last executing test programs: 14.248812878s ago: executing program 3 (id=1216): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x10, 0xb, 0x1}, {0xb1, 0x10, 0x2, 0xffff}, {0x16, 0x7, 0x7f, 0x400f}]}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="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", 0x100}], 0x1) execve(0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="c528c0d631bbc82987816c69980211b96eab36018086c3c02fc795047df904ad", 0x20}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="a61223e590df9438a33009c2165d5b77369c3aa91b99850000478340847f74c5b9e15773cd5c6db4c38597f046bdf7b0288c81f397310000008bddffffffe8f7c65e2560bd13f5dc8ee6ee32e488830f5ed5b0ff50cb760ab2f800dc2b4f1964ff28bc2eea6b90117a82b8ec41c93aeb1aa9d5f957a9e19ab15e2515e0ca096f", &(0x7f0000000080)=0x80, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[]) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x25, 0x10, 0xb, 0x1}, {0xb1, 0x10, 0x2, 0xffff}, {0x16, 0x7, 0x7f, 0x400f}]}) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) sysctl$net_inet_ip(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)="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", 0x100}], 0x1) (async) execve(0x0, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)="c528c0d631bbc82987816c69980211b96eab36018086c3c02fc795047df904ad", 0x20}], 0x1) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000180)="a61223e590df9438a33009c2165d5b77369c3aa91b99850000478340847f74c5b9e15773cd5c6db4c38597f046bdf7b0288c81f397310000008bddffffffe8f7c65e2560bd13f5dc8ee6ee32e488830f5ed5b0ff50cb760ab2f800dc2b4f1964ff28bc2eea6b90117a82b8ec41c93aeb1aa9d5f957a9e19ab15e2515e0ca096f", &(0x7f0000000080)=0x80, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) (async) syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[]) (async) 13.746717717s ago: executing program 3 (id=1224): fchmodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x106, 0x0) sysctl$net_inet_ip(&(0x7f0000002080)={0x4, 0x18, 0x0, 0x19}, 0x4, 0x0, 0x0, 0x0, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 13.495683025s ago: executing program 3 (id=1233): r0 = socket$inet6(0x18, 0x1, 0x0) getsockopt(r0, 0x29, 0x40, 0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047470, &(0x7f00000000c0)=0x400) r1 = openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0xca) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x800, 0x0) getdents(r2, 0x0, 0x0) ioctl$PCIOCREAD(r1, 0xc0187009, &(0x7f00000000c0)) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) mkdir(0x0, 0x0) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x7}) r3 = syz_open_pts() close(r3) syz_open_pts() ioctl$TIOCSETA(r3, 0x802c7414, &(0x7f0000000140)={0x7fffdbff, 0x7bcd, 0xffedff84, 0x1603508, "00000100000804ff7f05000004048100", 0x1, 0x2}) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, 0x0) getpeername$inet6(r0, &(0x7f0000000600), &(0x7f0000000780)=0xc) open$dir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x10) select(0x40, &(0x7f0000000300)={0x16, 0x2, 0x0, 0x80a, 0x7, 0x4, 0x10000000000000, 0x7}, &(0x7f0000000140)={0x9, 0x0, 0x80000000000, 0x0, 0xc2c, 0x0, 0x6e53, 0x874}, 0x0, 0x0) r4 = socket(0x11, 0x3, 0x0) setrlimit(0x8, &(0x7f0000000180)={0xa, 0x8000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$sock_int(r4, 0xffff, 0x1, &(0x7f0000000000), &(0x7f0000000180)=0x4) r5 = open$dir(&(0x7f0000000100)='.\x00', 0x0, 0x42) r6 = kqueue() kevent(r6, &(0x7f0000000140)=[{{r5}, 0xfffffffffffffffc, 0x21, 0x2}], 0x9, 0x0, 0x0, 0x0) 12.453437604s ago: executing program 6 (id=1249): r0 = semget$private(0x0, 0x0, 0x210) syz_emit_ethernet(0x36, &(0x7f0000000300)={@broadcast, @random="94ea09066dbd", [], {@ipv6={0x86dd, {0x4, 0x6, "c4f007", 0x0, 0x33, 0x7a, @empty, @ipv4={'\x00', '\xff\xff', @rand_addr=0x8}}}}}) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000240)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) ftruncate(r1, 0x79c8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) getrusage(0x5f8a20f5b4f2087b, 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x0, 0x0}) write(r2, &(0x7f00000002c0)="d81ad3ede1f3bd8558d5c7364888", 0xe) r3 = socket(0x10, 0x2, 0xf1) r4 = dup2(r1, r1) kevent(r1, &(0x7f0000000040)=[{{r1}, 0xfffffffffffffffb, 0x4, 0x4, 0xffffffffffffffff, 0xb}, {{r1}, 0xfffffffffffffffe, 0x10, 0x40, 0x800, 0x8fb}, {{r2}, 0xfffffffffffffffa, 0x91, 0x2, 0x2, 0x9}, {{r1}, 0xfffffffffffffff9, 0xc0, 0x2, 0x1, 0x8000}, {{r3}, 0xfffffffffffffff9, 0x0, 0x2, 0x9, 0x8}, {{r1}, 0xfffffffffffffffe, 0x30, 0x210a4060f69ba082, 0x5817, 0x1}, {{r1}, 0xffffffffffffffff, 0x10, 0x10, 0x6, 0x1}], 0xe, &(0x7f0000000140)=[{{r1}, 0xfffffffffffffffc, 0x80, 0x1, 0x3ff, 0xa34}, {{r1}, 0xfffffffffffffffc, 0x40, 0xfe3c5fb55a2ef20d, 0xa, 0x6}, {{r4}, 0xfffffffffffffffa, 0x44, 0x1, 0x7ff, 0x5093}, {{r1}, 0xfffffffffffffffe, 0x8, 0x2, 0x400, 0x1}, {{r1}, 0x3, 0x20, 0xf0000000, 0x10, 0xffffffffffffff81}], 0x0, &(0x7f0000000200)={0x6bf1, 0xbf6}) 12.20473444s ago: executing program 6 (id=1254): writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000000)="944713145761ef4626e1cc7f391f55166f838c5f5b0fe563162b7bfc9e0a", 0x1e}], 0x1) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x5, &(0x7f0000000500), 0x0, 0x0, 0x20) r0 = syz_open_pts() ioctl$TIOCFLUSH(r0, 0x80047410, &(0x7f0000000080)) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b9a) r2 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x100) sysctl$kern(&(0x7f00000000c0)={0x1, 0x41}, 0x2, &(0x7f0000000180)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x26}, 0x2, &(0x7f0000001080), &(0x7f0000000080)=0x5f, 0x0, 0x56) poll(&(0x7f0000000040)=[{r2, 0x1}, {r1}], 0x2, 0x7) 11.748980509s ago: executing program 6 (id=1269): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) kevent(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x3, &(0x7f0000000080)={0x3ffffa, 0x7fdfffff}) setrlimit(0x8, 0x0) r1 = kqueue() kevent(r1, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) r2 = socket(0x18, 0x3, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) kevent(r1, 0x0, 0x0, &(0x7f0000000600), 0x2, 0x0) kevent(r1, 0x0, 0xfffffffe, 0x0, 0x80a3, &(0x7f0000000100)={0x3, 0x7}) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = open(0x0, 0x80000000000206, 0x0) read(r4, 0x0, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000100)="96e9cf1c159f0b69904fab0436bd3794417a80412b81b220a2be41ca6ac25ac05e6f4c00255c0d455217e927e31d9779cf74a3235a96a486c14d95215a2c5949c270014234956462237e42218e82abe737fd1465b1eadf1453fbfe796a18af6238319138c9f1cb2fb1c56c51b64f7e09d1942e71514e", 0x76}], 0x1) execve(0x0, 0x0, 0x0) r5 = syz_open_pts() msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$TIOCSETA(r5, 0x802c7414, &(0x7f0000000340)={0x0, 0x2000, 0xfdfffffe, 0x0, "ff0107002015c8a32d0000c792e70b5f0af128af", 0x6, 0x1003ff}) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="079facfaaed69aea4dc561c3b736feac0a2a76087be8b904ddc6f90b66e0f69b6dfba683b348224cf0ccc2a39b0f79389a2bd9b211424a22ca014b9231e253e257706c75b3f320166475c72455021edf575fab8b5d65b8d261c87c3ccc4e784ea7462f3723edabb8e26d27acb1797e2ef4db27270a", 0xffffff01}], 0x1) syz_open_pts() ioctl$TIOCSTAT(r5, 0x20007465, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSRSIG(r0, 0x80044272, &(0x7f0000000000)=0x6) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DIOCMAP(r7, 0xc0106477, &(0x7f0000000200)={&(0x7f00000002c0)='./file0\x00', r6, 0x2}) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[]) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, 0x0) syz_emit_ethernet(0x1000e, &(0x7f00000002c0)=ANY=[]) 11.737800827s ago: executing program 4 (id=1272): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) setreuid(0x0, 0xee01) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x462, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) write(r0, &(0x7f0000000140)='\x00', 0x1) sysctl$net_inet_tcp(&(0x7f0000000240)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$net_inet_tcp(&(0x7f0000000240)={0x4, 