last executing test programs: 1.841877233s ago: executing program 2 (id=3): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$vm_swapencrypt(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r0, 0xcd604406, &(0x7f0000000040)={0x7ffb, 0x0, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1dd00", 0x4, 0x5}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) ioctl$TIOCSETA(r1, 0xcd604406, &(0x7f0000000000)={0x7ffb, 0x5917, 0xfffbfff0, 0x0, "d6a24900b178926c79486b47c1dd00", 0x3, 0x5}) ioctl$TIOCSETA(r0, 0xcd604407, &(0x7f0000000040)={0xa, 0x2000000, 0x2, 0x800005, "2c0d000000024000a400000300", 0x4, 0x8}) openat$bpf(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendsyslog(&(0x7f0000000080)="ea71a8a954b144ad531c8f9c7d651f2dba1ee0b020ce85e15710deb4fbbfa44185ae52b2e678485d49609f3e1a87c5f374789d5db83e9a", 0x7cca092a16f11d55, 0x1f) 1.724689489s ago: executing program 7 (id=8): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x53}) r0 = syz_open_pts() close(r0) close(0xffffffffffffffff) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000040)={0x1000f67c, 0x2, 0xb, 0x5fffff7f, "00009b06efffffffffffffff0581004800", 0xb, 0x40000d}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000fc0)="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", 0x2b9}], 0x1) getgroups(0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) sysctl$kern(&(0x7f0000000000)={0xa}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) 1.607746881s ago: executing program 2 (id=9): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) r0 = syz_open_pts() close(r0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r1, 0x2c322bb18de6ea7a}], 0x1, 0x3) openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) r2 = syz_open_pts() select(0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) setsid() ioctl$TIOCSCTTY(r2, 0x20007461) openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) writev(r1, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000180)="bb828371748515a3db1d5547dc63f6e5d7fdc3fe492882fa21197573f2323266818ce1fabe8512711dd65101fa8d599e8449353e9bcdd9d63d4a60c475317c71499563f72c61fd7e3ea5ce353345ba8418c0862e156b145d7a22b61cb5056bf6bf5e7484d07798791f1462f8a600b356798fe188382d750137d86c630003466f1e230344aed924bce17291e302ceb22e2da82230563158b2e88bdb614a2e7ddf96cb7c7172d2ef59f2782c95436cd9c2909766289fa7529c9b9ca2bca3fa34f8bd4172fa9cfafa6b45b78a6c38a3624211ce440da8ffab96f36fee4131ead5", 0xdf}], 0x2) 1.606734027s ago: executing program 0 (id=10): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x7) ioctl$TIOCMBIS(0xffffffffffffff9c, 0x8004746c, &(0x7f00000003c0)=0xffff) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x8, 0x3c94, 0x9, 0x5, 0x7, 0xfff, 0x5, 0x20ce}, 0x0, &(0x7f00000001c0)={0xffff, 0x5d, 0x9, 0x2, 0xfffffffffffffff9, 0x7fff, 0x10, 0x7f}, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x800a, 0x3, 0x1, 0x8}, {0x5c, 0x7, 0xfe, 0xc}, {0x9b1e, 0x22, 0xb, 0x1e}]}) sysctl$kern(0x0, 0x0, &(0x7f0000000100)="c2a650000001932445d3bea6a9b9695e0acf8d1ba3ee29d441aa6083c8c70600001c700c5a", &(0x7f0000000000)=0x25, 0x0, 0x0) sysctl$kern(&(0x7f0000000080)={0x0}, 0x0, &(0x7f0000000200)="d4c87584b1e3d4e24f3c762b2a04422d25ca3a5a1ef27e2726b31f367415ec74fe4efc7a7d319d0310dedf3a6034ad067633699627f314ff738dd836e6150b13a7c6b6562f0d8d4f4c7144acc47d086b5a10780ecbe6f6fab08a490a752cc27bd0a19aec768b0a9ae800284e4885f59e7f4dfbef1071e1e162b79625abb16ad7af23695e386f920bf85ebafbd1ab9dcade797782d5f398d32ad1ec343b23a5a682db4997c36c7762b61c59d0390591f222d5dae04a1d0020b935f40dee43f393945837d7ec5a230e9c8c604a601f4865c2e0", &(0x7f0000000300)=0xd2, &(0x7f0000000340)="c8c9f7e704e6c3de413610bd05aaf53aa9b7b12518dc8522132d90e1e9c39b5e7f9c9b797d06df991a", 0x29) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r2, 0x1000000029, 0xa, &(0x7f0000000600)="a54fe8c9efdcda82f20f1e2787e86c6bc7949b029f9e0cc794c5fb3ac4c501036c0413ccc68990bc634ddef9d0d103dd0aba41a7a69311ffe9ec94a01bd4a636eab8f77ea841337596c26597bddc238c914e6847804fe453024640312c11d4844acd1dedc89472a2c064b68724990231b8c51fb573f8eec6d7cf0d5aa73c77106bd93ecd22a2e43a9484eabcb7df69fd310f4589a3125d390b9f344a20af38d0cf4979f722cdf2e9b75b5c8de35969d32864e89bcd3c8718657e162425d2fd4f5f4119f84f5f66aba595fad0a1d751e412906b15533768f6bfd795bd", 0x4) ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) ioctl$WSMUXIO_INJECTEVENT(r1, 0x80185760, &(0x7f0000000000)={0x40000000, 0x0, {0x0, 0x100000fffffffe}}) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000280)="b100050300000400000000b101000000331c13fedca10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1c50500000051e2f0ad0900000000000c009b672f4d335c223e7d0c032bfa896443842102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c230000a37f50b60900000008e371a3f83400"/177, 0xb1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = semget(0x0, 0x1, 0x281) semop(r4, &(0x7f0000000380)=[{0x0, 0x7ff, 0x800}, {0x4, 0x80, 0x800}, {0x4, 0x7ff, 0x1000}, {0x3, 0x1, 0x1000}], 0x4) semctl$SETALL(r4, 0x0, 0x9, &(0x7f0000000100)) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x19, 0x5, 0x2) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x25}, 0x4, 0x0, 0x0, 0x0, 0x0) 1.570985279s ago: executing program 6 (id=7): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000c00)={0x3, &(0x7f0000000000)=[{0x81, 0x3, 0xb, 0x7}, {0x48, 0xd8, 0x0, 0x7}, {0x6, 0x8b, 0x1, 0x5}]}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x2000, 0x8, 0x4, 