last executing test programs: 649.701357ms ago: executing program 2 (id=3): r0 = socket(0x2, 0x3, 0x2f) r1 = dup(r0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000240)={0x0, 0x32c, 0x0, 0x0, &(0x7f00000002c0), 0x90}, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000040)="ff0c46d2", 0x7fff) r3 = socket(0x18, 0x2, 0x0) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) getgroups(0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r6 = getegid() setregid(r5, r6) fchownat(r1, &(0x7f00000002c0)='./file0\x00', r4, r6, 0x2) mknod(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x5c4a) r7 = open(&(0x7f0000000100)='./file0\x00', 0x205, 0x0) open(&(0x7f0000000400)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7949) ktrace(&(0x7f0000000440)='./file0\x00', 0x4, 0xd27d43220c7dfbf, 0x0) r8 = openat$pf(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) futimens(r8, &(0x7f00000004c0)=[{0x1, 0xfffffffffffffffe}, {0xffffffffffff0001, 0x7}]) write(r7, 0x0, 0x13) connect$inet6(r3, &(0x7f0000000000)={0x1c, 0x18, 0x3, 0x10001, "fe80b362000000000000008e000200", 0xa}, 0x1c) r9 = socket(0x18, 0x5, 0x0) sendmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x40e) sendto$inet(r0, 0x0, 0x0, 0x404, &(0x7f0000000280)={0x10, 0x2, 0x3, 0xffffff00}, 0x10) futimens(r0, &(0x7f0000000140)=[{0x110f, 0x5}, {0x10, 0x3}]) 627.744316ms ago: executing program 4 (id=5): getpeername$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000040)=0x8) sysctl$net_inet_tcp(&(0x7f0000000080)={0x4, 0x2, 0x6, 0x10}, 0x4, &(0x7f00000000c0)="c6ce6c85eb1e2a186955c756d4133fc363226f2ec086f37852bbf3a7d24ee1e27fa6d4ac15d9b629d25d97ac5b6f017a837ab6b114787e74ad86bb5385f7e843f27084659365c02c0ab53f47d86e41884f5234d5561eeed5113e6aacfa83389a717ded9885d41a9463ae38c2334d49332fc322880324f0c9601d", &(0x7f0000000140)=0x7a, &(0x7f0000000180)="422816163cede17c9d04553d7d9f9355101ba0a6905c060c15741ee3da9a35b93b9580be48bec10105746a35bb17acc5ddfc736a13794f0abc703526bbb6e4f273740de01b215a9c87f2893c8fe8e7ef262b1a463bbb9e21120fb7e32c077550725a48fb9969378262a56af8a7a5996d107599d4aa673bbc1536c2cbf2c6ef35899247084737bc8a48f08a2be3ac160eaacfc73268c6709d0876e4cd65d1c2bdf2384e4c42045c45a30fa2cd68a6c5cbdee661e1592b331979e98a4f0e13690f0a0287276a8d94329f220cba4b7ea62743a3fd8a685f7f4da97d8b6e34611509a051dba7dd", 0xe5) chroot(&(0x7f0000000280)='./file0\x00') r0 = msgget(0x1, 0x220) msgctl$IPC_STAT(r0, 0x2, &(0x7f00000002c0)=""/30) mknod(&(0x7f0000000300)='./file0\x00', 0x2, 0x7f) execve(&(0x7f0000000340)='./file0\x00', &(0x7f0000000500)=[&(0x7f0000000380)='\xc4-}\x00', &(0x7f00000003c0)='}^&@@}&{,\x00', &(0x7f0000000400)='/\x00', &(0x7f0000000440)='+\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='*m\x00'], &(0x7f0000000580)=[&(0x7f0000000540)='@}\xe3${\\\x00']) r1 = openat$pf(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$DIOCGETRULESETS(r1, 0xc444443a, &(0x7f0000000600)={0x7ff, './file0\x00', './file0\x00'}) ioctl$DIOCSETSYNFLWATS(r1, 0xc0084461, &(0x7f0000000a80)={0x15, 0x200}) r2 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000ac0), 0x0) recvfrom(r2, &(0x7f0000000b00)=""/150, 0x96, 0x802, &(0x7f0000000bc0)=@in={0x10, 0x2, 0x0, 0x7}, 0x10) acct(&(0x7f0000000c00)='./file0\x00') ioctl$DIOCCLRSTATUS(r1, 0xc0284416, &(0x7f0000000c80)={'./file0\x00', &(0x7f0000000c40)=""/19, 0x4, 0x4, 0x2, 0x5}) r3 = getsid(0x0) fstatat(0xffffffffffffff9c, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4) r5 = fcntl$getown(r1, 0x5) stat(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001080)='./file1\x00', &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = kqueue1(0x4) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000001140)={0x0, 0x0, 0x0}, &(0x7f0000001180)=0xc) fstatat(0xffffffffffffffff, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r11 = getppid() r12 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000cc0)=@abs={0x80, 0x1, 0x0, 0x2}, 0x8, &(0x7f0000000ec0)=[{&(0x7f0000000d00)="4c0f651fb1cc0f280806115e4f21658338eb23fdfe068c79195db4d1e13682d9b9552b069af72a9e17d8581fa69afed0ed2fa5cc1f2f3abe53e25882d9ad33cd599eeab6c87affa35e0220436e8a2663a07ee922ee9d664bdf2e925f42af15beca79d749683fbeaa4c1f4bc3a888a2f60cb0d1f72a20f4a37efaa89885870bb3256da3cd75fdbb759f9be34c8b35e8188b72138d495e86e0", 0x98}, {&(0x7f0000000dc0)="df50076d33ab0ac1a0892843d3e86199a449", 0x12}, {&(0x7f0000000e00)="cf35d21ba1706fb5c0ee4b0aa6c1e441840a0442cd61fc248021a6c30e949adc55f7fd016e3d59eacb6481cf87693dda3080f0861f49e0382587c6678d1c50b65031e4da097709053d6127f1826342b30d261efc31058b1d675985a81601efc225e0420541bd865aa6af2e55024cabcde2b738cc7b8975c1da2f675422bcdd6089c0b115e83debb263d1f83ad4b3e2ed7a7f810f7ddb7255ed65e29d60bb482ebaf9db083f362f80bcd40e4f386d5d7e21dd50e5fa286feb", 0xb8}], 0x3, &(0x7f0000001280)=[@cred={0x18, 0xffff, 0x0, r3, 0xffffffffffffffff, r4}, @cred={0x18, 0xffff, 0x0, r5, r6, r7}, @rights={0x20, 0xffff, 0x1, [r1, r2, r1, r1, r2]}, @rights={0x30, 0xffff, 0x1, [r1, r2, r8, 0xffffffffffffff9c, r1, r1, r2, r1, r1]}, @cred={0x18, 0xffff, 0x0, r9, 0xffffffffffffffff, r10}, @cred={0x18, 0xffff, 0x0, r11, 0xffffffffffffffff, r12}], 0xb0, 0x410}, 0x402) ktrace(&(0x7f0000001380)='./file1\x00', 0x1, 0x100, r5) ioctl$DIOCRCLRADDRS(r1, 0xc4504442, &(0x7f00000013c0)={{'./file1\x00', './file1\x00', 0x5, 0x1}, 0x0, 0x0, 0x0, 0x7fffffff, 0x8, 0x5, 0x6, 0x6, 0x2}) socket(0x2, 0x2, 