last executing test programs: 1.462956747s ago: executing program 0 (id=1): kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}], 0x0, 0x0, 0x7, 0x0) sysctl$vm(&(0x7f0000001dc0)={0x2, 0xc}, 0x2, 0x0, &(0x7f0000001f00), &(0x7f0000001f40), 0x0) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x0, 0x8009, {[0xfffffbfffffffffe, 0x6, 0x2, 0x100200000, 0x400000000001, 0x85, 0xa77, 0xffffffffffefffff, 0x7, 0x3, 0x2, 0x9, 0x3, 0x200000000002, 0xd, 0x4, 0xfffffffffffffffe, 0x200], [0x8, 0x9e78, 0x7, 0x2, 0x5f, 0x100000000007b98, 0x804, 0x6, 0x4f8, 0x2], [0x20000fffffffe, 0x5, 0x10001, 0xe, 0x7, 0x11001, 0x9], [0xc, 0x800001fffffffffb, 0x5, 0x4000002, 0xbffffffffffffffa, 0x90000000], [{0x1d, 0x10410000, 0x4, 0x7}, {0x402, 0x1e, 0x5, 0x20000000000007}, {0xd, 0x0, 0xfffefff9, 0x280}, {0x8, 0x280004, 0x1, 0x80000001}, {0x2, 0x2, 0x4, 0x23}, {0x3, 0x2000009, 0x9, 0x2000000000000000}, {0x7, 0x8, 0xfffffff7, 0xb}, {0xa, 0x104, 0x1, 0xfffffffffffffffc}], {0x1, 0x800007, 0x80000006, 0x1}, {0xfbfe, 0x16, 0x6d1, 0x6}}}) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$pf(0xffffffffffffff9c, 0x0, 0x7e, 0x0) ioctl$TIOCSETA(r2, 0xcd60441a, &(0x7f0000000040)={0x2, 0x2, 0x4, 0x2f, "2000030100010000000000000068a95a010400", 0x6, 0x25}) ioctl$TIOCSETA(r1, 0xc088444f, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e58800040000000100", 0x20004110, 0x6}) 1.383316384s ago: executing program 2 (id=3): r0 = socket$inet6(0x18, 0x3, 0x2) setsockopt$sock_int(r0, 0xffff, 0x1000, &(0x7f0000001300)=0x3, 0x4) r1 = socket(0x18, 0x1, 0x6) setsockopt(r1, 0x1000000000029, 0xa, 0x0, 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt(r2, 0x6, 0x4, &(0x7f0000002480)="d518", 0x2) setsockopt(r2, 0x6, 0x8, &(0x7f0000000140), 0x0) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa7210e10bc3c9de9) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchdir(r3) r4 = socket$inet6(0x18, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1000, &(0x7f0000000140)=0x5, 0x4) syz_emit_ethernet(0x98, &(0x7f0000000000)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0x8, 0x11, 0x0, @empty, @mcast2, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x80007, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00', 0x1}, 0x1c) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102"]) 1.351721371s ago: executing program 3 (id=4): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2], 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2], 0x1, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x5010, r0, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1801) 1.32325095s ago: executing program 2 (id=9): ftruncate(0xffffffffffffffff, 0xfffffffffffffffe) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) (async) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x0, 0x10, 0x1}, 0xc) (async) sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000002740)="abf734f14a4819137aa3fb4fede70914bb67340f459d8806085867fde6f3eceea7d85b9e4b487e5ea752729d4421276fe97a8f07a77efc742151f530da628321", &(0x7f0000000100)=0x40, 0x0, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000180)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000100)={0x1, 0x44}, 0x2, &(0x7f0000000000)="f4c17e7ed618415f9f77c7258178156dd5930324e025acab6d1e2edf85a379e986a233b0bb04bdbfeebae93cea0ed2fbdf8371b2", &(0x7f00000000c0)=0x34, &(0x7f0000000140)="dba37b0a154b637b45af5fabaa5dd96bfd0cbcc5d846dec7b2a1c8a77c9d4fe067ce33a45f2ec136786ebe70bc0b787d078461966e46487fb81e9d66805b862dd461d647b16c34b6a8316d7c5e8928588501610e3f7361e6bb059ede7d2ae32be789059c74868074", 0x68) 1.310140749s ago: executing program 3 (id=10): r0 = socket(0x2, 0x8002, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) closefrom(r1) connect$unix(r0, 0x0, 0x0) seteuid(0xffffffffffffffff) socket(0x18, 0x3, 0x0) ioctl$VMM_IOC_WRITEREGS(0xffffffffffffffff, 0x82485608, &(0x7f0000000240)={0x0, 0x0, 0x0, {[0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x10001], [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37], [0x0, 0x0, 0x1], [0x0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x2], [{}, {}, {0x4, 0x0, 0x0, 0x800000000000}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, {0x0, 0x0, 0x5}]}}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x30, 0x0, 0x57d, 0x0) kevent(r2, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) utimes(&(0x7f0000000000)='.\x00', 0x0) syz_emit_ethernet(0x10004, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "db8344", 0xc8c8fb6356f239c1, 0x16, 0x0, @rand_addr="fe000000020000ff80d14400002000", @local={0xfe, 0x80, '\x00', 0x0}, {[], @udp={{0x0, 0x0, 0x8}}}}}}}) 1.309065485s ago: executing program 2 (id=11): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x1002, 0x0, {[0xfffffbeffffffff7, 0x7fffffff, 0x4787, 0x80000001003, 0x3, 0x2, 0x2, 0x9, 0x5, 0x2f01, 0x7, 0x3, 0x2, 0x8400000002000004, 0x4, 0x9, 0x82, 0x8ce5], [0x20000000000000, 0x7ffffffe, 0x3, 0xfffffffffffffffb, 0x80000000000, 0x40, 0x7, 0x8, 0x400000000000001, 0x4], [0x5, 0x800, 0x40000002, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1, 0x3], [0x6, 0x1, 0xfffffffffffffffa, 0x2, 0xfffffffffffffffe, 0x9], [{0x0, 0x8000, 0x5, 0x7ff}, {0xffff, 0x2, 0x5, 0x100000002}, {0x0, 0xffffffff, 0x2, 0xd}, {0x1, 0x8, 0x4, 0xffffffffffffefff}, {0x0, 0x2, 0x80002b82}, {0x200, 0x1, 0x40040, 0x1ffffffffffffffe}, {0xb854, 0x2}, {0x1, 0xd, 0x10000, 0x2}], {0xc040, 0x25e, 0x28, 0x4000000000000000}, {0x3, 0x9, 0x140000b0, 0x80000af3}}}) (async, rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000) (async, rerun: 32) ioctl$BIOCSETIF(r0, 0xc0785101, &(0x7f0000000400)={'tap', 0x0}) (rerun: 32) 1.272348456s ago: executing program 6 (id=7): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x8, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000001c0)={&(0x7f0000000140)='./bus\x00', r1, 0x1}) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) sysctl$vfs_fuse(&(0x7f0000000000)={0xa, 0x12, 0x2}, 0x3, 0x0, 0x0, &(0x7f00000002c0), 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x57}, 0x2, 0x0, 0x0, &(0x7f0000000140), 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x1603) open(&(0x7f0000000c00)='./bus\x00', 0x8, 0x1ee) closefrom(r0) ioctl$TIOCSFLAGS(r2, 0x8004745c, &(0x7f0000000080)=0x2) 1.264557665s ago: executing program 0 (id=12): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000001240)={@broadcast, @local, [], {@ipv6={0x86dd, {0x6, 0x6, "961613", 0x14, 0x8, 0x9, @local={0xfe, 0x80, '\x00', 0x0}, @loopback, {[], @tcp={{0x2, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x0, 0x7f, 0x0, 0xfff}}}}}}}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f000014c000/0x4000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000124000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff9}, {&(0x7f0000312000/0x2000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000064c000/0x4000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000026000/0x4000)=nil, 0x6}, {&(0x7f00001dc000/0x1000)=nil, &(0x7f00001db000/0x3000)=nil, 