last executing test programs: 2.391884738s ago: executing program 2 (id=515): r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f0000000140)) r1 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r1, &(0x7f00000017c0), 0x0) execve(0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc1206949, &(0x7f0000000100)) r2 = socket(0x2, 0x2, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) ioctl$VT_GETMODE(r3, 0x40087603, &(0x7f0000000000)) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FIONREAD(r2, 0x8028698c, &(0x7f00000001c0)) 1.274137069s ago: executing program 4 (id=517): mprotect(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x18290, 0x0) ioctl$DIOCRGETTABLES(r1, 0xc450443f, &(0x7f0000000dc0)={{'./bus\x00', './file0\x00', 0xe, 0x1}, &(0x7f0000000540)=[{'./bus\x00', './bus\x00', 0x40, 0x7f}, {'./bus\x00', './bus\x00', 0x4a, 0x8}], 0x8, 0x2, 0x700000, 0x7, 0x66b2, 0x4, 0x36, 0x2}) ioctl$VNDIOCSET(r0, 0x80086d01, &(0x7f0000000500)={0x0, 0x0, 0x0}) mknod(&(0x7f0000000480)='./bus\x00', 0x2000, 0x412dff) r2 = open$dir(&(0x7f0000000140)='./bus\x00', 0x2, 0x0) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000006c0), 0xf0f75}], 0x1, 0x0) 1.25809811s ago: executing program 4 (id=518): r0 = open(&(0x7f0000000140)='./file0\x00', 0x80000000000206, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x1, 0xe, 0xffffffffffffff9c}) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047460, &(0x7f0000000040)=0x2) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='c\x00') 1.102481777s ago: executing program 2 (id=525): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) ftruncate(r0, 0x8531) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)={{&(0x7f00000001c0)=@in6={0x1c, 0x18, 0x0, 0xffffff8b, "8c735be39a72b554ed8159ba3055e81a", 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001dc0)=[{0xc, 0x1, 0x9}, {0x14, 0x1, 0x7, "fd25c3eaef"}], 0x20}}, 0x38, 0x0) 1.091130032s ago: executing program 7 (id=526): openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x9, 0x10000, 0x48, 0xf, 0x3, 0x3, 0x2, 0x7}, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0xc0785101, &(0x7f0000000040)={0x0, 0x200000000000000, 0x0}) 1.036160919s ago: executing program 2 (id=531): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="311b887885d1", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0xff, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0x7fff}}}}}}) 1.036085131s ago: executing program 7 (id=532): r0 = socket(0x18, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000500)="e197c10eefc5eda48d55f1724a08d8a11566cf95eb65fe94dc6830ecfc84b80d6ea905ed51b821faa963dacc2df3d857c62d2e16f67c07d994caee09c16573b8e0f8e13c0e8ead779f0674b8dd9b02b7e8d91e5b86d322cf36afb94db511552a36251560bab294eb94a97abaf4e316b60efa98c2ec71e41694b4aac803813143f2ac195fb88283483c2d", 0x8a}], 0x1, 0x0, 0xfeff}, 0x40c) 1.03580177s ago: executing program 3 (id=533): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x1c0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0x8, 0x0, 0x3, 0x400000000009, 0x0, 0x8000000000000001}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60"]) 1.035071693s ago: executing program 2 (id=534): open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) kqueue() sendmsg$unix(r0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xb}, 0x608) 1.034860286s ago: executing program 7 (id=535): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000001c0)='\x00\x00', 0x2) connect$inet(r0, &(0x7f0000002080)={0x10, 0x2, 0x2, 0x7fffffff}, 0x10) 984.908964ms ago: executing program 3 (id=536): ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000480)={0x3, 0xb3f, {[0xfffffbfffffffffb, 0x0, 0x2, 0x100000000, 0x80000004, 0x0, 0x2df60, 0xfffffffffffffffe, 0x3, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x20000001, 0x5e, 0x7b98, 0x1fe, 0x0, 0x6], [0xc41, 0x2, 0x101, 0x0, 0xb, 0x10, 0xffffffff00200000], [0x5, 0x1ffffffffff, 0x7ffffffffffffffc, 0x2, 0xfffffffffffffffe, 0xfffffffffffffffa], [{0x1, 0x4, 0x0, 0x101}, {0xfffc, 0x2, 0x5, 0xf}, {0x0, 0x0, 0xfffffffe, 0x20000080}, {0x3, 0x5, 0x6, 0x2}, {0x0, 0x2000002, 0x3, 0x8}, {0x0, 0x405, 0xffffffff, 0x1000}, {}, {0x2, 0x100, 0x31, 0x8}], {0x0, 0x5, 0x5}, {0xfffe, 0x80000000, 0x6d5, 