last executing test programs: 680.791989ms ago: executing program 1 (id=2): sysctl$vfs_nfs(&(0x7f0000000000)={0xa, 0x2, 0x3}, 0x3, 0x0, &(0x7f0000000080), 0x0, 0x0) 523.828939ms ago: executing program 4 (id=5): r0 = syz_open_pts() r1 = open(&(0x7f0000000180)='./file0\x00', 0x1, 0x1f0) renameat(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./file0\x00') ioctl$BIOCGBLEN(r1, 0x40044266, &(0x7f0000000140)) r2 = open(&(0x7f0000000780)='./file0\x00', 0x8, 0x67) sysctl$hw(&(0x7f00000006c0)={0x6, 0x18}, 0x2, &(0x7f0000000640)="1fb98a25255fb6b1d2e48c878f6b4cc9ecc942c227f3d4d52822b9ea9bc9275d93fb39fa33c9855866f301a5f53c5dac192d97b0589c7d6d9ae573f0bdb1e2ab4ad2cc11144a841dd4fbcb909503bfe0f1f6dbd18d59e526e9039604eccb91853f564c64dc08", 0x0, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x8812, r2, 0x0) ioctl$BIOCVERSION(r1, 0x40044271, &(0x7f00000005c0)) mmap(&(0x7f0000242000/0xd000)=nil, 0xd000, 0x0, 0x10, r1, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) closefrom(r3) sysctl$hw(&(0x7f0000000000)={0x6, 0x19}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) write(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x2c9) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) r4 = socket$inet(0x2, 0x3, 0x14) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$FIOASYNC(r4, 0x8020699d, &(0x7f0000000580)=0x7) openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ktrace(0x0, 0x1, 0x922, 0x0) ioctl$DIOCSETSTATUSIF(r1, 0xc0284414, &(0x7f0000000300)={'./file0\x00', &(0x7f0000000240)=""/178, 0x4, 0x6, 0xe2, 0xfff}) syz_emit_ethernet(0xea, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd67d6c7c300b42cc5fe8000000000000000000000000000bbfe8000000000faed00000000000000bb33000001", @ANYRESDEC=r2, @ANYRES64=r0]) syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000000)={0x1007, 0x8003, 0xffffffc4, 0x3b6d67bb, "fe09fe7adfd4070ff9ffffff9c03ac0349bfe360", 0xff, 0x9}) ioctl$TIOCSTOP(r0, 0x2000746f) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) getrlimit(0x3, &(0x7f0000000600)) fstat(0xffffffffffffffff, 0x0) write(r0, &(0x7f00000000c0)="7ef5b69389691e24966a3ddf3d32cdb3fcdc1293054eedfc4c98644011ebd4ed712cded9d188c11bac6dc6f23ec53ad394df0db649d54e94008b07a4f2bed0dcc32676b30e95899f3b7832668feb78b297aec2da4d621cfaccad7c3ab9bba6112ceb8ac3ea84b89b600c7a", 0xfe76) 305.138481ms ago: executing program 1 (id=9): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000440)="01540c87b90a05d3a47a04c5b1221ee149ff7372be1562446d07d2dbcaba78118f6256b86e343606", 0x28}], 0x1) fchmod(r0, 0x28) unveil(0x0, &(0x7f0000000080)='w\x00') r1 = syz_open_pts() openat$bpf(0xffffffffffffff9c, &(0x7f0000001ec0), 0x20, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) setrlimit(0x8, &(0x7f0000001ec0)={0x9, 0x37e1790c}) closefrom(r2) r3 = syz_open_pts() mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$TIOCSETAW(r3, 0x802c7415, &(0x7f0000000000)={0x1007, 0x1, 0xffffffc0, 0xffffffff, "fe260042687e2876695a78a68a5f0000000700", 0x1000002, 0xcfe}) write(r1, &(0x7f0000000040)='~', 0x1) syz_emit_ethernet(0x13a1, &(0x7f0000000280)=ANY=[]) r4 = socket$inet(0x2, 0x8003, 0xfe) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) sysctl$net_inet_tcp(&(0x7f0000004a40)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, &(0x7f0000000000)="f1ac8d8d", 0x4) getsockopt(r4, 0x0, 0xb, 0x0, 0x0) setegid(0xffffffffffffffff) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0xbc, 0x21d) 303.674726ms ago: executing program 5 (id=6): r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f00000000c0)={0x0, 0x0, 0x0}) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5597) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) mkdir(&(0x7f0000000080)='./file0\x00', 0x204) unveil(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='r\x00') setrlimit(0x2, &(0x7f0000001f40)={0x60000000, 0x60000000}) r2 = kqueue1(0x10000) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000100)={0x1, 0x6, 0x401, {[0x6, 0x2, 0x80000001, 0x3, 0x7, 0x200, 0x80000001, 0x9, 0x0, 0x0, 0x1ff, 0xffff, 0x7fff, 0x692, 0x0, 0x22, 0x2, 0xf], [0x3, 0x7fffffff, 0x7, 0x6, 0x8001, 0x101, 0x18000000, 0x2, 0x5, 0x1], [0x2, 0x2, 0x1, 0x80, 0x4, 0xfffffffffffffffe, 0x1000], [0x10000, 0xd, 0x8000, 0x2, 0xd9, 0x9], [{0x400, 0x8, 0x20ce, 0x400}, {0x3, 0x2, 0x3, 0x400}, {0x1, 0x547, 0x4e0ec4e4, 0x6}, {0x3, 0xeb82, 0x7fffffff, 0x1b}, {0xd, 0x40000007, 0x6, 0x7}, {0x0, 0x1, 0x2, 0x1}, {0x4, 0xa, 0x1, 0x5}, {0x1, 0x6fb, 0x10000, 0x2}], {0x7fff, 0x0, 0xc687, 0x2}, {0x11b, 0x4, 0x80000000, 0xfffffffffffffffc}}}) semctl$GETZCNT(0x0, 0x0, 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000900)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/146, 0x92}, 0x5}, 0x38, 0x2042, 0x0) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001080)={{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000940)=""/10, 0xa}], 0x1, 0x0}, 0x2}, 0x38, 0x3000, 0x0) readv(r3, &(0x7f0000000780)=[{&(0x7f0000000740)=""/8, 0x8}], 0x1) write(r4, &(0x7f0000001100)='W', 0x1) execve(0x0, 0x0, 0x0) kevent(r2, 0x0, 0x0, &(0x7f0000000000), 0x40, 0x0) kevent(r2, &(0x7f0000000080), 0x86, 0x0, 0xffff4b4d, 0x0) syz_emit_ethernet(0xff3a, &(0x7f0000001880)=ANY=[]) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000380)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[]) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100), &(0x7f0000000140)=0xc) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x221ff545a928937) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000040)='./file0\x00', 0x2, 0xea) getresuid(&(0x7f0000000000), 0x0, &(0x7f0000000080)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 303.371811ms ago: executing program 0 (id=1): mkfifo(&(0x7f0000001380)='./file0\x00', 0x191) unveil(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$DIOCGETQUEUES(0xffffffffffffffff, 0xc0104401, &(0x7f0000000040)={0x8, 0x1, {'\x00', './file1\x00', './file1\x00', './file0\x00', {{0x6, 