const_cmp4+0x1e _rb_remove(ffffffff836aca20,fffffd800478c008,fffffd8004acb800) at _rb_remove+0x332 uvm_pmr_insert_addr(fffffd800478c000,fffffd8004acb6b0,0) at uvm_pmr_insert_addr+0x151 uvm_pmr_freepages(fffffd8004acb6b0,1) at uvm_pmr_freepages+0x2d1 uvm_anfree_list(fffffd805fd392f0,0) at uvm_anfree_list+0x1e5 amap_wipeout(fffffd806bd65a58) at amap_wipeout+0x248 uvm_unmap_detach(ffff8000363ee720,0) at uvm_unmap_detach+0x8a uvm_map_teardown(fffffd806c91f9a8) at uvm_map_teardown+0x360 exit1(ffff8000fffd7250,b,0,1) at exit1+0x6fc sys_exit(ffff8000fffd7250,ffff8000363ee8f0,ffff8000363ee840) at sys_exit+0x1a syscall(ffff8000363ee8f0) at syscall+0xb17 end trace frame: 0xffff8000363ee970, count: 0 ddb{0}> trace x86_ipi_db(ffffffff837eaff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_const_cmp4(0,1) at __sanitizer_cov_trace_const_cmp4+0x1e _rb_remove(ffffffff836aca20,fffffd800478c008,fffffd8004acb800) at _rb_remove+0x332 uvm_pmr_insert_addr(fffffd800478c000,fffffd8004acb6b0,0) at uvm_pmr_insert_addr+0x151 uvm_pmr_freepages(fffffd8004acb6b0,1) at uvm_pmr_freepages+0x2d1 uvm_anfree_list(fffffd805fd392f0,0) at uvm_anfree_list+0x1e5 amap_wipeout(fffffd806bd65a58) at amap_wipeout+0x248 uvm_unmap_detach(ffff8000363ee720,0) at uvm_unmap_detach+0x8a uvm_map_teardown(fffffd806c91f9a8) at uvm_map_teardown+0x360 exit1(ffff8000fffd7250,b,0,1) at exit1+0x6fc sys_exit(ffff8000fffd7250,ffff8000363ee8f0,ffff8000363ee840) at sys_exit+0x1a syscall(ffff8000363ee8f0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7b245c5c4410, count: -15 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff833d79bd) at panic+0x1e5 ufsdirhash_lookup(fffffd80711c05f0,ffff80002a264002,5,fffffd80711c06d4,ffff800031fe0110,0) at ufsdirhash_lookup+0xb9a ufs_lookup() at ufs_lookup+0xf76 VOP_LOOKUP(fffffd806bde57f8,ffff800031fe03b8,ffff800031fe03e8) at VOP_LOOKUP+0x6e vfs_lookup(ffff800031fe0388) at vfs_lookup+0x93a namei(ffff800031fe0388) at namei+0x7ca dorenameat(ffff80002a27a7e0,4,200000000040,3,200000000280) at dorenameat+0x144 syscall(ffff800031fe0630) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6a9fc8c83f0, count: 5 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff833d79bd) at panic+0x1e5 ufsdirhash_lookup(fffffd80711c05f0,ffff80002a264002,5,fffffd80711c06d4,ffff800031fe0110,0) at ufsdirhash_lookup+0xb9a ufs_lookup() at ufs_lookup+0xf76 VOP_LOOKUP(fffffd806bde57f8,ffff800031fe03b8,ffff800031fe03e8) at VOP_LOOKUP+0x6e vfs_lookup(ffff800031fe0388) at vfs_lookup+0x93a namei(ffff800031fe0388) at namei+0x7ca dorenameat(ffff80002a27a7e0,4,200000000040,3,200000000280) at dorenameat+0x144 syscall(ffff800031fe0630) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x6a9fc8c83f0, count: -10