0x2, 0x6, 0x17}, 0x4, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0x8) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0xc) setuid(0xee01) openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f0000000480)) (async) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f0000000480)) socket(0x1e, 0x3, 0x0) (async) r2 = socket(0x1e, 0x3, 0x0) socket(0x1e, 0x3, 0x0) close(r2) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) r4 = dup(r3) ioctl$SPKRTUNE(r4, 0x20005302, &(0x7f0000000100)) (async) ioctl$SPKRTUNE(r4, 0x20005302, &(0x7f0000000100)) faccessat(r4, &(0x7f0000000180)='./file0\x00', 0x84, 0x1) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./bus\x00', 0xffc, &(0x7f00000002c0)='./bus\x00', 0x6}) pipe(&(0x7f0000000200)) mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x6) r5 = open(&(0x7f0000000000)='./file0\x00', 0x205, 0x118) ioctl$TIOCSTAT(r5, 0x20007465, 0x0) ioctl$TIOCCONS(r5, 0x80047462, &(0x7f0000000140)=0x5) seteuid(0xffffffffffffffff) (async) seteuid(0xffffffffffffffff) setsockopt(r5, 0x1000000029, 0x37, 0x0, 0x0) (async) setsockopt(r5, 0x1000000029, 0x37, 0x0, 0x0) ioctl$TIOCCONS(r5, 0x80047462, &(0x7f0000000040)=0xfffeffff) (async) ioctl$TIOCCONS(r5, 0x80047462, &(0x7f0000000040)=0xfffeffff) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) accept(r4, 0x0, 0x0) (async) accept(r4, 0x0, 0x0) 6.721154504s ago: executing program 3 (id=1280): sysctl$kern(&(0x7f0000000040)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x18, 0x3, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f0000000240)={0x0, 0x0, 0xab, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x67, &(0x7f0000000000)={0x9, 0x1, 0x32, 0xd5aa, 0x7}, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x1}, 0x8) 6.714591657s ago: executing program 6 (id=1281): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x4001, 0x0) shutdown(r2, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) close(r4) r5 = socket(0x2, 0x2, 0x0) r6 = dup2(r3, r4) connect$unix(r5, &(0x7f0000000000), 0x10) setsockopt$sock_int(r6, 0xffff, 0x1023, &(0x7f0000000040), 0x4) ioctl$TIOCSETD(r0, 0x8004741b, 0xfffffffffffffffe) select(0x40, &(0x7f0000000100), 0x0, 0x0, 0x0) 6.712608587s ago: executing program 4 (id=1283): r0 = socket(0x800000018, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) write(r0, &(0x7f0000000000)="50056566b6b6277ce66299316192a8afc772c47b1787f9f5be0512c8dcbd11107a5368183c6d855be3a56b600f595e53d61699f2ef3c11a01bfbe73d23b93268", 0x40) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000ac0)="df6e410d6bb016b49fa7c2c274c5799345db3f22fe8e6af8c4f2014b43ae21f90bb8ef55535eb6d5808bed37e345dfb2adc85abd9156a3f177014af5e506c5221a118c068f39ab4361967cf12b8ec03001cfe62e2371e904cd79d29288ca7b00c76ac5d697cfa1af3a2158fae931581e255ca26e028860bb16afd038653915fa462e", 0x82}], 0x1) (async, rerun: 32) execve(0x0, 0x0, 0x0) (rerun: 32) 6.487289525s ago: executing program 0 (id=1287): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) (async) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) (async) r1 = syz_open_pts() (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000100)={0x228f, &(0x7f0000000080)}) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000440)="a61223e590dfaa38a33009c2165d5b77369c3aa91b99850000478340847f74c5b9e15773cd5c6db4c38597f046bdf7b0", &(0x7f0000000080)=0x30, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async) write(r2, &(0x7f00000001c0)="d8564b0bf1ff0795548af9200400", 0xe) close(r1) (async) r3 = syz_open_pts() writev(r1, &(0x7f0000000480)=[{&(0x7f0000000440)="ff", 0x1}, {&(0x7f0000000180)="7208d2879d7ae4e27cdd670d", 0xc}], 0xfffffffffffff96) (async) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/201, 0xc9}], 0x1) (async) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) (async) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x287d) r5 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x14) read(r5, &(0x7f00000004c0)=""/221, 0xdd) (async) execve(0x0, &(0x7f0000000100), 0x0) (async) r6 = socket(0x2, 0x3, 0x0) ioctl$FIONREAD(r6, 0x8020699f, &(0x7f00000001c0)) (async) write(0xffffffffffffffff, &(0x7f00000013c0)="1552ac2f41494905334202aa62dbd3a7", 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd608320030000000000040000000000000000000400000000fe8000000000000627fb0000000000aabaccc34a8013501d58d6fe98bf7ed6d0cee7d79aee9b526410abcc1ce492097730e124d83b72005b26be4121a7f5"]) syz_emit_ethernet(0x126f, &(0x7f00000000c0)=ANY=[]) (async) r7 = accept$inet6(r0, &(0x7f0000000040), &(0x7f0000000200)=0xc) bind$inet6(r7, &(0x7f0000000240)={0x18, 0x1, 0x9, 0x1}, 0xc) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 2.00024616s ago: executing program 3 (id=1292): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)="03000000000000", 0x7}], 0x1, 0x200800) sysctl$kern(0x0, 0x0, &(0x7f00000005c0)="a61223d890d03741788b50ad6238a33009c2165d537736729e519b6e5e25fc7c8859fc659a00989e887d1c5bd93b7339a4259b0d1e1aa4d0dc8dccd49e3a35090e8f294086dc57a5aa9596bedda95197a4f53d6814c44f6d33fb6074052718998387d94c7b993a8a71d89ddd7218cd2e3e11af367b393bc8a7d08202c8bebccf2c", &(0x7f0000000080)=0x81, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r1, &(0x7f00000001c0)="d8564b0bf1ff0795548af9200400", 0xe) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$TIOCSETA(r2, 0xc0284416, &(0x7f0000000100)={0xa00, 0x0, 0x741, 0x0, "97000000efffffff00", 0x900, 0x7}) r3 = semget(0x1, 0x2, 0x208) semop(r3, &(0x7f0000000180)=[{0x0, 0xfffd, 0x800}, {0x0, 0x12ff, 0x800}, {0x0, 0xe000}, {0x1, 0x3, 0x800}], 0x4) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x550, 0xfd, 0x8, 0x604a}, {0x3, 0x0, 0x0, 0x6}]}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}}) r4 = socket(0x18, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) r5 = socket(0x18, 0x2, 0x0) close(r5) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{}, 0xfffffffffffffffe}], 0x0, 0x0, 0x0, 0x0) r6 = socket(0x800000018, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) bind$unix(r6, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) connect$unix(r5, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 1.999863473s ago: executing program 4 (id=1293): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205318) open(&(0x7f0000000100)='./bus\x00', 0x1, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1ffa, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x1, 0x11) open$dir(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) sysctl$kern(&(0x7f0000000240)={0x1, 0x48}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000200)=0x4, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) getsockopt(r1, 0x0, 0x6b, 0x0, 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x2, 0x0) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f0000000080)={&(0x7f0000000040)=[{0x1, 0xfffffff8}], 0x1}) 1.998393265s ago: executing program 6 (id=1294): setuid(0xffffffffffffffff) shmctl$IPC_SET(0x0, 0x1, 0x0) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x1000000029, 0x2b, &(0x7f0000000000)="5ab7776a", 0x4) r1 = semget(0x0, 0x1, 0x4) semctl$SETALL(r1, 0x0, 0x9, &(0x7f0000000040)=[0x8, 0xff, 0xc057, 0x5, 0x6c2]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000880)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)=""/253, 0xfd}], 0x1, 0x0}, 0x6}, 0x10, 0x40, 0x0) close(r2) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) r4 = socket(0x18, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) listen(r3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) execve(0x0, 0x0, 0x0) accept(r3, 0x0, 0x0) sysctl$vm(&(0x7f0000000680)={0x2, 0x8}, 0x2, 0x0, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) 1.998034935s ago: executing program 5 (id=1295): setitimer(0x2, &(0x7f0000000000)={{0x0, 0x80000001}, {0xffffffff}}, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x400) (async, rerun: 64) open(&(0x7f0000000380)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) (rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) setregid(0x0, r1) (async) setrlimit(0x1, &(0x7f0000000980)={0x1ff, 