last executing test programs: 1.144956401s ago: executing program 2 (id=3): r0 = open(&(0x7f0000000080)='./file1\x00', 0x200, 0x0) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) (async) mprotect(&(0x7f000000e000/0x4000)=nil, 0x4000, 0x3) mknod(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) rename(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mlock(&(0x7f000000f000/0x4000)=nil, 0x4000) 987.910719ms ago: executing program 2 (id=9): select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x4, 0x7, 0x0, 0x51b4}]}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001680), 0x40, 0x0) sysctl$hw(&(0x7f0000000000)={0x7, 0x4}, 0x2, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f00006b5000/0x1000)=nil, 0x1000, 0x2) ioctl$WSKBDIO_BELL(r1, 0x20005701) r2 = socket(0x20, 0x1, 0x0) r3 = socket(0x1e, 0x3, 0x0) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x8}, 0x0) setsockopt$sock_int(r0, 0xffff, 0x100, &(0x7f0000000040)=0xfffffa39, 0x4) connect$inet(r2, &(0x7f0000000000), 0x10) 984.963715ms ago: executing program 6 (id=7): r0 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) close(r0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) mknod(&(0x7f00000002c0)='./file0\x00', 0x2000, 0x6381) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f00000002c0)={&(0x7f00000014c0)=@in, 0xc, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r4 = socket(0x20, 0x1, 0x0) (rerun: 32) ioctl$FIONREAD(r4, 0xc0206983, &(0x7f00000001c0)) 984.519597ms ago: executing program 1 (id=2): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x6c}, {0x40, 0x0, 0x0, 0x3}, {0x2006, 0x0, 0x0, 0xfffffffe}]}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x1ff, 0x0, {0x0, 0x4000000000000003}}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x3, 0x0) r3 = dup2(r2, r2) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000340)={'tap', 0x0}) sendto$unix(r3, &(0x7f0000000380)="dd031c960c5b73a044cbc663f56fad9f0ca69d012dde5ce05fe54f8f117b35285604b415dc3036e00747f54f6e0c4357be88af7f6e77e5682c32d771c03ca3c56f21858f0cf955c6a1635c7d353d4f4ded3449516b477dd78d8fa76f1afe7eb61de858403be9e5f3c06af13191452ba66b95fab1b46aee1e30352671772ca4ff008f6cc656b1a1d8ab4bf8eb916b07da215bf1787f112f65e15f0381e28052a3fb93cb0f9d3f93e6237fa95e9f4d9bee42bd2da50617d0d4cab3ea8144aedf98cd733e0b3c8e1b7a5f93715e885d117c225aaf11b010f042e10a0dd3669556084b", 0xe1, 0x401, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x0}, 0x8) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[]) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x3, &(0x7f0000000100)=[{0x7, 0xfd}, {0x48, 0xff}, {0xe6, 0x4}]}) syz_emit_ethernet(0x3e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000300000000000009078ac7000bb0000000004009000000000004500000000000000000000007f000001ac1400aa"]) syz_extract_tcp_res$synack(&(0x7f0000000140), 0x1, 0x0) 983.656638ms ago: executing program 2 (id=12): r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_open_pts() mmap(&(0x7f000000f000/0x3000)=nil, 0x3000, 0x5, 0x5010, r0, 0xfffffffffff7ffff) symlink(0x0, &(0x7f0000000740)='./bus\x00') open(&(0x7f0000000240)='./file0\x00', 0x80, 0x180) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETA(r1, 0xc4504440, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, "97cf11dfcd75a74d9b04e3ffffff00f40000f4e7"}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x41000}, {&(0x7f0000538000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x200000000}, {&(0x7f00001f5000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0xa000)=nil}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00000a1000/0x1000)=nil, &(0x7f00001f4000/0x2000)=nil}, {&(0x7f0000002000/0x1000)=nil, &(0x7f0000ff9000/0x6000)=nil}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f000009f000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000084000/0x1000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000161000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil}], './file0\x00'}) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x4, 0x0}) mknod$loop(0x0, 0x4, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCEXCL(r0, 0x2000740d) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd60090000002006fffe00ffff8001000001ea443d00000000000000000000000000d3aa7227d27d257b0feec56ce30f6ce857572f7ff9", @ANYRESDEC, @ANYRESHEX, @ANYRES16=0x0, @ANYRES8=0x0]) 895.106209ms ago: executing program 3 (id=14): ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000000c0)) (async) r0 = socket(0x18, 0x2, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) (async) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x205, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x1000301010009}) (async) r3 = open(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000100)="5be011d9560121f4ca0f8aff1162a5bdc5c095dae1000035bfebf9b140aeda0693f18352440dd8688f6aada8d9cb12b16b839817f8883e222b04b10661081711da3c7cd607", 0x45}], 0x1) (async) fcntl$lock(r3, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x4c0, 0x269000000, 0xffffffffffffffff}) setsockopt(r0, 0x7, 0x6, &(0x7f0000000000)="45c6a2846987b8593d9d917c954129c792d74cc2286362", 0x17) (async) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000740)="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", 0x5ad}], 0x1) 891.290713ms ago: executing program 2 (id=15): r0 = msgget(0x0, 0x640) r1 = getpid() open$dir(&(0x7f0000000280)='.\x00', 0x10000, 0x20) (async) open$dir(&(0x7f0000000280)='.\x00', 0x10000, 0x20) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') msgget$private(0x0, 0x0) (async) r2 = msgget$private(0x0, 0x0) r3 = getuid() setrlimit(0x8, &(0x7f00000015c0)={0x7, 0x54}) r4 = syz_open_pts() close(r4) (async) close(r4) r5 = syz_open_pts() dup2(r4, r5) readv(r5, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1) setreuid(0x0, r3) setreuid(r3, 0x0) getuid() (async) r6 = getuid() getgroups(0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]) (async) getgroups(0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]) r8 = getppid() msgctl$IPC_SET(r0, 0x1, &(0x7f0000000100)={{0x8001, r3, 0xffffffffffffffff, r6, r7, 0x18, 0x4}, 0x8, 0x3dd9, r1, r8, 0x8, 0x1, 0xb5, 0x5}) r9 = geteuid() setuid(r9) socket$inet(0x2, 0x2, 0x0) (async) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r10, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) (async) setsockopt$inet_opts(r10, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) setsockopt$inet_opts(r10, 0x0, 0x9, 0x0, 0x0) (async) setsockopt$inet_opts(r10, 0x0, 0x9, 0x0, 0x0) msgsnd(r2, &(0x7f0000000040)={0x1, "7873f5a402d478803fb3eb5714731963452acc2c7b00a0382aff43c3ad9c6432d5fcf29023732c2b1d51b5ae0f37aff1435502211fc307f0a7f4414363bcd15cd1e8c466f6937d553b9c02e8dd9f0a89684f6d9f5455167df93a3290da80511f21739b6161f5e9bf20c466feb0b3bd43f648038bf04026a7681b32e31b99bb2ee407"}, 0x8a, 0x800) msgrcv(r2, 0x0, 0x0, 0x1, 0x1c00) msgctl$IPC_SET(r2, 0x1, &(0x7f0000001f80)={{0x3e54, 0x0, 0x0, 0x0, 0x0, 0x26, 0xf000}, 0x0, 0x6, 0x0, r1, 0xc, 0x8, 0xb, 0x8}) 846.888673ms ago: executing program 3 (id=16): r0 = socket$unix(0x1, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000180)=@un=@file={0x0, ""/515}, 0x205, 0x0, 0x0, 0x0}, 0xfffffffd}, 0x10, 0x0, 0x0) select(0x40, &(0x7f0000000140)={0x3ff}, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000000)={0x0, 0x40000}, 0x10, 0x0) 846.474931ms ago: executing program 1 (id=17): writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="cac73ce119f42809f7c30824a593555ffe", 