0xc6}, {&(0x7f0000392000/0x1000)=nil, &(0x7f00003a6000/0x3000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f0000116000/0x1000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x51c}, {&(0x7f000068b000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc0}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x4000009e}], './file0\x00', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x96, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffc]}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$TIOCFLUSH(r1, 0xc0187009, &(0x7f0000000080)) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000180)={0x0, 0x152, 0x0}) open$dir(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0) kqueue1(0x10000) ioctl$TIOCSETA(r0, 0xc088444f, &(0x7f0000000140)={0x9, 0xa525, 0x4, 0x127492, "08e50000040000000100", 0x20004110, 0x6}) 1.246864536s ago: executing program 0 (id=13): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) pwrite(r1, &(0x7f0000000000)="9a5c", 0xffdf, 0x9) openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$DIOCXBEGIN(0xffffffffffffffff, 0xc0104451, &(0x7f0000000040)={0x1, 0x408, &(0x7f0000000840)=[{0x1, '\x00', 0x1ff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r2, 0xc0104451, &(0x7f0000000040)={0x0, 0x408, 0x0}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DIOCXCOMMIT(r3, 0xc0104452, &(0x7f0000000040)={0x0, 0x40a, 0x0}) 980.834977ms ago: executing program 0 (id=14): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x3fe, 0x0) pread(r0, &(0x7f0000000000)='\x00', 0x1, 0x8) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7fb, 0x9, 0x3, 0x8fc, 0x4, 0x5, 0x3, 0x10, [{0xfffff000, 0x2, 0x6, 0x71800}, {0x3, 0x2, 0x6, 0x40020000}, {0x0, 0xc7, 0x208, 0x2}, {0x2, 0x80ff, 0x200, 0x1}, {0x10000, 0x3, 0x5, 0x7}, {0x2002, 0x83, 0x14000009, 0xf}, {0x5, 0xbffffff9, 0x1, 0x6d}, {0x24009, 0x3, 0xfdf0, 0x4}, {0x1, 0x9, 0x3, 0x9}, {0x401, 0x0, 0x8001, 0x7}, {0x401, 0xfff9, 0x48a, 0x13}, {0xce, 0x7584, 0x8, 0x3}, {0x2000df, 0x2b, 0x5, 0x3ff}, {0x10000002, 0xfffffffc, 0xfffffff5, 0xbc0}, {0x6, 0x5, 0x26, 0x40000003}, {0xfffffffd, 0xd654, 0xffffffff, 0x6}]}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file0aaaaaaaaaaaaaaaaaaaaaaaaa', 0x4, 0x2800c1, 0x1, 0x0, 0x80000001, 0xffff, 0x0, 0x0, 0x0, 0x8000000000000009, 0xbf}) setitimer(0x3, &(0x7f0000000140)={{0x2, 0x9}, {0xff, 0x4}}, 0x0) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) r3 = socket(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) listen(r3, 0x400) r4 = socket(0x18, 0x2, 0x0) r5 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(r8, r8, r8) semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000780)={{0x0, r8, r7, r8, 0x8f, 0x9, 0x0, 0x0, 0x62}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) semctl$GETNCNT(r5, 0x3, 0x3, 0x0) sendmmsg(r4, &(0x7f00000000c0)={{&(0x7f0000000140)=@in6={0x1c, 0x18, 0x1, 0x7, "ff0116ff000000000000000000000004"}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x608) utimes(0x0, &(0x7f0000000340)={{0x8, 0xfffffffffffffff7}, {0x0, 0x4}}) 980.003486ms ago: executing program 3 (id=15): setrlimit(0x8, &(0x7f0000000140)={0x4, 0x10000}) sysctl$net_inet_ipcomp(&(0x7f00000000c0)={0x4, 0x2, 0x6c, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) getrlimit(0x3, &(0x7f0000000000)) (async, rerun: 32) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 64) setitimer(0x2, &(0x7f0000000140)={{0x1cdd, 0x4}, {0xffffffffffffffff, 0xc0}}, 0x0) (async, rerun: 64) shutdown(r0, 0x2) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) (rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2002, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x3, 0x0, 0x8}}}}}}) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSDIRFILT(r1, 0x8004427d, &(0x7f0000000040)=0x4) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc290560b, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x6, 0xfff, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x9, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x4, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x5, 0x2, 0x5, 0x2000001, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x3, 0x6, 0x6, 0x1, 0x2, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x4c, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a99, 0x4, 0xeb2, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0x1000b277, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x75, 0x1ff, 0x20001, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0x8, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x6, 0x5, 0xb, 0x4, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x401, 0x7, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x15, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x6, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xfffb, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0xfffffff8, 0x2, 0xe877, 0x2, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0x2, 0x65, 0x3, 0x5, 0xef6, 0x2, 0x719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0xdf, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2d, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffffa, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x3, 0x6, 0xe, 0xa6d, 0xfc46, 0x1ff, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0xf11, 0x9, 0x7, 0x10, 0x8, 0x5, 0x5b7, 0x7ff, 0x9d1, 0x71f, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0x200d4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x7, 0x5, 0x4, 0xba]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[]) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000640)={@empty, @random="7ac9270a6fe6", [], {@ipv6={0x86dd, {0x5, 0x6, "8fd43b", 0x18, 0x62, 0x0, @mcast2, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}) (async, rerun: 64) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) (async) pipe(0x0) 979.579505ms ago: executing program 5 (id=6): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$BIOCLOCK(r0, 0x20004276) ioctl$BIOCGETIF(r0, 0x4020426b, 0x0) sysctl$vm_swapencrypt(&(0x7f00000000c0), 0x3, &(0x7f0000000100), 0x0, 0x0, 0x0) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) 978.024537ms ago: executing program 5 (id=16): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x800000004, [{&(0x7f000014c000/0x4000)=nil, &(0x7f00000b7000/0x3000)=nil, 0x200007fffffffffe}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000124000/0x3000)=nil, 0x7fffffffffffffff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000795000/0x2000)=nil, 0xb93a}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00006d4000/0x2000)=nil, 0xfdfffffffffffff9}, {&(0x7f0000312000/0x2000)=nil, &(0x7f0000025000/0x3000)=nil, 0x4001}, {&(0x7f000064c000/0x4000)=nil, &(0x7f0000095000/0x3000)=nil, 0x1}, {&(0x7f0000123000/0x3000)=nil, &(0x7f000014d000/0x4000)=nil, 0x4}, {&(0x7f00002f3000/0x3000)=nil, &(0x7f000063b000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000026000/0x4000)=nil, 0x6}, {&(0x7f00001dc000/0x1000)=nil, &(0x7f00001db000/0x3000)=nil, 0xc6}, {&(0x7f0000392000/0x1000)=nil, &(0x7f00003a6000/0x3000)=nil, 0x1000}, {&(0x7f00006b8000/0x4000)=nil, &(0x7f0000116000/0x1000)=nil, 0x6}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x51c}, {&(0x7f000068b000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xc0}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000754000/0x4000)=nil, 