0xd24}) (async, rerun: 32) r2 = getpid() (rerun: 32) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r2) setreuid(0xee00, 0x0) (async) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x53}) (async, rerun: 64) r3 = socket(0x11, 0x3, 0x0) (rerun: 64) sendto$unix(r3, &(0x7f0000000140)="b1000503000004000000000007000000331c13fecea10500fef96ec0c72fd3bc7ae30200004e3039d2d236acf20b7804be38164991f7c8ad5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba090000000835713f00219b8db5ccd2feae000000000000b71d89e0000407", 0xb1, 0x0, 0x0, 0x0) select(0x40, &(0x7f00000000c0)={0x4, 0xe9, 0x8, 0x80, 0x2, 0x4, 0x8000000000000000, 0xb}, &(0x7f0000000140)={0x1, 0xffffffffffffcca3, 0x101, 0x40000000003, 0x5, 0x0, 0x0, 0x6}, &(0x7f0000000300)={0x4, 0x8000000200000000, 0x3d, 0x100, 0x9, 0xffff, 0x5, 0xe}, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x10, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) recvmmsg(r4, &(0x7f0000000300)={0x0, 0x1}, 0x10, 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') (async) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.747042269s ago: executing program 2 (id=1296): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000005c0)="5c59211cf8409fd780d55369d0b866a333b6e8f1374e7087547b0dba48d22b9e1f569025a4c90bbcc7c42e5be3c27e98d74e142f3eef695128b2a8ba9c94430545f309b1", 0x44) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) r1 = socket$inet(0x2, 0x2, 0x0) close(r1) r2 = socket$inet(0x2, 0x2, 0x0) r3 = accept(r2, &(0x7f0000000080)=@in, &(0x7f00000000c0)=0xc) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f00000002c0)={0x0}, 0xc) r5 = getuid() connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x2}, 0x8) setreuid(0xee00, r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r6, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000200)='./file0\x00', 0x0, r7) socketpair(0x1, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000003c0)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f0000000280)=[{&(0x7f0000000140)="6c33ab2530e22be4c750a0dcc0e57c94cc4e9bee49053a5e85998d5c46ffbadba8a21895c968de993ee4e5f439e6bf1ddea98209dc0bdc7c0a3d80d7a029285e88a0f42397f5b1492df904e38182a3d1c6", 0x51}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="2000000000000000ffff000000000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="000000002800000000000000ffff000001000000dc8c0eb13a5650b0aa97f20c43136399d4077dc88e6eb06a86130a7fe9cd0941b341e2fee436c6a4d22b855113931eacab5223c532062f23491395c6d92e3aae83c1037454a41c2b4174a927072e897d86cd01972b88fec28ec7fc8a361e5ea9c9fb82c5dfcd7cab8ab5e7fb1048682f65778effd88bd7b501cff0e5e36b221eb7ef80d3c265fbea9c35597d65d133f35ebd5496bb551e70c3e787ffe97b19b1ba0fe11c268e4871e4240b858c9bfeaf0dc8b974a28e3be35b6acfc89a1ca7148af82c2ff1d5688f55e6c5cdb3d3708edfc9fb1e3d8fe5ed29a89728152e9f934db163d7fc8da9f173e14f06d8d567d50fdbbf3ff1614c04c311b1cfb78da42540cebe2fc63149ed7a6816ebc8d1390161f260fae1ef1bcd5c395198e860fc5f366742", @ANYRES32=r8, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x48, 0x5}, 0x5) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="e600100000000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='x\x00') open$dir(&(0x7f0000000200)='./file0\x00', 0x80, 0x61) 1.745466643s ago: executing program 1 (id=1297): readv(0xffffffffffffffff, &(0x7f0000000c40)=[{&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000000240)=""/30, 0x1e}, {&(0x7f00000007c0)=""/214, 0xd6}, {&(0x7f00000008c0)=""/236, 0xec}, {&(0x7f00000009c0)=""/79, 0x4f}, {&(0x7f0000001080)=""/217, 0xd9}, {&(0x7f00000003c0)=""/232, 0xe8}], 0x7) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) mknod(&(0x7f00000001c0)='./file0\x00', 0x2006, 0x4f4b) unveil(0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file2/file0\x00', 0xc003b30baf5ecf34, 0x1) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000140)={0xfffffffe, 0x101, {0x3}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket$inet(0x2, 0x4, 0x4) setsockopt$sock_timeval(r0, 0xffff, 0x1005, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x308, 0x0) ioctl$BIOCSDLT(r2, 0x8004427a, &(0x7f0000000200)=0x5e8) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0x8080691a, &(0x7f0000000100)) ktrace(&(0x7f0000000380)='./file0\x00', 0x1, 0x40000822, 0x0) setreuid(0x0, 0xee01) r4 = socket(0x800000018, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSRTIMEOUT(r5, 0x8010426d, &(0x7f0000000080)={0xffffffffffffffff}) setitimer(0x2, &(0x7f0000000000)={{}, {0xffffffff}}, 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) utimes(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{0x8, 0x4}, {0x1, 0x8}}) ioctl$FIONREAD(r6, 0x4004667f, &(0x7f00000000c0)) getitimer(0x1, &(0x7f0000000040)) 1.722764178s ago: executing program 2 (id=1298): setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) (async) setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) syz_open_pts() (async) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x8a38, 0x0, "07160a009cef01098b748200", 0x0, 0x6}) ioctl$TIOCCDTR(r1, 0x20007478) (async) ioctl$TIOCCDTR(r1, 0x20007478) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x2) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x10, 0xd, 0x1, 0x2}, {0x7, 0x0, 0x1, 0xfff}, {0x2, 0x2, 0x9, 0x5}, {0x4, 0xc, 0x7}, {0x4, 0x5, 0x8, 0x2}]}) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x10, 0xd, 0x1, 0x2}, {0x7, 0x0, 0x1, 0xfff}, {0x2, 0x2, 0x9, 0x5}, {0x4, 0xc, 0x7}, {0x4, 0x5, 0x8, 0x2}]}) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000019c0)="3cea7d6a5d7844323e5a2e6c51835d2484acb0bc46c063bc23753ab5ed3b5f55fb4b420b8b092d", 0x27}], 0x1) r3 = dup2(r1, r0) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000080)={0xffffffff, 0x1, 0xfffffffa, 0x7fc, "0900000000000000cb52ec8608007673ca9e5fd7", 0x6, 0x8}) poll(&(0x7f0000000000)=[{r3, 0x40}], 0x1, 0x0) 1.720985605s ago: executing program 1 (id=1299): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000fffef74000ae005d74542bc4a725b669902036a5e292a112c802001883ccce56e5769473cc9caa85b5cb1496ff623201feffff62feb5ae1d532f6ae7e7f68020155ba8b8bf2f38a4b7cffc666aceaf3b22ad622d883b226d018c61e8"], 0x28, 0x408}, 0x1) (async, rerun: 64) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/239, 0xef}], 0x1, 0x0}, 0x40) (rerun: 64) dup2(r0, r1) 1.720783845s ago: executing program 6 (id=1300): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$VNDIOCSET(r0, 0xc0384600, &(0x7f0000000780)={&(0x7f00000000c0)='./file0\x00', 0x5, 0x0}) mknod(&(0x7f0000000100)='./file0\x00', 0x1ffa, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f00000001c0)=0x9c) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r3, 0x0) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r2, &(0x7f00000001c0)="d8564b0bf1ff0795548af92004", 0xd) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, 0x0) unveil(0x0, &(0x7f0000000080)='c\x00') flock(r0, 0x0) 1.720465241s ago: executing program 7 (id=1301): mknod(&(0x7f0000000240)='./file0\x00', 0x2000, 0x6) r0 = open(&(0x7f0000000000)='./file0\x00', 0x205, 0x118) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000480)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x4, @broadcast}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0xb, 0x0, {0x5, 0x4, 0x1, 0x2, 0x2, 0x68, 0x1, 0xed, 0x11, 0x61a, @broadcast}}}}}}) 1.466719922s ago: executing program 0 (id=1302): r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, 0x0, 0x0, &(0x7f0000001440)="cca410df", 0x4) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x9}, 0x2, &(0x7f00000000c0)="24b8b1ef", 0x0, &(0x7f0000000140), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) close(r2) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f00005e9000/0x3000)=nil, 0x3000, 0x0) r3 = socket(0x2, 0x2, 0x0) r4 = getpgrp() getpid() setpgid(r4, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000080), 0x4) open(0x0, 0x0, 0x100) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0) execve(0x0, 0x0, 