0x11}], 0x1}, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 64) r0 = socket(0x18, 0x1, 0x0) (rerun: 64) ioctl$FIONREAD(r0, 0xc038694e, &(0x7f00000001c0)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') r1 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000140), 0x8, 0x0) ioctl$WSDISPLAYIO_SVIDEO(r1, 0x80045745, &(0x7f0000000240)=0x1) (async) r2 = syz_open_pts() (async, rerun: 64) r3 = socket(0x2, 0x2, 0x0) (rerun: 64) r4 = socket(0x2, 0x400000000002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2000, 0x0) (async) r5 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$TIOCFLUSH(r5, 0x80047410, &(0x7f00000003c0)=0x6) (async) r6 = socket(0x800000018, 0x3, 0x0) setsockopt$sock_int(r6, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4) r7 = dup2(r4, r3) setsockopt$sock_int(r7, 0xffff, 0x800, &(0x7f0000000040)=0x20, 0x4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000280)=0x4) (async) bind(r3, &(0x7f0000000000), 0x10) r8 = socket(0x20, 0x1, 0x4) connect$unix(r8, &(0x7f0000000000), 0x10) (async, rerun: 64) sysctl$kern(&(0x7f0000001a00)={0x1, 0x17}, 0x2, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) sendmsg$unix(r8, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) 845.169484ms ago: executing program 3 (id=18): mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) (async) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0xc014575e, &(0x7f0000000080)={0x7, './file0\x00'}) (async) setsockopt(0xffffffffffffff9c, 0x8, 0x8001, &(0x7f00000000c0)="f0cb", 0x2) (async) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000100)) (async) r1 = syz_open_pts() r2 = socket$inet6(0x18, 0x2, 0x1) sendmsg(r2, &(0x7f00000015c0)={&(0x7f0000000180)=@in={0x2, 0x0}, 0xc, &(0x7f0000001480)=[{&(0x7f00000001c0)="da6ab859cc92f92c8ee10f9a5417ea55a19a08d1ce13efdeebe33ba0492504e41042f7092a577fd2c8c68aadd4997c8ea23ef7cb49c32c158ed0016595f9bf6963cdcd4d47217f153b6992d1d404ffc523eb3a01152e4db56b3bf6ba2b32e4858ba8b3cebc6de805b1645944a5854eb55fab399a40b205d152b113d9115a51363f5ab1ab17232ad1d38aaf04437c7d50facb0da47805b5651e07ed5452aeccc5287dffec03b7d9b9d5cac99e", 0xac}, {&(0x7f0000000280)="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", 0xfe}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="02b26de33eafa392d76f5db0dc967ed19ad75f75d5216ba831661ebe50bfb08ca5609e5d70cf53", 0x27}, {&(0x7f00000013c0)="fc2dfc67b89cdd385eb9d5b6bf895321096b75941b5709b375d07593996eb8cf5fec27633c255caa88ff739becf814c4d91762fc956e08f33d5a46cc759ac1a92b458643636d0972ec17d67d479e1f4823cbfc8113af35edc6ff1b097e1261d4cbc0d9753043c8daf7fcb8b2da5fb5bd408afb6f5e2f883791a8ffa632b30a2b54148e5d76aa0b7e55acb38ffc42ffcb64f6a64d8b0670378154c0527dfcc623d23f146893c594", 0xa7}], 0x5, &(0x7f0000001500)=[{0x50, 0xffff, 0x0, "b39662537f086eba4cd572d2fcf31776b1339b9f0e921de7c1c53feca219799acfbfb8edfedef10a54df5fa7c28fc9e39ec9ff38163a3da2d8"}, {0x50, 0xffff, 0xfffffff7, "ca2c3f899c257f396b4f9c96ba1658873277026bd7638169393c4d3e8846e0d6b6519abcb176f0528ad2c14e02580bdab85aa6e5a490886e056c92d9e7daf60c"}], 0xa0}, 0x6) openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001600), 0x409, 0x0) r3 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000001640), 0x0, 0x0) unlinkat(r3, &(0x7f0000001680)='./file0\x00', 0x0) (async) getpeername(r2, &(0x7f00000016c0)=@in, &(0x7f0000001700)=0xc) (async) getsockopt(r2, 0xff, 0xffff0001, &(0x7f0000001740)=""/9, &(0x7f0000001780)=0x9) (async) setsockopt(r3, 0x2, 0x8, &(0x7f00000017c0)="9e38da07cded07b2dd97e5e0ab914a467bd4de48ac524b9107ba82faf3136b8ccfa36f24cb00bbdb191d62d557d29f9b967d4c3d6a9c09af2a0bb2001524a9c7de08c2cc6b97dc36208292d49334913f6e6917191fa6d4a8425ecec79f3d73", 0x5f) (async) readv(r2, &(0x7f0000001940)=[{&(0x7f0000001840)=""/103, 0x67}, {&(0x7f00000018c0)=""/92, 0x5c}], 0x2) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001980)={0x8, 0x2, 0x7fffffff, 0x50, "ce6b3343700258f92bd26e10fb297ee98f6d0bba", 0x4}) (async) fcntl$setflags(r3, 0x2, 0x0) (async) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000001a00)={0x2, &(0x7f00000019c0)=[{0x2, 0x3, 0xc, 0x3}, {0x8, 0x6, 0x9e, 0x2e8b}]}) (async) bind$inet(r3, &(0x7f0000001a40)={0x2, 0x0}, 0xc) execve(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001b00)=[&(0x7f0000001ac0)='\x00'], &(0x7f0000001d40)=[&(0x7f0000001b40)='\x00', &(0x7f0000001b80)='\'.-[$\x00', &(0x7f0000001bc0)='\x00', &(0x7f0000001c00)='S%@[}}]!:\x00', &(0x7f0000001c40)='*(*-&(\'\x00', &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)='/dev/wsmouse\x00', &(0x7f0000001d00)='^\xef-$#\x00']) (async) connect$inet(r3, &(0x7f0000001d80)={0x2, 0x1}, 0xc) (async) ioctl$TIOCGWINSZ(r3, 0x40087468, &(0x7f0000001dc0)) (async) ioctl$WSDISPLAYIO_GVIDEO(r0, 0x40045744, &(0x7f0000001e00)) (async) fcntl$getown(r1, 0x5) (async) chflagsat(r3, &(0x7f0000001e40)='./file0\x00', 0x0, 0x0) faccessat(r3, &(0x7f0000001e80)='./file0\x00', 0x194, 0x3) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001ec0), 0x8, 0x0) ioctl$VMM_IOC_CREATE(r4, 0xc2585601, &(0x7f0000001f00)={0x10, 0x6, [{&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x6}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x6}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x635f8e8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x5}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x7}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x1000)=nil, 0xf}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x10001}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x4900}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x4}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1}], './file0\x00'}) (async) ioctl$VMM_IOC_CREATE(r3, 0xc2585601, &(0x7f0000002100)={0x10, 0x4ed0cd95, [{&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x8}, {&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x80000001}, {&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x1000)=nil, 0x80}, {&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x4}, {&(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x6}, {&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x555e571f}, {&(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0xa73}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f0000ff7000/0x6000)=nil, &(0x7f0000ff4000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x8}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x6}, {&(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xe74}, {&(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0x200}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x7}], './file0/file0\x00', 0x6}) setsockopt$sock_int(r2, 0xffff, 0x1002, &(0x7f0000002300)=0x80000000, 0x4) 844.856911ms ago: executing program 1 (id=19): sysctl$vm(&(0x7f0000000340)={0x2, 0x9}, 0x2, &(0x7f00000004c0)="8522d226", &(0x7f0000000300)=0x4, 0x0, 0x0) sysctl$net_inet_carp(0x0, 0x0, &(0x7f0000000180)="3df92e44027040d1a5a4ebba40d86ff261329c1697efa2b7d92ce8d739d8dbf4f67d229b4c8865b5bed390319e61cb5b7d036921731e9b9ee65f6930201fd0fb2352fd9d2c04209079", 0x0, 0x0, 0x0) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106978, &(0x7f00000001c0)) r1 = semget$private(0x0, 0x0, 0x281) r2 = msgget(0x3, 0xc2) r3 = getuid() r4 = getgid() msgctl$IPC_SET(r2, 0x1, &(0x7f0000001200)={{0xbe5, r3, 0x0, 0x0, r4, 0x0, 0x7ff}, 0x5}) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0xc) r6 = getuid() setreuid(0x0, r6) r7 = getgid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000280)={{0x6, r3, r5, r6, r7, 