0x4000009e}], './file0\x00', 0xfffffffa, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4339, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffc, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x96, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xfffffffc]}) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x4, 0x1, './file0\x00'}, 0xa) recvmsg(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/236, 0xec}], 0x1, 0x0}, 0x473aca9c51e0e662) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r0 = syz_open_pts() close(r0) r1 = socket(0x18, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0xc, r1) setsockopt$sock_int(r2, 0xffff, 0x2000, &(0x7f0000000040)=0x103, 0x4) sendto(r1, &(0x7f00000004c0)="891dcb35af22666b636b49adfa0dc135cf3f112f146d7ffd07c29ba6c9c4fc822eb79f100b1a707c140f8902b465019234f03e0c19584c40ca614e7ae38cbbcbcaa3540209c8be953fcf45e1def3c9daf9c7fa73b1415b16e658554f64aadb054daf612372ed01dbaec6b5c39eb25f8b197583e5e0455f8c68c7ef85dcf724f6006d8bd216ba4e1ea27afab8a8ac357680", 0x91, 0x40e, &(0x7f00000000c0)=@in6={0x1c, 0x18, 0x1, 0x7ff, "0f6f29e73538e9ce3afb630a71df1cc7", 0xfffffffd}, 0x1c) r3 = syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0xfffffffe, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) r4 = socket$inet(0x2, 0x8003, 0xfc) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000000)) 974.506614ms ago: executing program 1 (id=2): syz_emit_ethernet(0x6e, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6036d2b500383af9fe8000000000000000000000670277e5fefe9fb10000000000000000000000aac8"]) syz_extract_tcp_res(&(0x7f0000000040), 0x0, 0x7ff) 749.048443ms ago: executing program 1 (id=17): r0 = socket$inet(0x2, 0x2, 0xfd) recvmmsg(r0, &(0x7f0000002380)={{&(0x7f0000001200)=@un=@file={0x0, 0x0, ""/4093}, 0xfff, 0x0, 0x0, &(0x7f0000002280)=""/207, 0xcf}, 0xa}, 0x38, 0x802, 0x0) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$DIOCGETSTATES(r1, 0xc0104419, &(0x7f0000000040)={0x0, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x404, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xe0000001}, 0x10) r2 = dup3(r0, r0, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) sysctl$kern(&(0x7f00000002c0)={0x1, 0x55}, 0x3, &(0x7f0000000480)="3bf2ee74e747c82d0010000000000000a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afda6c4fe55743094c2b632d0ee71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569bd02f6013a01404e9b50f9713ce7071fe3bc9cd7a6b7b01ba5f1e2e3e17bf1e9d62b8088c7d1be83fbf759df96b2dba44a27e102d99488e168f78df08b", &(0x7f0000000080)=0xfffffffffffffe89, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0xfffffffffffffcd2) setuid(0xffffffffffffffff) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000029, 0x28, 0x0, 0x0) unveil(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='c\x00') rmdir(&(0x7f0000000280)='./file0\x00') getsockname$inet6(r2, &(0x7f0000000040), &(0x7f0000000080)=0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x40000802) r5 = open(&(0x7f0000000100)='./file0\x00', 0x10, 0xa) ioctl$TIOCSETD(r5, 0x8004741b, &(0x7f0000000080)=0x7) close(r5) ioctl$DIOCMAP(r4, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r4, 0x3}) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r6 = socket(0x18, 0xc003, 0x3a) setsockopt(r6, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r6, 0x29, 0x67, &(0x7f0000000140)={{0x1c, 0x18, 0x2, 0x200, "28d4638cfd07cd8776a1a20289936dfc", 0xffff79fe}, {0x1c, 0x18, 0x0, 0x0, "104c01010000c7a65e6824552fc30316", 0xfffffe01}, 0x1ff, [0xfffffffc, 0x9, 0x6000, 0x9, 0x5, 0xfffffff8, 0x6]}, 0x5c) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000)="0000e65bc39e76ecc9ddb3c3cc6bbc2506870300ec", &(0x7f0000000240)=0x15, 0x0, 0x0) unveil(0x0, &(0x7f0000000680)='c\x00') readv(r4, &(0x7f0000000600)=[{&(0x7f0000000180)=""/147, 0x93}, {&(0x7f00000002c0)=""/109, 0x6d}, {&(0x7f0000000340)=""/154, 0xa2}, {&(0x7f0000000400)=""/191, 0xff54}, {&(0x7f00000004c0)=""/209, 0xd1}, {&(0x7f00000005c0)=""/33, 0x21}], 0x6) 747.319663ms ago: executing program 4 (id=5): pipe2(0x0, 0x10004) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc290560b, &(0x7f0000000100)={0x10, 0x7, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xd154}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000040}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x619}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xeb}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x4, 0x1, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x5, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x8, 0x2, 0x5, 0x1, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x224, 0x6, 0x6, 0x1, 0x2, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0xfffffc, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0x6, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x2, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a9c, 0x4, 0xeb6, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0x9, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x55, 0x1ff, 0x1, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0x8, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0xe7, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x4, 0x5, 0xc140f05, 0x4, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x6, 0x6, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x5, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x6, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xffff, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0xfffffff8, 0x2, 0xe877, 0x5, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0xf49, 0x65, 0x3, 0x5, 0x400ef6, 0x2, 0x719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x3, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7ffffffe, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0x3a31, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x681, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2e, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffff7, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0x20cd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x3, 0x6, 0xe, 0xa6d, 0xfc46, 0x1fc, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x2, 0x4, 0x7, 0x7, 0x10, 0x8, 0x8001, 0x5b7, 0x7ff, 0x9d1, 0x71f, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x53, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0xd4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x7, 0x5, 0x4, 0xba]}) execve(0x0, &(0x7f0000000340)=[&(0x7f0000000100)='tap'], 0x0) r0 = socket(0x18, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x20, 0x67, 0x0, 0x0, 0x33, 0x0, @broadcast, @local={0xac, 0x14, 0x0}}, @icmp=@mask_request={0x11, 0x0, 0x0, 0x2, 0x9adc, 0xf}}}}}) ioctl$FIONREAD(r0, 0xc028698a, &(0x7f0000000100)) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x9}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @rand_addr=0xac14ffff}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}}}}}}) 741.521554ms ago: executing program 7 (id=8): r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x100, &(0x7f0000000180), 