0xa}]}) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xa, 0x3, 0x1, 0x8}, {0x60, 0x7, 0xfe, 0xc}, {0x9b1e, 0x22, 0xb, 0x4}]}) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x2, 0x0, 0x4, 0x100000001}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x18, 0x3, 0x102) sendmsg(r2, &(0x7f0000000040)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0xff, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000580)="6788020000003a9aff51f672efa24a85abdd612dd68e59addecf932310663916329420647a57d2e697db0084410a8591426ee03ec5950b5a9fad40abe4daae5fa0b086d9d1ef9703b9ca57ebbe448b34fbb83d5c7a400fe6e10de06725bec8c95d2e305f05340053075ec99d9e6d1087aee0825778a44d14d43c062da0974f1030b7a3e61e921a78aa03393e09bbdb30f41b0893985dd6040c4fc42506127fbf5580adb4af83cababc", 0xa9}], 0x1, 0x0}, 0x402) sysctl$kern(0x0, 0x0, &(0x7f0000000240)="c2a650000001932445d3be05a9b9695e0acf8d1ba3ee29d441ab6083c8c70600001c700c5a1f3fd13b33fcdf93141219d726a83dbe14a6669cdd8e306a1bab63559f0fb0e9fa064a9eff186d5ccda6d0182c4b1d1365df7d24bffb4f4aa3e00718096567b9bb800d0a4a26fb5a94b82cccc846cdcd81ffc22088f7f2dcfa3a8b9c", &(0x7f0000000000)=0x81, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) sysctl$kern(&(0x7f0000000140)={0x1, 0x4d}, 0x2, &(0x7f0000000180)="f9d3fa8d047a1212a1", &(0x7f0000000200)=0x9, &(0x7f0000000400)="4d9a70e62a93d28d335cbfb18deb8d67e0025d50efea02050299b52c4ed55fc67078ce406adeea804f6c3df13ac87c9d446cdeb3beed41cafd5b7ae43e0ad344aadc460a2fca33327ad1c7d70a5faa00ee946a226d5fba2ceb0ed503503fded94ea509267a2e044c4d871b8d595e1845b0156b1a08b9db6cd4d5bd6076ce6b381dfa28dd4076c36e24b1bac524cacfcb4682f4a94d9b8f5793b62f28d084196f586627a84a37c3ae015491c3efd8a6e74abf3e60cc948cd20229399b36df8018768de9d82412cbfa9af31ed0e8b180b4430f5b79e508c4fa22", 0xd9) 1.483706556s ago: executing program 0 (id=11): ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffff9c, 0xc02464bb, 0x0) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = shmget$private(0x0, 0x2000, 0x88, &(0x7f0000001000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000040)="72a1cb1ce93fee603bd159af", 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) madvise(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) recvmsg(r2, &(0x7f0000000100)={0x0, 0x1b, &(0x7f0000000240)=[{&(0x7f0000000140)=""/218}, {&(0x7f00000002c0)=""/70}, {&(0x7f0000000340)=""/106}], 0x100000000000039d, 0x0, 0x24}, 0x0) madvise(&(0x7f0000233000/0x3000)=nil, 0x3000, 0x1) 1.483164655s ago: executing program 5 (id=6): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0xfffffffffffffffd, 0x2, 0x100200000, 0x200100000004, 0x7, 0xa77, 0xffffffffffffffff, 0x4, 0x6, 0x95, 0xfffffffffffffff8, 0xffffffffffffffff, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x400000000100], [0x8, 0x80000001, 0xfffffffffffffffa, 0xff, 0x5e, 0x100000000007b98, 0x800, 0x6, 0x0, 0x7fffffffffffffff], [0x8, 0x8000, 0x40000000, 0x800, 0xb, 0x11001, 0xffffffff00000000], [0xc, 0x800001fffffffffb, 0x80000001, 0x4000002, 0xfffffffffffffffa, 0x90000000], [{0x20, 0x10400000, 0x0, 0x7d06}, {0x2, 0x1e, 0x5, 0x20000000000000}, {0x9, 0x0, 0xfffefffe, 0x280}, {0xb, 0x80004, 0x5, 0xffffffffffffffff}, {0x8, 0x2, 0x7f, 0xc}, {0xc69, 0x2000009, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0x1, 0x100, 0x1, 0xb}], {0x1, 0x800008, 0x80000006, 0x3}, {0xfffe, 0x6, 0x6d5, 0x6}}}) r0 = kqueue() pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x10000) kevent(r0, &(0x7f0000000000), 0x96, 0x0, 0xfffa4961, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) syz_open_pts() r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DIOCCLRSTATUS(r4, 0xc0284416, &(0x7f00000010c0)={'./file0\x00', &(0x7f00000000c0)=""/4096, 0xf, 0xffffffff, 0x9, 0x2}) ioctl$DIOCXBEGIN(r5, 0xc0104451, &(0x7f0000000040)={0x1, 0x408, &(0x7f0000001340)=[{0x0, '\x00', 0xa1}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket(0x18, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0xffffffff, '\x00', 0x3}, 0x1c) ioctl$DIOCXCOMMIT(r4, 0xc0104452, &(0x7f0000000040)={0x0, 0x40a, 0x0}) kevent(r2, &(0x7f0000000040)=[{{}, 0xfffffffffffffffa, 0xff, 0x20000000, 0x4, 0x6}, {{r1}, 0xfffffffffffffffb, 0x82, 0x2, 0x8, 0x6}, {{r3}, 0xfffffffffffffff7, 0x80, 0x4, 0x800, 0x7d8846fb}, {{r3}, 0xfffffffffffffff7, 0x78, 0x20, 0x5, 0x8}, {{r2}, 0xfffffffffffffffc, 0x40, 0x1, 0x5, 0xb3}, {{r0}, 0xfffffffffffffff7, 0x1, 0x4, 0x5, 0x20}], 0x101, &(0x7f0000000340)=[{{r1}, 0xfffffffffffffffe, 0x2, 0x80, 0x8000000000000001}, {{r1}, 0xfffffffffffffffb, 0x2, 0x2, 0x7fffffff, 0xa}, {{r0}, 0xfffffffffffffff8, 0x0, 0x1, 0x100000000, 0xc5}, {{r3}, 0xfffffffffffffff8, 0x43, 0x2, 0x8000000000000000, 0x5}, {{r3}, 0x0, 0xc8, 0x200ffff1, 0x6, 0x5e9e}, {{r3}, 0xfffffffffffffff7, 0x50, 0x2, 0x4, 0x9f5}, {{r0}, 0xfffffffffffffff7, 0x40, 0x2, 0x4, 0x9}, {{r1}, 0xfffffffffffffffa, 0x4, 0x0, 0x53d7, 0x75cf}], 0x1, &(0x7f0000000440)={0x10000, 0xdea5}) ioctl$VMM_IOC_RUN(r3, 0xc0285602, &(0x7f0000000700)={0x1, 0x8, {0x1, 0x344, 0x6}, 0x8, &(0x7f0000000480)={{0x6, 0x8, 0x2c, 0x7, 0x5, 0x0, 0x9, 0xf9}, {[0x5, 0x4, 0x9c07, 0x0, 0x45a, 0xb, 0x6dbd, 0x9, 0xfffffffffffffffa, 0x6, 0x0, 0x6, 0x3, 0x9, 0x1, 0x3, 0x40, 0xe3e7], [0x64ad, 0x5, 0x4, 0x884, 0xfffffffffffffffc, 0x2, 0xb, 0x7, 0x9000000000000, 0x2], [0xac, 0x0, 0xffffffffffffffc0, 0x4, 0xf, 0x9, 0x4], [0x6, 0xd0, 0x6, 0x3ff, 0x3, 0x3], [{0x1, 0x2, 0x6, 0x6}, {0x3, 0x5b54, 0x2f, 0xc}, {0x80, 0x7ff, 0x2, 0x6}, {0x7f, 0xffff, 0x40, 0xa}, {0xffff, 0x6, 0x7, 0x6}, {0x7, 0xdc95, 