0x1a7, 0x3ff}, 0x6, 0xcc18, 0x7}) sysctl$vm(&(0x7f0000000000)={0x2, 0xc}, 0x2, &(0x7f0000000040)="ecf75651c399ee36fc14c4278d5c21245522fad09b83b76cc62f05d3fc646a7cf20171754887a4f2c3cfa97deea4f80da0b2dc14e842c0c9304efbe02d6c7a87b6041b566d48b26ccfa114ccec21d74925263490c61361b0eeefa2aa06ba03cfcaf4cf8efb036df2c7432891adad6ab0024763cde9c564954fd35fed5ae714346c8e2f660401f548e748cf19a462f8ae1ef83d2accb2f1c2e7773ccd5bc5ae783433aea2b7618dfd23be0f7b2677e3cd511eeab292e5908de75cdb", &(0x7f0000000100)=0xbb, &(0x7f0000000140)="1179d5f27c8ecf5ff979b0f3cd3266daa228e155c2079e59c82aaa09ce5664fe7d823b66ca794d57e04c865572cd1d9dda301e2dc7cc1d362b451ec65950424d695ee443936fcabb6acbb5a92bfaaf1f5ec3e180bb207a610225f4b5549a20dca022463106529a3746bd2c7a8f199c214a082c8c54729d86c2245888652be578ebb5b656106015fb9bf36e20c743165227ec1d6c37d102caae1534a7ac798f187bbbfd7f0d661e90fb611d5abd423921fa78c46431cce05468a853d54655990062193587b65a0800ff0e6239d3136c48abaf95cfbe5517b42d3668d91a894d", 0xdf) 843.159915ms ago: executing program 6 (id=20): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/50, 0x2f}], 0x100000000000027b) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x40, 0xfd, 0xfe, 0x4}, {0x84, 0x0, 0x2, 0x2}, {0x16}]}) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r4, &(0x7f0000001480)=[{&(0x7f0000001240)="cc60d3d79a1a7122a5fb9de9ea6ca0b30fb2942ef7652736f10f86d45ae419b2ecf7af93d33b3de1f2c56c0d93da7484095d0d543baf7f0161a025c9c02a561f9a76d06f1eaec7d8df99d6c28b10fa891e47d6c3bba690a611889032ac7b3581d7c92d1c546e59764f069048316871794f0615dd4d8bb1057a61fb177be649004fb56a7d46c856a20d73f050bf29d58b803a676cc3761e8a47857f51d90a4465f9c605ab2829d78ea2571900", 0xac}, {&(0x7f0000000080)="b389e5ae", 0x4}, {&(0x7f0000000200)="5f6a8de84b4c523a583f91557c748a02cda4cedf13579996073843ec5cbabaadcec85d62a8a897a78307f3d2c30eea6356105ec8aaba86930f1aed0b3d111d", 0x3f}, {&(0x7f0000000240)="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", 0xf12}], 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r4, 0x0) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000040)=0x1935, 0x0, 0xfffffffffffffdb2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x8, &(0x7f0000000980)={0x46, 0x56}) r7 = syz_open_pts() close(r7) syz_open_pts() writev(r7, &(0x7f0000000000)=[{&(0x7f0000000380)="7e746376ecb3f4b7c3b9648dde9d8c13de18b9e215c4a9cac7034ab89ebf86868d83590bbbc0d90ba99e59ac2ac3a2812db4a42c910ec132c100ff7f737c911d105ade6f74489113b68abf53fec3be6aeb96d1dd0b41272e9a67087a7fbcf181a77e72520b7622324acd62aee319cf3e29c7534ed4beb03e67ea8902030d8222e539564932f2040000000000003e8baddb5ec102383f95df148f2944152806cfcb731235c9b66b30ab00daec0ec87a189a8d240141070000008de968692f4a942984cd03000000000000000b17e13cd9b51d0900000000000000005dee44094817", 0xe1}], 0x1) sendto(r6, &(0x7f0000000040)='L', 0x1, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f00000011c0)=""/4096, 0x1000, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)="8b", 0x1}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) munmap(&(0x7f0000000000/0x3000)=nil, 0x3000) r8 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$BIOCSETIF(r8, 0x8020426c, &(0x7f0000000180)={'tap', 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000640)=ANY=[@ANYBLOB="ffffffffff060100000000000800450000140000000000009078ac1400aa00ffffff"]) ioctl$FIONBIO(r1, 0x8004667e, &(0x7f0000000080)=0x4) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 828.03297ms ago: executing program 0 (id=1): syz_emit_ethernet(0x72, &(0x7f0000000100)=ANY=[@ANYBLOB="4544f333d470aaaaaaaaaabb86dd60000000003c2c000000000000000000000000000800000000000000000021"]) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000140)=ANY=[@ANYBLOB="ff027977326e4cd2ddf03fc2c039a72c2da078c887ad850d24827c2e1f25f8e1ee9ad16d5ab84d82fee488720469f5815e2e6b278fab7de4867f45199d6381a097acedb587e892ce70a1335bcd630403f8b59fc63c3ea19da93744bee9ed78a00554e04ae39249e0bde933ace752ec931295d3e0e6bed6c013dc06631ed39e0aeacd684bd78ffdb8d17ff32a97054e94879c51edf4f6e894f643bb5d84628870f40de733cdafd1ad869d5307ad4a543d79ed1deaa896511ab0903b006386470c13f7b6592e9762a5bf8059a04b210a30e1dfce1f7917e1ebd63901efce8d01a60dee7916fbdb588d556ac59c0c7fb6350cfdcc83f466bff3f9b9772197441dcf25ccf0a956098eb436f619095562896ca003dafe80827fc09c08cda1761cf5772e7584278844e894e163e55ee7a6f7e4b5008e60417b763264f983d9fdee6d85794495b7b1082b5af7239bb64d8b000000000000000000"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x4001, 0x0) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0x80146952, &(0x7f00000001c0)) r3 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r3) r4 = socket(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) setsockopt$sock_int(r3, 0xffff, 0x1023, &(0x7f0000000080), 0x4) shutdown(r3, 0x2) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 763.87248ms ago: executing program 3 (id=22): chdir(&(0x7f0000000380)='./file0\x00') writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)='@', 0x1}], 0x1) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt(r0, 0x1000000029, 0x3e, &(0x7f0000000000)="6744d6e1", 0x4) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000740)="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", 0x5ad}], 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[]) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r1, 0x0) ftruncate(r1, 0x79c8) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000024c0)="cc", 0x1}], 0x1) setrlimit(0x1, &(0x7f0000000ec0)) ioctl$BIOCSRTIMEOUT(r1, 0x8010426d, 0x0) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) ioctl$TIOCCLRVERAUTH(0xffffffffffffff9c, 0x2000741d) socket(0x18, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09066dbd86dd60db834400081100fed38d5ba80b9e61cd0c535a98000000ff0200000000000000000000020000014e204e2200089078"]) recvmsg(r0, &(0x7f0000000300)={&(0x7f0000000040)=@in6, 0xc, &(0x7f0000000080)=[{&(0x7f0000000140)=""/208, 0xd0}, {&(0x7f0000000240)=""/137, 0x89}, {&(0x7f00000003c0)=""/131, 0x83}, {&(0x7f0000000480)=""/224, 0xe0}], 0x4, &(0x7f0000000580)=""/133, 0x85}, 0x800) 762.498774ms ago: executing program 5 (id=23): mknod(&(0x7f0000000000)='./bus\x00', 0x3a0914c44f7b202d, 0x4f) r0 = open(&(0x7f0000000040)='./bus\x00', 0x10000, 0x113) setreuid(0x0, 0xee01) ioctl$TIOCEXCL(r0, 0x2000740d) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sysctl$net_inet6_ip6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 759.925328ms ago: executing program 2 (id=24): mknod(0x0, 0x2000, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000005c0)={0x3, &(0x7f00000000c0)=[{0x0, 0x0, 0x2, 0x354}, {0x2, 0x0, 0x0, 0xffffffff}, {0x6, 0x2, 0x0, 0xff}]}) r0 = socket(0x18, 0x2, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0x8026d4) r1 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) r2 = socket(0x18, 0x3, 0x26) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000540)={0x0}, 0xc) r4 = getuid() setreuid(0x0, r4) r5 = getegid() r6 = fcntl$getown(r0, 0x5) getsockopt$sock_cred(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) getgroups(0x7, &(0x7f0000000480)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r9, 0x4, 0xc0) r11 = getpid() fcntl$setown(r9, 0x6, r11) r12 = getuid() chown(&(0x7f0000000180)='./file0\x00', r12, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r13, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r14, 0x0, 0x0, 0x0, 0xfffd}}) geteuid() getsockopt$SO_PEERCRED(r1, 0xffff, 0x1022, &(0x7f00000004c0), 