0x2}, {0x6, 0x13}, 0x4}, {{0x6, 0xfffffffe}, {0x7, 0x801}, 0x4}, {{0x9, 0x2}, {0x9, 0x1004}, 0x40000000}, {0x7, 0x0, 0x0, 0x4}, 0x0, 0x10000, 0x6, 0x7, 0x4}}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$kern(&(0x7f0000000180)={0x1, 0x45}, 0x3, &(0x7f0000000280)="ee8f409198157e3b0d482cd811439e57ce10400716e4853368b73a55267eae31dfdeb4695f32fe7b7ad86f86b9026db90f9b45d9c0dfe6f336cdbed0b1e9503fb71d22c07e97988cb677f6e039bda806b77d2700"/100, &(0x7f0000000140)=0x5b, 0x0, 0x0) getgroups(0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setresgid(r1, r0, 0x0) setgroups(0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r2, 0xffff, 0x1004, &(0x7f0000000040), &(0x7f0000001200)=0xfffffffffffffed0) seteuid(0xffffffffffffffff) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='w\x00') 302.727394ms ago: executing program 2 (id=3): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x7) r0 = open(&(0x7f0000000180)='./file0\x00', 0x8, 0x2e) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x2d28) munmap(&(0x7f0000ff5000/0x6000)=nil, 0x6000) minherit(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x3) ioctl$TIOCSDTR(r0, 0x20007479) 301.408434ms ago: executing program 0 (id=10): r0 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000000)=0x3, 0x4) fstat(r0, &(0x7f0000000580)) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffff6f65c04ce679de2935e7edc5ffffffff86dd6431f05f000811910fbaf510dfac1c720000000000000000000000000000fe80214e230008907800"/82]) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xef) ktrace(&(0x7f0000000080)='./file0\x00', 0x0, 0x400, 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0xffff, 0x1024, &(0x7f00000000c0), &(0x7f0000000040)=0x2) truncate(&(0x7f0000000080)='./file0\x00', 0x100000) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt(r2, 0x0, 0x10, &(0x7f00000001c0)="2bbf3e763472304664bd7eee16b858aee8807a102c89621ec947db71b6f9a758f151d4aaadca066df09004914ac0cc59e5f3ee9f4167403a725afa2f9f74010ef590927efdaf72148b5b6304152f9cb43e1b29fcda9095a81521e65894df7106c8532dd82b0497e9aad308d2dc8825166862c9a5d81c", 0x76) syz_emit_ethernet(0xfff9, &(0x7f0000000000)=ANY=[]) 85.158099ms ago: executing program 0 (id=11): r0 = kqueue() (async) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000dc0), 0x10000, 0x0) ioctl$DIOCRDELTABLES(r1, 0xc450443e, &(0x7f0000002300)={{'./file0\x00', './file0\x00', 0x0, 0x1}, 0x0, 0x428, 0x0, 0x6, 0x3, 0x7, 0xc, 0x2, 0x9}) (async) r2 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000000)=0x3, 0x4) (async) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) (async) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x3e44da5e4daca846, 0x0) mkfifoat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x8) (async) ioctl$DIOCRADDADDRS(r4, 0xc4504443, &(0x7f0000000100)={{'./file0\x00', './file0\x00', 0x41, 0x3}, 0x0, 0x9, 0x0, 0x7a57601, 0x3, 0x1, 0x2, 0x60, 0x9}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000480)={0x2, &(0x7f0000000440)=[{0xfffc, 0x6, 0x4, 0x4}, {0x5, 0x1, 0x0, 0xa}]}) (async) listen(r2, 0x0) (async) preadv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/181, 0xb5}, {&(0x7f0000000100)=""/9, 0x9}, {&(0x7f0000000140)=""/92, 0x5c}, {&(0x7f00000001c0)=""/142, 0x8e}, {&(0x7f0000000280)=""/240, 0xf0}], 0x5, 0x3) (async) closefrom(r0) 83.434947ms ago: executing program 3 (id=4): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xca605601, &(0x7f0000000000)={0x10, 0x6, [{&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffff80000000}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7fffffff}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xd}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x93e}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x10001}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xc32}, {&(0x7f0000028000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, 0x6}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x8000}], './file0\x00', 0xe, 0x7, 0x6, 0x1646, [0x3, 0x0, 0x3, 0x5, 0x3, 0x6, 0xd, 0x2, 0x9, 0x8, 0x0, 0x180000, 0x0, 0x100000, 0x3, 0x4, 0x8, 0x60000000, 0x509e, 0x9, 0x4, 0x8001, 0x0, 0x4, 0x6ae, 0x49, 0x200, 0x6, 0xf7, 0x0, 0x400, 0x6, 0x80, 0x5, 0x6, 0x8, 0x7, 0x5, 0x7, 0x6, 0x7ff, 0x100, 0x7, 0x3, 0x7, 0x401, 0x6, 0x7, 0x9, 0xfffffffd, 0x6, 0x9, 0x5, 0xffffffff, 0x8, 0x28, 0x9, 0xe0000, 0x32, 0x4, 0x5, 0x5, 0xc621, 0x1, 0x1b, 0xfff, 0x7, 0xea, 0x6, 0xfffffff8, 0x4, 0x4, 0x2, 0xc, 0xbae, 0x4, 0x4, 0xaae8, 0x3, 0x4c600, 0x7, 0x6, 0x0, 0x7, 0x8, 0x28743703, 0x2, 0x2, 0x401, 0x7f, 0x8, 0x5, 0x9, 0x200, 0x2, 0x307, 0x4, 0x6, 0x1c08, 0x2, 0x2, 0x1, 0xc0e3, 0x8, 0x9, 0x0, 0x1000, 0xb04, 0x7fff, 0x1, 0x2, 0x7fffffff, 0x2, 0xe98, 0x8, 0x5, 0x7f, 0x1, 0x5d68, 0x1, 0x95c, 0x80000000, 0x5, 0x2, 0x2, 0x58, 0x6, 0x1, 0x4, 0xe3c5, 0x4, 0x1000075, 0x5, 0xffff3c4a, 0xfff, 0xa18, 0x6, 0x10000, 0x6, 0xfff, 0x9, 0x0, 0x7, 0x10000, 0x2, 0x6, 0x5, 0x0, 0x0, 0x7, 0x1ff, 0xf, 0xe9, 0x6, 0x10000, 0xa04, 0x4b97, 0x0, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0xe, 0x1000, 0x6, 0xb69, 0x5, 0x7b0b, 0xfffffff7, 0x4, 0x5, 0xc1bc, 0x1, 0x9, 0x2, 0x8, 0x7, 0x1a, 0x7fff, 0xfffffff7, 0xf6, 0x6000, 0x1, 0x2, 0x6, 0x4, 0x9, 0xf, 0x3, 0x2, 0x1ff, 0x9, 0xcf, 0x0, 0x21af6d0f, 0x2, 0xe0, 0x80000001, 0xf07, 0x80008, 0x6, 0x8, 0xfffffff9, 0x9, 0xff, 0x6, 0xc6, 0x6, 0x9, 0x400, 0x15c, 0x4, 0x4, 0x0, 0x6, 0x6, 0xfffffffd, 0xa, 0x5, 0x6, 0x1ff, 0x9, 0x7, 0x8, 0xc865, 0x6d78cf1d, 0x0, 0xee0, 0xfffffff7, 0x6, 0x5, 0x8, 0x2, 0x4, 0xf, 0x0, 0x1, 0x71, 0x4, 0xcf47, 0x2, 0x4, 0x3ff, 0x7, 0x5, 0x0, 0x1, 0x2f0, 0x9, 0x4004, 0x6, 0x10000007, 0x4, 0x8, 0x7, 0x6, 0x8000, 0xffffff80, 0x3ff, 0x8, 0x7, 0xf, 0x4, 0x9, 0x201, 0x92c, 0x6, 0x86cd, 0x7, 0x3, 0x91, 0x4, 0x5ab, 0x9, 0x10, 0x7, 0x3, 0x0, 0xffffffe7, 0x40, 0x4, 0x1, 0x2, 0xc, 0x7f, 0x3ff, 0x6, 0x4, 0xffff, 0x3, 0x662, 0x1000, 0xbd, 0x4, 0x5, 0x1ff, 0x1, 0x3, 0x2, 0x401, 0x1, 0xfffffff8, 0x8, 0x2, 0x2, 0xe8, 0x4, 0x6, 0x6, 