0x1ff, 0x9}, {0x2, 0x2, 0x0, 0x7ff}, {0x7fff, 0x3, 0x1, 0x7ff}], {0x1, 0x9, 0x3, 0x7}, {0x7, 0x9, 0x4, 0x2}}, 0x1}, 0x5, 0x5}) 1.482866049s ago: executing program 0 (id=12): sysctl$hw(&(0x7f0000000000)={0x6, 0x1}, 0x2, &(0x7f0000000e00), 0x0, 0x0, 0xfffffef5) sysctl$hw(&(0x7f0000000000)={0x6, 0x1}, 0x2, &(0x7f0000000e00), 0x0, 0x0, 0xfffffef5) (async) 1.481825863s ago: executing program 5 (id=13): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$WSKBDIO_SETDEFAULTBELL(r0, 0x80105705, &(0x7f0000000040)={0xfffffffe, 0xb4, 0x2, 0x5}) r1 = dup(r0) connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x1, 0x0, 0x1}, 0x8) (async) mknod(&(0x7f00000000c0)='./file0\x00', 0x40, 0xfff) ioctl$WSKBDIO_GETDEFAULTKEYREPEAT(r0, 0x400c570a, &(0x7f0000000100)) r2 = socket$inet(0x2, 0x5, 0x2) setsockopt$sock_timeval(r2, 0xffff, 0x1005, &(0x7f0000000140)={0x6, 0x60}, 0x10) (async) ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000180)=0x77e) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setegid(r5) (async) ioctl$WSKBDIO_GETENCODING(r1, 0x4004570f, &(0x7f0000000240)) (async) readlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/68, 0x44) (async) sysctl$kern(&(0x7f0000000340)={0x1, 0x16}, 0x2, &(0x7f0000000380)="2365095a8141679d1c195cdf0b9550eeaf7c9680d034fd3ac749512b037d3cf95cd5ec55e55f4763195286e4530af99f6f8b67d493e9ed678d9fac5012206fd2fe01f458131521c71a65f748715fd2dfcc25871f4b0450cb410675950441f573ef7346bb583ddd779a70a10c115ae4", &(0x7f0000000400)=0x6f, &(0x7f0000000440)="eab504c6c2bffb806beab03d7ce5918c7b071e1268be0aeb74d6f07ff4e5bce60842ce85b3a19f6ad9978742c2bd14d4", 0x30) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000480)={0x0, 0x78ad, 0x8, 0x35315842, 0x5, [0x0, 0x0, 0x0, 0x0], [0x8, 0xffffff84, 0xa, 0x3], [0x7f, 0xa, 0x100, 0x9], [0x83, 0x48, 0x68b6, 0x2]}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000500)={r7}) (async) clock_settime(0xffffffffffffffff, &(0x7f0000000540)={0x4, 0xfffffffffffffff7}) futimens(r2, &(0x7f0000000580)=[{0xff, 0x7}, {0x2, 0x2}]) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4) (async) ioctl$WSKBDIO_SETBACKLIGHT(r1, 0x800c5712, &(0x7f00000005c0)={0xffff, 0x100, 0xffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000600)={0x1, 0x21b, 0x10001, 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r1, 0xc01c64ad, &(0x7f0000000640)={r6, 0x2b, 0x0, 0x6, 0xe027, 0x10001, r8}) (async) r9 = msgget$private(0x0, 0x60) (async) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r11 = getpgid(r3) msgctl$IPC_SET(r9, 0x1, &(0x7f0000000740)={{r4, r5, r10, r5, 0x24, 0x9, 0x0, 0x0, 0xc7}, 0x0, 0x0, 0xfffffffffffffff8, 0x1, 0x9, r3, r11, 0xf, 0x0, 0x1, 0x0, 0x4}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000980)={0x0, 0x3, 0x0, 0x81, 0x9}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000ac0)={&(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0], 0x1, 0x6, 0x4, 0x3, 0xffffff14, 0x8, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000b00)={&(0x7f0000000800)=[0x0], &(0x7f0000000840)=[{}, {}], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x1, r12, r13, 0x12, 0xffffa143, 0x6, 0x2, 0x8, 0x3e4}) (async) ioctl$WSKBDIO_SETDEFAULTKEYREPEAT(0xffffffffffffffff, 0x800c5709, &(0x7f0000000b80)={0x80000001, 0xfffffff1, 0x5fa0}) 1.481596826s ago: executing program 4 (id=5): r0 = socket(0x18, 0x3, 0x0) ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000200)={0x16a, 0x5, 0x2, 0x2f6bce3c, "eb5638c988dca1ee2cf85d4e8f4fc90b68a5e98d", 0x6, 0x4}) r1 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sysctl$kern(&(0x7f0000000000)={0x1, 0x35}, 0xb, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000140)=@in={0x10, 0x2, 0x3, 0x4}, 0x10, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000009}, 0x93, 0x3800, 0x0) ioctl$DIOCRCLRADDRS(0xffffffffffffffff, 0xc4504442, &(0x7f0000000380)={{'./file0\x00', './file0\x00', 0x8, 0x7}, 0x0, 0x0, 0x0, 0xcc6, 0xf, 0x0, 0x5, 0x40, 0x850}) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x29}, 0x4, &(0x7f0000000040)="591e02690d970f919de511b569946fecaf82a16800b8a49973255531c9a2d0792e74ebd2c49646bc31b5ead37933061cc2dc5f225e95f07f333dc43fcb49cafe1ed3d421fd4fd3f32ace6b2999d9bb440779ecdb0d4166e9604ba73a4a689b19b0658252ea5541a11053f3748d384a8476f63ff5c0687ec22699c20a6e670a3036c56bf2d5aa6f47b582662288de44df8b254569aeeeb73f2c1f9b5cf57915bb0efa870a27f0af3560b6a577f801e6fa9bf2a5bee8009bfe4560f704a692e3cf649d4ad7b1d88ee234b22787755feb60228128d399cc843942ff2e8979bf51d74a1589c48da8a31819139947f4a3949720bd", &(0x7f0000000180)=0xf2, &(0x7f0000000280)="fd5a08a328005ad1616c6da9ae7d4db2c15c6be11916fe6d39238b85d2f314b7299cc52b3dcbc9414bc70324dc25bb2ce03876e997bfbfa04a4e8cb29f838ef9f9b4686298b1bac42d196f95c05e4308fd5acd7c3cfb7e70e78b076d9e5eab695d0619b74471ac7c70044e13fd8aab1f6a3628c6c7c87331b4531e15564212f2058e800dc4a48e3b8915dd35d73f01a7363d934c462089c39bd3e16e3f0efe83df57f0df2b65e239c3b89a5aba6c925bc4ed758cedf513239e840123310de46c2e19983e21aa2c6697e4298d71bb49e515a265d5f0", 0xd5) 1.481243724s ago: executing program 0 (id=14): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000040)={0x40, 0x7fffffff, r0}) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x52) (async) r2 = socket(0x36, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000300)="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", 0x17c, 0x80e, 0x0, 0xfffffffffffffe1c) (async, rerun: 32) mquery(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x38000000000) (async, rerun: 