0x0) ioctl$VNDIOCGET(0xffffffffffffffff, 0x81946466, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0xfbfd}, {0x4, 0x0, 0x0, 0x800}, {0x6, 0x0, 0x0, 0x3ffff}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r5 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) read(r5, 0x0, 0x0) ioctl$PCIOCGETROM(r1, 0xc0107005, &(0x7f0000000180)={{}, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_open_pts() syz_open_pts() 1.466122127s ago: executing program 1 (id=1303): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getppid() r4 = getpid() setpgid(0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, r4}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$WSKBDIO_GETMAP(r5, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) unlink(&(0x7f0000000080)='./file0\x00') r6 = fcntl$getown(r5, 0x5) fcntl$setown(r1, 0x6, r6) r7 = fcntl$getown(r1, 0x5) fcntl$setown(r2, 0x6, r7) setpgid(0x0, r3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll(&(0x7f0000000000)=[{r8}], 0x1, 0x0) r9 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r9, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) 1.464443888s ago: executing program 0 (id=1304): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x1e}, 0x126c, 0x10025, 0x0, 0x0, 0x8000000000000000, 0x1000000029, 0x9a, 0x8000000000100e65}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x5) fcntl$lock(r0, 0x8, &(0x7f0000000140)={0x2, 0x0, 0x5, 0x2, r1}) (async) fcntl$lock(r0, 0x8, &(0x7f0000000140)={0x2, 0x0, 0x5, 0x2, r1}) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 1.464212275s ago: executing program 0 (id=1305): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x409}], 0x1) r0 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$FIONBIO(r0, 0x8004667e, &(0x7f0000000080)=0xd3) ioctl$WSMUXIO_ADD_DEVICE(r0, 0x80085761, &(0x7f00000000c0)={0x2, 0x6}) setrlimit(0x8, &(0x7f0000000040)={0x7, 0x50}) r1 = syz_open_pts() dup(r1) close(r1) r2 = syz_open_pts() ioctl$TIOCSETAW(r2, 0x802c7415, &(0x7f0000000080)={0x2df57365, 0x10007fff, 0x7ff, 0xfffffff8, "0b030003be0a00817d2854c3c254d3e3e5f4d3c9", 0x2b0c00}) writev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)="1a1845ec07b43c690415b6760b2513f3d61ad2e0f6b7f2477566dd517bed8fa3fe5ba9d7d1e150fa7faff69ff2e1ffb20ddf6d7e5d0ae0e082f558289beed11bc719562b6b347544b6993d45ae50a55be2c657e65c48e91fe1d4a11fbd23d345563c28f6889770e48c8563d35e4a7e6b4e07a38d3f81731ec089351a200c88ecd281f13c5670fbe1bcd770fd9fa2182f71dd8676c69f41b2725df10f788c11ac3c79eb271947d83fde3b0b3fd92e7f263d80091da08037bbcf97d743fbe07e251ce1108f0b9b33eb84d36dd01890c7e3751ace266c30a40ec9a69c8c57f4a170bf4c4dd13f04b02bc05b1abb664e26154558e46bdefe9169e1dd75c7ed7d48c6d73199aa67d5cedce5f994ef240e01345daa9ef0b654d541e7459d2f57b471dc58e00234a6db69449673186e2482be14a22b651af622207713b06b0b2ce25c5daf8e193e00295c4a2aae6dfd793a2e8b28be3d6750cc796667eb26910c246de362c84995005cb089cb1f605e95cdced994dc4391601ac4ce732251cfbb39dae12ccf597499e41d7a649749a862b600ebf054b7be792ada85871dfb703707b479c7713bbb60012cf401ea5a323cd52942f8d1bedc4e082b7b9c34f0d329c5edff89ad18a3f738e9b38b5c1cb9fd973321be839b7b5c47efe7f6e29e436512e65c1a01b976ab5627c155b509815ee6dcc5c084c6ce7d0be61b1cede2044c11fb27c9175084ebbcc09cde119c24c89d67c0a46b27f53e11b1a42164d40f81bd0edca212644b866fdf048480a4eb6dc2f3c0661de3daeb464d4882fe763cc20742bb8782e72fa239292916b2fa80c1b5010ce212d6f80476d82658c20fa034902e48a36eaa451c8c367e7b1e6132b6201743fe34a8404df3a325f0a871db4c2471cc343db41573b114437e6ac244b0baece8c1994db77f7ac59f70bdbfe49734d1c804478022f3ee6e901fc463aac0dd62963f1e57980349210dc8a20a1756101a807f21c74773bfecb801ff074e1ea7313b062c3b57246b57aa3cc1763dc6868306a3b0c0f1eb5829acbf66df3de67d42583aa1777f15ed08991f46c5820e7092183facace016554bc556272dbc33cb3738a7d335f00422789034b654980547c283a1b5fb339172fd36788e35ec9f49a184f77038d07c2a7ea9ab210dfbdf0e32b30db3ee23de9c710ea39cb9dc8be91c88146bedc52d33a30a078c79e7fd097bd83d7bbc3dced252be1fecb133af36c58bf3415e6199f2ce1dc3194db9e728fc702400694f1bb6373a990816955e0a3913f89a58ab38942928f3e976ef270c189c76dad84ee1dbc5f04edebb391ec6c0fa8641afd1ef6c55d57c46556fce2ec1c55f89b458f4b4d3ec2d29019fe424eaae5cc3b22861378d60db53cec288f8895d0b5fa1d53c42e5bc428669d9f3c671745b5a6e391cc6deb0cabad716449af70ac9765cd78142e109847979025737b28beafd88fae841d1e7f947fb568220cac1e6bf762d29eed503ec516f5130386881073d30587a8159f31816d29aff86a5bb85b0e6e426a3ecd35eb5a26ce2bbd4f338d3826c2fc5b78efc86a105ed8610e69f65f0d882eed0811ba3b1428565ca20446571fb4f7f767422f3fb33f1be13679e588ce5d179f7529e6704bb7bdae9628d07da559569ffb9380f45d99da0c6c095dfc9fbe461bd40daee6a37a42819fbae4dd3ddc4b9021db25d7eefc94c0f63683086cb5d25ead1f4de790c8fe671bffa07c9024b98d9c3959e044dc455f11eec11d825da767b0bcb9e987e7d75e04af75817204f02e25679026a010ec58e75bbdc7d62288b57fd752d6497f3a7313728210e6021a250aaac8f91cf1272b732acb245fcb9d5fad3e6009619feb35bd1ed22179b98819912c5638e35d7b43f0c32c72f1cb0a32d185af754b91841dfe05dfc30fcd22e3c0c1a2337b0dd75d413a0e4b398c27a8a0eb62943d4d125bfb8bad556f5fbfa7f05386f3cb68947e86cd53f98026d4cb6ef0357e09b7c93420ad7d62809104f23a373ab63e4caae8ef6167c2bb9f20677a356f2ecd0c3ba28db2c83a5f72e876bc4cd54d668411f0057776b8ba1b01777210a64912e268ed803a5c79220be2c42aeea419760348c5695c06457e4b983d272ccac346258fe69e9b845bc10b9049f6ff5428dbf8b95115725cfa6f8fb14f23034343b88c7cebf15b76aad6cce7d61d443ca9d32c5b56d90c0dd7a0314f48f7dd3ad2e76f3fd2014f55fdaa6344736d526b5c31f11871067308ef754de7e3ddb982f3d82fc48289a67a1014be28e54f8d3310e99540f4ba957b9d4b13eb338c18693258ee88f00be1128df9cda94628356b180c5f49ce6a67830037fe3d1fe6c57a7c16ceff2c9f0a905971383c73fcf05d5f2df22224ec7bbbebb4facfc238158161845a09ea2c6c999e95b7ea994732af7f8da56d4a1c8401c5c27e6ff0986687e965bcd0c3f44bce966da21278b9a15069883ec39", 0x6de}], 0x1) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x848, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="6056b5b8cc0c16db0919d17d6cceb9f9203162a14437d030a9bf5a1189f981aa6a78ef", 0x23}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x18, 0x2, 0x0) sendmsg$unix(r4, &(0x7f0000000040)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11"], 0x20, 0x2}, 0x6) ioctl$TIOCSETA(r3, 0xc4504442, &(0x7f0000000300)={0xffffffff, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1", 0x0, 0x4}) 1.250172029s ago: executing program 4 (id=1306): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x80) pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0xfffffffffffffffa) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000080)=0x2) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) truncate(&(0x7f00000000c0)='./file0\x00', 0x5ffffffffd) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f000000f000/0x4000)=nil, 0x4000, 0x2) munmap(&(0x7f000000e000/0x2000)=nil, 0x2000) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) 1.236208517s ago: executing program 0 (id=1307): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async, rerun: 32) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000340)={0x3, &(0x7f0000000000)=[{0x7, 0xfe, 0xa, 0x5}, {0x6c, 0x3, 0x0, 0xb}, {0x6, 0x1, 0x12, 0x800}]}) (async, rerun: 32) sysctl$net_inet_carp(&(0x7f0000000000), 0x8, &(0x7f0000000040), 0x0, 0x0, 0x0) r2 = accept$inet(r0, 0x0, &(0x7f0000000140)) getpeername$inet(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xc) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x84, 0x0, 0x0, 0x7}, {0x6, 0x0, 0x0, 0x401}]}) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)='aG', 0x2}], 0x1, 0x800) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000440)="a61223e590dfaa38a33009c2165d5b77369c3aa91b99850000478340847f74c5", &(0x7f0000000080)=0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async) write(r3, &(0x7f00000001c0)="d8564b0bf1ff0795548af9200400", 0xe) ioctl$BIOCGRTIMEOUT(0xffffffffffffff9c, 0x4010426e, &(0x7f00000000c0)) write(r1, &(0x7f00000002c0)="d81ad3ede1f3bd8558d5c7364888", 0xe) (async) r4 = socket(0x2, 0x2, 0x0) (async) r5 = socket(0x2, 0x400000000002, 0x0) setsockopt(r5, 0x0, 0x23, &(0x7f0000000240)="b1f5d915", 