0x8) open(&(0x7f0000001840)='./file1\x00', 0x40, 0x1) socket$inet6(0x18, 0x2, 0x6) 507.98304ms ago: executing program 4 (id=10): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x202) mknod(&(0x7f0000000040)='./bus\x00', 0x6000, 0x202) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='./file0\x00') (async) rename(&(0x7f0000000080)='./bus\x00', &(0x7f0000000140)='./file0\x00') syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff080045f400340067000000069078e0000001ac1400aa4e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="800282c24da5a5fc0101080a000000087fffffff"]) 473.914329ms ago: executing program 3 (id=11): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setitimer(0x0, &(0x7f0000000440)={{0x1000, 0x1000000000000004}, {0x4, 0x2}}, 0x0) sysctl$kern(&(0x7f0000000480)={0x1, 0x27}, 0x4000000000000004, 0x0, 0x0, 0x0, 0x1d) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x10, 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc1206951, &(0x7f0000000140)) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) futimens(r4, &(0x7f00000001c0)=[{0x7, 0x6}, {0x10}]) poll(&(0x7f0000000200)=[{r0, 0x100}, {r2, 0x40}, {r3, 0x100}, {r4, 0x8}], 0x4, 0x8) readlinkat(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_pts() setsid() symlink(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00') getgroups(0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, r1, 0xffffffffffffffff, r1, 0x0]) setresgid(0x0, r7, r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) r9 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000540), 0xa01, 0x0) read(r9, &(0x7f0000000580)=""/253, 0xfd) setresgid(r7, r7, r8) unveil(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='r\x00') unveil(&(0x7f0000000340)='./file0/file1\x00', &(0x7f0000000380)='r\x00') chroot(&(0x7f00000003c0)='./file0\x00') mkfifo(&(0x7f0000000400)='./file0/file0/..\x00', 0x19) ioctl$TIOCSCTTY(r5, 0x20007461) syz_open_pts() syz_open_pts() openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) 472.612326ms ago: executing program 7 (id=8): r0 = socket$inet(0x2, 0x3, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[]) (async) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000), 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000180)=ANY=[@ANYBLOB="8f6f77ede655aaaaaaaaaabb86dd605f6ad900183a01fe0c00000000000000000000000000bbfe5ea6000000000000000000000000aa8f"]) 472.167671ms ago: executing program 1 (id=2): r0 = kqueue() mknod(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x100d02) (async) mknod$loop(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) link(&(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async, rerun: 32) kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffff9, 0x17, 0x10, 0x401}], 0x29f, 0x0, 0x8001, 0x0) (rerun: 32) 471.023303ms ago: executing program 4 (id=12): syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344}, 0x6, 0x7) syz_emit_ethernet(0x19e, &(0x7f0000000100)={@local, @local, [], {@ipv6={0x86dd, {0x7, 0x6, "a7a779", 0x168, 0x1d, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast1, {[@hopopts={0x11, 0xd, '\x00', [@pad1, @generic={0x4}, @enc_lim={0x4, 0x1, 0x8}, @generic={0x1, 0x62, "65b1a8f1c9095859449a76a1a2af2c26ed20c430bde08a3de1ac4f447322c648fa6e3a349a8bdf4607079fa2c4d058e6012950f9ab03fbc5d077cf661bf4994e2de60f7aa9a5dc90ff3feb803b7a7621f3c0b4b714fba7adeb6b454abb082f8e2528"}]}, @routing={0x70, 0x6, 0x0, 0xe7, 0x0, [@loopback, @empty, @mcast2]}, @hopopts={0x32, 0x1, '\x00', [@ra={0x5, 0x2, 0x7ff}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0x7}]}], @tcp={{0x1, 0x1, r0, r1, 0x0, 0x0, 0x13, 0x4, 0x8000, 0x0, 0x4, {[@mss={0x2, 0x4, 0x3}, @sack_perm={0x4, 0x2}, @generic={0x1, 0x8, "2876640a4cf0"}, @window={0x3, 0x3, 0x1}, @timestamp={0x8, 0xa, 0x80000001, 0x1}, @generic={0x4, 0xc, "1f6a24599d9cb13eceaf"}, @generic={0x0, 0xe, "c9c75bd6069a7b5c1928a220"}]}}, {"3c3774f820790a3edab0c685ced62c77bb3c05a2167e0efe6e69164bd8294766fceaa156b207723f854d0d1e0e1380bda0107b575e3163749553dcacfdd22e3fbeaf9c4c537815651e39acbc4c45c9a45ff25d6e"}}}}}}}) 469.901914ms ago: executing program 4 (id=13): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x2b, 0x4, &(0x7f0000001400)="5ab72b9dfe1a176e1c14aff1eef3dba15ddccffa6f6e88774e3e67d7103a08b9290359eb45d15b782f54334cbddff7bf8384b8953c1e70d0297ce9e9c378e9d1bdbab1cd830737ec7bca6fdbe32e4dc962527480f9c2ae115302488b0af5efb8b1b72fe55e047bc195f1eeb4f617f020ee59", 0x72) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$DIOCGETSTATUS(r1, 0xc2084415, 0x0) sysctl$net_inet_ip(&(0x7f00000001c0)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000200), 0x0, 0x0, 0x0) ioctl$DIOCXBEGIN(r1, 0xc0104451, &(0x7f0000000240)={0x3, 0x408, &(0x7f0000000280)=[{0x1, './file0/file0\x00', 0x80000001}, {0x1, './file0/file0\x00', 0x7}, {0x1, './bus\x00', 0xd}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x2) ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504449, 0x0) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000ec0), 0x1, 0x0) ioctl$WSMOUSEIO_GETPARAMS(r2, 0x80105727, &(0x7f0000001100)={&(0x7f0000001140)=[{0x20, 0x6}, {0x2, 0x40}], 0x2}) r3 = socket(0x18, 0xc003, 0x3a) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000001180)={0x0, [{0x0, 0xfffffffd}, {0x0, 0x8}, {}, {}, {}, {0x0, 0x3}, {}, {0x3}, {0x0, 0x1}, {0x3, 0x7}, {0x0, 0x7}, {}, {0x1}, {0x3, 0xffffffff}, {0x2}, {}, {0x0, 0x1}, {0x3, 