32) r3 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0xc1206951, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) ioctl$DIOCSETIFFLAG(r0, 0xc0284459, &(0x7f0000000100)={'./file0\x00', 0x0, 0x1, 0x7, 0x7ff, 0xc0e}) (async) fchflags(r0, 0x0) 374.998582ms ago: executing program 7 (id=15): open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xac1400ff}, 0x10) r0 = socket$inet(0x2, 0x8003, 0xfc) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x2, 0x1, 0x3], 0x4, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffff9c, 0xc06864a2, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0x5, 0x2, 0x7, 0x0, {0xffffffff, 0x1, 0xe40, 0x1, 0x2, 0x6000, 0x40, 0x8, 0x2, 0x64, 0x7, 0x6, 0x1c000, 0x3, "90f2981081bfa4195e99d1981ffddcb7444f47604bd4a174bf526b1960b9a8bf"}}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000001300), 0x800, 0x0) r5 = fcntl$dupfd(r4, 0xa, r3) getsockopt$sock_cred(r5, 0xffff, 0x1022, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000540)={r2, 0x5, &(0x7f0000000480)=[0x3, 0x40, 0x2c73, 0x6, 0xd], &(0x7f00000004c0)=[0x8], &(0x7f0000000500)=[0x1, 0x5, 0x8]}) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000001500), &(0x7f0000000000)=0xffffffffffffffac, 0x0, 0x20) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="d690521ab899157da094e371f7b1e7b94c8512fd47e9cdf2ad8577124e454dc78682ccebac42e8888ff9227adbcc6508d2e1732d7cbc1e88c83474e71075169b3b1cd28ef002ceed6e98a0afa377429719bfe6a752dce432de339921def4dd8c98bdcc5de873fa904ec43c347f66ebedddc3e11adc0bd1a61302ff079000cd77f0d5cb28040db9d4da2ede61538d3926e89a109e7f3e01127cd15e8fdf43ecea9486e3cc78a4218979b0894fb5eabadd4fd069315dde074fbd20eb795f9c29b6a2d0ec47105abbe25d3cf558e9b720ef46c6154d5eb03fa8f426360aa26d9c0a28c641a21fee1b4ab373e056e423e5bb0404", 0xf2}, {&(0x7f0000000140)="f79487f03cc9fc38c9fe4aab68a63d152842a092fe4339f9192cd8605958a126a9851c5fb7caa20a6225d8b62967b1a4cda6d51d3c28f358584f9587b2965fe4756f0f83473f4e744730bbe35fb9e3924215158bd4683ea8b56464e039d3782b94cb4ae45d86b2fc6f5b7fafa83d7e65c512b0c96994a0f80a80e8b0e07c01390e1351a99fae0d3710d64e7a335ff21b05c2bf6237340fe83c8a562fc1de64eada6bd307bf", 0xa5}, {&(0x7f0000000200)="e51e8f6477e4340001ce8d170a4b585c71162b0f57113c5621a1418ec4c51210c982b35a01ff451604baf994fa8202ed5b0d0f31cf34e9c5eaaa1f9fe9dc60c9dd83b9fbe8c538c7517b06cd420aa4253b9b054a6925d9f5fe18998c94049d26b7b1e426c03a317a6fe7f9721f71fcf64639e75708370690f24438caf9816240ca62f835e8ebf6f7d6620bbbd1a4c47ef44c003b88b8c3badcb8374b3b4e4814f3e7d450bea2d92c44fb880fdedb56310dfcaeb1dbe0de25dc72289da9fa6e00a5a73af533548b1141126cdec8ce7e64e329a704", 0xd4}], 0x3) open$dir(&(0x7f0000000300)='.\x00', 0x80, 0x4a) (async) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x0, 0xac1400ff}, 0x10) (async) socket$inet(0x2, 0x8003, 0xfc) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000380)={&(0x7f0000000340)=[0x0, 0x2, 0x1, 0x3], 0x4}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffff9c, 0xc06864a2, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, 0x5, 0x2, 0x7, 0x0, {0xffffffff, 0x1, 0xe40, 0x1, 0x2, 0x6000, 0x40, 0x8, 0x2, 0x64, 0x7, 0x6, 0x1c000, 0x3, "90f2981081bfa4195e99d1981ffddcb7444f47604bd4a174bf526b1960b9a8bf"}}) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000001300), 0x800, 0x0) (async) fcntl$dupfd(r4, 0xa, r3) (async) getsockopt$sock_cred(r5, 0xffff, 0x1022, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r5, 0xc01064c7, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_SETGAMMA(r1, 0xc02064a5, &(0x7f0000000540)={r2, 0x5, &(0x7f0000000480)=[0x3, 0x40, 0x2c73, 0x6, 0xd], &(0x7f00000004c0)=[0x8], &(0x7f0000000500)=[0x1, 0x5, 0x8]}) (async) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000000)) (async) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1d}, 0x4, &(0x7f0000001500), &(0x7f0000000000)=0xffffffffffffffac, 0x0, 0x20) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="d690521ab899157da094e371f7b1e7b94c8512fd47e9cdf2ad8577124e454dc78682ccebac42e8888ff9227adbcc6508d2e1732d7cbc1e88c83474e71075169b3b1cd28ef002ceed6e98a0afa377429719bfe6a752dce432de339921def4dd8c98bdcc5de873fa904ec43c347f66ebedddc3e11adc0bd1a61302ff079000cd77f0d5cb28040db9d4da2ede61538d3926e89a109e7f3e01127cd15e8fdf43ecea9486e3cc78a4218979b0894fb5eabadd4fd069315dde074fbd20eb795f9c29b6a2d0ec47105abbe25d3cf558e9b720ef46c6154d5eb03fa8f426360aa26d9c0a28c641a21fee1b4ab373e056e423e5bb0404", 0xf2}, {&(0x7f0000000140)="f79487f03cc9fc38c9fe4aab68a63d152842a092fe4339f9192cd8605958a126a9851c5fb7caa20a6225d8b62967b1a4cda6d51d3c28f358584f9587b2965fe4756f0f83473f4e744730bbe35fb9e3924215158bd4683ea8b56464e039d3782b94cb4ae45d86b2fc6f5b7fafa83d7e65c512b0c96994a0f80a80e8b0e07c01390e1351a99fae0d3710d64e7a335ff21b05c2bf6237340fe83c8a562fc1de64eada6bd307bf", 0xa5}, {&(0x7f0000000200)="e51e8f6477e4340001ce8d170a4b585c71162b0f57113c5621a1418ec4c51210c982b35a01ff451604baf994fa8202ed5b0d0f31cf34e9c5eaaa1f9fe9dc60c9dd83b9fbe8c538c7517b06cd420aa4253b9b054a6925d9f5fe18998c94049d26b7b1e426c03a317a6fe7f9721f71fcf64639e75708370690f24438caf9816240ca62f835e8ebf6f7d6620bbbd1a4c47ef44c003b88b8c3badcb8374b3b4e4814f3e7d450bea2d92c44fb880fdedb56310dfcaeb1dbe0de25dc72289da9fa6e00a5a73af533548b1141126cdec8ce7e64e329a704", 0xd4}], 0x3) (async) 374.605149ms ago: executing program 6 (id=16): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() mquery(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x10, r0, 