0x4) dup2(r5, r4) select(0x40, &(0x7f0000000080)={0xfffffffffffffffd, 0x1d0a, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) fcntl$getown(r1, 0x5) (async, rerun: 32) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 64) r6 = socket(0x2, 0x2, 0x0) (rerun: 64) connect$unix(r6, &(0x7f0000000000), 0x10) (async, rerun: 64) bind(r4, &(0x7f0000000000), 0x10) (async, rerun: 64) write(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) ioctl$TIOCSETA(r0, 0xc4504442, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) (rerun: 64) 1.235780211s ago: executing program 7 (id=1308): setrlimit(0x8, &(0x7f0000000980)={0x9, 0x8000000000000000}) r0 = syz_open_pts() close(r0) (async) syz_open_pts() (async, rerun: 32) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000180)={0x40978b, 0x10001, 0xfffffc03, 0x80a1a0, "bb08000100f167d910508bc49d7323000000007e"}) (async, rerun: 32) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2a0, 0x0) ioctl$BIOCSETIF(r1, 0x80184902, &(0x7f0000000380)={'tap', 0x0}) poll(&(0x7f0000000040)=[{r0, 0x40}], 0x1, 0x10001) (async) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) 1.233561205s ago: executing program 5 (id=1309): sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)={0x2, 0x3}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="9da8e3e9ed", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket(0x2, 0x3, 0x0) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r4 = socket(0x18, 0x0, 0x7f) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', r4, 0x1}) sysctl$hw(&(0x7f00000000c0)={0x6, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) dup2(r2, r1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000240)="ea00000100000000", 0xc) dup2(r1, r0) sendmsg$unix(r0, &(0x7f0000002a40)={0x0, 0xffffffffffffff89, 0x0, 0x6e}, 0x0) 1.233242952s ago: executing program 4 (id=1310): chflagsat(0xffffffffffffffff, 0x0, 0x0, 0x242320956a67708) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) pwrite(r0, &(0x7f00000000c0)="a7", 0x1, 0x40007) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlock(&(0x7f0000010000/0x3000)=nil, 0x3000) mprotect(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x3) mlock(&(0x7f000000f000/0x4000)=nil, 0x4000) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/113, 0x71) chflagsat(0xffffffffffffffff, 0x0, 0x0, 0x242320956a67708) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) pwrite(r0, &(0x7f00000000c0)="a7", 0x1, 0x40007) (async) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mlock(&(0x7f0000010000/0x3000)=nil, 0x3000) (async) mprotect(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x3) (async) mlock(&(0x7f000000f000/0x4000)=nil, 0x4000) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x400, 0x0) (async) readlinkat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/113, 0x71) (async) 1.232976524s ago: executing program 7 (id=1311): sysctl$hw(&(0x7f00000000c0)={0x6, 0x1}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) setitimer(0x2, &(0x7f0000000000)={{0xfffffffff7fffffd}, {0x4000ffffffff}}, 0x0) 1.209706763s ago: executing program 2 (id=1312): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]}) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1) sysctl$kern(&(0x7f0000000300)={0x1, 0x48}, 0x2, 0x0, 0x0, &(0x7f0000001440)='\x00\x00\x00\x00', 0x4) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)="03000000000000", 0x7}], 0x1, 0x200800) sysctl$kern(0x0, 0x37, &(0x7f0000000000)="dceb1a0671b667a2dddbf4577233db1e9ea2000100006d7bbcb054ea5bd68fb2ea8375cc9905ca2f52eb6d323542c77c7a5030a55f", &(0x7f0000000080)=0x35, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000005c0)="8fbb5726", 0xff68) kevent(0xffffffffffffffff, &(0x7f0000000100)=[{{r1}, 0xfffffffffffffffe, 0x97, 0x20000041, 0x3}], 0x7fffffff, 0x0, 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000080), 0xfd, 0x0, 0x8002, 0x0) readv(r2, &(0x7f00000002c0)=[{0x0}], 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) fsync(r0) write(0xffffffffffffffff, &(0x7f00000000c0)="459e2a6c9ed83626b32fff20a61d", 0xe) ioctl$BIOCSRSIG(0xffffffffffffffff, 0x80044272, &(0x7f0000000100)=0x9) 1.206400749s ago: executing program 2 (id=1313): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) sysctl$hw(&(0x7f0000000080)={0x7, 0x6}, 0x2, &(0x7f0000000040), 0x0, 0x0, 0x0) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000140)={0x5, &(0x7f0000000280)=[{0x1d, 0x1, 0x0, 0xfffff4b2}, {0x25, 0x0, 0x2, 0x7ffffffc}, {0x28, 0xff, 0xf9, 0x7}, {0x87, 0x8, 0xae, 0x8}, {0x6, 0x4, 0x7, 0x800}]}) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000140)='\x00\x00 \x00', 0x4) write(r0, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) (async) write(r0, &(0x7f0000000240)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) 1.205030417s ago: executing program 5 (id=1314): sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x2, 0xf0}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) 1.203795706s ago: executing program 7 (id=1315): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt(r0, 0x0, 0x7, 0x0, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x64, 0xdd, 0xf, 0x2}]}) 1.00039505s ago: executing program 2 (id=1316): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x28, &(0x7f0000000000)="5ab7776a", 0x4) syz_emit_ethernet(0xa3, &(0x7f0000000180)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "975203", 0x6d, 0x0, 0x3, @remote={0xfe, 0x80, '\x00', 0x0}, @local={0xfe, 0x80, '\x00', 0x0}, {[@hopopts], @generic="3309d06bc39cfef0af3829e6b622dcb8b288b659bb3c822c5c37dfefc2a485ceb3a27aebd08826d2cb0d281d2beaf33e21df9c6a3245b02e60430b3f1c766d0bef498ea156fbdf0f722faf76321ba94df403178297c350e67222361de672f69c1cd488bd33"}}}}}) sysctl$kern(&(0x7f0000000000)={0x1, 0x3a}, 0x2, 0x0, 0x0, 0x0, 0x0) ktrace(0x0, 0xd110d4b105548fa7, 0x40000c04, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x8) close(r0) 996.065027ms ago: executing program 5 (id=1317): syz_emit_ethernet(0x5e, &(0x7f0000001880)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "062500", 0x28, 0x2b, 0x0, @ipv4, @remote={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @rand_addr="014c53eeebcf78e7577a6e92295b898f"}}}}}}) socket(0x6, 0x0, 0x2) 995.709207ms ago: executing program 7 (id=1318): ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, "0100dd2dfa7f0000000400"}) r0 = socket(0x2, 0x2, 0x0) fchmod(r0, 0x124) setsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000040), 0x4) syz_emit_ethernet(0xe8, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a80c008100250086dd6e98087e00aa04dcfe8000000000000000000000000000aa00000000000000000000ffff02"]) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) r2 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000440)="6d6e04", 0x3}], 0x1, 0x4) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637d) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FIONBIO(r3, 0x82907003, &(0x7f0000000140)=0x2) mknod$loop(0x0, 0x2000, 0x1) ioctl$TIOCSETA(r1, 0xc1084425, &(0x7f0000000040)={0x3, 0x0, 0xfffffffd, 0x5, "52c9795a6b476ed1616161610000000000000008", 0x2000000, 0x5}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) select(0x40, &(0x7f0000000000)={0x1b, 0x5, 0x4, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x41) 995.472437ms ago: executing program 2 (id=1319): r0 = semget(0x0, 0x1, 0x281) semop(r0, &(0x7f0000000680)=[{0x0, 0xeffa}], 0x1) (async, rerun: 32) semop(r0, &(0x7f0000000040)=[{0x0, 0x6, 0x800}], 0x1) (rerun: 32) r1 = getuid() chown(&(0x7f0000000200)='./file0\x00', r1, 0xffffffffffffffff) setreuid(0xee00, r1) (async) chown(&(0x7f0000000140)='./file0\x00', r1, 0x0) (async) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) r3 = getuid() (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r4 = socket(0x2, 0x2, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {}, {0x2}, {}, {0x3, 0x5}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {}, {0x1, 0x80000000}, {0x1, 0x6}]}) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) r5 = socket(0x2, 