0x1002}}}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$DIOCSTART(r0, 0x20004401) r1 = dup(r0) ioctl$DIOCSETSYNCOOKIES(r1, 0xc0014462, &(0x7f0000000000)) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x10, 0x2, 0x1}, 0x10) listen(r2, 0x7ff) ioctl$WSDISPLAYIO_SETSCREEN(r1, 0x80045756, &(0x7f0000000080)=0x6) r3 = socket(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x10, 0x2, 0x1, 0xac1402aa}, 0x10) ioctl$WSMOUSEIO_SETPARAMS(r1, 0x80105728, &(0x7f0000000040)={&(0x7f0000000000)=[{0x24, 0x7}, {0x101, 0x8}, {0x43, 0x8}, {0x7, 0xfffffffc}, {0x101, 0x4}], 0x5}) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) 982.587348ms ago: executing program 7 (id=537): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000180)={0x3, &(0x7f00000001c0)=[{0x8000, 0x4, 0x0, 0xc14}, {0x4, 0x5, 0x0, 0x1}, {0x6, 0x1, 0x45, 0x10000}]}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000180)={0x3, &(0x7f00000001c0)=[{0x8000, 0x4, 0x0, 0xc14}, {0x4, 0x5, 0x0, 0x1}, {0x6, 0x1, 0x45, 0x10000}]}) mknod(&(0x7f0000000200)='./file0\x00', 0x2008, 0x412dff) open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) (async) r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) writev(r0, &(0x7f00000000c0)=[{0x0}], 0x1) write(r0, &(0x7f0000000040)="0920e80000007c60e1016745b65369db00000000ebbd07a90172c84c838b4278ad535c39413f308cbbaee4ffcb7f31dbd1562eb77b6a0a", 0x37) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x1, 0x0) (async) r1 = open(&(0x7f0000000100)='./file0\x00', 0x1, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$BIOCGHDRCMPLT(r2, 0x40044274, &(0x7f0000001700)) ioctl$FIONREAD(r1, 0xc02069a0, &(0x7f00000002c0)) (async) ioctl$FIONREAD(r1, 0xc02069a0, &(0x7f00000002c0)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000040)) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$BIOCSBLEN(r4, 0xc0044266, &(0x7f00000000c0)=0x34) (async) ioctl$BIOCSBLEN(r4, 0xc0044266, &(0x7f00000000c0)=0x34) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000500)={'tap', 0x0}) pread(r4, &(0x7f0000000600)="e7077b6629e0397383eaeac9193e79db7bbbad786e7bbb921dff532158d0b49a3e7de9f2d8fdefa9e6fddc16bcd369b9fc28dc5e", 0x34, 0x5) syz_emit_ethernet(0x3f, &(0x7f0000000100)=ANY=[]) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) socket(0x18, 0x3, 0x3) (async) r5 = socket(0x18, 0x3, 0x3) setsockopt$sock_linger(r5, 0xffff, 0x80, 0x0, 0x0) (async) setsockopt$sock_linger(r5, 0xffff, 0x80, 0x0, 0x0) r6 = socket(0x1, 0x1, 0x0) ioctl$FIONREAD(r6, 0x8020691f, &(0x7f00000001c0)) 979.087533ms ago: executing program 2 (id=538): r0 = syz_open_pts() ioctl$TIOCSCTTY(r0, 0x20007461) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80, 0x20) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCIMMEDIATE(r3, 0x8010427e, &(0x7f0000000040)=0x8) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) syz_emit_ethernet(0x1000e, &(0x7f00000015c0)=ANY=[]) syz_emit_ethernet(0x138, &(0x7f0000000400)=ANY=[]) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f00000003c0)={'tap', 0x0}) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCSETA(r4, 0xc0404469, &(0x7f0000000140)={0x0, 0x0, 0x4, 0xfffffffd, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00', 0x0, 0xfffffffc}) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_timeval(r5, 0xffff, 0x1006, &(0x7f0000006040)={0xfffffffffffffc6d, 0x3}, 0x10) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0xd02) r6 = socket$inet6(0x18, 0x3, 0x2) select(0x20, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0xfff, 0x4, 0x6}, 0x0, &(0x7f0000000200)={0x3ff, 0x0, 0x1000, 0x9, 0x1, 0xfff, 0x0, 0xf06}, 0x0) connect$inet6(r6, &(0x7f0000000280)={0x1c, 0x18, 0x2, 0x8d, "fe80fdff00000000adba3fd16e5d6700", 0xfffffffa}, 0x1c) open$dir(&(0x7f00000000c0)='./file0\x00', 0x200, 0x186) r7 = syz_open_pts() fcntl$lock(r7, 0x7, &(0x7f0000000100)={0x0, 0x2, 0xfffffbfffffffffb, 0x10002fffffffe}) shmdt(0x0) r8 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) close(r8) pread(r2, &(0x7f0000000080)=':', 0x1, 0x200000000010) r9 = kqueue() kevent(r9, &(0x7f00000005c0)=[{{r1}, 0xfffffffffffffff6, 0x2b, 0x8, 0x4, 0xa}, {{r9}, 0xfffffffffffffff6, 0xfa, 0x10, 0x2, 0x9c}, {{}, 0xfffffffffffffff9, 0x51, 0x10, 0xbc, 0x3}], 0x96, 0x0, 0xfffb4961, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f00000001c0)={0x1, &(0x7f0000000300)=[{0x5, 