0xc) sendmsg$unix(r1, &(0x7f0000000640)={&(0x7f0000000000)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000000040)=[{&(0x7f00000001c0)="1307b2016c085e8b4eee4b50c322ea49f792c4fc60282f35ce56b5e94894f1570b3396bc67403e4fd4c3456d7b5a0830728fa7729f0a30319c99346795cfc9c3f6bbfe918e18bd13d27c4c7d0699f071b77c12e7efd00d3f6eabafe891a87749adbb2cecec597460c916dc5581f9c8c61f52d12f09f99dd1239a228921fc8af96ca7280a657259edc43dc01aa4cd227a195b5d1fc2c2a8f6", 0x98}, {&(0x7f00000002c0)="63753ce53213641150918d641102d9ff9dc046f5c805d38506adf4a011fbf8b1ecc81267281fca08b603872ac6689746cd1b66127edd4885e69e660011d46d0749e354adbf6004d487110e693878a50055a5b0252566a68206", 0x59}, {&(0x7f0000000340)="6b2759b9415107ccf31b1c7145e1c9a2be039552bb41963f932764267af5352e3a4b8ae0b8588535775ee2b5d60fae32768db146b35620404e6caa8c1855a1fb377455fdd912d239b78f8e30582629a8806a33704a7f085c39dd29eb7fa48fbad79810e623aff5fc29d1381bb493f59c42445c05f0c3b51dc342db29270f825c46aebb", 0x83}], 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="2800000000000000fffb001601000000", @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32, @ANYBLOB="2000000000000000ffff000000000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000003000000000000000ffff000001000000", @ANYRES32=r1, @ANYBLOB="d57c5569ad289d2cfb69de17d57079ce1f219b78bc1f2d016c60e7dcce7656634785b5ab66de2e58b80c57dfcfea96cfa0fe9e7e4f9abdb07046e954c30884644ca2631d0c223c34eade62573fd65c15468a40e757c141cd3add79d9efdef8d04882f72c57dd32dac871528b883f84bfa73c", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=0xffffffffffffff9c, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="000000002000000000000000ffff000000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000001800000000000000ffff000001000000", @ANYRES32=r10, @ANYBLOB="000000001800000000000000ffff000001000000", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0xe8}, 0x8) r15 = dup2(r0, r2) setsockopt(r15, 0x1000000029, 0x2b, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) 759.339546ms ago: executing program 1 (id=25): r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) sysctl$net_inet_etherip(&(0x7f0000000000)={0x4, 0x2, 0x6c, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) chdir(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) unlinkat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r2}}) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000180)=0x66, 0x0, 0x27) (async, rerun: 64) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x0) (async, rerun: 64) truncate(&(0x7f0000000040)='./file0\x00', 0x30000) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x10, r3, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) clock_settime(0xffffffffffffffff, &(0x7f00000001c0)={0x9, 0x3}) (async) r4 = semget$private(0x0, 0x0, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) (async) truncate(&(0x7f0000000080)='./file0\x00', 0x1) 746.465519ms ago: executing program 7 (id=8): mkdir(&(0x7f00000000c0)='./file2\x00', 0x40) (async) r0 = open(&(0x7f0000000c00)='./file2\x00', 0x0, 0x793e566207d7814c) (async) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) symlinkat(&(0x7f0000000200)='./file2\x00', r0, &(0x7f0000000240)='.\x00') 745.802382ms ago: executing program 4 (id=5): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sysctl$kern(&(0x7f0000001a00)={0x1, 0x17}, 0x2, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = dup2(r1, r1) syz_emit_ethernet(0x9d, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60826e0300670005000000000014fc11134764000000000000000000000000000000000000000001"]) sendmsg$unix(r2, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={0x20, 0xffff, 0x0, 0x0, 0xffffffffffffffff}], 0x20}, 0x1) ioctl$TIOCSETA(r0, 0xc0104419, &(0x7f0000000040)={0x0, 0x2, 0x20000000, 0x1, "b7a2224ff1004647c39e0000000000006b8444c1", 0xffffffff}) 682.917704ms ago: executing program 5 (id=26): mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x40000800) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000180)=0x9) r1 = open(&(0x7f0000000140)='./file0\x00', 0x200, 0x0) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000180)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) link(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unveil(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='x\x00') open$dir(&(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x240) 682.261215ms ago: executing program 4 (id=27): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) setrlimit(0x8, &(0x7f0000000980)={0x9, 0x51}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047460, &(0x7f00000000c0)=0x3) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) mmap(&(0x7f0000008000/0xc00000)=nil, 0xc00000, 0x4, 0xc12, 0xffffffffffffffff, 0x13) mknod$loop(0x0, 0x8000, 0x1) r2 = socket(0x18, 0x2, 0x0) close(r2) r3 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r3, 0xffff, 0x1000, &(0x7f0000000000)=0x5, 0x4) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r4, 0xc0104419, &(0x7f0000000740)={0x0, 0xffffffff, 0x20000000, 0x0, "b7a2224ff1c14647ebb178926cc9795a6b8444d1"}) bind$unix(r3, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) setrlimit(0x6, &(0x7f00000000c0)) open$dir(&(0x7f0000000000)='./file0\x00', 0xf02, 0x0) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r5 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1000, &(0x7f0000000000)=0x800008, 0x4) bind$unix(r5, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000180)={0xfffffffc, 0x0, 0x1, 0x990, "81597f39b3bed4adbdbf00000000ec03d52a01c5", 0x6, 0x4}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000200)='H', 0x1}], 0x1) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0/file0\x00') mknod(&(0x7f0000000040)='./file0\x00', 0x6000, 0xe02) r6 = open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x40000400001803c1, 0x12) pwritev(r6, &(0x7f0000000080)=[{0x0}], 0x1, 0x0) 681.826335ms ago: executing program 7 (id=28): ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0) (async) setitimer(0x0, &(0x7f0000000000)={{}, {0xffffffff, 0x2353}}, 0x0) (async) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0xa04c, 0x49) syz_emit_ethernet(0x12e, &(0x7f0000000080)={@random="59a4fe2f48b6", @remote, [{[{0x88a8, 0x5, 0x0, 0x4}], {0x8100, 0x1, 0x1, 0x3}}], {@ipv4={0x800, {{0xb, 0x4, 0x3, 0x3, 0x118, 0x4, 0x1, 0x7, 0x50, 0x0, @empty, @remote={0xac, 0x14, 0x0}, {[@ra={0x94, 0x6, 0x2}, @ra={0x94, 0x6, 0x7}, @rr={0x7, 0xb, 0xfa, [@multicast1, @multicast2]}]}}, @tcp={{0x1, 0x3, r0, 0x41424344, 0x1, 0x0, 0x10, 0x80, 0x2, 0x0, 0x4, {[@eol, @md5sig={0x13, 0x12, "e45d57001acfa0a1ba08467688b3a735"}, @sack={0x5, 0xe, [0x80000000, 0x2, 0xf0c9]}, @timestamp={0x8, 0xa, 0xf, 0x5}]}}, {"d6f95d0306ab5a4489a2b48e707d864813a7d7e05c3b05f7439f9fbb577b4098ae160204f64b6a360d3f17c8dfb6d33e951f1560d33cab746a078d73445ad39ac013a4103b7e2db8d1e592f5be690f87860aea12f3965387e6d8cef7ddde0e79821569aad4870ddc0d1bf69d91b9af65f350e9b41edde2708bf872c6987171aa6dc2125cbcde409f44d85af7fc081a86c0c8a78035eaa23fa9194fd424bcb77162d0f4fdb71488b62514c8d8"}}}}}}) 680.013542ms ago: executing program 5 (id=29): r0 = kqueue() r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r1, 0xc444443b, &(0x7f0000000740)={0x5, 0x8000, 0x0, 0x0, "97a2a24ff3c14649ebb178926cc9795a6b47c1d1", 0xfffffffd, 0x4}) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x205b9b) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = kqueue() kevent(r3, &(0x7f0000000300)=[{{r2}, 0xfffffffffffffffe, 0x11}], 0x7, 0x0, 0x0, 0x0) kevent(r3, 0x0, 0x0, &(0x7f0000000200), 