0x4001, 0x0) r6 = dup(r5) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) close(r7) (async) r8 = socket(0x2, 0x2, 0x0) connect$unix(r8, &(0x7f0000000000), 0x10) (async) setsockopt$sock_int(r7, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) poll(0x0, 0x0, 0x1400) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040)=0xab9, 0x4) setreuid(0xee00, r3) (async) r9 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000080)={{0x1, r1, r2, r3, r9, 0x30, 0x3}, 0x1, 0xfff, 0x9}) 995.223342ms ago: executing program 5 (id=1320): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSMOUSEIO_SETPARAMS(0xffffffffffffffff, 0x80105728, &(0x7f0000000080)={&(0x7f0000000040)=[{0x8, 0xfffffffe}, {0x26, 0x200ff}], 0x2}) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f0000000040)={0x8002, 0x0, 0x5, 0x0, "ff000000e5ffffff000000f9871d46008000", 0x0, 0xfffffffe}) sysctl$kern(&(0x7f0000000040)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000040), 0x3, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c11042330de22a299ab00894fdc9bac6042d", 0x4) ioctl$WSMOUSEIO_GETPARAMS(r0, 0x80105727, &(0x7f0000000080)={&(0x7f0000000040)}) 993.320343ms ago: executing program 5 (id=1321): shmget$private(0x0, 0xc00000, 0x2, &(0x7f00003fe000/0xc00000)=nil) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r0, 0xffffffffffffffff, &(0x7f00000010c0)) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) openat$diskmap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x53}) r1 = syz_open_pts() r2 = open(&(0x7f00000002c0)='./file0\x00', 0x20, 0x5) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000100)="023c09ddf183a30c43edc84929624417fcfae0cd3d5de95180bf1a74fce166c3ab0696012badfce1c8c8cb2375141832aad3257d7c455921a632171af9a6ac066db225381dcf24655b07721b99df78896431ce8217be9026e20cbc326055438a49c5fc87f98f55323385e8313efe5be51de8845cd53f6c3ba427ba308dc62831766cc3d7b1dbbbaa8814d71f8fb1c375192fb96509049da10b50631a04d6e0679a3541a6fd7e8ec6577ded279c6515cf517269a6a52893330b", 0xb9}, {&(0x7f00000001c0)="bdb157dea3e52c2aaf9b0e79ba408c7d2bac3b3b8e5d7accd7ba98917e75792fd2c9e21dfc7877835c03d7e510b31178566a", 0x32}, {&(0x7f0000000200)="ff4b232074b523a26b5929715ff94c6fee4fef5a514c58a9ae9092fee89b04624bb8bbc269f369629cafaa3224c1a5a29e5b9649c73fa4d0ae74c9850ea3a08c2faf4a2eba19e37d27d59a9cdb0ac72530f2171a719981ebad4a16d25b43878aa854ab7925854f4b746f67809403389447422b7479a37a2d411a953b20b7", 0x7e}], 0x3) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) ioctl$TIOCNXCL(r1, 0x2000740e) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') pipe2(0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/28, 0x1c, 0x0, 0x0, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000029, 0x38, 0x0, 0x0) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r5, 0xcd504406, &(0x7f0000000000)={0x80, 0x1000002, 0x21002, 0x8, "17a2224ff1c14649ebb100000000795e6b47c1d1", 0x3ff, 0x7}) getrlimit(0x1, &(0x7f0000000000)) 741.051959ms ago: executing program 1 (id=1322): syz_extract_tcp_res(&(0x7f00000000c0), 0xff, 0xffff) (async, rerun: 64) syz_extract_tcp_res(&(0x7f0000000100), 0x7fffffff, 0x9) (rerun: 64) syz_emit_ethernet(0x48, &(0x7f00000002c0)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3a, 0x82, 0x0, 0x2, 0x70, 0x0, @loopback, @rand_addr}, @udp={{0x2, 0x0, 0x8}, {"1282694ab53bf7d3ae9d9abd7ff95418437c6fd944214993ead7dcad1ce8"}}}}}}) (async, rerun: 32) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8490081003a008035bd4c080006040000aaaaaaaaaaaa7f05000000ffffffffff7f00e87a3996b35604ab24680d5999ca0cd40001"]) (rerun: 32) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) (async) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x10, 0x0) ioctl$VNDIOCSET(r1, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x2, 0x0) (async, rerun: 64) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]}) (async, rerun: 64) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)="03000000", 0x4}], 0x1, 0x200800) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 32) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) (async) write(r3, &(0x7f0000000200)="d8564b0bf1ff0795548af9bf200413eb9a64eb73d6f52c8a7f9621b2178a5b1c0200c72c9df47adb6b7493", 0x2b) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000080)="0315f1d89ec5a317a9357682", 0xc) (async) connect$inet(r0, &(0x7f0000000240)={0x2, 0x3}, 0xc) connect$unix(r2, &(0x7f0000000000), 0x10) (async) write(r2, 0x0, 0x0) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x81, 0x0, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x401}]}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) (async) sysctl$net_inet_etherip(&(0x7f0000000080), 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x4d, 0x0, 0xffd7) (async) r5 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$WSMOUSEIO_SRES(r5, 0x80045721, &(0x7f0000000000)=0xfffffffc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 740.701727ms ago: executing program 7 (id=1323): mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000300)='./file2/file0\x00', 0xc2) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) msgget(0x1, 0x106) geteuid() getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000), 0xc) setreuid(0xee00, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@abs={0x0, 0x0, 0x0}, 0x8) setrlimit(0x8, &(0x7f0000000980)={0x7, 0x51}) r3 = syz_open_pts() close(r3) r4 = syz_open_pts() ioctl$FIONBIO(r4, 0x8004667e, &(0x7f0000000180)=0x8) ioctl$FIOASYNC(r3, 0x80047469, &(0x7f0000000040)=0xfffffffc) read(r4, &(0x7f0000000080)=""/248, 0x724ce662a38b9ab4) setregid(r1, 0xffffffffffffffff) ktrace(0x0, 0x0, 0x510, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) unveil(&(0x7f0000000080)='./file2/file0\x00', &(0x7f0000000280)='x\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x2) select(0x0, 0x0, 0x0, 0x0, 0x0) kqueue() syz_emit_ethernet(0xe, &(0x7f0000000140)={@local, @broadcast, [], {@generic={0x8848}}}) 740.417355ms ago: executing program 3 (id=1324): socket(0x18, 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) getsockopt(r0, 0x9, 0x3, &(0x7f0000000200)=""/54, &(0x7f0000000240)=0x36) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000012c0)) setrlimit(0x1, &(0x7f0000000980)={0xff, 0xd21}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0xcb, 0x0, 0x1, 0x444}, {0x84, 0x0, 0x0, 0x7}, {0x6, 0x0, 0x0, 0x401}]}) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000280)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)="c528c0d631f9fda2c2276c27e9bbc82987816c69980211b96eab36018086c3c0", 0x20}], 0x1) sysctl$kern(0x0, 0x0, &(0x7f0000000380)="a61223d8903009c2165d0000000000000000000069d6c55f80a5a3a037bf3698a9887825279c987465ee863b39fe6aba398579ce50f648769c8c1b700000000087e425fc3fa190512b2ce56c994400000000000055f4630057fff9708fa08025", &(0x7f0000000080)=0x60, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x19, 0x0}) write(r1, &(0x7f00000001c0)="d8564b0bf1ff0795548af9200400", 0xe) r2 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x200, r2) unveil(0x0, 0x0) utimes(0x0, &(0x7f0000000040)={{0x8000000000000000, 0x4000000000000004}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440)) select(0x40, &(0x7f0000000080)={0x16, 0x0, 0x0, 0x20000000000000, 0x7, 0x4, 0x10000000000000, 0x5}, &(0x7f0000000140)={0x1000000000007f, 0x0, 0x80000000000, 0x0, 0xc28, 0x0, 0xfffffffffdffffff}, 0x0, 0x0) sysctl$vm(&(0x7f00000003c0)={0x2, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) socket(0x20, 0x4, 0x1) openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) 498.734667ms ago: executing program 1 (id=1325): r0 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x40000d06, 0x0) r1 = getpid() setgroups(0x0, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, r1) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, "97a662780400000000000000d100"}) getppid() r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000400)={0x5, &(0x7f00000001c0)=[{0x84, 0x1, 0x0, 0xfffff4b2}, {0x25, 0x0, 0x1, 0x5ffffffc}, {0x80, 0x6, 0xfa, 