0x6, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) setuid(0xee01) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8, 0x2, 0x1}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r2 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r2, 0x8040691a, &(0x7f00000001c0)) 636.239015ms ago: executing program 1 (id=18): mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x1) r0 = semget(0x0, 0x1, 0x281) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setresgid(0x0, r3, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000780)={{0x0, r3, r2, r3, 0x8f, 0x9, 0x0, 0x0, 0x62}, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x200000000005}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) r4 = semget(0x0, 0x1, 0x281) semop(r4, 0x0, 0x0) nanosleep(&(0x7f0000001240)={0x3, 0xc000000}, 0xffffffffffffffff) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x20000, 0x0) setrlimit(0x8, &(0x7f0000000740)={0xb, 0x53}) r6 = syz_open_pts() close(r6) syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000400)={0x1002f668, 0x2, 0xb, 0x5bffff5f, "841a7d0803000000261531581ff0fffe0400", 0x3, 0x70}) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="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", 0x261}], 0x1) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f00000000c0)={0x101, 0xffffff01, 0x8a38, 0xfffffffc, "070609000013160000050800"}) 635.287667ms ago: executing program 4 (id=19): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x5d4c) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) setegid(r0) ktrace(&(0x7f00000002c0)='./file0\x00', 0x5, 0x40001022, 0x0) 634.223147ms ago: executing program 7 (id=20): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x6b, 0x1, './file0\x00'}, 0xa) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sysctl$kern(&(0x7f0000000100), 0x2, &(0x7f0000000140)="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", 0x0, 0x0, 0xfffffffffffffeb9) 281.087273ms ago: executing program 7 (id=21): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() r3 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x4) truncate(&(0x7f0000000040)='./file0\x00', 0x4a) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x8010, r3, 0x0) pwrite(r3, &(0x7f0000000000)='5\n', 0x2, 0x6) write(r1, &(0x7f0000000200)="18ca32e7a5a29bfd6595f530820d84098e426c77c779bb8af8012050aea0618f59812ac4a8d2482265e4e52fec9c49a2cde05a9e11d3609349344121462098da759ec5143716d67a0a9c1ab1acf92533ea7f021c6a9c1a08f7", 0x59) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0x5, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x65}) (async) syz_open_pts() (async) close(r1) (async) syz_open_pts() (async) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x4) (async) truncate(&(0x7f0000000040)='./file0\x00', 0x4a) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x8010, r3, 0x0) (async) pwrite(r3, &(0x7f0000000000)='5\n', 0x2, 0x6) (async) write(r1, &(0x7f0000000200)="18ca32e7a5a29bfd6595f530820d84098e426c77c779bb8af8012050aea0618f59812ac4a8d2482265e4e52fec9c49a2cde05a9e11d3609349344121462098da759ec5143716d67a0a9c1ab1acf92533ea7f021c6a9c1a08f7", 0x59) (async) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000340)={0x8000006, 0x8, 0x5, 0xffffff8f, "08ed95990000000000000000ffffffffffffffe6", 0x800b, 0x8}) (async) readv(r2, &(0x7f0000000040)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, &(0x7f0000000080)}) (async) 280.262263ms ago: executing program 6 (id=22): syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff8c95ca6a2f2c86dd6099cea600286703cb697a653e336f000000500000000000000000000000000000000000000000018900907800040000f523bbf3b4ddfce0c1ef0c820f454a8a46f9ae03e3a3f04e7aa143eef783025b"]) openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$DIOCRADDTABLES(r0, 0xc450443d, &(0x7f0000000800)={{'./file0\x00', './file0\x00', 0x7, 0xb}, 0x0, 0x428, 0x5b, 0x26, 0x3, 0x1fe, 0xd, 0x2, 0x8}) sendmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x308}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x64, 0x5, 0x2, 0x8}, {0x6, 0x2d, 0x1, 0x5}]}) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x1, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0xa7}}}}}}) sendmmsg(r1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4008}, 0x38, 0x406) (async) sendmmsg(r1, &(0x7f00000003c0)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x4008}, 0x38, 0x406) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x18}, 0x4, &(0x7f0000000400)="9b1809ffffffffffffff5fa9ac6df0eeafdb4466a4326da2e1df55f8ee9e5d6cf220ef7f0abdbc34fe42021572dc8ff44f4b76c76d41859d85ea800dabe467badf35b6fd74c94d1b4cf2d71670109f6a8aa1c7c1abaf40b166d5b12c8305000000000000009a9ab9b8002192bc4bc83d9368e0ed83c7b89c599f107d940a8d37efbb405d8ecb87a1c9fc75601eec889c0911ff455f4caae80e3e393219a92252198bcf509a5f1ed9c58b5518e2932cc5621113382c571bff52df30d3d5dd2438b6febb4442cd1624697c1fbbf10ed5a3d50adf762b7d32f8dd1e840ca13018fbc8743418114cef99587cde68a3b33e7babec7703250dec47ed68c00e4c6d4016047658db75", &(0x7f0000000280)=0x10011, 0x0, 0x9c) syz_emit_ethernet(0x1e2, &(0x7f0000000c80)={@broadcast, @remote, [{[], {0x8100, 0x0, 0x1, 0x1}}], {@ipv6={0x86dd, {0x7, 0x6, "373eff", 0x1a8, 0x62, 0xca, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback, {[@fragment={0x67, 0x0, 0x6, 0x0, 0x0, 0x10, 0x68}, @routing={0x2c, 0x4, 0x0, 0x2, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="8e868e637c61c91601e3ec1b95de2d28"]}, @hopopts={0x1, 0xb, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @padn={0x1, 0x1, [0x0]}, @generic={0x3, 0x2b, "75a4ee33ba0f86d54bd559ebbafcb464ef8b9222b75d20de1ba301110ec16845fce7228feb3ec747dde728"}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x68}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xc, 0x0, 0xf8, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7f}, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}]}, @routing={0x2, 0xc, 0x0, 0x9, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @loopback, @mcast1, @mcast2, @mcast1, @local={0xfe, 0x80, '\x00', 0x0}]}, @hopopts={0x1d, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x3}]}], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x4, 0x1d, 0x0, 0x84, {[@nop, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @nop, @window={0x3, 0x3, 0xb9}]}}}}}}}}) (async) syz_emit_ethernet(0x1e2, &(0x7f0000000c80)={@broadcast, @remote, [{[], {0x8100, 0x0, 0x1, 0x1}}], {@ipv6={0x86dd, {0x7, 0x6, "373eff", 0x1a8, 0x62, 0xca, @remote={0xfe, 0x80, '\x00', 0x0}, @loopback, {[@fragment={0x67, 0x0, 0x6, 0x0, 0x0, 0x10, 0x68}, @routing={0x2c, 0x4, 0x0, 0x2, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="8e868e637c61c91601e3ec1b95de2d28"]}, @hopopts={0x1, 0xb, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo, @padn={0x1, 0x1, [0x0]}, @generic={0x3, 0x2b, "75a4ee33ba0f86d54bd559ebbafcb464ef8b9222b75d20de1ba301110ec16845fce7228feb3ec747dde728"}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x68}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x4, 0xc, 0x0, 0xf8, 0x0, [@empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x7f}, @remote={0xfe, 0x80, '\x00', 0x0}, @ipv4={'\x00', '\xff\xff', @remote={0xac, 