0xfffffffb, 0x4, 0x200, 0x1, 0x4573, 0x2, 0xbd0a, 0x5, 0xa8c, 0x80000000, 0xffffffff, 0x198f, 0x6, 0x8, 0x2ee, 0x7, 0x8, 0x7, 0x101, 0x24140, 0x3, 0xffff, 0x8, 0x5, 0x4, 0x2, 0x9, 0x801, 0x0, 0x8000, 0x8, 0xc, 0x6, 0xf8, 0x5, 0x1000, 0x5, 0x39d00000, 0x8, 0x5, 0x3, 0x4a2, 0x9, 0x1, 0x0, 0x8, 0x100, 0x9649, 0x0, 0x6, 0x1, 0x7, 0x3ff, 0x97, 0x1000, 0x5, 0xff, 0xd, 0x19a2, 0x8, 0x3, 0x69b, 0x8, 0x7, 0x6, 0x458, 0x4, 0x3, 0x10000, 0x6, 0x101, 0x7, 0xfffffff8, 0x5, 0x0, 0x7, 0xf, 0x621e, 0x7, 0x3ff, 0x788, 0x8, 0x5, 0x1007, 0x8a, 0x8, 0x80, 0xfff, 0x2, 0x8450, 0xcaa0, 0xca54, 0x9, 0x1000, 0x80000000, 0x2, 0x8001, 0x6, 0x1, 0x1, 0x8, 0x7fffffff, 0xb53, 0x6, 0xff, 0x3, 0xfff, 0x9e7, 0x8000, 0x2, 0x7fff, 0x2, 0x0, 0x1, 0x4, 0x800, 0x1d71, 0xffffffff, 0xf13, 0x3, 0x2, 0x8, 0x8, 0x6, 0x1, 0x8, 0x70a0, 0x5, 0xfffffff8, 0x8, 0x3, 0x9, 0x3, 0xd10a, 0x80ff, 0xc8d3, 0x3ff, 0x9, 0xffffc000, 0x81, 0x8, 0x9, 0x4, 0x3, 0x8, 0x4, 0x80000001, 0x2, 0x1, 0x2, 0x400, 0x10000, 0x80000001, 0x5, 0x958, 0x1, 0x3, 0x3, 0x7, 0x9, 0xfffffff8, 0x8, 0x400, 0x5, 0xea38, 0x1000, 0x0, 0x5, 0x75, 0x7947, 0x7fff, 0xf6, 0x0, 0x7, 0x8, 0x5, 0x8000, 0x7, 0x40, 0x8, 0x4, 0x81, 0x7, 0x7, 0xf2e, 0x4, 0x1, 0x401, 0x9, 0x200, 0xf, 0x2, 0xac2, 0x385, 0x2, 0x16, 0x960, 0xdf, 0x2, 0x78, 0xfffffff9, 0x401]}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) r1 = kqueue1(0x10000) kevent(r1, 0x0, 0x0, 0x0, 0x40, 0x0) kevent(r1, &(0x7f0000000280)=[{{r1}, 0xfffffffffffffffb, 0x1, 0x4, 0x10001, 0x9}], 0x86, 0x0, 0xfdff4b4d, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000000c0)={0x0}) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DIOCRCLRADDRS(r4, 0xc4504442, &(0x7f0000000040)={{'./file0\x00', './file0\x00', 0x4a, 0x7}, 0x0, 0x0, 0x0, 0x5, 0xc, 0x80000000, 0xd, 0x2, 0x6}) read$audio(r3, &(0x7f0000000040)=""/58, 0x3a) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) ioctl$DIOCRCLRASTATS(0xffffffffffffff9c, 0xc4504448, &(0x7f0000000500)={{'./file0\x00', './file0\x00', 0x1, 0xf}, &(0x7f00000004c0)=[{@rand_addr=0x5, '\x00', './file0\x00', 0x2, 0xf000, 0x0, 0xe, 0x3, 0xff, 0x18}], 0x7, 0x1, 0x81, 0x7, 0x1, 0x737, 0x16, 0x59}) write(r2, &(0x7f0000000080)="1c4c", 0x2) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x48129, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffff9c, 0xca605601, &(0x7f0000000000)={0x10, 0x6, [{&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffff80000000}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7fffffff}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x1}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xd}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x93e}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x5}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x10001}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xc32}, {&(0x7f0000028000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, 0x6}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x8000}], './file0\x00', 0xe, 0x7, 0x6, 0x1646, [0x3, 0x0, 0x3, 0x5, 0x3, 0x6, 0xd, 0x2, 0x9, 0x8, 0x0, 0x180000, 0x0, 0x100000, 0x3, 0x4, 0x8, 0x60000000, 0x509e, 0x9, 0x4, 0x8001, 0x0, 0x4, 0x6ae, 0x49, 0x200, 0x6, 0xf7, 0x0, 0x400, 0x6, 0x80, 0x5, 0x6, 0x8, 0x7, 0x5, 0x7, 0x6, 0x7ff, 0x100, 0x7, 0x3, 0x7, 0x401, 0x6, 0x7, 0x9, 0xfffffffd, 0x6, 0x9, 0x5, 0xffffffff, 0x8, 0x28, 0x9, 0xe0000, 0x32, 0x4, 0x5, 0x5, 0xc621, 0x1, 0x1b, 0xfff, 0x7, 0xea, 0x6, 0xfffffff8, 0x4, 0x4, 0x2, 0xc, 0xbae, 0x4, 0x4, 0xaae8, 0x3, 0x4c600, 0x7, 0x6, 0x0, 0x7, 0x8, 0x28743703, 0x2, 0x2, 0x401, 0x7f, 0x8, 0x5, 0x9, 0x200, 0x2, 0x307, 0x4, 0x6, 0x1c08, 0x2, 0x2, 0x1, 0xc0e3, 0x8, 0x9, 0x0, 0x1000, 0xb04, 0x7fff, 0x1, 0x2, 0x7fffffff, 0x2, 0xe98, 0x8, 0x5, 0x7f, 0x1, 0x5d68, 0x1, 0x95c, 0x80000000, 0x5, 0x2, 0x2, 0x58, 0x6, 0x1, 0x4, 0xe3c5, 0x4, 0x1000075, 0x5, 0xffff3c4a, 0xfff, 0xa18, 0x6, 0x10000, 0x6, 0xfff, 0x9, 0x0, 0x7, 0x10000, 0x2, 0x6, 0x5, 0x0, 0x0, 0x7, 0x1ff, 0xf, 0xe9, 0x6, 0x10000, 0xa04, 0x4b97, 0x0, 0x80000000, 0x1, 0x9, 0x6, 0x6, 0xe, 0x1000, 0x6, 0xb69, 0x5, 0x7b0b, 0xfffffff7, 0x4, 0x5, 0xc1bc, 0x1, 0x9, 0x2, 0x8, 0x7, 0x1a, 0x7fff, 0xfffffff7, 0xf6, 0x6000, 0x1, 0x2, 0x6, 0x4, 0x9, 0xf, 0x3, 0x2, 0x1ff, 0x9, 0xcf, 0x0, 0x21af6d0f, 0x2, 0xe0, 0x80000001, 0xf07, 0x80008, 0x6, 0x8, 0xfffffff9, 0x9, 0xff, 0x6, 0xc6, 0x6, 0x9, 0x400, 0x15c, 0x4, 0x4, 0x0, 0x6, 0x6, 0xfffffffd, 0xa, 0x5, 0x6, 0x1ff, 0x9, 0x7, 0x8, 0xc865, 0x6d78cf1d, 0x0, 0xee0, 0xfffffff7, 0x6, 0x5, 0x8, 0x2, 0x4, 0xf, 0x0, 0x1, 0x71, 0x4, 0xcf47, 0x2, 0x4, 0x3ff, 0x7, 0x5, 0x0, 0x1, 0x2f0, 0x9, 0x4004, 0x6, 0x10000007, 0x4, 0x8, 0x7, 0x6, 0x8000, 0xffffff80, 0x3ff, 0x8, 0x7, 0xf, 0x4, 0x9, 0x201, 0x92c, 0x6, 0x86cd, 0x7, 0x3, 0x91, 0x4, 0x5ab, 0x9, 0x10, 0x7, 0x3, 0x0, 0xffffffe7, 0x40, 0x4, 0x1, 0x2, 0xc, 0x7f, 0x3ff, 0x6, 0x4, 0xffff, 0x3, 0x662, 0x1000, 0xbd, 0x4, 0x5, 0x1ff, 0x1, 0x3, 0x2, 0x401, 0x1, 0xfffffff8, 0x8, 0x2, 0x2, 0xe8, 0x4, 0x6, 0x6, 0xfffffffb, 0x4, 0x200, 0x1, 0x4573, 0x2, 0xbd0a, 0x5, 0xa8c, 0x80000000, 0xffffffff, 0x198f, 0x6, 0x8, 0x2ee, 0x7, 0x8, 0x7, 0x101, 0x24140, 0x3, 0xffff, 0x8, 0x5, 0x4, 0x2, 0x9, 0x801, 0x0, 0x8000, 0x8, 0xc, 0x6, 0xf8, 0x5, 0x1000, 0x5, 0x39d00000, 0x8, 0x5, 0x3, 0x4a2, 0x9, 0x1, 0x0, 0x8, 0x100, 0x9649, 0x0, 0x6, 0x1, 0x7, 0x3ff, 0x97, 0x1000, 0x5, 0xff, 0xd, 0x19a2, 0x8, 0x3, 0x69b, 0x8, 0x7, 0x6, 0x458, 0x4, 0x3, 0x10000, 0x6, 0x101, 0x7, 0xfffffff8, 0x5, 0x0, 0x7, 0xf, 0x621e, 0x7, 0x3ff, 0x788, 0x8, 0x5, 0x1007, 0x8a, 0x8, 0x80, 0xfff, 0x2, 0x8450, 0xcaa0, 0xca54, 0x9, 0x1000, 0x80000000, 0x2, 0x8001, 0x6, 0x1, 0x1, 0x8, 0x7fffffff, 0xb53, 0x6, 0xff, 0x3, 0xfff, 0x9e7, 0x8000, 0x2, 0x7fff, 0x2, 0x0, 0x1, 0x4, 0x800, 0x1d71, 0xffffffff, 0xf13, 0x3, 0x2, 0x8, 0x8, 0x6, 0x1, 0x8, 0x70a0, 0x5, 0xfffffff8, 0x8, 0x3, 0x9, 0x3, 0xd10a, 0x80ff, 0xc8d3, 0x3ff, 0x9, 0xffffc000, 0x81, 0x8, 0x9, 0x4, 0x3, 0x8, 0x4, 0x80000001, 0x2, 0x1, 0x2, 0x400, 0x10000, 0x80000001, 0x5, 0x958, 0x1, 0x3, 0x3, 0x7, 0x9, 