0x2}, {0x87, 0xa, 0xae, 0x4}, {0x6, 0x6, 0x7, 0x1}]}) write(r3, &(0x7f0000000200)="d81ad3d20cf7eb4e9be33bbd1a30", 0xe) fcntl$getown(r0, 0x5) setrlimit(0x5, &(0x7f0000000080)={0xff, 0xd21}) 497.459994ms ago: executing program 0 (id=1326): sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x4, &(0x7f0000000280)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000300)=0x2, 0x0, 0x4c) sysctl$net_inet_ip(&(0x7f0000000280)={0x4, 0x2, 0x0, 0x1}, 0x4, &(0x7f0000000580)="e33745e8", &(0x7f0000000000)=0x4, 0x0, 0x0) 383.93µs ago: executing program 4 (id=1327): r0 = socket(0x11, 0x3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd7f"]) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/212, 0xd4}], 0x1}, 0x840) sendto$unix(r0, &(0x7f0000000180)="b1000504600000000000000007000000331c13fecea10500fef96ecfc72fd3357ae320a77bff0100000000000005ae04be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8afa7d9f2642102410000720fd4d73f0b70c1f5a872c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfb70900000008e371a3f8343712051eadb71d89e000040781e4b2fffc00ff00", 0xb1, 0x8, 0x0, 0x0) 0s ago: executing program 1 (id=1328): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0xfffffffffffffffe, 0xe, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff, 0xe}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f00000001c0)=""/34, 0x22}], 0x2, 0x0}, 0x1040) r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r1, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x1}], 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x4, 0x10, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="8000000000000000ffff00009c000000a08e97fed54826e2f9b5070817d1e6d7"], 0x1a8}, 0x4) sendmmsg(r0, &(0x7f0000000500)={0x0, 0x3}, 0x90, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. pckbd_enable: command error `ךq"l.e'6Z;=lt ]T;a%*Vvoߙ‹Gû2{5-TnYvOH1hqyOMza{IOj}FVsP)Ջ:glvGQ De()׎W_jKLR:X?U|tͤW8C\]bcV^Ȫ =*_Lٷ<1)֎`^Y@tN8 gBoyI$~U/ s9~nx=@s܎T2 pPtp)Z6>=(6Dro[,UY5 nB wi0eIg%,k+P^Gy`|$ܼS.v1.V 9KxB\9cw8?{9<ؒBc}e)C>uCnx㱥JF4eq7j3*iOSsn@R8}3 V&Pڵk} 3>m~ԑby0ݤno-Y9-WS0"wL P4fYdд[Uem~w`}IXčڈS>u`ghE.8hNRM6:EJ x6VZѹ"chezR8QB̃.F&jUףl}8wa/#R C:ˮ=/8}zwH`el;ҧP5E6l>+هo2$uQLAҎN(`kk'Xk = $8qpcq{V}>9CS%t>{uA2S|r]Grpj+lWD&3 dyj rPzicnj|,W沭xb`#ޔ(F}u6jKF~G/_ F+k>)I =HL}wMV+= ,0eǮAS/2 Ϫ`y3QLɁ_,o/U]NVѾː5l{Hڔ]u:H/NKEhkFQaĭn?,! AL˞h Cd,U' ;t|-X**\X"|ol_Tyhk_hв'(huyF-FflJl?Ǣ셐RxAFJkD24.sײyb98AOsbIBb}< 3}ͮ[s&Ϣgp!Vљ&QoH cR0]>r3;,yo?,9[WꁑЎ» U-{d)ơ7<4ЀQsH, 'ti\Ju&)5\KgR3h#&5{iM)s cOL-.S`/kMycy~@EIT2D"A4dz!yl'KoF~ޚ1Lsf˅L22o"ib ʡH=o\ l|Wx/t.%(i)w+['|/(jy#c}"7 .R]Z{wYWB2@VEv4- 1ҾuQk%]+3vIj)|Ex HzenS^Eڛ-,0[끲mKSMڮy͑I46j-|b93l;t얩Rqx˭0u?F.hֶ0 ^g}l;-KPg1BI\6.<;5$봼ǐ !T5P$%|͋g½»bBX4&c65r H~olQ5XƱ;j\&MPa bU=رiJ*)J0w<0$C{6yhڗEPkZC?jߗG`nM9lO}h~@_׈F' _y/,_CXXt&|0h)o=-l渻;D<="x^6LU9mPM dB,!LO9e ;x%Êa_Jq~AByIM.fp'v:pe -룽|QJTeB`ѧ29c6uԬ;XeC~tID'*t IgSW4p$_%1OzմrL9oD*͹kf2H[c eçcb CVyE6upr-VKʸ- yV4u3UU˛dW%Ӡ 7=s0 [ d3G`BljF-E 7_9X"xL~n=@9V'&&Z(rLdI`6<'azˆ˵ݻk-bi(#h'|,еU)Ėv+j3`Ny1n73쥬vtmJ0.{kJ|%cws$:@'GM>^K"E!^ݦA@dWs Ľ^ade* TвjLNz;s;Pd]<0u4cx%بQP]Wa 1hH42M݀%^,e\Y! ՞L Ũgۦ+!`g ʾy-_C%Vdv@'6$f|vlȖ_"-9TUӱE0+m%Ņ9pLF]Wiچs5.5Jh>|VrOyN|MQԪ@ʸXd-ڴGsY٤zIXS.'DILԴM-bfL|2wƛ ,`%lLmzվ\LJ&-p."}nAԶ@k/i7kE$iT 0W d-C)s:ra-doV N!s<۵] tJKpVۢOv}"$3SЯ..?3Ϋ>uVtp)na&y}Jk9´Ŵ<%}&C3500 @&qdenied attempt to set clock back -9223372035113479780 seconds pppx: unable to set addresses for pppx1, error=17 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error vnd0: sloppy read from proc 66518 (syz-executor): blkno 8 bcount 4096 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error vnd0: sloppy read from proc 4214 (syz-executor): blkno 0 bcount 6 pckbd_enable: command error denied attempt to set clock back 153 seconds pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 6, size = 536870912 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error load: 19.64 not a controlling terminal panic: uvm_fault_unwire_locked: address not in map Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND *198574 7497 0 0x1000 0x4080000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff833dc55f) at panic+0x1cf uvm_fault_unwire_locked(fffffd806c0c52e0,400000000000,400000001000) at uvm_fault_unwire_locked+0x487 uvm_fault_unwire(fffffd806c0c52e0,400000000000,400000001000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003a52db48,1,400000000100,ffff80003a52db78,0,88f64f4d9f821895,1) at kern_sysctl_dirs+0x5d1 kern_sysctl(ffff80003a52db44,2,400000000100,ffff80003a52db78,0,27,5b851070bfa79a24) at kern_sysctl+0x12d sys_sysctl(ffff80002f10a030,ffff80003a52dcb0,ffff80003a52dc00) at sys_sysctl+0x425 syscall(ffff80003a52dcb0) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x93c843514d0, count: 6 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic *cpu0: uvm_fault_unwire_locked: address not in map ddb> trace db_enter() at db_enter+0x25 panic(ffffffff833dc55f) at panic+0x1cf uvm_fault_unwire_locked(fffffd806c0c52e0,400000000000,400000001000) at uvm_fault_unwire_locked+0x487 uvm_fault_unwire(fffffd806c0c52e0,400000000000,400000001000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003a52db48,1,400000000100,ffff80003a52db78,0,88f64f4d9f821895,1) at kern_sysctl_dirs+0x5d1 kern_sysctl(ffff80003a52db44,2,400000000100,ffff80003a52db78,0,27,5b851070bfa79a24) at kern_sysctl+0x12d sys_sysctl(ffff80002f10a030,ffff80003a52dcb0,ffff80003a52dc00) at sys_sysctl+0x425 syscall(ffff80003a52dcb0) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x93c843514d0, count: -9 ddb> show registers rdi 0 rsi 0x1 rbp 0xffff80003a52d750 rbx 0xe rdx 0xffff800001458cc0 rcx 0 rax 0xffff80002f10a030 r8 0x101010101010101 r9 0x8080808080808080 r10 0x4371e50def9f6391 r11 0xfbdc2246437d710b r12 0 r13 0x7f7fffffc000 r14 0 r15 0x1 rip 0xffffffff8175cf35 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003a52d740 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb> show proc PROC (syz-executor) tid=198574 pid=7497 tcnt=2 stat=onproc flags process=1000 proc=4080000 runpri=32, usrpri=85, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002f10aa70 scnt=1 ecnt=0 forw=0xffffffffffffffff, list=0xffff80002f10aa70,0xffff80003a946a70 process=0xffff8000ffff3898 user=0xffff80003a528000, vmspace=0xfffffd806c0c52e0 estcpu=35, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb> ps PID TID PPID UID S FLAGS WAIT COMMAND 31693 404038 28307 0 2 0 syz-executor 31693 42235 28307 0 3 0x4000080 fsleep syz-executor 97325 268872 95224 0 2 0 syz-executor 97325 205238 95224 0 3 0x4000080 sbwait syz-executor 97325 117729 95224 0 2 0x4000000 syz-executor 12544 399451 80128 0 3 0x80 nanoslp syz-executor 12544 24858 80128 0 3 0x4000080 sysctllk syz-executor 12544 423173 80128 0 3 0x4000080 sysctllk syz-executor 75489 253976 99318 0 3 0x80 nanoslp syz-executor 75489 76529 99318 0 3 0x4000080 kqsel syz-executor 75489 34123 99318 0 3 0x4000080 kqread syz-executor 75489 315001 99318 0 3 0x4000080 fsleep syz-executor 47436 491277 36917 -1 3 0x90 nanoslp syz-executor 47436 74390 36917 -1 3 0x4000090 kqsel syz-executor 47436 327137 36917 -1 3 0x4000090 fsleep syz-executor 7497 121448 89626 0 3 0x3000 suspend syz-executor * 7497 198574 89626 0 7 0x4081000 syz-executor 92738 457735 0 0 3 0x14200 acct acct 89532 174296 0 0 3 0x14280 nfsidl nfsio 92840 190140 0 0 3 0x14280 nfsidl nfsio 89566 178965 0 0 3 0x14280 nfsidl nfsio 35034 21389 0 0 3 0x14280 nfsidl nfsio 87838 361578 0 0 3 0x14280 nfsidl nfsio 35248 152756 0 0 3 0x14280 nfsidl nfsio 87690 241472 0 0 3 0x14280 nfsidl nfsio 67508 413700 0 0 3 0x14280 nfsidl nfsio 18273 483794 0 0 3 0x14280 nfsidl nfsio 29067 134888 0 0 3 0x14280 nfsidl nfsio 46051 394093 0 0 3 0x14280 nfsidl nfsio 22766 334170 0 0 3 0x14280 nfsidl nfsio 73041 12992 0 0 3 0x14280 nfsidl nfsio 16349 183422 0 0 3 0x14280 nfsidl nfsio 51225 277459 0 0 3 0x14280 nfsidl nfsio 77923 105482 0 0 3 0x14280 nfsidl nfsio 69922 216894 0 0 3 0x14280 nfsidl nfsio 95036 89429 0 0 3 0x14280 nfsidl nfsio 71523 467873 0 0 3 0x14280 nfsidl nfsio 59623 195093 0 0 3 0x14280 nfsidl nfsio 78260 352333 