0x3b, 0x0) kevent(r0, &(0x7f0000000140), 0xe4a, 0x0, 0xa9fa, 0x0) socket(0x11, 0x3, 0x0) 679.637973ms ago: executing program 0 (id=30): socket(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f0000003880)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb080045000028"]) sendmmsg(r0, &(0x7f0000000480)={0x0}, 0xfffffffffffffde8, 0x0) ktrace(0x0, 0x0, 0x0, 0xffffffffffffffff) sysctl$net_inet_ip(0x0, 0x0, &(0x7f0000000100)="d7a8aac106fa1bee91c724b89283c1477dab85e783af4189a1eaf5f6e8251b1147b330f604ff639b9acd6202c9d8b1aef98ce6eefe", 0x0, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x10, 0x8000, 0x14) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="6c25a03ae7b27b4e7fc0924a22334b9b619f09f993c214bf34de94ee6f878793a443c48892901b940ff2189ae976bd635aa66dd55818d1ca20a7f88c2ad799df41ea701f32e36ab928f0ea3b00ddc5613e3590c04b342a5ec356d4f406e612653d7338e1b59ec0f00de4b65b3f18", 0x6e, 0x0, 0x0, 0xffffffffffffffcb) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = socket(0x18, 0x3, 0x0) r3 = socket(0x18, 0x2, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x10000, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xfffffffffffffffb}) r4 = socket(0x18, 0x3, 0x0) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) getsockname$inet(r4, &(0x7f00000000c0), &(0x7f0000000000)=0xffffffffffffff35) ioctl$VMM_IOC_INFO(0xffffffffffffffff, 0x8020560b, &(0x7f00000000c0)={0x0, 0x0, 0x0}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup2(r6, r5) ioctl$LIOCSFD(r6, 0x80046c7f, &(0x7f0000000240)=r4) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000040)="01782e7b380557e1d75291ce6d89589b78df812062bf48b3926731ac8f", 0x1d}, {&(0x7f0000000140)="c67bb646770f7f263a8a68ed5546408705d963fd95bd3c931d37488195212036ad74a211972c49aa89248de5ac58b13c8e4898a21e1f34ed797ca245b1f0872b82efdbaee8e769a0dd93deea7f5de80c84e57185d93067ae42707d1c66dfa46c5d60e9e638bfaf619db4dcaf2a37f3b7e7dee9fa1524a9ba8b9d06ccb91fcd42b4affcd16e7ad6e669ec072866ba78d2db660c0d1dd5bcc2dd5d4477b5f04aa34e9c77b7631b8d929e46593efa013b571254d43d36ef21b01e2a890990dc46c8cbc32c479db9bdda3aa72aac4f1e04f2a2f500f366", 0xd5}], 0x2) r7 = syz_open_pts() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) seteuid(0xffffffffffffffff) chdir(&(0x7f00000000c0)='./file0\x00') dup2(r7, r8) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)={0x1ff, 0x20000000000, 0x6}, 0x0, 0x0) ioctl$FIONREAD(r2, 0x8080691a, &(0x7f0000000100)) 678.311977ms ago: executing program 7 (id=31): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f0000000340)={0x10, 0x0, [{&(0x7f00000a0000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x10000}, {&(0x7f00000a7000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil}, {&(0x7f000008e000/0x11000)=nil, &(0x7f0000090000/0x1000)=nil, 0x400000100000000}, {&(0x7f00000a7000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil}, {&(0x7f00000a3000/0x2000)=nil, &(0x7f000009e000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000091000/0x2000)=nil, &(0x7f00000a4000/0x3000)=nil}, {&(0x7f000009d000/0x4000)=nil, &(0x7f00000a6000/0x2000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000094000/0x3000)=nil}, {&(0x7f000009e000/0x1000)=nil, &(0x7f000009d000/0x2000)=nil}, {&(0x7f00000a6000/0x3000)=nil, &(0x7f00000a8000/0x4000)=nil}, {&(0x7f00000a1000/0x1000)=nil, &(0x7f00000a7000/0x2000)=nil}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f00000a4000/0x2000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000099000/0x1000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000094000/0x3000)=nil}, {&(0x7f0000097000/0x1000)=nil, &(0x7f000009a000/0x2000)=nil}], './file0\x00'}) setrlimit(0x8, &(0x7f0000000000)={0xb, 0x200400000000062}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) write(r0, &(0x7f00000006c0)="92", 0x1) readv(r1, &(0x7f0000000100), 0x4c) 483.87885ms ago: executing program 1 (id=32): mkdir(&(0x7f0000000500)='./file0\x00', 0x0) (async) r0 = socket(0x18, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x1, 0x0) listen(r2, 0x0) (async) shutdown(r2, 0x2) poll(&(0x7f0000000080)=[{r2, 0x1}], 0x1, 0x0) (async) open$dir(&(0x7f0000001700)='./file0\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/236, 0xec}, 0x0) chroot(&(0x7f0000000740)='.\x00') sendmsg(r3, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) (async, rerun: 64) poll(&(0x7f0000000200)=[{}], 0x1, 0xffff) (async, rerun: 64) r5 = socket$inet(0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) listen(0xffffffffffffffff, 0x0) (async) r6 = socket(0x18, 0x1, 0x0) r7 = dup2(r6, r6) (async) setreuid(0xee00, 0x0) setreuid(0xee00, 0x0) (async) close(r5) (async, rerun: 32) r8 = fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) (rerun: 32) setitimer(0x0, &(0x7f0000001600)={{}, {0x1, 0x10001}}, 0x0) (async) close(r8) 483.054198ms ago: executing program 5 (id=33): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sysctl$net_inet_ip(&(0x7f0000000080)={0x4, 0x2, 0x0, 0x1b}, 0x4, 0x0, 0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0/file0\x00', r0, &(0x7f0000000080)='./file0\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x100}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0xffffffffffffff7b}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f00000002c0)=""/224, 0xe0}], 0x3, 0x0) madvise(&(0x7f00003e0000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f00003e1000/0x1000)=nil, 0x1000) rename(&(0x7f00000003c0)='./file0/file1\x00', &(0x7f0000000440)='./file0\x00') munmap(&(0x7f00003e0000/0x4000)=nil, 0x4000) symlink(&(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='./file0/file1\x00') open(&(0x7f00000006c0)='./file0\x00', 0x615, 0x0) r2 = open$dir(&(0x7f0000000580)='./file0\x00', 0x40000400001803c1, 0x0) ftruncate(r2, 0x80002) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000140)={0x0, 0x0}) msync(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6) r3 = getuid() chown(&(0x7f00000000c0)='./file0\x00', r3, 0x0) setreuid(r3, r3) pwrite(0xffffffffffffffff, &(0x7f00000005c0)="0256c79e00b68656860d0e8f7b6c924e3b234e3cd8bd005684440112b1b49d164aa0fe3bdcd839a94fc317ebcf511f00e03e28ed253d26070387b94fe78c6a478fdb96990901cbb2c0e0ae2e9216fa628f6010fa328d9a0b4680a0b8c56469500cef8b9f9e096615c7c88f576523cbb3a46e170b9b2aae14520d5263ef283473597b3800f615d35815fba026a6e679cb339265c114e93c60492c10093dc313a7f863ac532bd6f5a20c56ed1a52e082c9d7ccfc4ca1785544b2021a8300689f248c524cee5594b14448298960b18cb6a58e6cd291a46428c1a9689cfc1c424c6836afdfdd34b551d1483927e3a3b0146933e58d", 0xf3, 0x0) fchownat(r1, &(0x7f00000001c0)='./file0\x00', r3, 0xffffffffffffffff, 0x6) rename(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') accept(0xffffffffffffffff, &(0x7f0000000240)=@in, &(0x7f0000000280)=0xc) 482.427076ms ago: executing program 2 (id=34): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0xd18, r1) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)="89", 0xffffff6a}], 0x1, 0xdfff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0xfd9f}], 0x2f) writev(r3, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) r4 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x134, 0x0) ioctl$FIOGETOWN(r0, 0x4004667b, 0x0) 177.889967ms ago: executing program 5 (id=35): mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) (async, rerun: 64) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (rerun: 64) r0 = socket(0x18, 0x2, 0x0) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000180)=0x101) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) 