0x4}, {0x1}, {}, {}, {0x0, 0x4}, {}, {}, {0x3}, {}, {0x2}, {}, {0x3}, {0x2}, {0x1, 0xd}, {0x1}]}) setuid(0xee01) sysctl$kern(&(0x7f00000012c0)={0x1, 0x37}, 0x4, &(0x7f0000001300)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000001340)=0x2c, 0x0, 0x2e) r4 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x50, 0x10) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000001480)={0x5, 0x1, 0x81, 0x7, "3733da67ead4989d6b2d31f2f0b9eecb0630a44b", 0x6, 0x6}) bind(r3, &(0x7f00000000c0)=@in6={0x1c, 0x18, 0x2, 0x4, "ffeb17867d3a465cff8800002000f600"}, 0x1c) connect(r3, &(0x7f0000000100)=@un=@file={0xc, 0x0, './bus\x00'}, 0x8) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000001380), &(0x7f00000013c0)=0xc) sendmsg$unix(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x4) mkdir(&(0x7f0000000000)='./file2\x00', 0x9c) rmdir(&(0x7f0000000040)='./file2\x00') sysctl$net_inet_ip(&(0x7f0000000200)={0x4, 0x2, 0x0, 0x1c}, 0x4, &(0x7f0000000f00)="c8f29edbd3483fc3773d29b8c229833e36b755758e152b23d09322d6fae412f66ee6f48d898476fc5170abb5dac6d3437bd9ac1523a2a4b4c02077ca33a5c46a8743bb63ba60987c28af4a4d76ab1f20e2d8e66d811376a420699f90df9f8ca7490dfef90e4f1214ac3d30f2f7a26ed247a519e472016adcf5ab147c3f5d335e032f63fb033310ee7911f9ae3bed3ec67a37c2cbaf80c5cbdb47d8d72d595e8558d54198feaed62bdef32e953b5cb08aab135aaaeee426f51fd6d226953d695a1ffdd1cc899f3bbe7e80fe251305b28337f06fea1298aedd8aa561a0951e971880057d9aa360", &(0x7f0000001000)=0xe6, &(0x7f0000001040)="eba05a27813c114c8b9f3c708ec8b74a4bde6a974e67cd9414bb864e6fee73b8977c6680a8c104471b6736667e0a6d674b9bf921aa8ffc8fbc272ea573d45120e138abf79e9716c7a44196efa16f62838ae13ea66b14cd09eab5f302", 0x5c) 463.924376ms ago: executing program 2 (id=14): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) select(0x40, &(0x7f0000000080)={0xfffffffffffffffb, 0x44809e9d, 0x1, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x7fd, 0x2000000000000004}, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8880) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x2, r2) closefrom(r3) syz_open_pts() ioctl$DIOCXCOMMIT(r1, 0xc0104452, &(0x7f0000001540)={0x5, 0x9, &(0x7f0000000100)=[{0x1, './file0\x00', 0x6}, {0x1, './file0\x00', 0x8}, {0x1, '.\x00', 0x10001}, {0x0, './file0\x00', 0x1}, {0x0, './file0\x00', 0xb}]}) 463.370205ms ago: executing program 3 (id=15): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0xc8, 0xfc, 0x8}, {0x60, 0x0, 0x2, 0x8}, {0x6, 0x2, 0x1, 0x5}]}) syz_emit_ethernet(0x36, &(0x7f0000000b80)=ANY=[]) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x40047473, &(0x7f0000000080)) 460.51723ms ago: executing program 3 (id=16): r0 = socket(0x18, 0x3, 0x85) syz_emit_ethernet(0x22, &(0x7f0000000180)=ANY=[@ANYRES32=r0]) r1 = socket(0x1a, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x24, &(0x7f0000000380)="5ab7776a", 0x4) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[]) recvmmsg(r1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 0x0}, 0x5}, 0x38, 0x3002, 0x0) syz_emit_ethernet(0xd3, &(0x7f0000001b00)=ANY=[]) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0xbe, 0x0) r3 = socket$inet(0x2, 0x3, 0x0) close(r3) socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00eb0100000000b2876d70c90f", 0xe) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x200000000000c, &(0x7f0000000300)="ea00000300000000f930c01ad95cecca9e40110788b38ff8b2c43651e1c1b04b52ee2890695f7613cecd7414d2fd73fbbba48f90d723c62de0151261f21abd957c83f84dff0f00000ec69b243167f3dca2ff9a2810ba5eb39f879deaa3138c7ed5dd39ed8a2b2ad999e345b94ac21018e80fa6dbce", 0x75) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000ac0)="ea141b01000800001836f654", 0xc) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x1, &(0x7f0000000200)="ea00070100000000", 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_opts(r5, 0x0, 0x200000000000c, &(0x7f0000000900)="ea00000100000000", 0x8) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) mknod(&(0x7f0000000280)='./bus\x00', 0x2000, 0xd02) clock_gettime(0x4, 0xfffffffffffffffe) open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x139) openat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0xb5219f1000b913f1, 0x0) ktrace(&(0x7f0000000780)='./file0\x00', 0x4, 0xd27d43220c7ff9d, 0x0) setuid(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000001d40)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/179, 0xb3}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000240)=""/21, 0x15}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000001c00)=""/196, 0xc4}, {&(0x7f0000001d00)=""/41, 0x29}], 0x9, 0x200000000) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRESHEX=r1, @ANYRES32=0x41424344, @ANYBLOB="e0395d7150df44d3ce53fd88f92bd2175102000296a70000"]) 230.012875ms ago: executing program 3 (id=17): r0 = socket(0x18, 0x3, 0x0) getsockopt$sock_int(r0, 0xffff, 0x10, &(0x7f0000000000), &(0x7f0000000080)=0x4) setuid(0xffffffffffffffff) r1 = syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f00000000c0)=0x8) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x10, 0x2, 0x3}, 0x10) listen(r2, 0x7) sysctl$vfs_nfs(&(0x7f0000000140)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000180)="0003521e", &(0x7f00000001c0)=0x64, &(0x7f0000000200), 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000040)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x4, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast2, @local={0xac, 