0x0, 0x2, 0x3}]}) 873.991947ms ago: executing program 7 (id=542): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x4, 0x4f, 0x0, 0x4}, {0x14, 0x2, 0x2, 0x5}, {0x9b1d, 0xb6, 0xe3, 0x10000001}]}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[]) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4085, 0xff5}], 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r1, &(0x7f0000002680)=[{&(0x7f0000000140)=""/164, 0xa4}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/32, 0x20}, {&(0x7f0000002380)=""/93, 0x5d}, {&(0x7f0000002400)=""/190, 0xbe}, {&(0x7f00000024c0)=""/183, 0xb7}, {&(0x7f0000002580)=""/241, 0xf1}], 0x7) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x1}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="00000080", 0x4) close(r1) sysctl$net_inet_carp(&(0x7f0000000080)={0x4, 0x2, 0x70, 0x1}, 0x4, &(0x7f0000002700)="0345fbd1a57f7ff64fe4f7c734edcd50dcb87232f811b79e829ded148d238067a8eb53b2fd770d1f66c69f9352be42ec4ff7c06fc31a974d3b899d426f9400a12e23405d9b4dd1c1edd6ca94464153180d803b71fa5cfadfe5de1163d7ac0c055c15535f8a876f7b6b0a95381f6b20546174618cbf9c42f9fbeaf986a5aaab229c2946977dd3", &(0x7f00000027c0)=0x86, &(0x7f0000002800)="1e3164cac207b373dea6eb80cb9a6f1e47e6a54153347dadf645648926aaa8a2582371a574f17f7f8c9e5916aeb810f08bbd0ac709a2ab97e08559d38ee5cd0d759833726d1f6349a825568891cf5959e67ed39fade5698a61624e9773f457eaa8785a66aada71660f6e677dbf76dec756d4ddd57c8f03a893a7dd1372d1efe17d468691a8e3e0a49d274d0b5f54a127e527c8453720d0cce9c4e89e21c7b97c6eb0e4fc0e443d58296c72c5ca994f75f29112d36cfe9e708f430e71f701146e55bd873035d7cfdca331abcdf010f506d501b2c319f582fdfc156d890b9d26f14612bff547cce39be717e2f3d973aaf4db0b7c9e34acc4", 0xf7) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) 846.531502ms ago: executing program 5 (id=544): r0 = socket(0x24, 0x2, 0x0) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, &(0x7f0000000300), 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) closefrom(r0) r1 = accept$unix(r0, &(0x7f0000000000)=@file={0x0, 0x0, ""/42}, &(0x7f0000000080)=0x2c) getsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f00000000c0), &(0x7f0000000100)=0x10) shutdown(r0, 0x2) syz_emit_ethernet(0x0, 0x0) 845.423927ms ago: executing program 5 (id=546): openat$bpf(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) r0 = socket$inet(0x18, 0x3, 0x102) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x2, 0x7, '\x00', 0x4000fd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)="630c00000000299a8c51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d2", 0x10064}], 0x1, 0x0}, 0x0) 844.228492ms ago: executing program 5 (id=548): r0 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) (async) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000001}) fcntl$lock(r0, 0x9, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x269010000, 0xffffffffffffffff}) r1 = syz_open_pts() setsid() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001300)={0x4, 0x9, 0xb, 0x10001, "7a3cc93029655b2749eeda4f00165134eee5b172", 0x401, 0x299bbdf6}) (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000001300)={0x4, 0x9, 0xb, 0x10001, "7a3cc93029655b2749eeda4f00165134eee5b172", 0x401, 0x299bbdf6}) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) fcntl$getown(r0, 0x5) 802.272362ms ago: executing program 5 (id=550): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="311b887885d1", @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0xff, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x8200, 0x0, 0x7fff}}}}}}) 801.612384ms ago: executing program 5 (id=552): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x57, 0x0, 0x0, 0x0, 0x1c0, 0x33, 0xa2f}, 0x80000002000007, 0xfffffffffffffffb, 0x8, 0x0, 0x3, 0x400000000009, 0x0, 0x8000000000000001}) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b60000ffd82c03"]) 800.859113ms ago: executing program 4 (id=553): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000001c0)='\x00\x00\x00', 0x3) connect$inet(r0, &(0x7f0000002080)={0x10, 0x2, 0x2, 0x7fffffff}, 0x10) 792.692743ms ago: executing program 5 (id=554): setrlimit(0x8, &(0x7f0000000980)={0x3, 0x3fc}) (async) r0 = syz_open_pts() (async) syz_open_pts() select(0x40, &(0x7f0000000340)={0x2, 0x8081, 0x7, 