0 0 3 0x14200 bored sosplice 36917 173795 33413 0 3 0x82 nanoslp syz-executor 89626 201607 33413 0 3 0x82 nanoslp syz-executor 52489 260153 33413 0 2 0x2 syz-executor 95224 70797 33413 0 3 0x82 nanoslp syz-executor 99318 130965 33413 0 3 0x82 nanoslp syz-executor 36357 331274 33413 0 2 0x2 syz-executor 28307 507755 33413 0 3 0x82 nanoslp syz-executor 80128 52055 33413 0 3 0x82 nanoslp syz-executor 33413 363829 20355 0 3 0x82 kqread syz-executor 20355 378870 98324 0 3 0x10008a sigsusp ksh 98324 106583 42238 0 3 0x98 kqread sshd-session 42238 424368 2890 0 3 0x92 kqread sshd-session 88162 104082 1 0 3 0x100083 ttyopn getty 2890 481584 1 0 3 0x88 kqread sshd 3944 398585 31155 73 3 0x1100090 kqread syslogd 31155 77412 1 0 3 0x100082 sbwait syslogd 44258 32995 1 0 3 0x100080 kqread resolvd 23433 355184 77946 77 3 0x100092 kqread dhcpleased 4648 418781 77946 77 3 0x100092 kqread dhcpleased 77946 419018 1 0 3 0x80 kqread dhcpleased 49354 165345 0 0 3 0x14200 bored smr 99828 510825 0 0 2 0x14200 zerothread 82047 473720 0 0 3 0x14200 aiodoned aiodoned 18475 370146 0 0 3 0x14200 syncer update 22786 482256 0 0 3 0x14200 cleaner cleaner 42716 209370 0 0 3 0x14200 reaper reaper 57413 423120 0 0 3 0x14200 pgdaemon pagedaemon 30921 282704 0 0 3 0x14200 bored viomb 71859 258281 0 0 3 0x40014200 acpi0 acpi0 67178 305749 0 0 3 0x14200 bored softnet3 42517 211876 0 0 3 0x14200 bored softnet2 31785 320817 0 0 3 0x14200 bored softnet1 10168 374507 0 0 3 0x14200 bored softnet0 47548 345919 0 0 3 0x14200 bored systqmp 16541 357714 0 0 3 0x14200 bored systq 36935 354332 0 0 3 0x40014200 tmoslp softclock 50350 352616 0 0 3 0x40014200 idle0 1 502327 0 0 3 0x80082 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10213 11130K 11568K 166960K 13611 0 pcb 17 16K 18K 166960K 547 0 rtable 200 8K 9K 166960K 529 0 pf 33 13K 15K 166960K 143 0 ifaddr 38 6K 8K 166960K 103 0 ifgroup 57 2K 2K 166960K 189 0 sysctl 4 1K 3K 166960K 11 0 counters 31 17K 18K 166960K 90 0 ioctlops 0 0K 4K 166960K 287 0 iov 0 0K 16K 166960K 227 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1418 89K 90K 166960K 2815 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 27 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 198 0 dirhash 12 2K 2K 166960K 24 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 16 57K 106K 166960K 1465 0 sigio 0 0K 0K 166960K 48 0 proc 62 67K 124K 166960K 592 0 subproc 72 4K 4K 166960K 74 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 230 0 in_multi 73 5K 7K 166960K 139 0 ether_multi 1 0K 0K 166960K 7 0 mrt 1 0K 0K 166960K 6 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 247 1102K 1102K 166960K 247 0 exec 0 0K 1K 166960K 863 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 2 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 217 72K 87K 166960K 15777 0 UVM aobj 101 5K 5K 166960K 108 0 pinsyscall 37 74K 96K 166960K 2500 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 82 0 NDP 12 0K 1K 166960K 71 0 temp 78 8684K 8780K 166960K 47835 0 kqueue 15 24K 30K 166960K 260 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 232 0 228 2 1 1 2 0 8 0 rtentry 112 156 0 70 4 0 4 4 0 8 0 unpcb 144 1026 0 1003 8 6 2 6 0 8 1 syncache 336 5 0 5 2 2 0 1 0 8 0 tcpqe 32 2 0 2 1 1 0 1 0 8 0 tcpcb 808 595 0 591 17 13 4 8 0 8 3 arp 88 26 0 8 1 0 1 1 0 8 0 ipq 40 2 0 1 1 0 1 1 0 8 0 ipqe 40 3 0 1 1 0 1 1 0 8 0 inpcb 344 2265 0 2257 25 12 13 14 0 8 11 nd6 104 36 0 14 1 0 1 1 0 8 0 pkpcb 40 5 0 5 2 1 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 mppekey 1024 1 0 1 1 1 0 1 0 8 0 ppxss 1072 43 0 43 2 1 1 1 0 8 1 pppxif 1384 8 0 8 3 2 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 611 0 252 30 5 25 30 0 8 0 art_table 32 613 0 252 4 0 4 4 0 8 0 art_node 16 151 0 78 1 0 1 1 0 8 0 sysvmsgpl 40 8 0 5 1 0 1 1 0 8 0 semapl 112 195 0 185 1 0 1 1 0 8 0 shmpl 112 105 0 7 3 0 3 3 0 8 0 dirhash 1024 25 0 8 3 0 3 3 0 8 0 dino2pl 256 4282 0 2793 95 0 95 95 0 8 0 ffsino 248 4282 0 2793 95 0 95 95 0 8 0 nchpl 144 6501 0 5970 63 42 21 63 0 8 0 rtmask 32 5 0 5 2 2 0 1 0 8 0 uvmvnodes 80 5129 0 0 105 0 105 105 0 8 0 vnodes 216 5129 0 0 285 0 285 285 0 8 0 namei 1024 23848 0 23848 3 2 1 2 0 8 1 kstatmem 264 110 0 86 3 1 2 3 0 8 0 scsiplug 72 2 0 2 1 1 0 1 0 8 0 scxspl 216 18416 0 18416 9 8 1 8 1 8 1 plimitpl 152 552 0 534 1 0 1 1 0 8 0 sigapl 424 1765 0 1699 9 1 8 8 0 8 0 futexpl 64 20524 0 20521 1 0 1 1 0 8 0 knotepl 120 155160 0 155109 25 15 10 10 0 8 8 kqueuepl 184 596 0 583 7 3 4 4 0 8 3 pipepl 296 448 0 421 8 5 3 8 0 8 0 fdescpl 440 1724 0 1696 5 1 4 5 0 8 0 filepl 120 13610 0 13393 17 6 11 14 0 8 2 lockfpl 104 372 0 370 1 0 1 1 0 8 0 lockfspl 48 166 0 164 1 0 1 1 0 8 0 sessionpl 144 23 0 15 1 0 1 1 0 8 0 pgrppl 48 143 0 127 1 0 1 1 0 8 0 ucredpl 104 2593 0 2581 1 0 1 1 0 8 0 zombiepl 144 2458 0 2457 1 0 1 1 0 8 0 processpl 1112 1765 0 1699 5 0 5 5 0 8 0 procpl 656 4212 0 4135 9 1 8 8 0 8 0 sosppl 168 9 0 9 3 2 1 1 0 8 1 sockpl 528 3559 0 3524 23 11 12 12 0 8 8 mcl64k 65536 36 0 36 3 2 1 1 0 8 1 mcl8k 8192 21 0 21 3 2 1 1 0 8 1 mcl4k 4096 4493 0 4444 17 10 7 16 0 8 0 mcl2k 2048 1735 0 1730 5 3 2 3 0 8 1 mtagpl 96 158 0 42 4 0 4 4 0 8 0 mbufpl 256 21306 0 21089 47 24 23 40 0 8 7 bufpl 280 5968 0 129 418 0 418 418 0 8 0 anonpl 24 208265 0 202783 90 43 47 69 0 187 0 amapchunkpl 152 52023 0 51484 41 11 30 32 0 158 7 amappl16 200 2951 0 2846 39 29 10 23 0 8 0 amappl15 192 3 0 3 1 1 0 1 0 8 0 amappl14 184 107 0 97 1 0 1 1 0 8 0 amappl13 176 35 0 34 1 0 1 1 0 8 0 amappl12 168 2334 0 2305 3 0 3 3 0 8 0 amappl11 160 44 0 33 1 0 1 1 0 8 0 amappl10 152 1 0 1 1 1 0 1 0 8 0 amappl9 144 253 0 253 1 1 0 1 0 8 0 amappl8 136 18 0 16 1 0 1 1 0 8 0 amappl7 128 102 0 91 1 0 1 1 0 8 0 amappl6 120 167 0 163 1 0 1 1 0 8 0 amappl5 112 130 0 123 1 0 1 1 0 8 0 amappl4 104 359 0 343 1 0 1 1 0 8 0 amappl3 96 10571 0 10465 5 1 4 4 0 8 0 amappl2 88 631 0 574 2 0 2 2 0 8 0 amappl1 80 11713 0 11207 14 2 12 13 0 8 0 amappl 88 15339 0 15171 5 0 5 5 0 92 0 dma32768 32768 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 2 0 1 0 8 0 dma128 128 255 0 255 2 2 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 107 0 7 2 0 2 2 0 8 0 uaddrrnd 24 1724 0 1696 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1724 0 1696 1 0 1 1 0 8 0 vmmpekpl 168 16081 0 16045 3 0 3 3 0 8 0 vmmpepl 168 106979 0 105202 105 20 85 96 0 357 0 vmsppl 360 1723 0 1696 4 1 3 4 0 8 0 rwobjpl 32 33123 0 26968 50 0 50 50 0 8 0 pdppl 4096 3455 0 3392 117 50 67 83 0 8 4 pvpl 32 680021 0 669155 182 67 115 144 0 265 17 pmappl 216 1723 0 1696 3 0 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 350 0 118 8 0 8 8 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff833dc55f) at panic+0x1cf uvm_fault_unwire_locked(fffffd806c0c52e0,400000000000,400000001000) at uvm_fault_unwire_locked+0x487 uvm_fault_unwire(fffffd806c0c52e0,400000000000,400000001000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003a52db48,1,400000000100,ffff80003a52db78,0,88f64f4d9f821895,1) at kern_sysctl_dirs+0x5d1 kern_sysctl(ffff80003a52db44,2,400000000100,ffff80003a52db78,0,27,5b851070bfa79a24) at kern_sysctl+0x12d sys_sysctl(ffff80002f10a030,ffff80003a52dcb0,ffff80003a52dc00) at sys_sysctl+0x425 syscall(ffff80003a52dcb0) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x93c843514d0, count: -9 ddb> machine ddbcpu 1 No such command ddb> trace db_enter() at db_enter+0x25 panic(ffffffff833dc55f) at panic+0x1cf uvm_fault_unwire_locked(fffffd806c0c52e0,400000000000,400000001000) at uvm_fault_unwire_locked+0x487 uvm_fault_unwire(fffffd806c0c52e0,400000000000,400000001000) at uvm_fault_unwire+0x55 kern_sysctl_dirs(4e,ffff80003a52db48,1,400000000100,ffff80003a52db78,0,88f64f4d9f821895,1) at kern_sysctl_dirs+0x5d1 kern_sysctl(ffff80003a52db44,2,400000000100,ffff80003a52db78,0,27,5b851070bfa79a24) at kern_sysctl+0x12d sys_sysctl(ffff80002f10a030,ffff80003a52dcb0,ffff80003a52dc00) at sys_sysctl+0x425 syscall(ffff80003a52dcb0) at syscall+0x97e Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x93c843514d0, count: -9