0x14, 0x0}}, @local={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}]}, @routing={0x2, 0xc, 0x0, 0x9, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @loopback, @mcast1, @mcast2, @mcast1, @local={0xfe, 0x80, '\x00', 0x0}]}, @hopopts={0x1d, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x3}, @jumbo={0xc2, 0x4, 0x4}, @enc_lim, @jumbo={0xc2, 0x4, 0x3}]}], @tcp={{0x1, 0x2, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x4, 0x1d, 0x0, 0x84, {[@nop, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @nop, @window={0x3, 0x3, 0xb9}]}}}}}}}}) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="87c27f33ed565300908cbb7d", 0xc}, {&(0x7f0000000240)="0f8ede06d4e0679dc1074f1aa9e637013d896881b2050782dca39bb40e21ffc552d591267babdbdca0d62113e59e99150370061bfd1f5c9e52b0ae96ca84e3210a909ad5fde2e67bebfe4d6eb44760dbb4f7d44d1baceafa676fbffa5cc5129a46a9b9581ceef4c48e7b6eaefbc683e99b40c77f6d99617d7062c68ad4c0e5eb131cdebc68", 0x85}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x0) chflags(&(0x7f0000000100)='./bus\x00', 0x1) r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x9) ioctl$TIOCFLUSH(r4, 0xc0187009, &(0x7f0000000080)=0x400) (async) ioctl$TIOCFLUSH(r4, 0xc0187009, &(0x7f0000000080)=0x400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x5, 0x0, 0x0, 0x0, 0x53, 0x85, 0x48e, 0x0, 0x1}, 0x6, 0x9, 0x0, 0x2, 0x7, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x80}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x35}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x45}, 0x3, &(0x7f0000002480)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f0000000080)=0x1232, 0x0, 0xfffffffffffffe4d) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) (async) msync(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) kqueue() sysctl$net_inet_ip(&(0x7f00000002c0)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, &(0x7f0000000440), 0x0) (async) sysctl$net_inet_ip(&(0x7f00000002c0)={0x4, 0x2, 0x0, 0x1d}, 0x4, 0x0, 0x0, &(0x7f0000000440), 0x0) 17.589609ms ago: executing program 0 (id=23): sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74, 0x0, 0x37) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) r1 = open(&(0x7f0000000100)='./file0\x00', 0x100, 0x0) ioctl$FIONREAD(r1, 0x4004667f, 0x0) write(r0, &(0x7f00000002c0)="3dacaf2007efe7f2aacb103ef5614b7ee991217204933059d9fcfbc5d67adfc708ba90e85c3252b8101709dc11c37cee01b0a4070000005e0984f204ef676d7a15176cbe2584124bbc6eaeffa4739da44ab12627c0b68f4f6b2a5fa778b0241132b072462a736f1b3a5227eb254db06f148a13f278b8f1efb35410a0a7febc5571457cab4d2763c894eb64c90f92efc71616839cd5b627c5e619747c135a97a2e37ccf6b1bc0dd5d56d3cecd8029ecfb924772ed6fe4798b990c82e93aab095f25642c116a27a7babca09430204e2ee06ac8cce7404e", 0xffffff33) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x6}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000640)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x1, 0x1, "f1"}], 0x10}}, 0x38, 0x2) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000180)=0x6) unveil(0x0, &(0x7f0000000280)='r\x00') recvfrom(r0, &(0x7f00000001c0)=""/131, 0x83, 0x1, &(0x7f00000003c0)=@un=@abs={0x9b, 0x0, 0x0, 0x3}, 0x8) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3d}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x74, 0x0, 0x37) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) (async) open(&(0x7f0000000100)='./file0\x00', 0x100, 0x0) (async) ioctl$FIONREAD(r1, 0x4004667f, 0x0) (async) write(r0, &(0x7f00000002c0)="3dacaf2007efe7f2aacb103ef5614b7ee991217204933059d9fcfbc5d67adfc708ba90e85c3252b8101709dc11c37cee01b0a4070000005e0984f204ef676d7a15176cbe2584124bbc6eaeffa4739da44ab12627c0b68f4f6b2a5fa778b0241132b072462a736f1b3a5227eb254db06f148a13f278b8f1efb35410a0a7febc5571457cab4d2763c894eb64c90f92efc71616839cd5b627c5e619747c135a97a2e37ccf6b1bc0dd5d56d3cecd8029ecfb924772ed6fe4798b990c82e93aab095f25642c116a27a7babca09430204e2ee06ac8cce7404e", 0xffffff33) (async) sysctl$net_inet_icmp(&(0x7f0000001380)={0x4, 0x2, 0x1, 0x6}, 0x4, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) sendmmsg(r0, &(0x7f0000000640)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x10, 0x1, 0x1, "f1"}], 0x10}}, 0x38, 0x2) (async) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000180)=0x6) (async) unveil(0x0, &(0x7f0000000280)='r\x00') (async) recvfrom(r0, &(0x7f00000001c0)=""/131, 0x83, 0x1, &(0x7f00000003c0)=@un=@abs={0x9b, 0x0, 0x0, 0x3}, 0x8) (async) 15.522194ms ago: executing program 1 (id=24): kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x13, 0x1}], 0x0, 0x0, 0x7, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0xc, &(0x7f0000000000), 0x14) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000640)="ebbd81f6becfcfb263d49c6516924f6f2cb03a7ba7870f9cec2e401b464c76b6017219444956159bd3f4ada81530434d4c0c5cdcd3954ac5b88b53b0a8753d", 0x3f) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="87c27e33bb7a86bf70b1d91d8cc5937d", 0x4}, {&(0x7f0000000240)="0f8ede06d4e0679dc1074f1aa9e637013d896881b2050782dca39bb40e21ffc552d591267babdbdca0d62113e59e99150370061bfd1f5c9e52b0ae96ca84e3210a909ad5fde2e67bebfe4d6eb44760dbb4f7d44d1baceafa676fbffa5cc5129a46a9b9581ceef4c48e7b6eaefbc683e99b40c77f6d99617d7062c68ad4c0e5eb131cdebc68f955f17507f3cd3ec2d94af5f539f0d1df7f19f6a24ba38431abaf3dab372c0b94a446a1453fc0fcb7edd95906646dcd5f88f01ce3dea9da311237227b01f77e9aa2ec47ef62e66ea6ef49e91ca86c66ea14cc69", 0xd9}, {&(0x7f0000000140)="bbdd94dc1f38354e99d294535289e772a51306fdae308a5792dfa81bd56b57797a6a4ec9bfe1787ed5643f243927d9d9dfb3e37221e6243b6a8a30c4b8f02eabaf039db6948785da82905c3cc528ae9a7b3b4ce64d130f9179bc5d9f4ae8296b2d3c246d16289c25", 0x68}, {&(0x7f00000003c0)="51219ab7eb0182220f1323ad917cc590a2c6a7c81a45a7b4fd6fecf97a78718e", 0x20}], 0x100000000000008c, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10}, 0x40a) munmap(&(0x7f00003ef000/0x1000)=nil, 0x1000) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, &(0x7f0000000500)="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"/302, &(0x7f00000000c0)=0xfffffffffffffe7a, &(0x7f0000000100)="c9edd234cce540433688fad55bfe3753888b46100000007f623cc289aa49f6f937b755be3b44b6f7424d512f3939c80abac35d8f02461863cb425949a67a821386c518e80c2861b40dc7321133189da8b0c2fa2ef9cb656b258126097075fe29cca92160124df3a52dc9c7d0e0e2c7154ee84bad040af64c73fbb2187825c34889fe1ec8ab94ef1effaa588f0e9f571d4baeba5102389cc22723602905f3d83b4ecd3df8fb098a18883f162dea6a4ac31ff1379c791412cc52a0fbab6c3d1d333b81379d50d3f1059b1153bb2a0e8b73a82935205a533b309e970705639712b87765ee8dd6902f280f865b2277706226", 0xf0) r3 = open(&(0x7f00000006c0)='./file0\x00', 0x10000, 0x80) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0x8000) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0xbe, 0x0) sysctl$net_inet_udp(&(0x7f0000000240)={0x4, 0x2, 0x11, 0x6}, 0x4, &(0x7f0000000380)="69184000e870e459c31af7725d5314a039376d343ae9c0bea22e6febdf9699d4fba6910784de1306febb3a7d72bb60f48066d9746ff29d9179ddbcf10f0833618e9078b7df5b81f97e7a5957d57e52a69a6329603805099ae91c0dd4d9b0e40d97d842c5f3a45953f18a5b705437af5782da7d1c7b99efb1", &(0x7f0000000400)=0x78, &(0x7f0000000440)="eb52a4e787d55708b5308e66ea6e8d954cbb57a63e7c06983edd855bb28207262d28c4cdf4ac7960b655b621ed687f75857a0d7d4966a49de7658436d98314b4eb42634008c49766578e3b0d887457dc6e475bdcf3e725fd253c71b9e8cdbb7c1a227e656a260caa96a3caee", 