0x800000000000001, 0xffffffffffffffa5, 0x5, 0x4, 0xaeb6}, &(0x7f0000000080)={0xde4, 0x7, 0x0, 0x1, 0x6, 0x6, 0x2, 0x4}, 0x0, 0x0) (async) getrlimit(0x4, &(0x7f00000000c0)) (async) r1 = syz_open_pts() syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffc236ff86dd60dd05000000000000007a653e336f000000500000000000ff0200000000000000000000000000014e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5108000490780007"]) (async, rerun: 64) sysctl$kern(&(0x7f0000000000)={0x1, 0x42}, 0x6, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) fcntl$setstatus(r1, 0x4, 0x7b8f91c5333d655e) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x1, 0x401, 0xfffffffe, 0x966b, '\x00\x00\x00*h\x00', 0x10044, 0x3effd}) ioctl$TIOCSETAW(r1, 0x802c7415, &(0x7f0000000000)={0x6, 0x7cd, 0x400, 0x505, "296449fe6c90e90f06142dbd32b73669cad5a2db", 0x7fffffff}) ppoll(&(0x7f0000000a40)=[{r0, 0x4}, {r0, 0x80}], 0x2, 0x0, 0x0) 791.884915ms ago: executing program 4 (id=555): ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x4, [{0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x3}, {0x0, 0x800000}, {0x0, 0x7f}, {0x0, 0x8}, {0x0, 0x200}, {0x1, 0x3}, {}, {0x0, 0x40}, {0x0, 0x203}, {0x3}, {0x0, 0x1000}, {0x1, 0x4}, {}, {0x2, 0x2}, {0x1}, {0x0, 0x5}, {0x0, 0x10000800}, {0x5}, {}, {0x5, 0x5}, {0x2, 0x400}, {}, {0x2}, {0x2, 0xfffffffd}, {0x3}, {0x1, 0xfffffffa}, {0x3, 0x9}, {0x2, 0x4}, {0x3}]}) (async, rerun: 64) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='./file0\x00') (async, rerun: 64) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)='v', 0x1}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x6, 0x4, &(0x7f0000000080)="037d040565", 0x5) (async) setsockopt(r0, 0x6, 0x8, &(0x7f0000000040)="ebffcbff", 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa7210e10bc3c9de9) (async, rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) (rerun: 64) 748.28446ms ago: executing program 4 (id=556): mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002800)={@local, @broadcast, [], {@ipv4={0x800, {{0x9, 0x4, 0x2, 0x1e, 0x2c, 0x67, 0x1, 0x0, 0x89, 0x0, @broadcast, @broadcast, {[@noop, @timestamp={0x44, 0xc, 0x9, 0x3, 0x5, [{[], 0x8}, {[], 0x3cb}]}]}}, @icmp=@echo={0x8, 0x0, 0x0, 0x4, 0xe1}}}}}) 746.067923ms ago: executing program 4 (id=558): ioctl$TIOCSETA(0xffffffffffffffff, 0xc4504442, &(0x7f0000000200)={0xffffffff, 0x0, 0x2000000b, 0x228c4ae2, "6aff000047000000f8ff00", 0x4e9, 0x4}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x33b9) r0 = open(&(0x7f0000000480)='./file0\x00', 0x20, 0x4ebfac6bbaf7900) ioctl$DIOCRADDADDRS(r0, 0xc4504443, &(0x7f00000004c0)={{'./file0\x00', './file0\x00', 0x20, 0x5c}, &(0x7f0000000040)=[{@empty, '\x00', './file0\x00', 0x2, 0x95cc, 0x2, 0xe, 0x2, 0x40, 0x8}, {@multicast2, '\x00', './file0\x00', 0x40, 0x30, 0x18, 0x2, 0x1, 0x2, 0xff}, {@rand_addr=0x6, '\x00', './file0\x00', 0x0, 0x8, 0x1a, 0x3e, 0x3, 0x8, 0x42}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0xeb5, 0xc, 0x19, 0x5, 0x6, 0x7, 0x8}], 0x0, 0x4, 0x4, 0xfffffff9, 0x7, 0x2, 0x10, 0x7}) open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x3ffe) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x538, 0x0) pselect(0x40, &(0x7f0000000200)={0x7, 0x4, 0x3, 0x81, 0x4, 0xffffffffffffff7f, 0x200, 0xfffffffffffffffb}, &(0x7f0000000280)={0x8, 0x5, 0x2, 0x6, 0x9, 0x2, 0x8, 0x7}, &(0x7f00000002c0)={0x2, 0xc, 0xc78, 0xe506, 0x2, 0x0, 0x0, 0x7ff}, 0x0, &(0x7f0000000300)={0x7}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCCLR(r0, 0xc0a86b06, &(0x7f0000000200)={0x0, 0x10000, 0x0}) 624.030492ms ago: executing program 6 (id=567): r0 = socket(0x18, 0x3, 0x5) sendto$inet6(r0, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xc9e, "0000000000000000000000000000fe00", 0x1}, 0x1c) 623.541402ms ago: executing program 6 (id=568): mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x100) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) r1 = syz_open_pts() syz_open_pts() ioctl$TIOCMBIC(r1, 0x8004746b, &(0x7f00000000c0)=0x2) (async) syz_open_pts() (async) mquery(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x6) (async) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/62, 0x3e}], 0x1) (async) r2 = socket$inet6(0x18, 0x1, 0x6) getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f0000000040), 