0xfffffff8, 0x8, 0x400, 0x5, 0xea38, 0x1000, 0x0, 0x5, 0x75, 0x7947, 0x7fff, 0xf6, 0x0, 0x7, 0x8, 0x5, 0x8000, 0x7, 0x40, 0x8, 0x4, 0x81, 0x7, 0x7, 0xf2e, 0x4, 0x1, 0x401, 0x9, 0x200, 0xf, 0x2, 0xac2, 0x385, 0x2, 0x16, 0x960, 0xdf, 0x2, 0x78, 0xfffffff9, 0x401]}) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) (async) kqueue1(0x10000) (async) kevent(r1, 0x0, 0x0, 0x0, 0x40, 0x0) (async) kevent(r1, &(0x7f0000000280)=[{{r1}, 0xfffffffffffffffb, 0x1, 0x4, 0x10001, 0x9}], 0x86, 0x0, 0xfdff4b4d, 0x0) (async) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000000c0)={0x0}) (async) pipe(&(0x7f0000000a40)) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$DIOCRCLRADDRS(r4, 0xc4504442, &(0x7f0000000040)={{'./file0\x00', './file0\x00', 0x4a, 0x7}, 0x0, 0x0, 0x0, 0x5, 0xc, 0x80000000, 0xd, 0x2, 0x6}) (async) read$audio(r3, &(0x7f0000000040)=""/58, 0x3a) (async) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) (async) ioctl$DIOCRCLRASTATS(0xffffffffffffff9c, 0xc4504448, &(0x7f0000000500)={{'./file0\x00', './file0\x00', 0x1, 0xf}, &(0x7f00000004c0)=[{@rand_addr=0x5, '\x00', './file0\x00', 0x2, 0xf000, 0x0, 0xe, 0x3, 0xff, 0x18}], 0x7, 0x1, 0x81, 0x7, 0x1, 0x737, 0x16, 0x59}) (async) write(r2, &(0x7f0000000080)="1c4c", 0x2) (async) 69.555339ms ago: executing program 2 (id=12): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mquery(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x800000000000006) ioctl$TIOCCBRK(r0, 0x2000747a) 69.333594ms ago: executing program 6 (id=7): syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0]) syz_extract_tcp_res(&(0x7f0000000040), 0xd98, 0x6) r0 = msgget$private(0x0, 0xa) msgrcv(r0, 0xfffffffffffffffe, 0x0, 0x3, 0x1000) seteuid(0xffffffffffffffff) msgctl$IPC_RMID(r0, 0x0) mkfifo(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x7c6, 0xea) execve(0x0, &(0x7f0000000240)=[&(0x7f0000000140)='//\x00UQ\x96\b\x00\x00\x00C\v\x0f\xd6K2\xe1e\x8d\xf7\x9fK,\xdd*\x9eB=\xde*\xff\xdf\r\xd9\xa5\xa0k)\x027k\xda\xdf\xb7DO\xbd\xe42\xb5,\x05\x96\x81a)\xdbT$\'\x10\x8d1\x8cU\x1b\xd7\"t8\xda\xbc\x19\xfc\xca\xf46d\xed\xaf\xf8\x8ah\xba*\xce\x98\x85\xc1\xbdk'], 0x0) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) ioctl$FIOASYNC(r1, 0xc0106924, &(0x7f0000000240)=0xc0000000) syz_extract_tcp_res(&(0x7f0000000000), 0x20005, 0x7c78) 67.350521ms ago: executing program 2 (id=13): sysctl$hw(&(0x7f0000000000)={0x6, 0x12}, 0x2, &(0x7f00000000c0)="390d96ed2c83070000c300000000b57160de000100003e086eb073021fbc26fdfe24d4d2e5", &(0x7f0000000080)=0x25, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5be7) ioctl$BIOCLOCK(r0, 0x20004276) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x16, 0x80, 0xbe, 0x401}]}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x204) open$dir(&(0x7f0000000040)='./file0\x00', 0x40000, 0x8) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x2, 0x1c, 0x67, 0x0, 0xf4, 0x2, 0x0, @empty, @remote={0xac, 0x14, 0x0}}, @udp={{0x2, 0x1, 0x8}}}}}}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x200, 0x42) poll(&(0x7f0000000100)=[{r3, 0x4}], 0x1, 0x946) closefrom(r1) sendsyslog(&(0x7f0000000040)="33f2a4da11b6bc6e0aa41864e5372291734447fd2a676631c543a4859b7579058eac7f25ad95b1d1eed58dd7b306eb7f023d792eefb31a6324", 0x39, 0x4) 66.900798ms ago: executing program 0 (id=14): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000004200)) mkfifo(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0) pselect(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x7}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x3b}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x5f) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2, 0x2, 0x7}, 0x10) sendmmsg(r0, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14"], 0x18}}, 0x38, 0x400) mprotect(&(0x7f0000290000/0x3000)=nil, 0x3000, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r1, 0xc0206925, &(0x7f0000000580)=0x7) getgroups(0x2, &(0x7f0000000200)=[0x0, 0x0]) lstat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000006c0)) setresgid(0x0, 0x0, 0x0) setgroups(0x0, 0x0) seteuid(0xffffffffffffffff) unveil(&(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='c\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x100, 0x10000) msgget(0x1, 0x8c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000300)={0x0, 0x0}, &(0x7f00000002c0)=0xc) chown(&(0x7f0000000280)='./file0\x00', r2, 0x0) setreuid(0x0, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', r4, 0x0) setuid(r4) ioctl$BIOCIMMEDIATE(0xffffffffffffffff, 0x80044270, &(0x7f0000000080)=0xfffffd12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 0s ago: executing program 7 (id=8): mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x2672) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x94, 0x8, 0x9, 0x9}, {0x4, 0x8, 0x20, 0x11}, {0x6, 0x80, 0x7f, 0x40}]}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000440)={'tap', 0x0}) syz_emit_ethernet(0x36, &(0x7f0000001140)=ANY=[]) readlink(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)=""/4096, 0x1000) open(&(0x7f0000000180)='./file0\x00', 0x200, 0xcf) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000040)='.