0x14, 0x0}}, @tcp={{0x3, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8200, 0x0, 0x1, {[@generic={0xb, 0x2}]}}}}}}}) 228.85335ms ago: executing program 3 (id=18): r0 = open(&(0x7f0000000080)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) sysctl$hw(&(0x7f0000000100), 0x2, 0x0, 0x0, &(0x7f0000000140)='LS', 0x2) ioctl$BIOCSETF(r1, 0x8010427f, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x3, 0x9, 0x2, 0x5}, {0x3457, 0x7, 0xb0, 0x3}, {0x0, 0x5, 0x4, 0x7}, {0xb038, 0x9, 0xb9, 0xffff}, {0x52, 0x1, 0xff, 0x2}]}) write(r0, &(0x7f0000000180)="24ff7e", 0x3) syz_emit_ethernet(0x59, &(0x7f00000001c0)=ANY=[@ANYBLOB="7ad150dcb69dcf9fb1fea66681001400be50ebfe9902fcd2a319be4907a57f261a757d2efc97918533a6134a19db966e96"]) r2 = socket$inet(0x18, 0x3, 0x102) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000300)=@in6={0x1c, 0x18, 0x1, 0xfffffffd, "0000000000000000000000fb00", 0x103}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)="630c00000000069afe51f6f2efa24a85c4dd612dd68e59adff629a3ca14a96b6443f33833744232d44", 0x29}], 0x1, 0x0}, 0x0) r3 = socket(0x2, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000200)={0x48, &(0x7f0000000240)}) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f0000000280)) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000002c0)) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f00000003c0)={'./file1\x00', 0x8, 0x2800c5, 0xf, 0x1, 0x80000001, 0x50001, 0xffffffff, 0x2, 0x1, 0xcf17, 0xc7}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000440)={0x48, &(0x7f0000000480)}) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000004c0)) r5 = socket(0x18, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406}, 0x0) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000540)) unlink(&(0x7f0000000640)='./file0\x00') 209.029298ms ago: executing program 6 (id=7): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x2000, 0x4800) r0 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r0, 0xc00c7006, &(0x7f00000001c0)=0x2000) mknod(&(0x7f0000000400)='./file0\x00', 0x2000, 0x4287e) open(&(0x7f0000000580)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) (async) r1 = open(&(0x7f0000000580)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7815) ioctl$FIONREAD(r1, 0x800474c4, &(0x7f00000005c0)) (async) ioctl$FIONREAD(r1, 0x800474c4, &(0x7f00000005c0)) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000640)="3221147cbbe2147238b137af", 0xc}], 0x1, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x5, 0xffff63d6, 0x5, 0x804, 0xa, 0x6, 0x47, 0x10, [{0x4, 0x10000, 0xfffff114, 0xdbbc}, {0x5, 0xea, 0x2, 0x10000010}, {0xcd7, 0x6, 0x106, 0xfffffffc}, {0x7, 0x7f, 0xf, 0x5}, {0x4, 0x10, 0x0, 0xfffffffe}, {0x388d, 0xb, 0x1, 0x5}, {0x2, 0xa00, 0x7, 0x1}, {0x6, 0x3, 0x28003, 0xf7}, {0x9, 0xf7ffffff, 0x4, 0x7fffffff}, {0x4, 0x2, 0x3ff, 0x1}, {0x7ff, 0x80, 0x0, 0x401}, {0x10000, 0x2, 0x400010, 0x2}, {0x401, 0x0, 0x4, 0x49f}, {0x4, 0xa, 0x401, 0x7}, {0xfffffffe, 0xd, 0x8000003, 0x1fe}, {0x9be2, 0x5, 0x25, 0xffff}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x5, 0xffff63d6, 0x5, 0x804, 0xa, 0x6, 0x47, 0x10, [{0x4, 0x10000, 0xfffff114, 0xdbbc}, {0x5, 0xea, 0x2, 0x10000010}, {0xcd7, 0x6, 0x106, 0xfffffffc}, {0x7, 0x7f, 0xf, 0x5}, {0x4, 0x10, 0x0, 0xfffffffe}, {0x388d, 0xb, 0x1, 0x5}, {0x2, 0xa00, 0x7, 0x1}, {0x6, 0x3, 0x28003, 0xf7}, {0x9, 0xf7ffffff, 0x4, 0x7fffffff}, {0x4, 0x2, 0x3ff, 0x1}, {0x7ff, 0x80, 0x0, 0x401}, {0x10000, 0x2, 0x400010, 0x2}, {0x401, 0x0, 0x4, 0x49f}, {0x4, 0xa, 0x401, 0x7}, {0xfffffffe, 0xd, 0x8000003, 0x1fe}, {0x9be2, 0x5, 0x25, 0xffff}]}) sysctl$kern(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) sysctl$net_inet_ip(&(0x7f00000000c0)={0x4, 0x11, 0x0, 0x26}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000003c0)={0x48, &(0x7f0000000400)}) r2 = socket(0x2, 0x8002, 0x0) r3 = fcntl$dupfd(r2, 0x2, r2) closefrom(r3) socket$inet(0x2, 0x1, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000680)={0x3, &(0x7f00000006c0)=[{0x8, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0x0, 0x3}]}) sysctl$kern(&(0x7f0000000700)={0x1, 0x49}, 0x6, &(0x7f0000000740)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000780)=0xff0a, 0x0, 0x37) socket(0x18, 0x3, 0x0) (async) r4 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f0000000440)) poll(&(0x7f0000000480)=[{}], 0x20000000000000fe, 0x0) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f00000004c0)={'./file0\x00', 0x101, 0x9, 0x8, 0x1, 0x80000000, 0xffff, 0x4, 0x0, 0x2, 0x14000006, 0x9}) socket(0x18, 0x3, 0x0) (async) r5 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r5, 0x8080691a, &(0x7f0000000540)) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x20, 0x0) ioctl$DIOCKILLSTATES(r6, 0x0, &(0x7f0000000240)={{0x1000, 0x7, 0x3}, 0x1a, '\x00', 0xfffffffd, {@addrmask={@v4=@local={0xac, 0x14, 0x0}, @v4=@multicast1, 0x0, 0x0, 0x1}, [0x9, 0x1000], 0xc, 0x8, 0xfff5}, {@table={'./bus\x00', 0x0, 0x3, 0xb}, [0x5], 0x94, 0x9, 0xa}, './bus\x00', './bus/file0\x00', 0x4, 0x7}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x10, 0x0) (async) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x10, 0x0) ioctl$TIOCFLUSH(r7, 0x80047410, &(0x7f0000000380)=0x7) (async) ioctl$TIOCFLUSH(r7, 0x80047410, &(0x7f0000000380)=0x7) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) 208.108948ms