0xc) ioctl$DIOCNATLOOK(r0, 0xc0504417, &(0x7f0000000140)={@v4, @v6=@loopback, @v6=@mcast2, @v6=@mcast1, 0x2, 0x9, 0xfff, 0xb, 0x1000, 0x7, 0x18, 0x6, 0x3}) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) 605.167927ms ago: executing program 6 (id=570): r0 = open(&(0x7f0000000140)='./file0\x00', 0x80000000000206, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x1, 0xe, 0xffffffffffffff9c}) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047460, &(0x7f0000000040)=0x2) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='c\x00') 486.097011ms ago: executing program 6 (id=575): r0 = socket(0x18, 0x3, 0x3a) sendmsg(r0, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x0, 0x7, "00000000000000000000000000000001", 0x101}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000500)="e197c10eefc5eda48d55f1724a08d8a11566cf95eb65fe94dc6830ecfc84b80d6ea905ed51b821faa963dacc2df3d857c62d2e16f67c07d994caee09c16573b8e0f8e13c0e8ead779f0674b8dd9b02b7e8d91e5b86d322cf36afb94db511552a36251560bab294eb94a97abaf4e316b60efa98c2ec71e41694b4aac803813143f2ac195fb88283483c2d", 0x8a}], 0x1, 0x0, 0x0, 0x20}, 0x40c) 445.763119ms ago: executing program 6 (id=577): sysctl$kern(0x0, 0x0, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000280)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496852a9ad15fa4b0bc2c6ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b5", 0xee) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) 442.581536ms ago: executing program 6 (id=578): r0 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x0, 0x10000}, {0x2}, {0x0, 0x300}, {0x2, 0x8}, {0x0, 0x4000}, {0x2, 0xe}, {0x0, 0x3}, {0x3, 0x1}, {}, {0x4}, {}, {0x1, 0x8000}, {0x3, 0x6}, {0x2}, {0x3, 0xffffffff}, {0x2, 0xfff}, {0x2}, {0x1}, {0x1}, {}, {0x3, 0x6}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x40fffe}, {0x1, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}]}) r1 = syz_open_pts() fcntl$lock(r1, 0x8, &(0x7f00000000c0)={0x3, 0x2, 0x8, 0x1000300000004}) socket(0x2, 0x2, 0x0) r2 = kqueue() pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r3) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0xffff, 0xc05, 0x80000000, 0x8000002e, 0x0, 0x1, 0x3, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x8, 0x5, 0xfffffffffffffff7, 0x100], [0x9, 0x5, 0xfffffffffffffff8, 0x0, 0x1, 0x80104000, 0xfffffffffffffffd, 0x0, 0x0, 0x48], [0x7, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0xfffffffe, 0x7d06}, {0x2, 0x2, 0x295dcbee, 0x3}, {0x0, 0xfffffffd, 0xfffffffe, 0xff9}, {0x1008, 0x0, 0x8, 0x3}, {0x8000, 0x400, 0x10, 0x5}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0xfffe, 0x0, 0x7}, {0x0, 0x95b, 0x1fd, 0xc}], {0x0, 0x25, 0x1, 0x849}, {0x7, 0x40010, 0x4, 0x2}}}) kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) flock(r1, 0x1) kevent(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0xfffffffffffffffd, 0x80, 0x40, 0x800000000005, 0x7}], 0x2, 0x0, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x3, 0x1, 0x400000000000080, 0x300000001}) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, &(0x7f0000000080)=0x7) r4 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r4, 0xc0104451, &(0x7f0000000080)={0x2, 0x408, &(0x7f00000000c0)=[{0x0, './bus//file0/file0/../file0/file0/file0\x00', 0x80000001}, {0x1, './bus//file0/file0/../file0/file0/file0\x00', 0x6}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VMM_IOC_CREATE(r0, 0xca605601, &(0x7f0000000080)={0x10, 0x9, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000279000/0x2000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000331000/0x2000)=nil, 0xffffffffffff822d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x73}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xb}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x800000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffffff89}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xffffffff}], './file0\x00', 0x5, 0x9, 0x0, 0x8, [0x9, 0x7, 0x6, 0x4, 0x0, 0x3ff, 0x2, 0x8, 0xfff, 0x10003, 0x7, 0x401, 0x1, 0x9, 0x4, 0x8, 0x298, 0x5, 0x100, 0x5, 0x8, 0x7, 0x5, 0xffff, 0x1, 0x8, 0x7, 0xd, 0x5e5, 0x6, 0x0, 0xb677, 0x7f, 0x8, 0xa0b4, 0x2, 0x100, 0x2, 0x1, 0x4, 0x1, 0x9248, 0x100, 0xb, 0x10000, 0x51, 0xfffffffe, 0x81, 0xa, 0x206, 0xd19d, 