\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\xaa\xaa\xaa\xaa\xaa', &(0x7f00000001c0)='\'&\x00', &(0x7f0000000200)='\x00'], &(0x7f0000000380)=[&(0x7f0000000280)='^\x00', &(0x7f00000002c0)='^*:\xcd(+\x00', &(0x7f0000000300)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000340)='(\x00']) sysctl$vm_swapencrypt(0x0, 0x0, &(0x7f0000000040)='}', &(0x7f0000000100)=0x1, 0x0, 0x0) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000080), 0x3, &(0x7f00000004c0)="14ddf87f22c0965faaa6b54657d757f1e43f2eb47d4c979b35b21d189f0b500fb5846278afe8fc3e173e4c7291c835e8fab06605d2c38cb9bdb830618f2874f41ff31868ecb5a31b20163325720169a2c422ca8d536530eb3231f4a67ddbccd57aade0cf465d4c3972b808b8792c1be83da20a9ad76fa976b2713c5616b9261695d0c245e59c7a17d2ae11218838ac7f79256c88d23c7f6c6f7d37aff65dd88f9f1947d60cb2a7562f961968313b91", &(0x7f0000000580)=0xaf, &(0x7f00000005c0)="0eb8ced816b8a2dd1494200e325d3716ed8e29cbf728bc7f9024b87fe296dc3fc1eef53c87015c7b6b8b35cffde25d78d8bfced763d9835705c55c27718d5e195eeb6d24d221da16af8c1037eac73124fd0f7878ac0ed26b39bf23c2b42db680c6c2351354c747db3bd5f6d31677b1e4b847d96ce4a59a7bfa812d1872fae2f628d5dd1663854f29e971a705d66f99b55ff387c16937628750618ea7abf438d115abcf881fd211df9c38978563dddd80337120fbaaf4106f5306632e46bd859faa42d60517a46e9fa44eea2b81108088ab17e4d02dd32f201becc7d48727439f27f0639666fe903f1ac1e6c0861fdc", 0xef) sysctl$kern(&(0x7f0000000000)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000580)={'tap', 0x0}) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) r1 = socket$inet(0x2, 0x3, 0x14) ioctl$FIOASYNC(r1, 0x80146953, &(0x7f0000000580)=0x7) mprotect(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1) sysctl$net_inet_icmp(&(0x7f0000000000)={0x4, 0x2, 0x1, 0x5}, 0x4, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0) mquery(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x8000000, 0x0, 0xffffffffffffffff, 0x1ff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="87d9a0636c4b4dde2ff428eafb511f2caaaaaaaaaa00aa4e234e21000000cefdffffffffffff749a37c1789574c1e6f3b674e7bf42517dc54200bce3e55bf14583d74e527f64f1fd05efffea56f476af851b80c562b2958692e77896dcf1fdd4eff7e67efe782449e0020e687432c39bef5e0000000000000000000000000000006514f8658d4d7c560b9ac3d318551db3885e3230fe2fb2415270fd267461cdad8a8ceafc3246672f3e1d6e1593a3", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a0020009907801001312cf22796c9735a492491ee8a387f25b5e0000"]) sysctl$net_inet_icmp(&(0x7f0000002800)={0x4, 0x2, 0x1, 0x2}, 0x4, &(0x7f0000002840)="fa6edfd28add84c40da33055f1249623a521be8f33641f6f20a777cd2bb9d2ef14852f8d0c37e05f4305f724419521e33e4d8b75c8818d3e3293af08a659ccbe2321bcfb62dfafd873259493aed81906549841ef81899d2dc61235fb9b7c096bed9a468b29a674a86f9ee81bc8b353b82f904a574fa2f04389c0b8bed79875b48eb6783128d563a7978d9089071ab1c26a2be8af03afc7894b25e757555efb9a10a847d4b356ccea6705b6b4609e0aa4570566df2f1e46c2c2d79f62d3eb1f8ae1e7b0b26a6b046402fd9322b1", &(0x7f0000002940)=0xcd, &(0x7f0000002980)="827eea66997819bb1a30145e1fc7efaadd1a5e96146d71764317079c41a4c53bfed761957967448e906f3a1818e50476260923bb18d6c9fd65ddb9c077feafec040102493bfe36da24bf4ac337c815", 0x4f) sysctl$kern(&(0x7f00000006c0)={0x1, 0xc}, 0x2, &(0x7f0000000700)="b3928de10ecd2b3dcbf07c0c1fa52251eef3bcb450b88bbcfc139323986c6e61b1c12914f27d29b54d1d322f163f3945444972c554d66ed3f10d309c3fb37f8f87943ac909b1bcb3", &(0x7f0000000780)=0x48, &(0x7f00000007c0)="fcacda26e9b1a7f961fad59904e575060e9dce997b08a392ed72d177c58d9fae232537ba19bb04fc1ccdcfd728df9cf9ee5d55064776e197f99a496a0b19fc49a70cb9026e2c295d5714fb857919f2e4fb9228c2c1fe3bba2b751dd43816a0f731073dbc89edb8f3d5412f33c5875836748f896aa30c92fe7f09bc305d12290f5e5672e4cb20fe4f933e141d55f1e0306c84d3253276855a6ea39e8ee60491b04361bbf47b3fab8cdc947fb77d32b5b11b2a8984a8ea69e51d069c9ea58a00f6649bf8d7f59461d33f5a079df5d4a8f5393a8e60f4f98e9323fa2f3d2d396aaadcbf83043174070fb06c94fb645f3ebb67c3bfb26ab0d14401d342dd5028bd26fa17431ea8cf6b477cb008ec496e3f88828e587d65d9bf5fc73a118d3be1fa0a261ccf2bd192f631bcb869f933441ec366a307ce97587df3f25855d133a44b272ebe5a3763bf4fa065d1fe23ed621ec1a5cf7d4761878a14ca7ce61c5f8fc87ff4337deff4e5fb4b32a4222ca7a44f601bf4bc6b7309b37a29e896f67aa1c32d2d48a6011c88c5dad7ecee61cbd90cab3c76c86dc7c148d42caaa2996d7fda52d7715a42bfe7d678e1300dd5f06d54f33eeb0db02c4d54565b65b351c85ccfee48a18d6762281ddb0618b190ae14dd065992e1b55c953ea4aa4472ac0c9478f7e065bb9ee07ca4a578f428026c4e545771b146aa48d19cf77347d2938ca379ffa2274adf8ffb67a8f56d47d837c9b18c49565ff6b136b07915a8edd4dcc67b5e2ea4df4770228e101852f60da1ce059277957d81edfba6e8afe56eb71665733503a0e84b17091ed1c9602b46de63418adaae4de2cb9e895852228453fa45a91b6e80f567f80881eb0f9f15eb01d596d61cc3ccf8f89778e8bd031be7b94652728553aed6277706d048f8bfbed6179ab28a824eed77fe1fbf742156f97bc823b4b7f6793799f01ea0e9272f1bb36063d6e400341b40fba201eefe0446ec916585fb7ca8969ee4412a988a9879d92092447dd10c3174f4279de5c2480fa3d8233b5ccc76acd55be4d2e2bf62c89dedc5e47bb38aed1566d6124916830e06fefe98b82da5c2eaf35d788bf2fe50c64255942a2cacf2c9f8e084af910bec6237bf1527412e558a130af0d41c46e3a884bbb498bc05d440ffb6b20a479023460b78e251fa9aaff5f40a575544e1d3165521dbf8c35252fbe94e20a40c3e7c6f9c8a3ba21ecdf6b136e506095b0ecdc23ace2ba9c6fd5b41b8684825202d50cdfbe0bcf3ecee9e8beec934a126fd4e2cd70ab9168c22462fa46bf9289dcaf263213ec970e5bab1adc69f85907244445c9a8ac883353ddabf2405e91dcf448faa7bdf570961ef28013c46d4a6102babea3bf18079b7e71ba0525f6a132e81131b9d4ec08c24d229b939cefe89d32414e8b0835fb225393d6e1e30117c8459cf47783f9d56d6f64ad5ebdeb84257ec737b5af13c83c5ddd20f3f4ab9de3f44c7ac95309d36b8930e1be7d4e69d6022ba01403e18a809f68aebc9b7b43546c95278217b9c19545ae550e4a52ea7334afd719b62e99398a5e28092eb7d9f28d86d778f55c30342a2e14e6391448dece475452028d49202147e2c62b0faaff730eb933d99fcd0890d6e7dd0c9819b1c2ece1fd28e5852706edc9a31d7791a0fdd14b4a00c0e5afed739504d76345a54e4a956a4ac1977bec88650371ff2a814c53f8a05b5f849799d36e3400f148932ba46654152fc1ad65ae8bf792403d8c1f8e4f23dad76d3288d0e93a722a763d3ed572ab54fd942da124a27d9f84320e0cda0dc0b653a552c5dd32e8dbf1939ac9f0c2faa4f249d8af2374577edccb7479dd804e0e0ecb82c5c7cb65069e34477b81de83fd9ae6f42e907034284b9a9e66fc693247c9be51eb5cce6cf9c9a74970e67403d05f750a442704c27f7ee452a4151fb6f331a16395a8fd6de0b76709e789eb0cc237fefb0356cda2fe840d699d847ad04354f15c0589f9137528417f5dad86f4ff132b9d55d4e6d3482d4c92b3f75da97b4df52ed2064d0a4892cbdfce3f46ad57b05d1ac50d3239f6d1b4098d15345e1e04f3744b579bd353d284db7e2887a59305fbe47d5deef4c893535b783874245fe45e80975e5d689aec62ad60f24bcfcf7c302f56ebcb3fea04b442dc55179697ec0bffc8cbf10c75e88b56525293a66d4e86f93071cf73376dce87e3b4a880e0159858db2f4738c4c93dde2f38813f56159a3a047fdce16bb7c12c58ad3bb36ff66d2426ba241d2410e8dcdfa587616842fc01f5c24ea16e1181ecd6655df7fda5cce46ee185b2adf3a46329dbdabedacb7e0f40b6ace2197e9b5b4652534e06a593782bf5153af1685a1f854d988ec1dde580c4b436949eb87cae04852faebec0b8713bbae3313622a071428b1103c814877f8d0a0f6bb222855966a5a83c0987f48738e9f37b5e3fb07250e16736db573514cc3e2db6d30ed1f7da275c5135600e9ccb553aeb8cd24516385a25ad09d50b657e50f17ae02c8d608eac4c4c90a51c2da2fbe092a33fa9f28d61cf52583f67f8782dcf730b9069d7ba5af2ff05e1d620dc9ea5c0747000ea3c4a18bda0a1c30e075726e98902555d5c6e5c6c16c358231aedaa4f0bd1e4fff1db5890a0f4240e48c937b3a1562ee5a6ed763db51da5b1ef28ab1aa2f1ac5beda95ff2fa378e6c07e349049f79782e30ba29e8cd965e33c70c2bb3704db606ed24e640e8ed99c218ac293d869bf6b10bfe7fe058702fd0ed8321305e3601ed847889000e33cb0c98407d62a01a8544865232144579881d287a67e013292c7cd341a26a740882f7ddf69ce1ff5ba95e06dbc1aa9bdcb34aaec54192ef147e2fa5612c5b7460fd6471a2387318c974f91d95f3a0eb0f03ed6bbb5b4a0dbc0c4b9fc559940cedbfe13ae535d76467393717c1bfed674bb3a34013f12355806bd7f031f085f501d6437ebb837e53d7db7922b06e6891ff325a6c54cfb1c5ebafb64f983e2bd856e2af0ed62d9443b024b1550961f08cbce3fcda49d5adac2cbc71383a83d38c4c16d623ae9be27861898010962a40189290598b5f2c1dcddd479756c1f98ffe67d052b393ed876b416a1eb428d846474601b07c3cc95d5e6f68d666935fe833448225932c348f41e022d842d27086b5cb1839ee1df32b56548daf2061110cefc378d8d3d55c816eae8462df369fa9101780beece3318e4a497b2e9baf5a8388716d780ed569e05b5bb272a4d51feb1c2cd2391f54d36ea5b93ab7843e99cbb5728e80e76b271d6c930572e137f1532bf174f8cb2e50841724e99a187ef88b349c607fe16ddad4222788460f5c9335e6039e91a8a9a7005098ee03d3485d784dad54b0bb6dcfafee535c3e629be4ced0f48495aaff78d0c3fdb2b223246bca2fe4a56c2aa9bcd13e05f476cc3b2999c5527ce374d97f1062895bb5da2953caf1dba097a0b238a510132aa405b32e1043468afb406de2f95940416bea0cb9894a7b545a89a3f06aa37d450fb3dcc114f5d8f6614e4e36e780ee3c0071a2d56ace3427202d37229294de72be694a49dea33e074fe4ff88dccf24b57197b5877886a9d9996b0620b81a410a872d1b8fa2f3b8424b0b2005b8165d3946eb3dd51e1ee7297a798cb783892b0dc109b642ef454d9fb70b5f5b3a46990fe8b483a2656baef952ff68104fefb072e065da299467f7e70f4522f0b9e890472db72ba807a6e3780043d11ccfd9c5920b99d6f94887518ab07c16a7dd6bfa9eebf3bc3ff1bc80d5bf7ad0d6dd380d24ca73d301c315d397f5701bcd1251a9ede4b8ccc12e9baba5fb9f0857c2e83df27e664891e5ba24360cec7073fe90cfc97a3c33df066735f599c16df226a98e01a6755c0d46462e682ea45f419c976ffe8d3a47a04d610cbf2a0fea30bf490a7e5c96abe2ee0d5e9db27f4954e07fec65c97052da38368380cae3d276e42e3933699a6ffbcece986a45d624638f178317611a8d03b2e775dde5774fbf57a839358c295bc49ad9271117987cb81dd806da2e222ac322b2ce16638c67d0c9e8db0bdf1f443cb27cec5dd64620e65a995aef0e8fc05da205c57fe5e4af134c05ab12fbf2c706c434791c8765174fb289048d163a33a2bebb05e2722b93341460616d8023e51f5bf32189a0edcb64fdf211974d396c6e466f765379534affff39e9fffd314c02b7323a4d5e954618a86bd631d5c6b3b0ef930ee4e16abc106241ecfe2c062102affafbcba0993a4ec6245c3024cae1162d3aeb9a82d861208fa28be6bab863d175afdde024037efa9338a4b04875fa66d4c9adf64e64a7fe75039a807b8c9e631d8ec17ec128c6cbd0347fa52d7653f9464a12f2f3f9c68f16fc6c82db3deba1f99bede72c33be273045e449a73efec682def0574e5ebb0f4cec5ac533786bf97650ba0dfb530544afeeae4c9394a6ccc36c5675b8ec66e9009b93e20c2a1f63516a58108b15fa6729a94ee1fe39d7d525ab5df386141caac8ed86d586dc8d22e7fc4accfdc186dd7abd705a2213d65a8b0aec748908fe1b44ae75020d276300c63e4685a8ac53f4d88f8107a728e943a99aaa4a813fb205e27e0dd1dbacc00c48312dcf50f812898c5ce0d8f1e83622bf30d0ab4671701776c34926a407dcb42c00d2d10aae9573822990709f8779927d1155c98f3c5b41d2c13b23268117d01108ffaae2bed8969f44cd14ccaf5ba4da53846b303f2afd655e36161a89739a3f74a24197434b631676fae9cd12ee3903064b17e716647d704ab430e05311ecc3e16ca2c687a39b8f395224359652a43ff9e174f1ddc9e962e92217d70390658b5bd6ac5bed4ff5f083b2f4fc992dd25ad7484d87cad5420f62dedb0b59fe72be5ccc758bf2cc3a82dfb7b4f7b1afbfd5a612ae49559240c645b95f79764098d76768b2baa9ff48a49f9d8391cd8515068bbe3c6a47bfa00a73927d0a7e3fbd8822a721afa87f748ef6fb141c0f4f7eb74e239feae42c26f9edca70fce7079215e0ca719911d66e19986a965010761313a2545c34459e84ad6c298db1db8a20c4a75ea46ec54503bda8f300f9ea41f7732ffde1159edf3ae88c32f91afdb1fb9fc61f24f47a7de111c18e6ae10b9fa0d52b0f3519f873db05a25da5a230f463d8e0e67f2b660107b6150afcb6dab9f6a671d7bb176e76289f19c9cda0d3f960330168a2adb899aa1de28e4f8e2b0cd6af9e5ecaa6127c56e25d169e32d83b277e48be648145f20587f3ac860a0a207141aea41ac437021916dd94fb3d63ab16109fb41e014e9a422f64825ce4103304052ded11af21830fe44881a9ada130d67f6e9c394264bee949496590b6e2535568d6163d45cc43486215cc81f0a932276b021b116161c1a6e46a47fc84d331829cf255438a872d2b1c8eaa77bdc3114c516a27fcf8984a77143e73c0b6ab2f23cb6ef1efd420db2771bb8adeadb9e68a28a0ef4ed928285b97c95524e15110613c707165967491f4b46ae83272bdbfcba1a80c09d3bf7bf5f4a622fd3d2bc361753eba75bb86b7e3c8e148218dcebadb0fa61cca69f005056d6c2e966cfc88d3c3b76ca8d1c8a60f0853f8a8c901c54c4b51eff61de17592dded46d3b111113e2db960a57ae5c362504c349cd92be6e462be516a9277d2815268f1da818007eb1ff214a5ebdb380d2b517c69607485ce6fdbda38feef178383a74d7e32db839badb7ac23f417b6ce5c281460eaa55501a2355b922001f6c62829cac433905907dd8db0546703b287ecadb9b162d56c18f9f5b51", 0x1000) mknod(&(0x7f0000002a00)='./file0\x00', 0x20, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. KASAN: invalid write of 8 bytes at 0xffff800001d6dc80 from pc 0xffffffff823fa8e9 KASAN: first bad byte at 0xffff800001d6dc80 (+0); shadow 0xfd: pool use-after-free (or unallocated item) KASAN: 0xffff800001d6dc80 is 64 bytes inside the 112-byte item [0xffff800001d6dc40..0xffff800001d6dcb0) in pool 'shmpl' KASAN: allocated at: #0 pool_get+0x770 #1 shmget_allocate_segment+0x23b #2 sys_shmget+0x260 #3 syscall+0x1089 #4 Xsyscall+0x128 KASAN: freed at: #0 pool_put+0x79 #1 shm_deallocate_segment+0x85 #2 sys_shmctl+0x51e #3 syscall+0x1089 #4 Xsyscall+0x128 KASAN: pc: shm_delete_mapping+0x1f9 KASAN: call trace: #0 __asan_store8_noabort+0xc0 #1 shm_delete_mapping+0x1f9 #2 syscall+0x1089 #3 Xsyscall+0x128 KASAN: shadow of 0xffff800001d6db80..0xffff800001d6de00 (1 cell = 8 bytes): 0xffff800001d6db80: fd fd fd fd fd fd fd fd fd fd 08 08 fd fd fd fd 0xffff800001d6dc00: fd fd fd fd fd