175.592499ms ago: executing program 0 (id=36): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000068000/0x4000)=nil}, {&(0x7f00006ac000/0x4000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {0x0, &(0x7f0000ffb000/0x3000)=nil}, {0x0, &(0x7f0000ffb000/0x1000)=nil}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil}, {0x0, 0x0, 0xfffffffffffffffc}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000826000/0x1000)=nil, 0x7}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x7}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {0x0, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f00004c1000/0x2000)=nil}, {&(0x7f00001cf000/0x4000)=nil}, {0x0, &(0x7f0000358000/0x2000)=nil}], './file0\x00'}) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r0 = socket(0x19, 0x2, 0x20) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) r3 = socket(0x11, 0x8003, 0x0) getsockopt(r3, 0x11, 0x3, 0x0, 0x0) close(r2) ioctl$FIONREAD(r0, 0xc028698a, &(0x7f0000000100)) shmget(0x1, 0x4000, 0x5, &(0x7f0000391000/0x4000)=nil) open(&(0x7f0000000040)='./file0\x00', 0x10, 0x0) execve(&(0x7f0000000200)='./file0\x00', &(0x7f0000000a00)=[&(0x7f0000000280)='tap', &(0x7f00000008c0)='-([{^\xa9#:*]#[\x00', &(0x7f0000000b00)='\x00', &(0x7f0000000940)='\x06#&+#}\x00', &(0x7f0000000980)='/dev/pf\x00', &(0x7f00000009c0)='~#}\x00'], &(0x7f0000000c00)=[&(0x7f0000000a40)='/dev/pf\x00', &(0x7f0000000a80)='!,\xd7*\x00', &(0x7f0000000c80)='\xdb3=\xd4\x82\xb1Y\xf1\xcf\xad\x97 Vz\x14\x0ejv]RTip\xab\xcb\"J\xf6\n\xed\xaa\xf52\xa3\xa0\x011\a\xa9\xb4\x8a\x02\xc9\x84\x13\b-\xef\x01cK(\x8a6A\xc7|\xcf\xce\xf5\x9b\xfez\xd6\xaa\x8c\xd3~\x96\x10pER\xd6\xda\x88\xbd\xe4\xe4\x17\xf6m\xb6\xf6\xe6Y\xe8q\xe9\xa4\xdam\xb0\xbe\xec\xb4\x1d*7\x00!\xcf\xcf\xd3\xd84\xc9\xfe\xd2\xe4\xe3\xd7\xf7W\xfe\'fY4\x05\ai?\xeai\xd7z]\xaa', &(0x7f0000000c40)='.@,', &(0x7f0000000b40)='/dev/pf\x00', &(0x7f0000000b80)='$(\x00', &(0x7f0000000bc0)='/dev/pf\x00']) shmctl$SHM_UNLOCK(0x0, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000002c0)="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", 0x5ca}, {&(0x7f0000000f00)="6ecfd62631ec965af026d9c14aa45b1794a3d0862949ebed2e913c56", 0x1c}], 0x2}, 0x0) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TIOCSETA(r4, 0xcd504404, &(0x7f0000000000)={0xfffffffc, 0x1000003, 0x6b1ce40f, 0x8, "d64dc1ffffff0000002068c7f6373eda398600", 0xe, 0x7ff}) 31.469085ms ago: executing program 4 (id=37): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x3, 0x67, 0x6, 0x6}]}) syz_emit_ethernet(0xfffffffffffffdcb, &(0x7f0000000000)={@broadcast, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x101c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @icmp=@timestamp_reply={0xe, 0x0, 0x0, 0x101, 0xda, 0x5, 0x6, 0xffff}}}}}) open$dir(&(0x7f0000000040)='./file0\x00', 0x1, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x412dff) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000280)='./file1\x00', 0x8005, 0x0}) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/104}, {&(0x7f0000000140)=""/192}, {&(0x7f0000000340)=""/175}, {&(0x7f0000000000)=""/18}], 0x10000000000002b8, 0x0) sysctl$net_inet_gre(&(0x7f0000000100)={0x4, 0x18}, 0x4, 0x0, 0x0, 0x0, 0x0) r2 = socket(0xa4befccc5e3f6dbc, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) accept$unix(r2, 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x20, 0x0, 0x0) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0xb1, 0x0, 0x1, 0x81}, {0xa6, 0x0, 0x0, 0xfffffffd}]}) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x9, 0x6, '\x00', 0x8, 0x3, 0x3, @empty, @loopback, {[], @udp={{0x3, 0x2, 0x8}}}}}}}) socket(0x0, 0x0, 0x0) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f00000c0000/0x4000)=nil) shmctl$IPC_SET(r4, 0x1, &(0x7f0000000140)={{}, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9}) getuid() shmctl$IPC_STAT(r4, 0x2, 0x0) getuid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f0000000000)="b100ea6f000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f6a335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 30.663406ms ago: executing program 3 (id=38): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x1, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0xc, 0xe4}, {0x9, 0x0, 0x3}, {0xfffa, 0x0, 0x6, 0x2}]}) sysctl$net_inet_ip(&(0x7f0000000200)={0x4, 0x2, 0x0, 0xe}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x3, 0x0) syz_open_pts() syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "f3053d", 0x14, 0x0, 0x0, @empty, @rand_addr="00000000000000000004000000000300", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8000, 0x0, 0x7fff}}}}}}}) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$BIOCPROMISC(r2, 0x20004269) 20.127949ms ago: executing program 3 (id=39): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f00000001c0)={0x3, &(0x7f0000000000)=[{0x1, 0x0, 0x0, 0x6}, {0x40, 0xc7, 0x0, 0xd809}, {0x4000006, 0x0, 0x1, 0x3eefff}]}) (async) write(r0, &(0x7f0000000180)="23009100007adb020317bdda2b7e", 0xe) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="91a6e34dd8bbaaaaaaaaaabb0800470000300000000300000000000000000000000007798cdea9000000000080"]) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000513000000000000000004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41002000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407", 0xa9, 0x0, 0x0, 0x0) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b100050a600000000000000007000000330002000000000000f96ecfc72fd3357ae320b37b673039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa5b236de351e2f0ac3ebbc257699a5f139b672f4d335d223e7d026ba8af6300372821", 0x61, 0xe, 0x0, 0x0) (async) socket(0x2, 0x3, 0x4) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff13, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/145, 0x91}], 0x10000000000001ee, 0x0}, 0x65e5c8d9ad7c94a) (async) sysctl$net_inet_icmp(&(0x7f0000000040), 0x4, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(&(0x7f0000000040)={0x1, 0x54}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x1, 0x0, 0x7, 0xcd2b, "fc686b340d88e4795af94547d01305d65c21963c", 0x0, 0x6d9}) (async) sysctl$kern(&(0x7f0000000000)={0x1, 0x45}, 0x2, 0x0, 0x0, &(0x7f00000003c0)="3944eb3f115f79037148fa0ddc3adf427d080000006ceb99ea265a4a19b2e72fd9cbb4db32e128db447c5e01000080d5fa1d9213ebefff7ad23b886bf325280bc040eac897a0d4168da6b6146499e1ee9ddeb2d68e8d011a008d00", 0x5b) (async) mknod(0x0, 0x2000, 0x2cff) (async) r1 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000180)}], 0x1) ioctl$VNDIOCCLR(r1, 0x80384601, &(0x7f0000000100)={0x0, 0x451, &(0x7f0000000040)='./file0\x00', 0x8}) (async) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) (async) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="7f5769e67f", 0x5}], 0x1) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r2 = socket(0x2, 0x1, 0x0) bind(r2, &(0x7f0000000000), 0x10) (async) openat$speaker(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = dup(r2) listen(r3, 0x0) (async) r4 = socket(0x2, 0x1, 0x0) connect$unix(r4, &(0x7f0000000000), 0x10) (async) sendto$inet(r4, &(0x7f0000000140)="aa", 0x1, 0x195a05e282d6161, 0x0, 0x0) 19.605731ms ago: executing program 1 (id=40): open$dir(0x0, 0x2, 0x2) setrlimit(0x6, &(0x7f00000000c0)) mlockall(0x1) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 18.169917ms ago: executing program 0 (id=41): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/254, 0xfffffc47}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f00000002c0)=""/243, 