0x6c) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCGDLTLIST(r3, 0xc010427b, &(0x7f0000000140)={0x0, 0x0}) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000680)=@file={0x5, 0x1, './file0\x00'}, 0xa) listen(r5, 0x1) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000080)=@file={0x5, 0x1, './file0\x00'}, 0xa) socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f00000001c0)=@abs={0x9, 0x0, 0x0, 0x0}, 0x8) r8 = socket(0x2, 0x8002, 0x0) r9 = fcntl$dupfd(r8, 0x2, 0xffffffffffffffff) closefrom(r9) pselect(0x40, &(0x7f0000000280)={0xa, 0xffffffffffffffff, 0x8, 0x53a, 0xb, 0x3, 0x5, 0x5}, &(0x7f00000002c0)={0x5, 0x24a, 0x4, 0x7, 0xcd2f, 0x2, 0x9, 0xff}, 0x0, 0x0, &(0x7f0000000340)={0xc987}) 14.47648ms ago: executing program 2 (id=11): ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000340)={0x1002, 0x0, {[0xfffffbeffffffff7, 0x7fffffff, 0x4787, 0x80000001003, 0x3, 0x2, 0x2, 0x9, 0x5, 0x2f01, 0x7, 0x3, 0x2, 0x8400000002000004, 0x4, 0x9, 0x82, 0x8ce5], [0x20000000000000, 0x7ffffffe, 0x3, 0xfffffffffffffffb, 0x80000000000, 0x40, 0x7, 0x8, 0x400000000000001, 0x4], [0x5, 0x800, 0x40000002, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1, 0x3], [0x6, 0x1, 0xfffffffffffffffa, 0x2, 0xfffffffffffffffe, 0x9], [{0x0, 0x8000, 0x5, 0x7ff}, {0xffff, 0x2, 0x5, 0x100000002}, {0x0, 0xffffffff, 0x2, 0xd}, {0x1, 0x8, 0x4, 0xffffffffffffefff}, {0x0, 0x2, 0x80002b82}, {0x200, 0x1, 0x40040, 0x1ffffffffffffffe}, {0xb854, 0x2}, {0x1, 0xd, 0x10000, 0x2}], {0xc040, 0x25e, 0x28, 0x4000000000000000}, {0x3, 0x9, 0x140000b0, 0x80000af3}}}) (async, rerun: 64) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x28, 0x0}) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x6001000004) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) munmap(&(0x7f0000077000/0xc00000)=nil, 0xc00000) (async, rerun: 32) ioctl$BIOCSETIF(r0, 0xc0785101, &(0x7f0000000400)={'tap', 0x0}) (rerun: 32) 14.138324ms ago: executing program 3 (id=15): setrlimit(0x8, &(0x7f0000000140)={0x4, 0x10000}) sysctl$net_inet_ipcomp(&(0x7f00000000c0)={0x4, 0x2, 0x6c, 0x1}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) getrlimit(0x3, &(0x7f0000000000)) (async, rerun: 32) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async, rerun: 64) setitimer(0x2, &(0x7f0000000140)={{0x1cdd, 0x4}, {0xffffffffffffffff, 0xc0}}, 0x0) (async, rerun: 64) shutdown(r0, 0x2) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2000, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) (rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2002, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x3, 0x0, 0x8}}}}}}) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$BIOCSDIRFILT(r1, 0x8004427d, &(0x7f0000000040)=0x4) ioctl$BIOCSBLEN(r1, 0xc0044266, &(0x7f00000000c0)=0x34) (async) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc290560b, &(0x7f0000000100)={0x10, 0x5, [{&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x800}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x4000000000000000}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x7}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x5}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x2}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0x80}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x8}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xb1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xffffffffffff0000}], './file0\x00', 0x3, 0x6, 0xfff, 0x0, [0x7, 0x1689d41c, 0x80000001, 0x401, 0x0, 0x9, 0x9, 0x78, 0x9, 0xfffffffd, 0x7, 0x10001, 0x6, 0x6, 0x8001, 0x8, 0x3ff, 0x7, 0x1, 0x0, 0xfffffff7, 0x9, 0x7, 0x280000, 0x4, 0x1, 0x0, 0x2, 0x3, 0x7, 0x0, 0x6, 0x0, 0xfff, 0x4, 0x0, 0x4, 0x0, 0x8, 0x100, 0xffffff80, 0x2, 0xdae, 0x7ff, 0x1, 0x7fffffff, 0x6, 0x101, 0x0, 0x3, 0x10000000, 0x5, 0x2, 0x5, 0x2000001, 0x6, 0x6, 0x46af0a69, 0x4a9, 0x80000000, 0x10001, 0x1ff, 0x9, 0x2, 0x7ff, 0xff, 0x3, 0x3, 0x6, 0x6, 0x1, 0x2, 0x6, 0x3, 0x5, 0x7, 0x5, 0x7, 0xfffffffc, 0x2, 0xf8000000, 0x3, 0x4, 0xbbf, 0x6, 0x3, 0x9, 0x1000000, 0x0, 0xd, 0x4, 0xffaf, 0x6, 0x1, 0x9, 0xce, 0x8, 0x8, 0xa94a, 0x0, 0x987, 0x5, 0x6, 0xa9d4, 0xfffffff2, 0x8000, 0x1, 0x6, 0xcc6, 0x400, 0xfffffffd, 0xa19, 0x80, 0x6, 0x88, 0x80000001, 0x4, 0x1, 0x2, 0x9, 0x53f1, 0x1000, 0xfffffffd, 0xffffff25, 0x9, 0xc144, 0x7, 0x3, 0x9, 0x8, 0x470f, 0x1, 0x4, 0x6, 0xffff, 0x4c, 0xfffffffc, 0x6, 0x5, 0x4, 0x5, 0x5a99, 0x4, 0xeb2, 0x5, 0x3, 0x2, 0x2, 0x2, 0x8000, 0x8, 0xaa, 0x8c, 0x38, 0x6, 0x9, 0x1000b277, 0x400, 0x7, 0x7, 0xd4, 0x7, 0x4, 0x9, 0x75, 0x1ff, 0x20001, 0x800, 0x800, 0x3, 0x1ff, 0x401, 0x1000, 0x4be, 0x7, 0x1, 0x100, 0x3, 0x2, 0x8, 0x239ed050, 0x7f, 0xff, 0x7, 0x9, 0x3ff, 0x4, 0x5317ce34, 0x0, 0x101, 0x80000000, 0x2, 0x10, 0x2, 0x6, 0x5, 0xb, 0x4, 0x9, 0x40, 0x3, 0x6, 0xffff, 0x0, 0x4, 0x1ff, 0x1ff, 0x16, 0x7, 0x4, 0xffffff01, 0x6, 0x5, 0x2, 0x4, 0x4, 0xffffffff, 0x788, 0x0, 0x6, 0x9, 0x1, 0x6, 0x401, 0x7, 0x6, 0xffff, 0x5310, 0x4, 0xd, 0x9, 0x8001, 0x5, 0x15, 0xfffffff7, 0xa, 0x400, 0x4, 0x5, 0x200, 0x6, 0x5, 0x4, 0x4, 0x3, 0x6, 0x40, 0x8, 0x6, 0x80000000, 0x1d209cda, 0x7, 0x4, 0x7fffffff, 0x63439b01, 0xfffffff8, 0xfffffff8, 0x7, 0x9, 0x9, 0x5, 0xfffff19c, 0x6, 0xed, 0x6, 0xf4d7, 0x9, 0x9, 0xfffb, 0xadb, 0x16947a10, 0x3, 0x7, 0x6, 0xc, 0x1, 0x10000, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x81, 0x7fffffff, 0x1, 0xda6, 0xf27e, 0x8001, 0xf, 0x0, 0xe7, 0x93c9, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x4, 0x0, 0xb, 0x2, 0xffffffff, 0x8, 0xffff, 0xdc1c, 0x44cf, 0x6, 0xfffffff8, 0x2, 0xe877, 0x2, 0x1, 0x5, 0x1014, 0x1, 0x0, 0x3dd, 0x2, 0xffff5ad4, 0x5, 0x2, 0xc, 0x2, 0x2, 0x65, 0x3, 0x5, 0xef6, 0x2, 0x719, 0x99bd, 0x3, 0x2d5cc7e1, 0x7fffffff, 0x2, 0x1, 0x9, 0x1ff, 0x3, 0xc263, 0xdc81, 0xda, 0x9, 0x400, 0xaed3, 0x9, 0x1, 0xffffff7f, 0x1400000, 0x3, 0xb0, 0x8001, 0x4800000, 0x5, 0xe12, 0x5c, 0x7, 0x4, 0xffff932b, 0xb65, 0x4f, 0x9, 0x7fffffff, 0x787f, 0x8, 0x200000, 0xf, 0x6, 0x2, 0x7, 0xdf, 0x0, 0x3, 0xc, 0x101, 0x7fffffff, 0xfffffff7, 0x3, 0x5, 0x7fffffff, 0x9, 0x2, 0x7, 0x5, 0xfffffe00, 0xa88, 0x7eec, 0x8000, 0x0, 0x100, 0x682, 0x36a5, 0x100, 0xd2, 0x81, 0x0, 0x0, 0x2, 0xde, 0xf2d, 0x4, 0x3a1, 0x87ab, 0x4, 0xe, 0x7, 0xffff, 0xc8, 0x7, 0x7, 0xfffffe00, 0x9, 0x8, 0xfffffffa, 0x6e04f75a, 0x0, 0x2, 0x4d, 0x4, 0x10000, 0x8, 0x6, 0x1, 0x8, 0x9, 0x8, 0x80, 0x1, 0x2, 0x1, 0x3, 0x7, 0xcd, 0x6, 0xc6, 0xf3, 0x10, 0x7, 0x27a, 0x7, 0xff28, 0x2, 0xdb9, 0x7, 0x0, 0x10, 0xfff, 0x3, 0x6, 0xe, 0xa6d, 0xfc46, 0x1ff, 0x10000, 0xdee, 0xfffffff9, 0x7d08, 0x4aa, 0x7fffffff, 0x10, 0x6, 0x9, 0x8, 0xf11, 0x9, 0x7, 0x10, 0x8, 0x5, 0x5b7, 0x7ff, 0x9d1, 0x71f, 0x5, 0x8, 0x18, 0xff, 0x8, 0x9, 0xfffffffa, 0x1, 0x7fff, 0x6022, 0x401, 0x10000, 0x5, 0xfb3f, 0x2, 0x317b, 0x0, 0x2dd, 0x4, 0x10001, 0x3, 0x200d4ef, 0x5, 0x1, 0x10001, 0x9, 0x7, 0xf, 0x1, 0x8, 0x100, 0x5, 0xff, 0x8, 0x7, 0x5, 0x4, 0xba]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[]) (async, rerun: 64) syz_emit_ethernet(0x4e, &(0x7f0000000640)={@empty, @random="7ac9270a6fe6", [], {@ipv6={0x86dd, {0x5, 