fd fd fd 08 08 fd fd fd fd fd fd >0xffff800001d6dc80:[fd]fd fd fd fd fd 08 08 fd fd fd fd fd fd fd fd 0xffff800001d6dd00: fd fd fd fd 08 08 fd fd fd fd fd fd fd fd fd fd 0xffff800001d6dd80: fd fd 08 08 fd fd fd fd fd fd fd fd fd fd fd fd KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope panic: Caught invalid memory access at ffff800001d6dc80 size 8 op 1 Stopped at db_enter+0x17: popq %rbp TID PID UID PRFLAGS PFLAGS CPU COMMAND 466363 73252 0 0 0 1 syz-executor *107945 73252 0 0 0x4000000 0K syz-executor db_enter() at db_enter+0x17 panic(ffffffff84635f88) at panic+0x270 __asan_store8_noabort(ffff800001d6dc80) at __asan_store8_noabort+0xe4 shm_delete_mapping(ffff800001c59018,ffff800001cd2008) at shm_delete_mapping+0x1f9 syscall(ffff80003bbf0d90) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1ae75262060, count: 9 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: Caught invalid memory access at ffff800001d6dc80 size 8 op 1 ddb{0}> show kasan KASAN: invalid write of 8 bytes at 0xffff800001d6dc80 from pc 0xffffffff823fa8e9 KASAN: first bad byte at 0xffff800001d6dc80 (+0); shadow 0xfd: pool use-after-free (or unallocated item) KASAN: 0xffff800001d6dc80 is 64 bytes inside the 112-byte item [0xffff800001d6dc40..0xffff800001d6dcb0) in pool 'shmpl' KASAN: allocated at: #0 pool_get+0x770 #1 shmget_allocate_segment+0x23b #2 sys_shmget+0x260 #3 syscall+0x1089 #4 Xsyscall+0x128 KASAN: freed at: #0 pool_put+0x79 #1 shm_deallocate_segment+0x85 #2 sys_shmctl+0x51e #3 syscall+0x1089 #4 Xsyscall+0x128 KASAN: pc: shm_delete_mapping+0x1f9 KASAN: call trace: #0 __asan_store8_noabort+0xc0 #1 shm_delete_mapping+0x1f9 #2 syscall+0x1089 #3 Xsyscall+0x128 KASAN: shadow of 0xffff800001d6db80..0xffff800001d6de00 (1 cell = 8 bytes): 0xffff800001d6db80: fd fd fd fd fd fd fd fd fd fd 08 08 fd fd fd fd 0xffff800001d6dc00: fd fd fd fd fd fd fd fd 08 08 fd fd fd fd fd fd >0xffff800001d6dc80:[fd]fd fd fd fd fd 08 08 fd fd fd fd fd fd fd fd 0xffff800001d6dd00: fd fd fd fd 08 08 fd fd fd fd fd fd fd fd fd fd 0xffff800001d6dd80: fd fd 08 08 fd fd fd fd fd fd fd fd fd fd fd fd KASAN: legend: 00 valid; 01..07 partial; fb malloc redzone; fc malloc freed; fd pool freed; fe kmem; fa global; f1..f4/f8 stack/scope ddb{0}> trace db_enter() at db_enter+0x17 panic(ffffffff84635f88) at panic+0x270 __asan_store8_noabort(ffff800001d6dc80) at __asan_store8_noabort+0xe4 shm_delete_mapping(ffff800001c59018,ffff800001cd2008) at shm_delete_mapping+0x1f9 syscall(ffff80003bbf0d90) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1ae75262060, count: -6 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003bbf0a50 rbx 0xffff80003bbf0ac0 rdx 0 rcx 0xffffffff85066ff0 cpu_info_full_primary+0x1ff0 rax 0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xffff80003bbf0838 r11 0xffffffff8155f360 x86_bus_space_io_read_1 r12 0xffffffff84635f88 switch.table.pfkeyv2_acquire.11+0x9d2c8 r13 0xffffffff85067c08 cpu_info_full_primary+0x2c08 r14 0xffffffff85067e07 cpu_info_full_primary+0x2e07 r15 0x1 rip 0xffffffff83abf557 db_enter+0x17 cs 0x8 rflags 0x246 rsp 0xffff80003bbf0a50 ss 0x10 db_enter+0x17: popq %rbp ddb{0}> show proc PROC (syz-executor) tid=107945 pid=73252 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=86, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003bb8e028,0xffffffff85dded60 process=0xffff800045ffa698 user=0xffff80003bbe5000, vmspace=0xffff800001c59018 estcpu=36, cpticks=17, pctcpu=0.0, user=0, sys=17, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 73252 466363 90549 0 7 0 0 syz-executor 73252 453737 90549 0 3 0 0x4000080 fsleep syz-executor *73252 107945 90549 0 7 0 0x4000000 syz-executor 26669 188191 64970 0 2 0 0 syz-executor 26669 482154 64970 0 2 0 0x4000000 syz-executor 36246 56036 83649 0 2 0x10 0 syz-executor 36246 102110 83649 0 3 0x10 0x4000080 fsleep syz-executor 95885 138225 70730 0 2 0 0 syz-executor 95885 228804 70730 0 3 0 0x4000080 fsleep syz-executor 55430 175040 43677 0 2 0 0 syz-executor 55430 443990 43677 0 3 0 0x4000080 kqread syz-executor 55430 239827 43677 0 3 0 0x4000080 fsleep syz-executor 99087 207534 34761 0 2 0 0 syz-executor 99087 133642 34761 0 3 0 0x4000080 sbwait syz-executor 99087 301976 34761 0 3 0 0x4000080 sbwait syz-executor 99087 19304 34761 0 3 0 0x4000080 sbwait syz-executor 6748 742 7628 0 2 0 0 syz-executor 6748 257293 7628 0 3 0 0x4000080 fsleep syz-executor 6748 141163 7628 0 3 0 0x4000080 fsleep syz-executor 398 181184 72862 0 2 0 0 syz-executor 398 157602 72862 0 3 0 0x4000080 fsleep syz-executor 64970 118592 38502 0 2 0x2 0xc80 syz-executor 90549 219464 38502 0 2 0x2 0xc80 syz-executor 34761 144064 38502 0 2 0x2 0xc80 syz-executor 72862 278614 38502 0 2 0x2 0xc80 syz-executor 43677 4139 38502 0 2 0x2 0xc80 syz-executor 70730 133984 38502 0 2 0x2 0xc80 syz-executor 7628 423730 38502 0 2 0x2 0xc80 syz-executor 83649 9567 38502 0 2 0x2 0xc80 syz-executor 38502 496977 95783 0 3 0x2 0x80 kqread syz-executor 95783 310242 19415 0 3 0x100002 0x88 sigsusp ksh 19415 60348 73643 0 3 0x10 0x88 kqread sshd-session 73643 349464 94667 0 3 0x12 0x80 kqread sshd-session 24360 385465 1 0 3 0x100003 0x80 ttyin getty 94667 362839 1 0 3 0 0x88 kqread sshd 39403 200347 50038 74 2 0x1100012 0x80 pflogd 50038 482631 1 0 3 0 0x80 sbwait pflogd 7040 222029 98474 73 2 0x1100010 0x80 syslogd 98474 67527 1 0 3 0x100002 0x80 sbwait syslogd 62032 116576 1 0 3 0x100000 0x80 kqread resolvd 76921 504528 55383 77 3 0x100012 0x80 kqread dhcpleased 45842 323531 55383 77 3 0x100012 0x80 kqread dhcpleased 55383 433172 1 0 3 0 0x80 kqread dhcpleased 6097 500336 0 0 2 0x14000 0x200 smr 47504 307137 0 0 2 0x14000 0x200 zerothread 19259 68807 0 0 3 0x14000 0x200 aiodoned aiodoned 98192 304681 0 0 3 0x14000 0x200 syncer update 46592 170015 0 0 3 0x14000 0x200 cleaner cleaner 19882 349121 0 0 3 0x14000 0x200 reaper reaper 14079 42276 0 0 3 0x14000 0x200 pgdaemon pagedaemon 89588 326294 0 0 3 0x14000 