0xe2}], 0x134, 0x0) madvise(&(0x7f00003e0000/0x1000)=nil, 0x1000, 0x0) munmap(&(0x7f00003e1000/0x1000)=nil, 0x1000) madvise(&(0x7f00003e1000/0x3000)=nil, 0x3000, 0x0) sysctl$net_inet_ip(0x0, 0x0, &(0x7f0000000180)="ce8813", &(0x7f0000000040)=0x3, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0xa63, 0x2}, {0xfffffffffffffffd, 0x8000000000000001}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ktrace(0x0, 0x1, 0x40000000, 0xffffffffffffffff) syz_emit_ethernet(0x67, &(0x7f0000000480)={@broadcast, @remote, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x59, 0xfffd, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x7e, @multicast1, {[@generic={0x1, 0xa, "a48d2d49cfc9e7cf"}]}}, @icmp=@generic={0xb, 0x0, 0x0, "a175c458b148d67847172a471dd5bb8341294d22167b95bb895dad7cd535582767f4483e4226ccf520e4c9092cecdb51a3c5968dc8"}}}}}) unveil(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='r\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x4}], 0x1, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x1}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="020c4ee2", 0x4) 10.216627ms ago: executing program 5 (id=42): r0 = socket(0x18, 0x2, 0x0) r1 = getpid() r2 = open(0x0, 0x80000000000206, 0x40) socket$inet(0x2, 0x1, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0xfffd}, 0x0, 0x9, r1, r1, 0x800, 0x2, 0x0, 0x1}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x310, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0xffffffffffffffff}, {0x10000000000000}}, 0x2) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{0x2, 0x1}, {0x100, 0x1}}, 0x2) close(r0) 0s ago: executing program 4 (id=43): r0 = open(&(0x7f0000000180)='./file0\x00', 0x70e, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x100, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0x18}, 0x2, &(0x7f00000005c0), 0x0, 0x0, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0xa) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TIOCSETA(r1, 0xc444443a, &(0x7f0000000740)={0x0, 0x2f, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x5, 0x10, r2, 0x0) select(0xfffffffffffffecc, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000000000}, 0x0, &(0x7f0000001a80), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. uvn_flush: obj=0xfffffd806bf83630, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! uvm_fault(0xfffffd806be531c0, 0xf, 0, 1) -> e kernel: page fault trap, code=0 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 TID PID UID PRFLAGS PFLAGS CPU COMMAND *445359 57429 0 0 0x4000000 1K syz-executor 146362 98596 0 0x14000 0x200 0 reaper ktrops(ffff80003719a2b0,ffffffffffffffff,0,80000310,fffffd806aa222b8,fffffd807f7d33a8) at ktrops+0x58 doktrace(fffffd806aa222b8,4,310,0,ffff80003719a2b0) at doktrace+0x6dd sys_ktrace(ffff80003719a2b0,ffff800033185700,ffff800033185650) at sys_ktrace+0x11c syscall(ffff800033185700) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc40a92796a0, count: 10 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806be531c0, 0xf, 0, 1) -> e ddb{1}> trace ktrops(ffff80003719a2b0,ffffffffffffffff,0,80000310,fffffd806aa222b8,fffffd807f7d33a8) at ktrops+0x58 doktrace(fffffd806aa222b8,4,310,0,ffff80003719a2b0) at doktrace+0x6dd sys_ktrace(ffff80003719a2b0,ffff800033185700,ffff800033185650) at sys_ktrace+0x11c syscall(ffff800033185700) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc40a92796a0, count: -5 ddb{1}> show registers rdi 0xffff80002d569000 rsi 0x17c5 __ALIGN_SIZE+0x7c5 rbp 0xffff800033185420 rbx 0xfffffd807f7d33a8 rdx 0xffff80002d569000 rcx 0x17c4 __ALIGN_SIZE+0x7c4 rax 0xffffffff816dd463 ktrops+0x43 r8 0xfffffd806aa222b8 r9 0xfffffd807f7d33a8 r10 0x75ea480c87b78244 r11 0xb56066d40a654b2b r12 0xffff80003719a2b0 r13 0xffffffffffffffff r14 0xffffffffffffffff r15 0x80000310 __kernel_virt_to_phys+0x310 rip 0xffffffff816dd478 ktrops+0x58 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff8000331853a0 ss 0 ktrops+0x58: movq 0x10(%r14),%r14 ddb{1}> show proc PROC (syz-executor) tid=445359 pid=57429 tcnt=4 stat=onproc flags process=0 proc=4000000 runpri=17, usrpri=61, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003719aa48,0xffff80003719b988 process=0xffff8000371ccdb8 user=0xffff800033180000, vmspace=0xfffffd806be531c0 estcpu=11, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 57429 189978 60331 0 2 0 syz-executor 57429 11254 60331 0 3 0x4000080 fsleep syz-executor *57429 445359 60331 0 7 0x4000000 syz-executor 57429 501708 60331 0 2 0x4000000 syz-executor 72061 423961 16557 0 3 0x80 nanoslp syz-executor 72061 467747 16557 0 3 0x4000080 fsleep syz-executor 72061 81135 16557 0 3 0x4000080 fsleep syz-executor 9481 440617 8323 0 2 0 syz-executor 9481 39346 8323 0 2 0x4000000 syz-executor 98763 459949 36741 0 2 0 syz-executor 98763 484497 36741 0 3 0x4000080 fsleep syz-executor 98763 173834 36741 0 3 0x4000080 fsleep syz-executor 23977 185312 0 0 3 0x14200 bored sosplice 20465 98032 85721 0 2 0x2 syz-executor 58723 128831 85721 0 3 0x82 nanoslp syz-executor 60331 331542 85721 0 3 0x82 nanoslp syz-executor 41771 73416 85721 0 3 0x2 biowait syz-executor 36741 300573 85721 0 3 0x82 nanoslp syz-executor 4030 332985 85721 0 2 0x2 syz-executor 16557 295316 85721 0 3 0x82 nanoslp syz-executor 8323 219743 85721 0 3 0x82 nanoslp syz-executor 85721 371930 94287 0 3 0x82 kqread syz-executor 94287 373465 67566 0 3 0x10008a sigsusp ksh 67566 117912 9603 0 3 0x98 kqread sshd-session 9603 362636 77927 0 3 0x92 kqread sshd-session 94673 30113 1 0 3 0x100083 ttyopn getty 77927 407431 1 0 3 0x88 kqread sshd 29414 98522 72071 74 3 0x1100092 bpf pflogd 72071 476175 1 0 3 0x80 sbwait pflogd 33192 228324 11316 73 3 0x1100090 kqread syslogd 11316 68561 1 0 3 0x100082 sbwait syslogd 11355 27050 1 0 3 0x100080 kqread resolvd 32994 210218 85266 77 3 0x100092 kqread dhcpleased 31367 458620 85266 77 3 0x100092 kqread dhcpleased 85266 64947 1 0 3 0x80 kqread dhcpleased 6836 482356 0 0 3 0x14200 bored smr 36282 506796 0 0 2 0x14200 zerothread 88967 53647 0 0 3 0x14200 aiodoned aiodoned 23220 58448 0 0 3 0x14200 syncer update 92872 58008 0 0 3 0x14200 cleaner cleaner 98596 146362 0 0 7 0x14200 reaper 98942 68668 0 0 3 0x14200 pgdaemon pagedaemon 79402 261038 0 0 3 0x14200 bored viomb 14805 177984 0 0 3 0x40014200 acpi0 acpi0 92657 478424 0 0 3 0x40014200 idle1 71094 411280 0 0 3 0x14200 bored softnet3 4953 172656 0 0 3 0x14200 bored softnet2 15807 104932 0 0 3 0x14200 bored softnet1 21456 334384 0 0 3 0x14200 bored softnet0 88146 123288 0 0 3 0x14200 bored systqmp 82499 415837 0 0 3 0x14200 bored systq 16268 293013 0 0 3 0x14200 tmoslp softclockmp 58795 424065 0 0 3 0x40014200 tmoslp softclock 36192 169022 0 0 3 0x40014200 idle0 1 273306 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 0: exclusive mutex &(curpg)->mdpage.pv_mtx r = 0 (0xfffffd8008124958) #0 witness_lock+0x5b8 #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 pmap_remove_ptes+0x297 #4 pmap_do_remove+0x533 #5 uvm_unmap_kill_entry_withlock+0x274 #6 uvm_map_teardown+0x1c7 #7 uvmspace_free+0xcd #8 reaper+0x246 #9 proc_trampoline+0x10 exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806aba1bc0) #0 witness_lock+0x5b8 #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 pmap_do_remove+0xa9 #4 uvm_unmap_kill_entry_withlock+0x274 #5 uvm_map_teardown+0x1c7 #6 uvmspace_free+0xcd #7 reaper+0x246 #8 proc_trampoline+0x10 Process 57429 (syz-executor) thread 0xffff80003719a2b0 (445359) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83527328) #0 witness_lock+0x5b8 #1 __mp_acquire_count+0x58 #2 mi_switch+0x658 #3 sleep_finish+0x219 #4 getblk+0x197 #5 bread+0x47 #6 ffs_update+0x198 #7 ufs_inactive+0x2e2 #8 VOP_INACTIVE+0x107 #9 vrele+0x129 #10 ktrsettrace+0xe7 #11 ktrops+0x271 #12 doktrace+0x6dd #13 sys_ktrace+0x11c #14 syscall+0xaf8 #15 Xsyscall+0x128 Process 20465 (syz-executor) thread 0xffff8000ffff6a40 (98032) exclusive rrwlock inode r = 0 (0xfffffd806bedd3d0) #0 witness_lock+0x5b8 #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x171 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xaf8 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c6421a8) #0 witness_lock+0x5b8 #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 dounlinkat+0xc1 #8 syscall+0xaf8 #9 Xsyscall+0x128 Process 41771 (syz-executor) thread 0xffff8000ffff6020 (73416) exclusive rrwlock inode r = 0 (0xfffffd8069621708) #0 witness_lock+0x5b8 #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x283 #7 ufs_mkdir+0x113 #8 VOP_MKDIR+0x102 #9 domkdirat+0x179 #10 syscall+0xaf8 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c642d58) #0 witness_lock+0x5b8 #1 rw_enter+0x41b #2 rrw_enter+0xbe #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 domkdirat+0x8b #8 syscall+0xaf8 #9 Xsyscall+0x128 Process 98596 (reaper) thread 0xffff800029fd96d0 (146362) exclusive rwlock vmmaplk r = 0 (0xfffffd806be53d00) #0 witness_lock+0x5b8 #1 rw_enter+0x41b #2 vm_map_lock_ln+0x143 #3 uvm_map_teardown+0x5e #4 uvmspace_free+0xcd #5 reaper+0x246 #6 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10196 10166K 10230K 166960K 11292 0 pcb 17 12K 12K 166960K 24 0 rtable 234 6K 6K 166960K 348 0 pf 34 17K 18K 166960K 47 0 ifaddr 43 7K 7K 166960K 46 0 ifgroup 55 2K 2K 166960K 57 0 counters 64 36K 36K 166960K 66 0 ioctlops 0 0K 4K 166960K 1488 0 iov 1 8K 25K 166960K 7 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1367 86K 86K 166960K 1412 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1697 195K 286K 166960K 12548 0 file desc 14 49K 97K 166960K 172 0 sigio 0 0K 0K 166960K 1 0 proc 68 91K 140K 166960K 533 0 subproc 104 6K 6K 166960K 104 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 7 0 in_multi 99 7K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 73 334K 334K 166960K 73 0 exec 0 0K 1K 166960K 362 0 pfkey data 0 0K 0K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 225 90K 90K 166960K 3183 0 UVM aobj 4 2K 2K 166960K 5 0 pinsyscall 39 78K 108K 166960K 1241 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 3 0 NDP 12 0K 2K 166960K 29 0 temp 38 6814K 6877K 166960K 4137 0 kqueue 13 20K 26K 166960K 33 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 36 0 33 1 0 1 1 0 8 0 rtentry 112 111 0 1 4 0 4 4 0 8 0 unpcb 144 65 0 48 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 18 0 13 1 0 1 1 0 8 0 arp 120 18 0 0 1 0 1 1 0 8 0 inpcb 336 94 0 85 2 0 2 2 0 8 0 nd6 136 24 0 0 1 0 1 1 0 8 0 pkpcb 40 1 0 1 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1168 1 0 1 1 0 1 1 0 8 1 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 17 0 0 1 0 1 1 0 8 0 pfstkey 128 17 0 0 1 0 1 1 0 8 0 pfstate 376 17 0 0 2 0 2 2 0 8 0 pfrule 1344 22 0 16 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 452 0 0 29 0 29 29 0 8 0 art_table 32 453 0 0 4 0 4 4 0 8 0 art_node 16 110 0 10 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 shmpl 112 2 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1628 0 117 95 0 95 95 0 8 0 ffsino 272 1628 0 117 102 0 102 102 0 8 0 nchpl 144 1866 0 184 63 0 63 63 0 8 0 uvmvnodes 80 1760 0 0 36 0 36 36 0 8 0 vnodes 216 1760 0 0 98 0 98 98 0 8 0 namei 1024 5820 0 5819 2 0 2 2 0 8 1 percpumem 16 47 0 1 1 0 1 1 0 8 0 kstatmem 264 26 0 2 2 0 2 2 0 8 0 scxspl 216 5499 0 5498 4 1 3 3 1 8 2 plimitpl 152 39 0 20 1 0 1 1 0 8 0 sigapl 424 471 0 423 8 1 7 7 0 8 1 futexpl 64 653 0 648 1 0 1 1 0 8 0 knotepl 120 316 0 0 10 0 10 10 0 8 0 kqueuepl 216 32 0 23 1 0 1 1 0 8 0 pipepl 320 109 0 82 3 0 3 3 0 8 0 fdescpl 496 452 0 424 6 0 6 6 0 8 2 filepl 152 1727 0 1482 11 0 11 11 0 8 1 lockfpl 104 12 0 10 1 0 1 1 0 8 0 lockfspl 48 6 0 4 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 30 0 13 1 0 1 1 0 8 0 ucredpl 104 109 0 95 1 0 1 1 0 8 0 zombiepl 144 424 0 423 1 0 1 1 0 8 0 processpl 1160 471 0 423 5 0 5 5 0 8 1 procpl 648 549 0 493 7 1 6 6 0 8 0 sockpl 664 196 0 167 4 0 4 4 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 2 0 0 1 0 1 1 0 8 0 mcl2k 2048 233 0 0 30 0 30 30 0 8 0 mtagpl 96 1 0 0 1 0 1 1 0 8 0 mbufpl 256 386 0 0 25 0 25 25 0 8 0 bufpl 280 4852 0 97 340 0 340 340 0 8 0 anonpl 24 132749 0 120767 73 0 73 73 0 185 0 amapchunkpl 152 10010 0 9271 31 0 31 31 0 158 0 amappl16 200 3219 0 2957 14 0 14 14 0 8 0 amappl15 192 37 0 37 1 1 0 1 0 8 0 amappl14 184 110 0 98 1 0 1 1 0 8 0 amappl13 176 2 0 2 1 1 0 1 0 8 0 amappl12 168 1110 0 1081 4 1 3 3 0 8 0 amappl11 160 55 0 41 1 0 1 1 0 8 0 amappl10 152 13 0 12 1 0 1 1 0 8 0 amappl9 144 136 0 136 1 1 0 1 0 8 0 amappl8 136 23 0 21 1 0 1 1 0 8 0 amappl7 128 103 0 91 1 0 1 1 0 8 0 amappl6 120 167 0 166 1 0 1 1 0 8 0 amappl5 112 131 0 120 1 0 1 1 0 8 0 amappl4 104 314 0 295 1 0 1 1 0 8 0 amappl3 96 1936 0 1829 4 0 4 4 0 8 0 amappl2 88 609 0 548 2 0 2 2 0 8 0 amappl1 80 7904 0 7322 15 0 15 15 0 8 1 amappl 88 2819 0 2657 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 4 0 1 1 0 1 1 0 8 0 uaddrrnd 24 452 0 424 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 452 0 424 1 0 1 1 0 8 0 vmmpekpl 168 5804 0 5770 2 0 2 2 0 8 0 vmmpepl 168 36253 0 34236 91 0 91 91 0 357 0 vmsppl 440 451 0 423 6 1 5 5 0 8 1 rwobjpl 56 16069 0 13137 42 0 42 42 0 8 0 pdppl 4096 911 0 846 99 26 73 87 0 8 8 pvpl 32 30567 0 0 247 0 247 247 0 265 0 pmappl 248 451 0 423 3 0 3 3 0 8 0 extentpl 40 56 0 38 1 0 1 1 0 8 0 phpool 112 396 0 28 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff83408ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83527120) at __mp_lock+0x199 uvn_detach(fffffd806cf991b0) at uvn_detach+0x28 uvm_unmap_detach(ffff800029fe5e20,0) at uvm_unmap_detach+0x15e uvm_map_teardown(fffffd806be53c10) at uvm_map_teardown+0x35e uvmspace_free(fffffd806be53c10) at uvmspace_free+0xcd reaper(ffff800029fd96d0) at reaper+0x246 end trace frame: 0x0, count: 6 ddb{0}> trace x86_ipi_db(ffffffff83408ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83527120) at __mp_lock+0x199 uvn_detach(fffffd806cf991b0) at uvn_detach+0x28 uvm_unmap_detach(ffff800029fe5e20,0) at uvm_unmap_detach+0x15e uvm_map_teardown(fffffd806be53c10) at uvm_map_teardown+0x35e uvmspace_free(fffffd806be53c10) at uvmspace_free+0xcd reaper(ffff800029fd96d0) at reaper+0x246 end trace frame: 0x0, count: -9 ddb{0}> machine ddbcpu 1 Stopped at ktrops+0x58: movq 0x10(%r14),%r14 ktrops(ffff80003719a2b0,ffffffffffffffff,0,80000310,fffffd806aa222b8,fffffd807f7d33a8) at ktrops+0x58 doktrace(fffffd806aa222b8,4,310,0,ffff80003719a2b0) at doktrace+0x6dd sys_ktrace(ffff80003719a2b0,ffff800033185700,ffff800033185650) at sys_ktrace+0x11c syscall(ffff800033185700) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc40a92796a0, count: 10 ddb{1}> trace ktrops(ffff80003719a2b0,ffffffffffffffff,0,80000310,fffffd806aa222b8,fffffd807f7d33a8) at ktrops+0x58 doktrace(fffffd806aa222b8,4,310,0,ffff80003719a2b0) at doktrace+0x6dd sys_ktrace(ffff80003719a2b0,ffff800033185700,ffff800033185650) at sys_ktrace+0x11c syscall(ffff800033185700) at syscall+0xaf8 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xc40a92796a0, count: -5