0xf, 0x24, 0xabf4, 0x6, 0x3, 0x100, 0x4, 0x2, 0x2, 0xd1, 0xb, 0x4, 0xfffffffe, 0x5, 0x6, 0x7, 0x2, 0x7, 0x6, 0x7, 0xfffffff4, 0x4, 0xb370, 0x2, 0x0, 0x2, 0x3ff, 0xfba, 0x7, 0x0, 0x5, 0x7, 0x51, 0xfff, 0xb9, 0x7, 0x5, 0xf, 0x0, 0x1, 0xbe000000, 0x2, 0x1, 0x8, 0xfffffffb, 0x6, 0x7063, 0xa, 0x6, 0x7, 0xa23d, 0x80000001, 0x8, 0x8, 0x9, 0x2, 0x1, 0x6, 0xbc6, 0x5, 0x6, 0x1, 0x5, 0xfff, 0x2, 0x7fffffff, 0x4, 0xffff, 0x5, 0xfffffffc, 0xa000, 0x9, 0x3, 0x3ff, 0x1, 0xd7d9, 0x100, 0xb, 0x1, 0x9, 0x79, 0x2, 0x5, 0xa, 0xb, 0x3, 0x2, 0x5, 0x5, 0xd, 0x9, 0x8001, 0xf4a, 0x52f, 0x5, 0x2, 0x6, 0x5, 0x7a9f, 0xcf, 0x0, 0xea3c, 0x5, 0x8, 0x4, 0x0, 0x3, 0xffffffff, 0x2, 0x9, 0x4, 0x80, 0xf5a, 0x200, 0xfffffc8f, 0x2, 0x5, 0x5, 0x101, 0x0, 0xaf, 0x8, 0x4, 0x5, 0x2, 0x2, 0x6, 0x7fd, 0x7, 0x1, 0x7fff, 0x6, 0x800, 0x24, 0x9, 0x5, 0x8, 0x8, 0x64a, 0x5, 0x7c, 0x2204fbed, 0x0, 0x8, 0x1, 0x1, 0x800, 0x9, 0x75a1, 0x0, 0x0, 0x32, 0xe04d, 0x4, 0x2, 0x8, 0x100, 0x2, 0x8, 0x9, 0x9229, 0x0, 0xb0, 0x9, 0xe11, 0x891a74b, 0xd39, 0x2, 0x9, 0xe73, 0x6, 0x7, 0x9, 0x7fffffff, 0x5, 0x200, 0x1, 0xfffffff7, 0xc74c, 0xff, 0x8, 0x6, 0x4, 0x8a, 0x8, 0x2, 0x4774, 0x7, 0x8003, 0x7, 0x81, 0x3, 0x8, 0x1, 0x2, 0xb, 0x8e6, 0x5, 0x6, 0x80, 0x2, 0x7f, 0xe, 0x80000000, 0x4, 0x4, 0x9, 0x1, 0x1, 0x9, 0x180, 0x401, 0x7, 0x8, 0x81, 0x4c1, 0x3, 0x6, 0x4, 0xf7ffffff, 0x12000, 0x10001, 0x99, 0xba8, 0x1, 0xfffffffb, 0x9, 0x1, 0x200, 0x6b73, 0x0, 0x80, 0x8, 0xef2f, 0x9, 0x0, 0x0, 0xffffffd6, 0x80, 0x1b, 0xe2, 0x0, 0x0, 0x1, 0x1, 0x5, 0xffff, 0x99, 0x8, 0x8, 0xe, 0xfff, 0x3, 0x8, 0x3, 0x8, 0xfffffe00, 0x8000, 0x8, 0xd, 0x1, 0x6, 0x5, 0x0, 0x2, 0x401, 0xbf73, 0x3, 0x7ff, 0x0, 0x5, 0xf, 0x0, 0x4, 0xfffffffc, 0x5, 0xa, 0x6, 0x2, 0x800, 0x2, 0x6, 0x80000000, 0xed, 0x2, 0x7, 0x8, 0x0, 0x6, 0xfffffff9, 0x7, 0x9, 0xffbfffff, 0x0, 0x9, 0x1ff, 0xfa7, 0x6, 0x5, 0x9, 0x2c, 0x2, 0xffffffff, 0x7, 0x8, 0x80000000, 0x4ef69553, 0xf, 0xe80, 0x7fffffff, 0x5, 0x1, 0x1, 0x2, 0x61, 0xc, 0x9, 0x800, 0x2, 0x100, 0xfffffffa, 0x2, 0x1, 0x10000, 0x3, 0x51, 0x8, 0x0, 0x1, 0x5ed, 0x2, 0x9, 0x22, 0x2, 0x8001, 0xdf, 0x5, 0x6, 0x5, 0x4d7e, 0x5, 0x6, 0x62e4, 0x9, 0x7ff, 0x101, 0x5c, 0x93, 0x6, 0xe, 0xe14, 0x6, 0x8, 0x3, 0x101, 0x5, 0x8001, 0x81, 0x0, 0x1, 0x4, 0x1, 0xa, 0xfffffffa, 0x1000, 0xfff, 0x7fff, 0x75da, 0xd8e3, 0x1, 0xb1a, 0x827, 0x8, 0x81, 0x80000000, 0x9, 0x0, 0x4, 0xd, 0x7, 0xfffffffa, 0x1, 0x1, 0x3, 0x2, 0x50b, 0x10000, 0x5, 0x80e, 0x4, 0xd92, 0x4, 0x40, 0x3, 0xd59, 0x2, 0x4, 0xa53d, 0x8, 0x7, 0xb63, 0xd, 0x4, 0x2, 0x1, 0x5, 0x10, 0x8001, 0x0, 0x8, 0x4, 0x2, 0x9, 0x8001, 0x7fffffff, 0x9, 0x4, 0x8, 0x4, 0x8, 0xffffffff, 0x7f, 0x7fffffff, 0x101, 0x3, 0x7, 0x7, 0x8, 0x10000, 0xb, 0xbb5c, 0x3, 0xa, 0x80000001, 0x3, 0x132, 0x80000001, 0x5, 0xa, 0x9, 0x0, 0x80000000, 0x200, 0xa, 0xa0d, 0xff, 0x4, 0xcf71, 0x1e46c000, 0x9, 0xe, 0xb, 0xfffffffd, 0xf2, 0x7, 0x1000, 0x9, 0x9, 0x1000, 0x5, 0x80000001]}) r5 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r5, 0x80206999, &(0x7f00000001c0)) 250.080012ms ago: executing program 1 (id=579): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0xc028698d, &(0x7f0000000100)) (async) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000000000)) syz_emit_ethernet(0x52, &(0x7f00000000c0)={@broadcast, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "788ea6", 0x1c, 0x2c, 0x43, @rand_addr="cb697a653e336f0000005000", @mcast2, {[@fragment={0x3, 0x0, 0x3, 0x1, 0x0, 0xd, 0x66}], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0xfff7, 0x0, 0x2}}}}}}}) 249.697528ms ago: executing program 1 (id=580): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = setsid() r2 = socket$inet(0x2, 0x1, 0x0) fcntl$setown(r0, 0x6, r1) fcntl$setown(r2, 0x6, r1) close(r2) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r3 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r3, 0xc0106477, &(0x7f0000000240)={&(0x7f0000000140)='./file0\x00', r3}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="3901639b6174aaaaaaaaaabb86dd60062e0b"]) unveil(0x0, &(0x7f0000000400)='r\x00') 231.543456ms ago: executing program 1 (id=582): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) syz_open_pts() setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() setsockopt(0xffffffffffffffff, 0x1000000029, 