ago: executing program 3 (id=19): r0 = socket$inet(0x18, 0x4, 0x86) sendmsg(r0, &(0x7f0000000040)={&(0x7f0000000240)=@in6={0x1c, 0x18, 0x1, 0x0, "00000000000000000000000000000001", 0x8}, 0x1c, &(0x7f0000001d80)=[{&(0x7f00000002c0)="638802000401008a0143008751f2fbffffffffffffffd686a02109cff7ff100084410a85919f2e042b", 0x29}, {&(0x7f0000000400)="ba2a9f25d3ffc362fcc5468210061db31d7e40667c3384df6428b5f79a1e2910fb37885f4d93165fff139b79575e143e579c1e1789855a57e4d675640ad1fc5c0d45bc05603ed304af3738b67bfe51b8d0b315419239143fe019b646d87de8a7c54ad9fe14993a8ce13af7f4dfc68bde", 0x70}, {&(0x7f0000000180)="d32e0300008046063d404fe7df45fb9693e50000000040000000", 0x1a}, {&(0x7f0000000d80)="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", 0x376}], 0x4, 0x0}, 0x0) (async, rerun: 64) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x2, 0x6, 0x10}, 0x4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_open_pts() (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000100)={0x4, 0x2, 0x0, 0x13}, 0x4, 0x0, 0x0, &(0x7f0000000140)="01000000", 0x4) (async) bind$inet(r0, &(0x7f0000000080)={0x10, 0x2, 0x1, 0x4ba}, 0x10) 207.439471ms ago: executing program 0 (id=1): socket(0x2, 0x5, 0x70) (async) r0 = socket$inet6(0x18, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x1, "00000000000000000000000000000001", 0x40007}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x2, "feff0000000000000000000000000080", 0x7}, 0x1c) 206.315248ms ago: executing program 4 (id=20): mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0xb012, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) shutdown(r0, 0x2) fstat(r0, &(0x7f00000000c0)) setuid(0xee01) r1 = socket(0x18, 0x2, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000000)=[{{}, 0xfffffffffffffff9, 0x5, 0x8, 0x3, 0x57}], 0x0, 0x0, 0x7, 0x0) setsockopt(r1, 0x1000000000029, 0xc, &(0x7f0000000040), 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000001c0)={0x3, &(0x7f0000000200)=[{0x1, 0x1, 0x4b, 0xfbfffff9}, {0x48, 0x81, 0xfc, 0x7}, {0x6, 0x3, 0x1, 0xfffff804}]}) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000080)="ebffcbff13b9fd812eaa4e713048e69931929448", 0x14) r3 = open(&(0x7f0000000640)='./file0\x00', 0x615, 0x166) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000040)) setrlimit(0x1, &(0x7f0000000280)={0xfffffffffffffffd, 0xffffffffffffffff}) r4 = setsid() ktrace(&(0x7f00000002c0)='./file0\x00', 0x4, 0xd0c, r4) truncate(&(0x7f0000000300)='./file0\x00', 0x7ffffffffff) 205.287876ms ago: executing program 5 (id=6): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$vfs_nfs(&(0x7f0000000100)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1000, 0x4) setsockopt(r0, 0x7fff, 0xfffffff7, &(0x7f0000000040)="5b18de9a2981d9dbea197fd4be980901237bbc7501f582d68f4970239f080324e8200553f434e4823db47d161798fbed2e463985336b6b0c38ca355d089c9ff8d787d6015a80e65e14f7f5d87af5ff218ecf6acb2c1cab860913fe0c9270518fe87c5c3fc595df33074edebb884983eeb5ed514cc80a0767312225101dc43b29392386750e570e18fa792c64b6683e213ea9", 0x92) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x6347}, {0x0, 0xffffffffffffffff}}, 0x2f) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xb5219f1000b913f1, 0x10) open(&(0x7f0000000500)='./file0\x00', 0x9cab835cfdc52675, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) sysctl$vfs_nfs(&(0x7f0000000100)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) socket$inet(0x2, 0x1000, 0x4) (async) setsockopt(r0, 0x7fff, 0xfffffff7, &(0x7f0000000040)="5b18de9a2981d9dbea197fd4be980901237bbc7501f582d68f4970239f080324e8200553f434e4823db47d161798fbed2e463985336b6b0c38ca355d089c9ff8d787d6015a80e65e14f7f5d87af5ff218ecf6acb2c1cab860913fe0c9270518fe87c5c3fc595df33074edebb884983eeb5ed514cc80a0767312225101dc43b29392386750e570e18fa792c64b6683e213ea9", 0x92) (async) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x6347}, {0x0, 0xffffffffffffffff}}, 0x2f) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xb5219f1000b913f1, 0x10) (async) open(&(0x7f0000000500)='./file0\x00', 0x9cab835cfdc52675, 0x0) (async) 203.872914ms ago: executing program 7 (id=21): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2, 0x1, 0x0) getsockopt$sock_int(r2, 0xffff, 0x5, 0x0, 0x0) sendto(r0, &(0x7f0000000180)="301a899bc0bf3926f56a06d726a6bfd295e810c0ab1de284008482519c600fbfec1e8d203883be7dec29dce8f03303057415e514a2c1b22d65819f4c7c107d73421ca0f39f7419260baf81328e9cf1075c65237d48b1f0cce28159f15e6e1a9fc80226e0b742b46e007b1b01d00025d1471f2831c83444710b0f6a902b01ba3a4c132cef0a7c163fd1f53bda1a7a6edf24b7bbfb8bd64853e9875567d333742bef0b22450ddd8878a4188cf484d7f48755fc3c1976604ccd96e6b160", 0xbc, 0x404, &(0x7f0000000280)=@in6={0x1c, 0x18, 0x3, 0x4, "48d1101ce1f7be005ae386e57b87e52c", 0x1}, 0x1c) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$TIOCNOTTY(r3, 0x20007471) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0x3) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) semget(0x3, 0x4, 0xb0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) 4.873996ms ago: executing program 0 (id=22): mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) select(0x2a, 0x0, &(0x7f00000001c0), &(0x7f0000000200)={0x100000000000000}, &(0x7f0000000240)) sysctl$kern(&(0x7f0000000180)={0x1, 0x45}, 0x3, &(0x7f0000000280)="71f91eca6e530c79e2f8e2a2ce3471ac0058bc5a91501d94a34bfec38a820600000000000000dc0225f0e4cf52b7d99d15d923", &(0x7f00000002c0)=0x1232, 