0x6, "8fd43b", 0x18, 0x62, 0x0, @mcast2, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_ns={0x87, 0x0, 0x0, 0x0, @remote={0xfe, 0x80, '\x00', 0x0}}}}}}}) (async, rerun: 64) syz_emit_ethernet(0x1000e, &(0x7f0000000080)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xffb0, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @icmp=@info_request={0xf, 0x0, 0x0, 0x205c, 0x3}}}}}) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xffac) (async) pipe(0x0) 13.965637ms ago: executing program 4 (id=25): r0 = socket$inet(0x2, 0x1, 0x0) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x8009, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x1}], 0x1, &(0x7f00000001c0)={0x4, 0x8}, &(0x7f0000000200)={0xd85}) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0x7fff) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0xc, 0x2a3, 0x0, 0x0, 0x40000005, 0x800000000000013, 0x8000000200, 0x40}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x13, 0x0, 0x37) setsockopt(r0, 0x6, 0x4, &(0x7f00000001c0)="d2674561", 0x4) ioctl$DIOCRDELADDRS(0xffffffffffffffff, 0xc4504444, &(0x7f00000000c0)={{'./file0\x00', './file0\x00', 0x4, 0x5}, 0x0, 0x34, 0x0, 0x7fffffff, 0xe9a, 0x3, 0x7, 0x62, 0x6}) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x8, 0x2c, 0x0, 0x0, 0x1, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x40, 0x0, 0x0, {[@generic={0x4, 0x3, "cf"}]}}}}}}}) sysctl$kern(&(0x7f0000000000)={0x1, 0x51}, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040), &(0x7f0000000080)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f0000000000), 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x4) 8.519572ms ago: executing program 5 (id=26): r0 = socket(0x18, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0x0, "fe804d9400fdfff4ff0297deffffff00", 0x6}, 0x1c) 0s ago: executing program 6 (id=27): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="4ef95fed820c", 0x6}], 0x1) (async) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)="4ef95fed820c", 0x6}], 0x1) execve(0x0, 0x0, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) pwritev(r1, &(0x7f0000000b40)=[{&(0x7f0000000a00)="bfa192f602f212d37c7cbd2806d8d59a526572d3c365e4dfea4723", 0x1b}], 0x1, 0x5) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.186' (ED25519) to the list of known hosts. panic: uvm_fault_unwire_locked: address not in map WARSNtIoNpGp: edSP La tNOT LOWERED ON SYSCALL 73 487 42 4 E X I Tdb_ 0en tear +0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *264274 92560 0 0 0x4000000 0K syz-executor 405067 92560 0 0 0x4000000 1 syz-executor db_enter() at db_enter+0x25 panic(ffffffff835183e6) at panic+0x1e5 uvm_fault_unwire_locked(fffff8806cf009a0,200000470000,200000471000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff8806cf009a0,200000470000,200000481000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff800045feb4e0,2000004704c0,10000,1,ffff80002cbb2138) at uvm_vslock_device+0x112 physio(ffffffff82ad7e40,d02,0,ffffffff82ad8670,ffff80002cbb2418) at physio+0x257 spec_write(ffff80002cbb2260) at spec_write+0x11f VOP_WRITE(fffff880795c1da8,ffff80002cbb2418,5,fffff880097fd548) at VOP_WRITE+0x101 vn_write(fffff8806cf073f0,ffff80002cbb2418,0) at vn_write+0x1d3 dofilewritev(ffff800045feb4e0,4,ffff80002cbb2418,0,ffff80002cbb24d0) at dofilewritev+0x2bd sys_write(ffff800045feb4e0,ffff80002cbb2580,ffff80002cbb24d0) at sys_write+0xa2 syscall(ffff80002cbb2580) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x193f319cf00, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: uvm_fault_unwire_locked: address not in map ddb{0}> show kasan No such command ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff835183e6) at panic+0x1e5 uvm_fault_unwire_locked(fffff8806cf009a0,200000470000,200000471000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff8806cf009a0,200000470000,200000481000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff800045feb4e0,2000004704c0,10000,1,ffff80002cbb2138) at uvm_vslock_device+0x112 physio(ffffffff82ad7e40,d02,0,ffffffff82ad8670,ffff80002cbb2418) at physio+0x257 spec_write(ffff80002cbb2260) at spec_write+0x11f VOP_WRITE(fffff880795c1da8,ffff80002cbb2418,5,fffff880097fd548) at VOP_WRITE+0x101 vn_write(fffff8806cf073f0,ffff80002cbb2418,0) at vn_write+0x1d3 dofilewritev(ffff800045feb4e0,4,ffff80002cbb2418,0,ffff80002cbb24d0) at dofilewritev+0x2bd sys_write(ffff800045feb4e0,ffff80002cbb2580,ffff80002cbb24d0) at sys_write+0xa2 syscall(ffff80002cbb2580) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x193f319cf00, count: -13 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80002cbb1e80 rbx 0xffffffff8394ee0f cpu_info_full_primary+0x2e0f rdx 0 rcx 0xffff800045feb4e0 rax 0xffffffff8394dff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x7369543c410bcd5f r11 0x5f21a4447fbd0162 r12 0xffffffff8394ec10 cpu_info_full_primary+0x2c10 r13 0 r14 0 r15 0x1 rip 0xffffffff815a71e5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80002cbb1e70 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=264274 pid=92560 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=36, usrpri=86, slppri=36, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045ffdc90,0xffff800045fead28 process=0xffff800045ff66c8 user=0xffff80002cbad000, vmspace=0xfffff8806cf009a0 estcpu=36, cpticks=5, pctcpu=0.0, user=0, sys=5, intr=0 ddb{0}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 19762 495477 28865 0 3 0x2 0 clonelk ifconfig 28865 204049 9500 0 3 0x100002 0x88 sigsusp sh 33945 231081 73981 0 3 0 0x80 nanoslp syz-executor 33945 89300 73981 0 3 0 0x4000088 kqsel syz-executor 92560 22759 79206 0 2 0 0 syz-executor *92560 264274 79206 0 7 0 0x4000000 syz-executor 92560 405067 79206 0 7 0 0x4000000 syz-executor 92560 97128 79206 0 2 0 0x4000000 syz-executor 9500 126377 59029 0 3 0x2 0x80 wait syz-executor 79206 349258 59029 0 3 0x2 0x80 nanoslp syz-executor 84342 354188 59029 0 3 0x2 0x80 piperd syz-executor 87568 421829 59029 0 3 0x2 0x80 piperd syz-executor 73981 12528 59029 0 3 0x2 0x80 nanoslp syz-executor 59029 278918 80245 0 3 0x2 0x80 wait syz-executor 80245 122974 38278 0 3 0x100002 0x88 sigsusp ksh 38278 268443 7762 0 3 0x10 0x88 kqread sshd-session 7762 143873 69265 0 3 0x12 0x80 kqread sshd-session 44770 160487 1 0 3 0x100003 0x80 ttyin getty 69265 164635 1 0 3 0 0x88 kqread sshd 11632 201797 1572 74 3 0x1100012 0x80 bpf pflogd 1572 332602 1 0 3 0 0x80 sbwait pflogd 73989 220997 5904 73 3 0x1100010 0x80 kqread syslogd 5904 224181 1 0 3 0x100002 0x80 sbwait syslogd 27104 445816 1 0 3 0x100000 0x80 kqread resolvd 30388 301234 61958 77 3 0x100012 0x80 kqread dhcpleased 1105 345770 61958 77 3 0x100012 0x80 kqread dhcpleased 61958 347690 1 0 3 0 0x80 kqread dhcpleased 84695 210252 0 0 3 0x14000 0x200 bored smr 3897 240694 0 0 2 0x14000 0x200 zerothread 67164 87726 0 0 3 0x14000 0x200 aiodoned aiodoned 55627 329183 0 0 3 0x14000 0x200 syncer update 66950 384402 0 0 3 0x14000 0x200 cleaner cleaner 61735 373093 0 0 3 0x14000 0x200 reaper reaper 77141 295522 0 0 3 0x14000 0x200 pgdaemon pagedaemon 39649 268996 0 0 3 0x14000 0x200 bored viomb 67876 81327 0 0 3 0x14000 0x40000200 