0x200 bored viomb 44340 47659 0 0 3 0x14000 0x40000200 acpi0 acpi0 41041 218601 0 0 3 0x14000 0x40000200 idle1 51542 34760 0 0 3 0x14000 0x200 bored softnet1 12279 141266 0 0 2 0x14000 0x200 softnet0 8967 463902 0 0 2 0x14000 0x200 systqmp 72661 445296 0 0 3 0x14000 0x200 bored systq 37366 477516 0 0 2 0x14000 0x200 softclockmp 43961 378549 0 0 2 0x14000 0x40000200 softclock 21576 226388 0 0 3 0x14000 0x40000200 idle0 1 515621 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks Process 73252 (syz-executor) thread 0xffff80003bb8e2c0 (107945) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff854fdbc0) #0 witness_lock+0x632 #1 __mp_acquire_count+0x48 #2 sleep_finish+0x423 #3 rw_do_enter_write+0x21f #4 vm_map_lock_ln+0x19f #5 uvm_unmap+0xc9 #6 shm_delete_mapping+0x1bd #7 syscall+0x1089 #8 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11068 12461K 12461K 166960K 12162 0 pcb 17 24K 24K 166960K 21 0 rtable 237 12K 13K 166960K 357 0 pf 34 22K 22K 166960K 45 0 ifaddr 43 12K 12K 166960K 45 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 13K 166960K 5 0 counters 70 42K 42K 166960K 70 0 ioctlops 0 0K 4K 166960K 1485 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1298 84K 84K 166960K 1374 0 UFS quota 1 36K 36K 166960K 1 0 UFS mount 5 44K 44K 166960K 5 0 shm 3 6K 6K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 292K 166960K 11964 0 file desc 18 65K 89K 166960K 146 0 sigio 0 0K 0K 166960K 1 0 proc 69 128K 177K 166960K 551 0 subproc 72 9K 9K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 20K 20K 166960K 1 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 36K 36K 166960K 1 0 MSDOSFS mount 1 20K 20K 166960K 1 0 ttys 37 263K 263K 166960K 37 0 exec 0 0K 2K 166960K 393 0 fusefs mount 1 36K 36K 166960K 1 0 tdb 3 1K 1K 166960K 3 0 VM swap 14 124K 124K 166960K 15 0 UVM amap 248 257K 280K 166960K 3172 0 UVM aobj 3 4K 4K 166960K 4 0 pinsyscall 1067 1717K 1725K 166960K 1332 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 28 2K 2K 166960K 28 0 temp 35 9162K 9172K 166960K 3994 0 kqueue 13 40K 40K 166960K 25 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 36 0 33 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 55 0 33 1 0 1 1 0 8 0 syncache 336 4 0 4 2 1 1 1 0 8 1 tcpcb 736 10 0 6 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 73 0 62 1 0 1 1 0 8 0 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 19 0 0 1 0 1 1 0 8 0 pfstkey 128 19 0 0 1 0 1 1 0 8 0 pfstate 448 19 0 0 3 0 3 3 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 40 453 0 0 5 0 5 5 0 8 0 art_node 32 111 0 11 1 0 1 1 0 8 0 shmpl 112 1 0 1 1 0 1 1 0 8 1 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1586 0 116 92 0 92 92 0 8 0 ffsino 296 1586 0 116 114 0 114 114 0 8 0 nchpl 144 1794 0 86 64 0 64 64 0 8 0 vnodes 216 1681 0 0 94 0 94 94 0 8 0 namei 1024 5538 0 5538 2 0 2 2 0 8 2 percpumem 16 51 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 6593 0 6593 4 2 2 2 1 8 2 plimitpl 152 32 0 12 1 0 1 1 0 8 0 sigapl 424 472 0 424 7 0 7 7 0 8 1 knotepl 120 57 0 0 2 0 2 2 0 8 0 kqueuepl 224 25 0 13 1 0 1 1 0 8 0 pipepl 344 132 0 104 3 0 3 3 0 8 0 fdescpl 528 456 0 424 3 0 3 3 0 8 0 filepl 160 1643 0 1411 10 0 10 10 0 8 0 lockfpl 104 9 0 4 1 0 1 1 0 8 0 lockfspl 48 7 0 2 1 0 1 1 0 8 0 sessionpl 144 24 0 15 1 0 1 1 0 8 0 pgrppl 48 32 0 15 1 0 1 1 0 8 0 ucredpl 104 100 0 86 1 0 1 1 0 8 0 zombiepl 144 424 0 424 1 0 1 1 0 8 1 processpl 1232 472 0 424 5 0 5 5 0 8 0 procpl 664 495 0 434 6 0 6 6 0 8 0 sockpl 752 164 0 128 4 0 4 4 0 8 0 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 1 0 0 1 0 1 1 0 8 0 mcl4k 4096 124 0 0 16 0 16 16 0 8 0 mcl2k 2048 18 0 0 3 0 3 3 0 8 0 mextrefs 64 15 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 154 0 0 10 0 10 10 0 8 0 bufpl 272 2324 0 106 148 0 148 148 0 8 0 anonpl 32 3762 0 0 31 0 31 31 0 222 0 amapchunkpl 152 8626 0 8112 20 0 20 20 0 158 0 amappl16 200 1683 0 1663 5 1 4 5 0 8 2 amappl15 192 5 0 5 1 1 0 1 0 8 0 amappl14 184 439 0 438 1 0 1 1 0 8 0 amappl13 176 126 0 114 1 0 1 1 0 8 0 amappl12 168 714 0 683 2 0 2 2 0 8 0 amappl11 160 7 0 7 1 1 0 1 0 8 0 amappl10 152 64 0 50 1 0 1 1 0 8 0 amappl9 144 275 0 275 1 1 0 1 0 8 0 amappl8 136 105 0 103 1 0 1 1 0 8 0 amappl7 128 149 0 135 1 0 1 1 0 8 0 amappl6 120 154 0 153 1 0 1 1 0 8 0 amappl5 112 116 0 106 1 0 1 1 0 8 0 amappl4 104 298 0 278 1 0 1 1 0 8 0 amappl3 96 1558 0 1438 3 0 3 3 0 8 0 amappl2 88 554 0 497 2 0 2 2 0 8 0 amappl1 80 10616 0 10015 15 0 15 15 0 8 0 amappl 88 2421 0 2247 4 0 4 4 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 1 1 0 1 1 0 8 0 uaddrrnd 24 456 0 424 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 456 0 424 1 0 1 1 0 8 0 vmmpekpl 168 5877 0 5842 2 0 2 2 0 8 0 vmmpepl 168 38813 0 36867 86 0 86 86 0 357 0 vmsppl 488 455 0 424 5 0 5 5 0 8 0 rwobjpl 80 14733 0 13713 24 0 24 24 0 8 1 pdppl 4096 921 0 848 97 12 85 85 0 8 12 pvpl 32 10089 0 0 83 1 82 82 0 265 0 pmappl 256 455 0 424 3 0 3 3 0 8 0 extentpl 40 47 0 29 1 0 1 1 0 8 0 phpool 120 417 0 16 13 0 13 13 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x17 panic(ffffffff84635f88) at panic+0x270 __asan_store8_noabort(ffff800001d6dc80) at __asan_store8_noabort+0xe4 shm_delete_mapping(ffff800001c59018,ffff800001cd2008) at shm_delete_mapping+0x1f9 syscall(ffff80003bbf0d90) at syscall+0x1089 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x1ae75262060, count: -6 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x19: leave x86_ipi_db(ffff800028ff3ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc syscall(ffff80003b7505a0) at syscall+0x1048 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74ddb0c02600, count: 9 ddb{1}> trace x86_ipi_db(ffff800028ff3ff0) at x86_ipi_db+0x19 x86_ipi_handler() at x86_ipi_handler+0x112 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc syscall(ffff80003b7505a0) at syscall+0x1048 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x74ddb0c02600, count: -6