0x0, 0xfffffffffffffe4d) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x33}, 0x4, 0x0, 0x0, &(0x7f0000000300)="21007c323fee01c24c68495c241b8efa02e8c04d7f00000000000000d38acc1e1b9749f986f9385e4a908a12a93fe2af746c8fc36c1aefb8e5831d0dc22a4dc5d3001000009bd159c4b7d25bcf7d0f7264f138b5f0cfa818dca3a50bbca323f676af51783744b98611bc47c1c0bdf068ab6af6d74e7f7cd0972a8b750910573ac3c225835f6c337d5da9879e97f7a79100000000000000000000ad730104cf6d29b5aeac73ab0358065858ede2dcd3fd99e018f41db823d4bc465150636925007fe5234d664b3668abccb7ef4e10f57274274f5a41499fd0d153f851adaa5624db59cebf", 0xe4) sysctl$net_inet6_ip6(&(0x7f0000000000)={0x4, 0x18, 0x29, 0x2}, 0x4, &(0x7f0000000080)="fa6f36cffce374d863417dbcf8926244d718210b82e34792fc117c4338dcec7803332f649e6dbe3e5fae6ab22628ad140609945fa2431580a62225da42f490950c2b1e1d2ee8f91ac719001c9959", &(0x7f0000000100)=0x4e, &(0x7f0000000140)="064f921481e5b75ebc6a58b19c142bc4af26dc0ea2c428d27e6cef3da024665690d0590b5b2412d9f575903f427744dd53086431e849b26b48", 0x39) 2.608496ms ago: executing program 4 (id=23): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r1 = socket$inet(0x18, 0x3, 0x102) sendmsg(r1, &(0x7f00000001c0)={&(0x7f0000000200)=@in6={0x1c, 0x18, 0x0, 0x4, '\x00', 0xfffd}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="6788020000002c9a8c51f6f2efa24a85abdd612dd68e59adfecf9323100084410a8591426ee0", 0x26}, {&(0x7f00000002c0)="aac5", 0x2}], 0x2, 0x0}, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="825a4f47c21e6ed7eda0f5903abf65b18d7c51f75527d152ea276de78306100f70564e8c854200fffffff3000000fafd34", 0xfde9}], 0x1, 0x0, 0x51}, 0x0) ioctl$TIOCSETA(r0, 0xc4504449, &(0x7f0000000180)={0x0, 0x4000, 0x2f01, 0xf, "3901224200", 0x2007, 0x10}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000001000), 0x10000, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x2010, r3, 0x0) r4 = socket(0x18, 0x2, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x615, 0x166) ktrace(&(0x7f0000000340)='./file0\x00', 0x4, 0xd27d43220c7dfbf, 0x0) kill(0x0, 0x20) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000000)="03000000", 0x4) setsockopt(r4, 0x1000000029, 0xd, 0x0, 0x0) ioctl$DIOCRCLRTSTATS(r2, 0xc4504441, &(0x7f0000002100)={{'./file1\x00', './file1/file0\x00', 0x29, 0x2}, &(0x7f0000001200)=[{'./file0\x00', './file1/file0\x00', 0x0, 0x2}], 0x428, 0x1, 0x1, 0x4, 0x9, 0x8, 0x12, 0x8}) 369.755µs ago: executing program 5 (id=24): mknod(&(0x7f0000000240)='./file0\x00', 0x2040, 0x5903) r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x3b3) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x186) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/140, 0x8c}], 0x1, 0x0}, 0x1840) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x10000) fstat(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r8, 0x0, 0x0) fchown(r4, r6, r8) fchown(r2, r6, 0xffffffffffffffff) closefrom(r1) ioctl$BIOCSETIF(r0, 0x40384900, 0x0) 0s ago: executing program 7 (id=25): sendmsg(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000140)="91e12858fff811a1e86d902780d22829a7dd8ee2627893b2af007983537d7958", 0x20}], 0x1, 0x0}, 0x8) r0 = open(&(0x7f0000000040)='./file1\x00', 0x80, 0x80) ioctl$FIONBIO(r0, 0x82907003, &(0x7f00000003c0)=0x1) sysctl$kern(&(0x7f0000000400)={0x1, 0x3d}, 0x6, 0x0, 0x0, 0x0, 0x9c8bce8ce70f2362) fstatat(r0, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000006c0), 0x2) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000140)="91e12858fff811a1e86d902780d22829a7dd8ee2627893b2af007983537d7958", 0x20}], 0x1, 0x0}, 0x8) (async) open(&(0x7f0000000040)='./file1\x00', 0x80, 0x80) (async) ioctl$FIONBIO(r0, 0x82907003, &(0x7f00000003c0)=0x1) (async) sysctl$kern(&(0x7f0000000400)={0x1, 0x3d}, 0x6, 0x0, 0x0, 0x0, 0x9c8bce8ce70f2362) (async) fstatat(r0, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000006c0), 0x2) (async) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) (async) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. witness: lock order reversal: 1st 0xffffffff839aa6c8 pf_lock (pf_lock) 2nd 0xffffffff83976af0 netlock (netlock) lock order [1] pf_lock (pf_lock) -> [2] netlock (netlock) #0 rw_do_enter_write+0xba #1 uvn_io+0x54c #2 uvn_get+0x31d #3 uvm_fault_lower_io+0x2ce #4 uvm_fault_lower+0x28d #5 uvm_fault+0x274 #6 kpageflttrap+0x2f4 #7 kerntrap+0x19d #8 alltraps_kern_meltdown+0x7b #9 _copyin+0x5b #10 pfioctl+0x1377 #11 VOP_IOCTL+0xac #12 vn_ioctl+0xf8 #13 sys_ioctl+0x674 #14 syscall+0xbd4 #15 Xsyscall+0x128 lock order [2] netlock (netlock) -> [1] pf_lock (pf_lock) #0 rw_do_enter_write+0xba #1 pfi_attach_ifgroup+0x2a #2 if_addgroup+0x2f8 #3 if_attachsetup+0xcf #4 if_attach+0x6d #5 vio_attach+0x1853 #6 config_attach+0x449 #7 virtio_pci_attach+0x4e6 #8 config_attach+0x449 #9 pci_probe_device+0x8e5 #10 pci_enumerate_bus+0x368 #11 config_attach+0x449 #12 acpipci_attach_bus+0x381 #13 acpipci_attach_busses+0x93 #14 mainbus_attach+0x304 #15 config_attach+0x449 #16 cpu_configure+0x47 #17 main+0x4c7 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff83976af0,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffffff83976ad8,0) at rw_do_enter_write+0xba uvn_io(fffff4006cd40dd0,ffff80003839d7b8,1,202,0) at uvn_io+0x54c uvn_get(fffff4006cd40dd0,0,ffff80003839d888,ffff80003839d86c,0,1,3e6e06bd75e2dabe,1) at uvn_get+0x31d uvm_fault_lower_io(ffff80003839daa0,ffff80003839dad8,ffff80003839d920,ffff80003839d908) at