0x0) close(r0) syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x5, 0x2, 0x8, 0x3, 0x42, 0x10, [{0x5, 0x3, 0xfffff115, 0x1}, {0x3, 0xffffffff, 0x6, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0x4, 0xe2, 0x0, 0x100}, {0x3, 0x2000007, 0x5, 0x84}, {0x7890, 0x200, 0x8, 0x2}, {0x4, 0x800, 0x3, 0xfffffffe}, {0x207, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x1000, 0x6, 0x7fff}, {0x5, 0x1, 0x6, 0x8bfd}, {0x800, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x401, 0x4, 0x400009, 0xa1}, {0x3, 0x6e3, 0x2, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0xc}, {0x9be2, 0x1, 0x2, 0x400}]}) poll(&(0x7f0000000000), 0x35, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r3 = setsid() fcntl$setown(r2, 0x6, r3) fcntl$setown(r1, 0x6, r3) ioctl$AUDIO_SETPAR(r1, 0xc0404125, &(0x7f0000000000)={0x1, 0x1, 0x8, 0x4, 0x1, 0x17700, 0x8, 0x69942ad1b38c7c1e, 0x2a, 0x15e8}) 374.212308ms ago: executing program 7 (id=17): r0 = semget(0x2, 0x3, 0x200) semop(r0, &(0x7f0000004cc0)=[{0x2, 0x3, 0x1000}, {0x1, 0x0, 0x1000}], 0x2) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x2, 0xffffffffffffffff) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = socket$inet(0x2, 0x8003, 0x0) setsockopt(r5, 0x0, 0x6a, 0x0, 0x0) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$DIOCXBEGIN(r6, 0xc0104451, &(0x7f0000000040)={0x2, 0x408, &(0x7f00000000c0)=[{0x0, './file0\x00', 0x40}, {0x0, './file0\x00', 0xbd}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DIOCXCOMMIT(r4, 0xc0104452, &(0x7f0000000040)={0x0, 0x40a, 0x0}) r7 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) ioctl$BIOCSETIF(r7, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) ioctl$BIOCSETF(r7, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x64, 0x0, 0x8, 0x6}, {0x1, 0x2d, 0xb1, 0x2}, {0x2016, 0x3, 0x80, 0x7}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) semctl$GETNCNT(r0, 0x3, 0x3, &(0x7f0000000240)=""/229) closefrom(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/66, 0x42}, 0x3800) readv(r1, &(0x7f0000000200)=[{&(0x7f0000002640)=""/4121, 0x1019}], 0x1) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) sysctl$hw(&(0x7f0000000000)={0x6, 0x4}, 0x2, &(0x7f0000000040)="47509155a28e6b0bfbd458a84e2ab14c575e83d007af27dd6c00338e400b7fc5ee5853d0a39d65a303de0a078655fc55801bf13c3dc08273095901a4d325f18654ed436c44851d79b2024ff5fdb04cc47f387f7467217e572f93ff05d0733272c6a5e7e167b340e0a27e2420b528598d58005b08353afea1113b3e547b93357a02083201487076d650b6bb78f27a44c7ee7634a9179d9204463b96015cfa413ec2e728624a934d571e9c01c3de199a2968e5c11711e5cb1479c1306e11f731215433a59b675f9f397325f419bca2988d8cab9c8a8068db39b48acfe556600f10d427dba0fcf36392a68da0a23d50bd5030bd8c7d3a2fd199cf", &(0x7f0000000140)=0xf9, &(0x7f0000000180)="882c", 0x2) chmod(&(0x7f00000001c0)='./file0\x00', 0x5) minherit(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) 373.959299ms ago: executing program 0 (id=18): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000680), 0x80, 0x0) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f00000006c0)={@v4=@local={0xac, 0x14, 0x0}, @v6=@mcast2, @v6=@remote={0xfe, 0x80, '\x00', 0x0}, @v4=@multicast1, 0x8, 0x4, 0xff, 0xde, 0x40, 0x9, 0x2, 0x11}) lstat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 223.064539ms ago: executing program 2 (id=19): r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000100)={0x5, 0xdfc6, 0xfffffffe, 0x90, "ff0600000002586c000000d200000000000c00", 0x45, 0x40000001}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000080)={0x9, 0x95, 0x2, 0xd122ec2, "a07f64e1eb4a3bc6e3a80189f661ae0a2980e716", 0x7fff, 0x3ff}) ioctl$TIOCSTAT(r0, 0x20007465) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x23, 0xffffffffffffffff, &(0x7f0000000040)) 222.758087ms ago: executing program 3 (id=4): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x1003) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$DIOCGETQUEUES(r0, 0xc148445e, &(0x7f0000000ac0)={0x1, 0x401, {'\x00', './file0/file0\x00', './file0/file0\x00', './file0/file0\x00', {{0x1, 0x101}, {0x43, 0xe}}, {{0x9, 0x5}, {0x4, 0x4}, 0x3}, {{0x63a49ed2, 0x9}, {0x6, 0xea}, 0x7}, {0x2, 0x3201, 0x40, 0x8}, 0x0, 0x80000000, 0x721f, 0xe14, 0x9}}) ioctl$TIOCSETA(r0, 0xcd604404, &(0x7f00000001c0)={0x1, 0x2, 0x7, 0x2f, "20180000000001002500", 0xfffffffb, 0xb}) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 222.214064ms ago: executing program 4 (id=20): r0 = socket$inet6(0x18, 0x3, 0x6) bind$inet6(r0, &(0x7f00000000c0)={0x1c, 0x18, 0x1, 0xffffffff, "ffefefffffff01000f800000000000fe", 0x7}, 0x81) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000180)={0x107777, 0x82, 0x8988, 0x801b217, "150000060209000000000600", 0x40000, 0x8000b}) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x3, "097edbddfb76b8f2345b0883d1048d00"}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x5a}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x48, 0x0, 0x37) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='x\x00') r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x4) 221.393865ms ago: executing program 5 (id=21): r0 = syz_open_pts() close(r0) closefrom(0xffffffffffffffff) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$vm_swapencrypt(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendsyslog(&(0x7f0000000080)="ea71a8a954b144ad531c8f9c7d651f2dba1ee0b020ce85e15710deb4fbbfa44185ae52b2e678485d49609f3e1a87c5f374789d5db83e9a", 0x7cca092a16f11d55, 