acpi0 acpi0 18085 415546 0 0 3 0x14000 0x40000200 idle1 86412 202138 0 0 3 0x14000 0x200 bored softnet1 43521 243201 0 0 2 0x14000 0x200 softnet0 63816 191709 0 0 3 0x14000 0x200 bored systqmp 79109 74253 0 0 3 0x14000 0x200 bored systq 14473 493355 0 0 3 0x14000 0x200 tmoslp softclockmp 13790 7011 0 0 3 0x14000 0x40000200 tmoslp softclock 54050 1351 0 0 3 0x14000 0x40000200 idle0 1 498769 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{0}> show all locks CPU 1: exclusive mutex &uvm.fpageqlock r = 0 (0xffffffff83a08d60) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 uvm_pmr_freepages+0x1b6 #3 uvm_anfree+0xe9 #4 amap_wipeout+0x1d6 #5 uvm_unmap_detach+0x8a #6 sys_munmap+0x329 #7 syscall+0xbd4 #8 Xsyscall+0x128 Process 92560 (syz-executor) thread 0xffff800045feb4e0 (264274) shared rwlock vmmaplk r = 0 (0xfffff8806cf00aa0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvm_fault_wire+0x116 #3 uvm_vslock_device+0x112 #4 physio+0x257 #5 spec_write+0x11f #6 VOP_WRITE+0x101 #7 vn_write+0x1d3 #8 dofilewritev+0x2bd #9 sys_write+0xa2 #10 syscall+0xbd4 #11 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83b4c1c0) #0 witness_lock+0x5f1 #1 __mp_acquire_count+0x58 #2 sleep_finish+0x2d8 #3 rw_do_enter_read+0x309 #4 uvmfault_lookup+0x122 #5 uvm_fault_check+0x4f #6 uvm_fault+0x106 #7 uvm_fault_wire+0x73 #8 uvm_vslock_device+0x112 #9 physio+0x257 #10 spec_write+0x11f #11 VOP_WRITE+0x101 #12 vn_write+0x1d3 #13 dofilewritev+0x2bd #14 sys_write+0xa2 #15 syscall+0xbd4 #16 Xsyscall+0x128 Process 92560 (syz-executor) thread 0xffff800045fead18 (405067) exclusive kernel: protection fault trap, code=0 Faulted in DDB; continuing... ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11054 12083K 12166K 166960K 12180 0 pcb 17 12K 12K 166960K 33 0 rtable 215 6K 7K 166960K 417 0 pf 32 17K 18K 166960K 51 0 ifaddr 39 6K 7K 166960K 54 0 ifgroup 51 2K 2K 166960K 67 0 sysctl 3 1K 9K 166960K 8 0 counters 68 36K 37K 166960K 76 0 ioctlops 0 0K 4K 166960K 1489 0 iov 0 0K 16K 166960K 4 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1292 81K 81K 166960K 1414 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 5 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 14 49K 89K 166960K 197 0 proc 78 131K 164K 166960K 619 0 subproc 72 4K 4K 166960K 99 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 4 0 in_multi 88 5K 6K 166960K 125 0 ether_multi 1 0K 0K 166960K 3 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 423 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 199 159K 167K 166960K 3633 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 39 78K 103K 166960K 1439 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 15 0K 2K 166960K 35 0 temp 34 9114K 9134K 166960K 3928 0 kqueue 13 20K 24K 166960K 28 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 40 0 37 1 0 1 1 0 8 0 rtentry 176 133 0 34 6 0 6 6 0 8 0 unpcb 144 66 0 49 1 0 1 1 0 8 0 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 14 0 10 1 0 1 1 0 8 0 arp 136 22 0 6 1 0 1 1 0 8 0 inpcb 328 102 0 94 2 0 2 2 0 8 1 nd6 152 30 0 9 1 0 1 1 0 8 0 kcovpl 48 11 0 3 1 0 1 1 0 8 0 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfstitem 24 30 0 0 1 0 1 1 0 8 0 pfstkey 128 30 0 0 1 0 1 1 0 8 0 pfstate 448 30 0 0 4 0 4 4 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 541 0 132 29 0 29 29 0 8 2 art_table 40 542 0 132 5 0 5 5 0 8 0 art_node 32 133 0 43 1 0 1 1 0 8 0 semapl 72 3 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1618 0 145 93 0 93 93 0 8 0 ffsino 296 1618 0 145 114 0 114 114 0 8 0 nchpl 144 1840 0 131 64 0 64 64 0 8 0 vnodes 216 1750 0 0 98 0 98 98 0 8 0 namei 1024 6698 0 6698 4 1 3 3 0 8 3 percpumem 16 54 0 4 1 0 1 1 0 8 0 kstatmem 264 33 0 8 2 0 2 2 0 8 0 scxspl 216 6355 0 6354 4 3 1 3 1 8 0 plimitpl 152 43 0 25 1 0 1 1 0 8 0 sigapl 424 517 0 473 7 0 7 7 0 8 1 knotepl 120 280 0 0 9 0 9 9 0 8 0 kqueuepl 224 30 0 20 1 0 1 1 0 8 0 pipepl 344 139 0 112 3 0 3 3 0 8 0 fdescpl 528 501 0 473 3 0 3 3 0 8 0 filepl 160 1804 0 1597 10 0 10 10 0 8 0 lockfpl 104 10 0 8 1 0 1 1 0 8 0 lockfspl 48 6 0 4 1 0 1 1 0 8 0 sessionpl 144 27 0 18 1 0 1 1 0 8 0 pgrppl 48 38 0 21 1 0 1 1 0 8 0 ucredpl 104 116 0 103 1 0 1 1 0 8 0 zombiepl 144 476 0 473 1 0 1 1 0 8 0 processpl 1240 517 0 473 5 0 5 5 0 8 1 procpl 664 583 0 535 6 0 6 6 0 8 0 sockpl 752 211 0 183 5 0 5 5 0 8 1 mcl64k 65536 4 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl12k 12288 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 117 0 0 15 0 15 15 0 8 0 mcl2k 2048 20 0 0 3 0 3 3 0 8 0 mextrefs 64 20 0 0 1 0 1 1 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 183 0 0 12 0 12 12 0 8 0 bufpl 272 2329 0 105 149 0 149 149 0 8 0 anonpl 32 5305 0 0 43 0 43 43 0 247 0 amapchunkpl 152 9594 0 9229 23 0 23 23 0 158 2 amappl16 200 1325 0 1304 5 0 5 5 0 8 3 amappl14 184 465 0 463 1 0 1 1 0 8 0 amappl13 176 132 0 120 1 0 1 1 0 8 0 amappl12 168 764 0 738 2 0 2 2 0 8 0 amappl11 160 7 0 6 1 0 1 1 0 8 0 amappl10 152 72 0 58 1 0 1 1 0 8 0 amappl9 144 285 0 285 1 1 0 1 0 8 0 amappl8 136 132 0 129 1 0 1 1 0 8 0 amappl7 128 153 0 140 1 0 1 1 0 8 0 amappl6 120 182 0 178 1 0 1 1 0 8 0 amappl5 112 93 0 83 1 0 1 1 0 8 0 amappl4 104 304 0 286 1 0 1 1 0 8 0 amappl3 96 1719 0 1645 3 0 3 3 0 8 0 amappl2 88 618 0 544 2 0 2 2 0 8 0 amappl1 80 10895 0 10298 14 0 14 14 0 8 1 amappl 88 2840 0 2713 4 0 4 4 0 92 0 uvmvnodes 80 99 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 1 0 0 1 0 1 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 501 0 473 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 501 0 473 1 0 1 1 0 8 0 vmmpekpl 168 6262 0 6214 3 0 3 3 0 8 0 vmmpepl 168 41534 0 39856 87 0 87 87 0 357 1 vmsppl 488 500 0 473 5 0 5 5 0 8 1 rwobjpl 80 14880 0 13876 24 0 24 24 0 8 1 pdppl 4096 1009 0 946 99 24 75 83 0 8 12 pvpl 32 12639 0 0 102 0 102 102 0 265 0 pmappl 256 500 0 473 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 426 0 28 12 0 12 12 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff835183e6) at panic+0x1e5 uvm_fault_unwire_locked(fffff8806cf009a0,200000470000,200000471000) at uvm_fault_unwire_locked+0x4be uvm_fault_wire(fffff8806cf009a0,200000470000,200000481000,1) at uvm_fault_wire+0x12d uvm_vslock_device(ffff800045feb4e0,2000004704c0,10000,1,ffff80002cbb2138) at uvm_vslock_device+0x112 physio(ffffffff82ad7e40,d02,0,ffffffff82ad8670,ffff80002cbb2418) at physio+0x257 spec_write(ffff80002cbb2260) at spec_write+0x11f VOP_WRITE(fffff880795c1da8,ffff80002cbb2418,5,fffff880097fd548) at VOP_WRITE+0x101 vn_write(fffff8806cf073f0,ffff80002cbb2418,0) at vn_write+0x1d3 dofilewritev(ffff800045feb4e0,4,ffff80002cbb2418,0,ffff80002cbb24d0) at dofilewritev+0x2bd sys_write(ffff800045feb4e0,ffff80002cbb2580,ffff80002cbb24d0) at sys_write+0xa2 syscall(ffff80002cbb2580) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x193f319cf00, count: -13 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x68 savectx() at savectx+0xae end of kernel end trace frame: 0x19429bbc190, count: 10 ddb{1}> trace x86_ipi_db(ffff80002999dff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x68 savectx() at savectx+0xae end of kernel end trace frame: 0x19429bbc190, count: -5