uvm_fault_lower_io+0x2ce uvm_fault_lower(ffff80003839daa0,ffff80003839dad8,ffff80003839da20) at uvm_fault_lower+0x28d uvm_fault(fffff4006cefe3e8,200000001000,0,1) at uvm_fault+0x274 kpageflttrap(ffff80003839dc50,200000001200) at kpageflttrap+0x2f4 kerntrap(ffff80003839dc50) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(24900,c4504441,ffff800001575000,1,ffff80002a21c010) at pfioctl+0x1377 VOP_IOCTL(fffff4007af467b8,c4504441,ffff800001575000,1,fffff400097fd618,ffff80002a21c010) at VOP_IOCTL+0xac vn_ioctl(fffff4006cf0b710,c4504441,ffff800001575000,ffff80002a21c010) at vn_ioctl+0xf8 sys_ioctl(ffff80002a21c010,ffff80003839e800,ffff80003839e750) at sys_ioctl+0x674 syscall(ffff80003839e800) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc8ba5158d80, count: -18 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003839d570 rbx 0 rdx 0xffff8000015fb780 rcx 0xffff80002a21c010 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003839d450 r9 0x8080808080808080 r10 0x286a96440fe5da97 r11 0xc31fcdb152e3edae r12 0xfffff400041072c0 r13 0xfffff400048f6d68 r14 0x3 r15 0xffffffff8355ee31 substchar+0x500b rip 0xffffffff81991da5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003839d560 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=130573 pid=53864 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff800045fe9778,0xffff80002a21d248 process=0xffff800045fe49d0 user=0xffff800038399000, vmspace=0xfffff4006cefe3e8 estcpu=18, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 69806 247034 77039 0 7 0 0 syz-executor 69806 365986 77039 0 3 0 0x4000080 fsleep syz-executor 69806 475067 77039 0 3 0 0x4000080 ttyin syz-executor 69806 8036 77039 0 3 0 0x4000080 ttyin syz-executor 50037 474535 71933 0 2 0 0 syz-executor 52914 216642 27511 0 2 0 0 syz-executor 52914 126800 27511 0 2 0 0x4000000 syz-executor 53864 454666 62414 0 2 0 0 syz-executor *53864 130573 62414 0 7 0 0x4000000 syz-executor 52480 498845 24662 0 2 0x2 0 syz-executor 96354 46328 74987 0 3 0x2 0 clonelk ifconfig 74987 252280 92902 0 3 0x100002 0x88 sigsusp sh 92902 205361 24662 0 3 0x2 0x80 wait syz-executor 64398 218137 5255 0 3 0 0x80 nanoslp syz-executor 64398 383491 5255 0 3 0 0x4000080 fsleep syz-executor 64398 434449 5255 0 3 0 0x4000080 kqpoll syz-executor 64398 375259 5255 0 3 0 0x4000080 fsleep syz-executor 71933 189580 24662 0 2 0x2 0 syz-executor 8970 63196 24662 0 3 0x2 0x80 nanoslp syz-executor 27511 164119 24662 0 3 0x2 0x80 nanoslp syz-executor 62414 308704 24662 0 3 0x2 0x80 nanoslp syz-executor 5255 338230 24662 0 3 0x2 0x80 nanoslp syz-executor 77039 2180 24662 0 3 0x2 0x80 nanoslp syz-executor 24662 318503 5788 0 3 0x2 0x80 kqread syz-executor 5788 118605 50231 0 3 0x100002 0x88 sigsusp ksh 50231 107766 45306 0 3 0x10 0x88 kqread sshd-session 45306 203309 25207 0 3 0x12 0x80 kqread sshd-session 76641 497890 1 0 3 0x100003 0x80 ttyin getty 25207 387845 1 0 3 0 0x88 kqread sshd 74899 154153 19339 74 3 0x1100012 0x80 bpf pflogd 19339 80306 1 0 3 0 0x80 sbwait pflogd 78325 93232 22605 73 3 0x1100010 0x80 kqread syslogd 22605 115702 1 0 3 0x100002 0x80 sbwait syslogd 62477 465735 1 0 3 0x100000 0x80 kqread resolvd 81054 50889 71137 77 3 0x100012 0x80 kqread dhcpleased 14642 117484 71137 77 3 0x100012 0x80 kqread dhcpleased 71137 51845 1 0 3 0 0x80 kqread dhcpleased 68136 221863 0 0 3 0x14000 0x200 bored smr 1339 227530 0 0 2 0x14000 0x200 zerothread 95118 368465 0 0 3 0x14000 0x200 aiodoned aiodoned 86497 206638 0 0 3 0x14000 0x200 syncer update 92127 188551 0 0 3 0x14000 0x200 cleaner cleaner 49443 178031 0 0 3 0x14000 0x200 reaper reaper 15158 66930 0 0 3 0x14000 0x200 pgdaemon pagedaemon 39463 513969 0 0 3 0x14000 0x200 bored viomb 78314 408080 0 0 3 0x14000 0x40000200 acpi0 acpi0 39897 381822 0 0 3 0x14000 0x40000200 idle1 90394 249762 0 0 3 0x14000 0x200 bored softnet1 1835 408452 0 0 2 0x14000 0x200 softnet0 20226 204998 0 0 3 0x14000 0x200 smrbar systqmp 75602 138358 0 0 3 0x14000 0x200 bored systq 55317 423944 0 0 3 0x14000 0x200 tmoslp softclockmp 95496 252427 0 0 3 0x14000 0x40000200 tmoslp softclock 23728 93512 0 0 3 0x14000 0x40000200 idle0 1 193710 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks Process 53864 (syz-executor) thread 0xffff80002a21c010 (130573) exclusive rwlock pf_lock r = 0 (0xffffffff839aa6c8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 pfioctl+0x1342 #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x674 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock pfioctl_rw r = 0 (0xffffffff839aa758) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 pfioctl+0x1d4 #3 VOP_IOCTL+0xac #4 vn_ioctl+0xf8 #5 sys_ioctl+0x674 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83ac6c80) #0 witness_lock+0x5f1 #1 vn_ioctl+0x4d #2 sys_ioctl+0x674 #3 syscall+0xbd4 #4 Xsyscall+0x128 Process 20226 (systqmp) thread 0xffff800045ffe530 (204998) shared rwlock systqmp r = 0 (0xffffffff83979b58) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11050 12082K 12214K 166960K 12161 0 pcb 17 12K 12K 166960K 28 0 rtable 195 5K 7K 166960K 359 0 pf 33 17K 24K 166960K 61 0 ifaddr 36 6K 7K 166960K 46 0 ifgroup 52 2K 2K 166960K 60 0 sysctl 1 1K 9K 166960K 5 0 counters 68 36K 37K 166960K 72 0 ioctlops 1 2K 4K 166960K 1490 0 iov 0 0K 1K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1296 82K 82K 166960K 1395 