0x1f) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x1, 0x8, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r2 = fcntl$dupfd(r1, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000080)) r3 = socket(0x11, 0x3, 0x0) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef16ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139bf82f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb6a998df192f9781ea6e2ec58904007b6400008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x40c, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01864c2, &(0x7f0000000040)={0x0, 0x2, r3, 0x0, 0xe4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) 221.011962ms ago: executing program 7 (id=22): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) futimens(r0, &(0x7f0000000100)=[{0x0, 0x5b}, {0x7fffffff, 0xfffffffffffffffb}]) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x4, 0x5, 0x7, 0x7fffffff}, {0x17c, 0x3, 0x0, 0x5}, {0xfa64, 0x4, 0x2f}, {0x1003, 0xc, 0x3, 0x9b}]}) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) futimens(r0, &(0x7f0000000100)=[{0x0, 0x5b}, {0x7fffffff, 0xfffffffffffffffb}]) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x4, &(0x7f0000000040)=[{0x4, 0x5, 0x7, 0x7fffffff}, {0x17c, 0x3, 0x0, 0x5}, {0xfa64, 0x4, 0x2f}, {0x1003, 0xc, 0x3, 0x9b}]}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) (async) 1.39301ms ago: executing program 5 (id=23): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x11, 0x3, 0x0) connect(r1, &(0x7f00000001c0)=@un=@file={0xfa, 0x0, './file0\x00'}, 0xa) recvmmsg(r0, &(0x7f0000003c80)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000003b80)=""/206, 0xce}, 0x3}, 0x38, 0x2, 0x0) closefrom(r0) socket(0x11, 0x3, 0x0) socket(0x18, 0x2, 0x1) socket(0x18, 0x2, 0x0) r2 = kqueue() ioctl$VMM_IOC_WRITEREGS(0xffffffffffffff9c, 0x82485608, &(0x7f0000000100)={0x9, 0x1, 0x0, {[0x5, 0x0, 0xffffffffffffffd, 0x2, 0xe, 0x0, 0x9, 0x0, 0x40b4fc43, 0x0, 0x0, 0xfffffffffffffffe, 0x80, 0xfffffffffffffffb, 0x4, 0x8, 0x5, 0x1], [0x63, 0x800, 0x4, 0xfffffffffffffffc, 0x0, 0x200000000003, 0x10, 0x9, 0x10, 0xfffffffffffffffb], [0x7fffffffffffffff, 0x0, 0x0, 0xd34, 0x9, 0x0, 0x6], [0x1, 0x0, 0xfffffffffffffffc, 0x165, 0x200, 0xb], [{0x5, 0x10, 0x7ffffffd, 0x7fffffffffffd}, {0x2, 0x100000, 0x1006}, {0x1000, 0x3, 0x4fec, 0x9}, {0x3, 0xe246, 0xcd0, 0x7}, {0xfffd, 0xa832, 0xc8, 0x1}, {0x9, 0x2, 0x0, 0x1}, {0x10, 0x0, 0xaa, 0x4000000000000000}, {0x0, 0xfffffff5, 0xc00000, 0x200000000004}], {0xfffc, 0x10, 0x20000003, 0xf5a752c}, {0x0, 0x5, 0x403}}}) r3 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r3, 0xc0106924, 0x0) ioctl$FIONREAD(r3, 0x8080691a, 0x0) kevent(r2, 0x0, 0x6, 0x0, 0x15, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIONREAD(r3, 0x8020699d, 0x0) r4 = semget$private(0x0, 0xf, 0x692) semctl$SETALL(r4, 0x0, 0x9, &(0x7f0000000300)=[0x401]) openat$pf(0xffffffffffffff9c, &(0x7f0000003d40), 0x8, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="84ced6d8659c57a3397f3491e94be4a54c4eb5a2c0ad13ba2e517c4064c5f51fac388dbcb62a499d5d617fb81562b683cc5676dd839ae8cfc977c8d3eb59276751f565926f9c8bbebd73387c3043447838bc70", 0x53}], 0x1) 991.114µs ago: executing program 4 (id=24): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0x9) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x5, 0xe5, 0x8, 0x3, 0x1], 0x5, 0x30000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffff9c, 0xc00464be, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000180)={r2, 0x66, &(0x7f0000000100)=""/102}) 605.823µs ago: executing program 0 (id=25): sysctl$kern(&(0x7f0000000080)={0x1, 0xa}, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x8, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$DIOCGETSTATE(0xffffffffffffffff, 0xc1084413, &(0x7f0000000040)={{0x4, './file0\x00', [{[@v6=@rand_addr="00000000090000000004002000", @v6=@empty], [0xd, 0x40], 0x0, 0x2}, {[@v6=@loopback, @v4=@rand_addr=0xa], [0x46], 0x4, 0xe}], {{0x246, 0x48, 0xfa, 0x7ff}, 0x6543, 0x409, 0xfff00000, 0x8002, 0x8, 0x17, 0x16}, {{0x0, 0x7, 0x1, 0x7e}, 0x10007ffd, 0x7, 0x1, 0x6, 0xe, 0xf0}, @v4=@multicast2, 0x3, 0xe, 0xffffffff, 0x723b, 0x0, [[0xffbffff7, 0xbc], [0x5, 0x834c]], [[0xfbffffff, 0x4], [0x9, 0x3]], 0x9, [0x4, 0x79], 0xffff, 0x18, 0x6, 0x1, 0x44, 0x3, 0xb, 0x83, 0xb, 0x8, 0xfe, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = syz_open_pts() writev(r2, &(0x7f0000000040)=[{0x0}], 0x1) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) socket(0x11, 0x3, 0x0) listen(r1, 0x7fff) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x60, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa3}}}}}}) syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x60, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa3}}}}}}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)="f284547ec87ae3ad1aad0ee27ee88eacb67a08038280f2a01ae7a48358ae16e2fba4ee0ddad57fa2b502658b5723516552c4349404b44e61906eb367dd016164244e321c3f3fa4a301cca907a63fe5682806e86f7b9ed732b01c843a7c13b71430810706a94f10d2cb6414e1fffa7b8cceb21a5bb7f7e286998196fa9ddbf1180a09fbdfb5fa39c535", 0x89}], 0x1) futimes(r0, &(0x7f0000000180)=[{0x8, 0x6}, {0x3, 0xf}]) r3 = socket$inet(0x2, 0x3, 0x1) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) syz_emit_ethernet(0x242, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r4 = socket(0x18, 0xc003, 0x3a) setsockopt(r4, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r4, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0x68, &(0x7f0000000280)={{0x1c, 