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 15 2K 2K 166960K 15 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 89K 166960K 164 0 proc 79 131K 164K 166960K 564 0 subproc 72 4K 4K 166960K 90 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 1 0K 0K 166960K 9 0 in_multi 77 5K 6K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 396 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 231 176K 184K 166960K 3284 0 UVM aobj 3 2K 4K 166960K 4 0 pinsyscall 43 86K 102K 166960K 1354 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 1 0K 0K 166960K 2 0 NDP 23 1K 2K 166960K 29 0 temp 34 9122K 9128K 166960K 3736 0 kqueue 14 22K 22K 166960K 28 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 36 0 33 1 0 1 1 0 8 0 rtentry 176 112 0 23 6 0 6 6 0 8 0 unpcb 144 54 0 36 1 0 1 1 0 8 0 syncache 336 5 0 5 1 0 1 1 0 8 1 tcpcb 736 13 0 9 1 0 1 1 0 8 0 arp 136 18 0 4 1 0 1 1 0 8 0 inpcb 328 92 0 80 2 0 2 2 0 8 1 nd6 152 25 0 6 1 0 1 1 0 8 0 kcovpl 48 9 0 2 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfanchor 1288 4 0 0 1 0 1 1 0 8 0 pfstitem 24 28 0 0 1 0 1 1 0 8 0 pfstkey 128 28 0 0 1 0 1 1 0 8 0 pfstate 448 28 0 0 4 0 4 4 0 8 0 pfrule 1360 21 0 16 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 461 0 0 29 0 29 29 0 8 0 art_table 40 462 0 0 5 0 5 5 0 8 0 art_node 32 112 0 21 1 0 1 1 0 8 0 semapl 72 2 0 0 1 0 1 1 0 8 0 shmpl 120 1 0 1 1 0 1 1 0 8 1 dirhash 1024 19 0 0 3 0 3 3 0 8 0 dino2pl 256 1599 0 124 93 0 93 93 0 8 0 ffsino 296 1599 0 124 114 0 114 114 0 8 0 nchpl 144 1819 0 111 64 0 64 64 0 8 0 vnodes 216 1716 0 0 96 0 96 96 0 8 0 namei 1024 6443 0 6443 3 1 2 2 0 8 2 percpumem 16 52 0 2 1 0 1 1 0 8 0 kstatmem 264 29 0 4 2 0 2 2 0 8 0 scxspl 216 6340 0 6340 4 2 2 3 1 8 2 plimitpl 152 34 0 16 1 0 1 1 0 8 0 sigapl 424 486 0 438 7 0 7 7 0 8 0 knotepl 120 55 0 0 2 0 2 2 0 8 0 kqueuepl 224 26 0 16 1 0 1 1 0 8 0 pipepl 344 136 0 109 3 0 3 3 0 8 0 fdescpl 528 470 0 438 3 0 3 3 0 8 0 filepl 160 1717 0 1494 10 0 10 10 0 8 0 lockfpl 104 12 0 8 1 0 1 1 0 8 0 lockfspl 48 8 0 4 1 0 1 1 0 8 0 sessionpl 144 27 0 18 1 0 1 1 0 8 0 pgrppl 48 37 0 20 1 0 1 1 0 8 0 ucredpl 104 106 0 93 1 0 1 1 0 8 0 zombiepl 144 439 0 438 1 0 1 1 0 8 0 processpl 1240 486 0 438 5 0 5 5 0 8 0 procpl 664 527 0 471 6 0 6 6 0 8 1 sockpl 752 182 0 149 4 0 4 4 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 135 0 0 17 0 17 17 0 8 0 mcl2k 2048 23 0 0 3 0 3 3 0 8 0 mextrefs 64 20 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 182 0 0 12 0 12 12 0 8 0 bufpl 272 2310 0 105 147 0 147 147 0 8 0 anonpl 32 3529 0 0 29 0 29 29 0 247 0 amapchunkpl 152 8700 0 8235 18 0 18 18 0 158 0 amappl16 200 1115 0 1100 4 0 4 4 0 8 3 amappl15 192 5 0 5 1 0 1 1 0 8 1 amappl14 184 453 0 450 1 0 1 1 0 8 0 amappl13 176 126 0 114 1 0 1 1 0 8 0 amappl12 168 740 0 711 2 0 2 2 0 8 0 amappl11 160 5 0 4 1 0 1 1 0 8 0 amappl10 152 67 0 53 1 0 1 1 0 8 0 amappl9 144 273 0 273 1 0 1 1 0 8 1 amappl8 136 115 0 113 1 0 1 1 0 8 0 amappl7 128 170 0 156 1 0 1 1 0 8 0 amappl6 120 154 0 151 1 0 1 1 0 8 0 amappl5 112 110 0 100 1 0 1 1 0 8 0 amappl4 104 311 0 290 1 0 1 1 0 8 0 amappl3 96 1562 0 1472 3 0 3 3 0 8 0 amappl2 88 595 0 520 2 0 2 2 0 8 0 amappl1 80 10693 0 10084 15 0 15 15 0 8 0 amappl 88 2524 0 2367 4 0 4 4 0 92 0 uvmvnodes 80 102 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 1 1 0 1 1 0 8 0 uaddrrnd 24 470 0 438 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 470 0 438 1 0 1 1 0 8 0 vmmpekpl 168 5969 0 5933 3 0 3 3 0 8 0 vmmpepl 168 39375 0 37492 86 0 86 86 0 357 3 vmsppl 488 469 0 438 5 0 5 5 0 8 0 rwobjpl 80 14266 0 13241 23 0 23 23 0 8 0 pdppl 4096 948 0 876 96 12 84 84 0 8 12 pvpl 32 9114 0 0 75 1 74 74 0 265 0 pmappl 256 469 0 438 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 419 0 16 12 0 12 12 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83934ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83ac6480) at __mp_lock+0x192 intr_handler(ffff80002a2a8a00,ffff800000079600) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x44 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 end of kernel end trace frame: 0x76ec1207b8e0, count: -10 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(ffffffff83976af0,9,0) at witness_checkorder+0x10d1 rw_do_enter_write(ffffffff83976ad8,0) at rw_do_enter_write+0xba uvn_io(fffff4006cd40dd0,ffff80003839d7b8,1,202,0) at uvn_io+0x54c uvn_get(fffff4006cd40dd0,0,ffff80003839d888,ffff80003839d86c,0,1,3e6e06bd75e2dabe,1) at uvn_get+0x31d uvm_fault_lower_io(ffff80003839daa0,ffff80003839dad8,ffff80003839d920,ffff80003839d908) at uvm_fault_lower_io+0x2ce uvm_fault_lower(ffff80003839daa0,ffff80003839dad8,ffff80003839da20) at uvm_fault_lower+0x28d uvm_fault(fffff4006cefe3e8,200000001000,0,1) at uvm_fault+0x274 kpageflttrap(ffff80003839dc50,200000001200) at kpageflttrap+0x2f4 kerntrap(ffff80003839dc50) at kerntrap+0x19d alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b _copyin() at _copyin+0x5b pfioctl(24900,c4504441,ffff800001575000,1,ffff80002a21c010) at pfioctl+0x1377 VOP_IOCTL(fffff4007af467b8,c4504441,ffff800001575000,1,fffff400097fd618,ffff80002a21c010) at VOP_IOCTL+0xac vn_ioctl(fffff4006cf0b710,c4504441,ffff800001575000,ffff80002a21c010) at vn_ioctl+0xf8 sys_ioctl(ffff80002a21c010,ffff80003839e800,ffff80003839e750) at sys_ioctl+0x674 syscall(ffff80003839e800) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc8ba5158d80, count: -18