0x18, 0x1, 0x9, "57b0e9f8f5b0840fe7d9c41353242549", 0xfff}, {0x1c, 0x18, 0x1, 0xfffffffb, "d9c46ef3dc7900d1afac87c56e2db1ba", 0x7}, 0x6, [0xffffffff, 0x8, 0xe784, 0x508, 0x7ff, 0x6, 0x400, 0x7fffffff]}, 0x5c) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x7, 0x6, 0x8}, {0x6c, 0x9, 0xb1, 0x6}, {0x6, 0x14, 0x7, 0xc}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x1000, 0xb, 0xf, 0x2}, {0xfff7, 0xde, 0x3, 0xc}, {0x9, 0x6, 0x0, 0x54}, {0x4, 0x0, 0xc, 0xfffffffe}]}) 0s ago: executing program 4 (id=26): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0xf94a14e19cec2761, 0x0) ioctl$DIOCSETDEBUG(r0, 0xc0044418, &(0x7f0000000040)=0x2) semget$private(0x0, 0x0, 0x140) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. pckbd_enable: command error uWvARmN_fINauG:lt (SP0Lx ffNfOfTf 0LO00W6EcREeD3 dOdN7 8S,YS 0Cx9A8,LL 1 100, 5 01 ) -E>XI Te 0 kd erStopped at savectx+0xae: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND 328282 73834 0 0 0x4000000 1K syz-executor *513923 99326 0 0x2 0 0 syz-executor savectx() at savectx+0xae end of kernel end trace frame: 0x734d5567cc90, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu1: uvm_fault(0xfffff0006ce3dd78, 0x98, 0, 1) -> e ddb{0}> show kasan No such command ddb{0}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x734d5567cc90, count: -1 ddb{0}> show registers rdi 0 rsi 0 rbp 0xffff80002a296660 rbx 0 rdx 0 rcx 0xffff800045ffd230 rax 0x34 r8 0xffff80002a296590 r9 0xffff80002a2963fc r10 0xc3aefab623681995 r11 0xfb873a5fff254bfa r12 0 r13 0 r14 0xffff800045ffd230 r15 0 rip 0xffffffff81c073ee savectx+0xae cs 0x8 rflags 0x46 rsp 0xffff80002a2965e0 ss 0x10 savectx+0xae: movl $0,%gs:0x688 ddb{0}> show proc PROC (syz-executor) tid=513923 pid=99326 tcnt=1 stat=onproc flags process=2 proc=0 runpri=24, usrpri=50, slppri=24, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ffdc90,0xffff800045ffcd10 process=0xffff80002a2249b0 user=0xffff80002a291000, vmspace=0xfffff0006e1df5c8 estcpu=0, cpticks=9, pctcpu=0.5, user=0, sys=9, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 58248 127844 195 0 2 0 0 syz-executor 58248 242149 195 0 3 0 0x4000080 fsleep syz-executor 73834 187752 5961 0 2 0 0 syz-executor 73834 328282 5961 0 7 0 0x4000000 syz-executor 92538 227154 89448 0 2 0 0 syz-executor 92538 251653 89448 0 3 0 0x4000080 sbwait syz-executor 58939 123272 56822 0 2 0 0 syz-executor 58939 505034 56822 0 3 0 0x4000080 fsleep syz-executor 58939 505551 56822 0 3 0 0x4000080 fsleep syz-executor 65599 183910 40794 0 2 0 0 syz-executor 65599 320875 40794 0 3 0 0x4000080 fsleep syz-executor 3408 449998 79140 0 3 0 0x80 nanoslp syz-executor 3408 515647 79140 0 3 0 0x4000080 fsleep syz-executor 3408 101103 79140 0 3 0 0x4000080 fsleep syz-executor 21164 396527 37612 0 2 0 0 syz-executor 21164 180742 37612 0 3 0 0x4000080 fsleep syz-executor 21164 429637 37612 0 3 0 0x4000080 fsleep syz-executor 21164 78781 37612 0 3 0 0x4000080 fsleep syz-executor 43047 451143 59851 0 3 0x100002 0x80 sbwait arp 59851 474582 47036 0 3 0x100002 0x88 sigsusp sh 56822 345196 99326 0 3 0x2 0x80 nanoslp syz-executor 37612 70776 99326 0 3 0x2 0x80 nanoslp syz-executor 89448 16956 99326 0 3 0x2 0x80 nanoslp syz-executor 195 380153 99326 0 3 0x2 0x80 nanoslp syz-executor 40794 499597 99326 0 3 0x2 0x80 nanoslp syz-executor 79140 332782 99326 0 3 0x2 0x80 nanoslp syz-executor 47036 161807 99326 0 3 0x2 0x80 wait syz-executor 5961 433610 99326 0 3 0x2 0x80 nanoslp syz-executor *99326 513923 7266 0 7 0x2 0 syz-executor 7266 280319 1524 0 3 0x100002 0x88 sigsusp ksh 1524 340180 37183 0 3 0x10 0x88 kqread sshd-session 37183 224647 55787 0 3 0x12 0x80 kqread sshd-session 91787 465777 1 0 3 0x100003 0x80 ttyin getty 55787 126635 1 0 3 0 0x88 kqread sshd 96743 493019 33499 74 3 0x1100012 0x80 bpf pflogd 33499 259499 1 0 3 0 0x80 sbwait pflogd 26355 312930 93013 73 3 0x1100010 0x80 kqread syslogd 93013 316090 1 0 3 0x100002 0x80 sbwait syslogd 1665 8747 1 0 3 0x100000 0x80 kqread resolvd 92558 55721 8859 77 3 0x100012 0x80 kqread dhcpleased 39932 439562 8859 77 3 0x100012 0x80 kqread dhcpleased 8859 270044 1 0 3 0 0x80 kqread dhcpleased 19344 160398 0 0 3 0x14000 0x200 bored smr 52962 209328 0 0 2 0x14000 0x200 zerothread 95512 312965 0 0 3 0x14000 0x200 aiodoned aiodoned 20212 413291 0 0 3 0x14000 0x200 syncer update 30918 161037 0 0 3 0x14000 0x200 cleaner cleaner 25639 16161 0 0 3 0x14000 0x200 reaper reaper 62608 27712 0 0 3 0x14000 0x200 pgdaemon pagedaemon 21059 308823 0 0 3 0x14000 0x200 bored viomb 74081 317658 0 0 3 0x14000 0x40000200 acpi0 acpi0 2434 415212 0 0 3 0x14000 0x40000200 idle1 54175 72008 0 0 3 0x14000 0x200 bored softnet1 31051 43396 0 0 3 0x14000 0x200 bored softnet0 77436 504010 0 0 3 0x14000 0x200 bored systqmp 84417 430289 0 0 3 0x14000 0x200 bored systq 23625 88003 0 0 3 0x14000 0x200 tmoslp softclockmp 68952 249596 0 0 3 0x14000 0x40000200 tmoslp softclock 68452 285191 0 0 3 0x14000 0x40000200 idle0 1 400920 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &kq->kq_lock r = 0 (0xfffff0006fd4c0f0) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 kqueue_register+0x1000 #3 pselregister+0x135 #4 dopselect+0x456 #5 sys_pselect+0x25a #6 syscall+0xbd4 #7 Xsyscall+0x128 Process 73834 (syz-executor) thread 0xffff800045ff2d10 (328282) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83a02300) #0 witness_lock+0x5f1 #1 syscall+0xaf4 #2 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11061 12214K 12222K 166960K 12172 0 pcb 17 12K 12K 166960K 22 0 rtable 221 6K 6K 166960K 331 0 pf 34 17K 24K 166960K 59 0 ifaddr 41 7K 7K 166960K 43 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 1483 0 iov 0 0K 16K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1294 81K 81K 166960K 1382 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 19 69K 85K 166960K 151 0 proc 70 115K 147K 166960K 545 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 3 0 in_multi 89 6K 6K 166960K 89 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 3 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 49 228K 228K 166960K 49 0 exec 0 0K 1K 166960K 380 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 246 161K 169K 166960K 3303 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 45 90K 102K 166960K 1301 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 14 0K 1K 166960K 26 0 temp 35 9114K 9120K 166960K 3862 0 kqueue 14 22K 22K 166960K 31 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 36 0 30 1 0 1 1 0 8 0 rtentry 176 103 0 1 5 0 5 5 0 8 0 unpcb 144 50 0 31 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 11 0 5 1 0 1 1 0 8 0 arp 136 17 0 0 1 0 1 1 0 8 0 inpcb 328 76 0 67 1 0 1 1 0 8 0 nd6 152 21 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pfstitem 24 15 0 0 1 0 1 1 0 8 0 pfstkey 128 15 0 0 1 0 1 1 0 8 0 pfstate 448 15 0 0 2 0 2 2 0 8 0 pfrule 1360 21 0 20 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 412 0 0 26 0 26 26 0 8 0 art_table 40 413 0 0 5 0 5 5 0 8 0 art_node 32 103 0 10 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 2 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1592 0 124 92 0 92 92 0 8 0 ffsino 296 1592 0 124 114 0 114 114 0 8 0 nchpl 144 1811 0 111 64 0 64 64 0 8 0 vnodes 216 1697 0 0 95 0 95 95 0 8 0 namei 1024 5539 0 5539 1 0 1 1 0 8 1 percpumem 16 51 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 6219 0 6219 4 2 2 3 1 8 2 plimitpl 152 33 0 15 1 0 1 1 0 8 0 sigapl 424 469 0 420 7 0 7 7 0 8 0 knotepl 120 90 0 0 3 0 3 3 0 8 0 kqueuepl 224 26 0 16 1 0 1 1 0 8 0 pipepl 344 127 0 100 3 0 3 3 0 8 0 fdescpl 528 453 0 420 3 0 3 3 0 8 0 filepl 160 1663 0 1434 10 0 10 10 0 8 0 lockfpl 104 13 0 8 1 0 1 1 0 8 0 lockfspl 48 9 0 4 1 0 1 1 0 8 0 sessionpl 144 26 0 16 1 0 1 1 0 8 0 pgrppl 48 34 0 16 1 0 1 1 0 8 0 ucredpl 104 116 0 103 1 0 1 1 0 8 0 zombiepl 144 420 0 420 1 0 1 1 0 8 1 processpl 1232 469 0 420 5 0 5 5 0 8 0 procpl 664 503 0 443 5 0 5 5 0 8 0 sockpl 752 162 0 128 4 0 4 4 0 8 0 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl16k 16384 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 117 0 0 15 0 15 15 0 8 0 mcl2k 2048 27 0 0 4 0 4 4 0 8 0 mextrefs 64 27 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 198 0 0 13 0 13 13 0 8 0 bufpl 272 2301 0 105 147 0 147 147 0 8 0 anonpl 32 3765 0 0 31 0 31 31 0 247 0 amapchunkpl 152 8993 0 8481 20 0 20 20 0 158 0 amappl16 200 1708 0 1688 5 1 4 5 0 8 2 amappl15 192 21 0 21 2 2 0 1 0 8 0 amappl14 184 428 0 425 1 0 1 1 0 8 0 amappl13 176 121 0 108 1 0 1 1 0 8 0 amappl12 168 703 0 671 2 0 2 2 0 8 0 amappl11 160 8 0 7 1 0 1 1 0 8 0 amappl10 152 78 0 64 1 0 1 1 0 8 0 amappl9 144 274 0 274 1 1 0 1 0 8 0 amappl8 136 100 0 98 1 0 1 1 0 8 0 amappl7 128 149 0 135 1 0 1 1 0 8 0 amappl6 120 148 0 146 1 0 1 1 0 8 0 amappl5 112 99 0 89 1 0 1 1 0 8 0 amappl4 104 293 0 270 1 0 1 1 0 8 0 amappl3 96 1644 0 1541 3 0 3 3 0 8 0 amappl2 88 564 0 490 2 0 2 2 0 8 0 amappl1 80 10410 0 9775 15 0 15 15 0 8 0 amappl 88 2576 0 2406 4 0 4 4 0 92 0 uvmvnodes 80 98 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 453 0 420 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 453 0 420 1 0 1 1 0 8 0 vmmpekpl 168 5686 0 5654 2 0 2 2 0 8 0 vmmpepl 168 38422 0 36445 86 0 86 86 0 357 0 vmsppl 488 452 0 420 5 0 5 5 0 8 0 rwobjpl 80 14491 0 13426 24 0 24 24 0 8 1 pdppl 4096 913 0 840 89 14 75 81 0 8 2 pvpl 32 10487 0 0 85 0 85 85 0 265 0 pmappl 256 452 0 420 3 0 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 406 0 17 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace savectx() at savectx+0xae end of kernel end trace frame: 0x734d5567cc90, count: -1 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,6e) at comcnputc+0xd0 cnputc(6e) at cnputc+0x67 db_putchar(6e) at db_putchar+0x36d kprintf() at kprintf+0x223 db_printf(ffffffff8354e709) at db_printf+0x9b db_ktrap(6,0,ffff80003c3ef6a0) at db_ktrap+0xe3 kerntrap(ffff80003c3ef6a0) at kerntrap+0x243 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff800045ff2d10,fffff0006ad82cc0,ffff80003c3ef880) at dovutimens+0x368 sys_futimes(ffff800045ff2d10,ffff80003c3ef9d0,ffff80003c3ef920) at sys_futimes+0x208 end trace frame: 0xffff80003c3ef9c0, count: 0 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_read_1(3f8,5) at x86_bus_space_io_read_1+0x37 comcnputc(800,6e) at comcnputc+0xd0 cnputc(6e) at cnputc+0x67 db_putchar(6e) at db_putchar+0x36d kprintf() at kprintf+0x223 db_printf(ffffffff8354e709) at db_printf+0x9b db_ktrap(6,0,ffff80003c3ef6a0) at db_ktrap+0xe3 kerntrap(ffff80003c3ef6a0) at kerntrap+0x243 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dovutimens(ffff800045ff2d10,fffff0006ad82cc0,ffff80003c3ef880) at dovutimens+0x368 sys_futimes(ffff800045ff2d10,ffff80003c3ef9d0,ffff80003c3ef920) at sys_futimes+0x208 syscall(ffff80003c3ef9d0) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xa52e82a260, count: -16