0x33, &(0x7f0000000080)="031000086941e7c5ce5876778f181b12184c256b1ca6f583b03f959b5253027d08b90779da6a56ed10c81a19096dc2baca0179cdd9967a674820f89c4daa330fee01c76728490d1851d4ab60059f6a3f7cc45ac10500000078bbf169d0632f4ce57a508bc82acd00000000140e0343395b00737a4a00000084fc604fd6642787b31558a39b", 0x85) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8020697a, &(0x7f0000000100)) close(r0) r2 = syz_open_pts() ioctl$TIOCSETAF(r2, 0x802c7416, &(0x7f0000000080)={0x3ad, 0x9, 0x6, 0x8, "86ae5533b05b189ce928bb4089af7c94afa0cf03", 0x1, 0x9}) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socket(0x18, 0x3, 0x0) r3 = socket(0x2, 0x8002, 0x0) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r5 = socket(0x18, 0xc003, 0x3a) setsockopt(r5, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x1, 0x10, 0x5}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0x68, &(0x7f00000001c0)={{0x1c, 0x18, 0x3, 0x3, "ee67bdccca43a04960de3b06b20444a3", 0x3}, {0x1c, 0x18, 0x0, 0x6, "0000000000000000004000000000fe00", 0x7}, 0x3, [0x9d5ef45, 0x81, 0x1, 0x0, 0x1, 0xfffff0c0, 0x5, 0x1]}, 0x5c) closefrom(r4) 230.003177ms ago: executing program 1 (id=584): mknod(&(0x7f00000004c0)='./bus\x00', 0x4, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x800, 0x0) preadv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/104, 0x68}, {&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000200)=""/20, 0x14}], 0x5, 0x0) fsync(r0) mkfifoat(r0, &(0x7f00000002c0)='./bus\x00', 0xa1) r1 = socket(0x18, 0x2, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000140)={0x5, &(0x7f0000000440)=[{0x4, 0xff, 0x1, 0xfffffffa}, {0x7c, 0x7e, 0x1, 0x5}, {0x9b1c, 0x1, 0x0, 0xd}, {0x6, 0x79, 0x3, 0xd}, {0x2, 0xd4, 0x2, 0x4}]}) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd1b7c696602816a0000063000f8ff00000000000000000000000000fe800000000000000000000000249da70bc684dd7fb65a3e36a7b2154f25ca7f774397b3d5b30d8d570a289b7eb34266fb06ea6b246aaf68acfd3963a2fa3540c0d701ecae9ed3cbc15cf8a0aff2b7d85006c3ffc92c0921a6021b095c1095e5f659bc2bb5d8f634d389ce496a2b8c2a49bd2038506e34e422d9f17129d50e8d49546794d81c8617dfb60f0a274550d6da362bf731114427"]) ioctl$TIOCCBRK(r0, 0x2000747a) clock_settime(0xffffffffffffffff, &(0x7f0000000400)={0xfffffffffffffff7, 0x7ff}) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000140), 0x782, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) minherit(&(0x7f00002b4000/0x4000)=nil, 0x4000, 0x0) ioctl$SPKRTUNE(r3, 0x20005302, &(0x7f0000000080)={0xa2a5, 0x7fffffff}) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000000)="03000000", 0x4) setsockopt(r0, 0x2d, 0xb, &(0x7f0000000180)="00020000", 0x4) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCGSTATS(r2, 0x4008426f, &(0x7f0000000300)) shmget$private(0x0, 0x1000, 0x410, &(0x7f000056c000/0x1000)=nil) r4 = socket(0x2, 0x2, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x18}, 0x2, &(0x7f00000000c0)="99c5069e7a", &(0x7f0000000180)=0x5, 0x0, 0x0) r5 = open(&(0x7f0000000480)='./bus\x00', 0x400, 0x43) ioctl$FIONREAD(r4, 0xc0206923, &(0x7f00000001c0)) r6 = socket(0x2, 0x1000, 0x14) ioctl$FIONREAD(r6, 0x8040691a, &(0x7f00000001c0)) preadv(r5, 0x0, 0x0, 0x13ffffffc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x1, 0x2, r0}) 229.612186ms ago: executing program 0 (id=585): ioctl$WSMUXIO_REMOVE_DEVICE(0xffffffffffffffff, 0x80085762, &(0x7f0000000040)={0x1}) r0 = socket(0x18, 0xc003, 0x3a) setsockopt(r0, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x3, 0x1, 0x10, 0x5}, 0xc) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0x66, &(0x7f00000003c0)={0x0, 0x1, 0x10, 0x3}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0x68, &(0x7f00000001c0)={{0x1c, 0x18, 0x3, 0x3, "ee67bdccca43a04960de3b06b20444a3", 0x3}, {0x1c, 0x18, 0x0, 0x6, "0000000000000000004000000000fe00", 0x7}, 0x3, [0x9d5ef45, 0x81, 0x1, 0x0, 0x1, 0xfffff0c0, 0x5, 0x1]}, 0x5c) 136.887649ms ago: executing program 0 (id=586): openat$bpf(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) r0 = socket$inet(0x18, 0x3, 0x102) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x2, 0x7, '\x00', 0x4000fd}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000002c0)="630c00000000339a8c51f6f2efa24a85abdd612dd68e59adfebb93232d44372e9bc47e84f7c477d2", 0x28}], 0x1, 0x0}, 0x0) 136.175804ms ago: executing program 0 (id=587): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) read(r1, &(0x7f0000000100)=""/118, 0x76) ioctl$BIOCGHDRCMPLT(r1, 0x40044274, &(0x7f0000000180)) ioctl$BIOCFLUSH(r0, 0x20004268) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$FIOASYNC(r2, 0x8004667d, &(0x7f0000000040)=0x4) fcntl$setstatus(r2, 0x4, 0x80) syz_emit_ethernet(0x85, &(0x7f0000000380)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x77, 0x0, 0x6, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x0, 0x8}, {"2974ba9b77b521433f37903f4fc72fe4028fb2523bc2ff02b87a13eaa19fee99196d5d60c680f84028deb1dfbdcef3589ee8e7ccc93905a771980b273bfd8fc5c3066781cc2980fc0c510226e49655bb0cf2c2ead3338044774519"}}}}}}) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x3, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @udp={{0x1, 0x2, 0x8}}}}}}) syz_emit_ethernet(0x4b, &(0x7f0000000100)={@random="b905f0ffffff", @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x1, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @broadcast}, @generic="46b95328f98e86947f60312cb731318e2fed46646aae664d3ac9d93cc69636cec5ccb2958c52b8207a"}}}}) syz_emit_ethernet(0x1166, &(0x7f00000006c0)=ANY=[]) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x80) ftruncate(r3, 0x8531) sysctl$net_pipex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000240)=""/229, 0xe5}, {&(0x7f0000000140)=""/139, 0xffffffbc}], 0x2, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[@ANYBLOB]) 135.649883ms ago: executing program 0 (id=588): fstat(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstatat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6) r4 = getgid() setresgid(r1, r3, r4) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) setresgid(r4, r3, r5) r6 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$KDSETRAD(r6, 0x20004b43) semctl$IPC_SET(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240)={{r0, r5, r0, 0x0, 0x10, 0x5ac7, 0x0, 0x0, 0x4}, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x3}) r7 = shmget$private(0x0, 0x3000, 0x215, &(0x7f0000ffa000/0x3000)=nil) r8 = getegid() r9 = fcntl$getown(r6, 0x5) r10 = getsid(0xffffffffffffffff) shmctl$IPC_SET(r7, 0x1, &(0x7f00000002c0)={{r2, r4, r0, r8, 0x40, 0x4, 0x0, 0x0, 0x9}, 0xe, r9, r10, 0x6, 0x0, 0x7, 0x7ff, 0x4, 0x7, 0x8, 0x5}) setpgid(r10, r9) fchownat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', r2, r4, 0x4) shmat(r7, &(0x7f0000ffe000/0x1000)=nil, 0x2000) r11 = shmget$private(0x0, 0x1000, 0x18, &(0x7f0000ffd000/0x1000)=nil) shmat(r11, &(0x7f0000ffa000/0x2000)=nil, 0x2000) r12 = semget(0x2, 0x1, 0x1) semctl$GETNCNT(r12, 0x2, 0x3, &(0x7f0000000380)=""/246) setuid(r2) fsync(r6) r13 = accept$unix(0xffffffffffffff9c, &(0x7f0000000480)=@file={0x0, 0x0, ""/90}, &(0x7f0000000500)=0x5c) recvmmsg(r13, &(0x7f0000001980)={{&(0x7f0000000540)=@in6, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000580)=""/62, 0x3e}, {&(0x7f00000005c0)=""/42, 0x2a}, {&(0x7f0000000600)=""/74, 0x4a}, {&(0x7f0000000680)=""/172, 0xac}, {&(0x7f0000000740)=""/197, 0xc5}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/19, 0x13}], 0x7, &(0x7f0000001900)=""/112, 0x70}, 0xeecf}, 0x38, 0x0, 0x0) r14 = getegid() setegid(r14) r15 = getpid() fcntl$setown(r6, 0x6, r15) ioctl$DRM_IOCTL_MODE_GETPROPERTY(0xffffffffffffffff, 0xc04064aa, &(0x7f0000001b40)={&(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xfffffe01, 0x0, ""/32, 0x8, 0x8}) 130.482142ms ago: executing program 3 (id=589): r0 = socket(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) connect$inet(r0, 0x0, 0x0) 129.7241ms ago: executing program 0 (id=590): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x0, 0x80, 0x2, 0x2}, {0x24, 0x0, 0x2, 0x9}, {0x9b1e, 0x2, 0x4, 0xd}]}) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[]) 114.43113ms ago: executing program 2 (id=591): r0 = open(&(0x7f0000000140)='./file0\x00', 0x80000000000206, 0x80) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x1, 0xe, 0xffffffffffffff9c}) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r2, 0x80047460, &(0x7f0000000040)=0x2) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f00000002c0)='c\x00') 112.912281ms ago: executing program 3 (id=592): r0 = socket(0x18, 0x3, 0x5) sendto$inet6(r0, 0x0, 0x0, 0x2, &(0x7f0000000040)={0x1c, 0x18, 0x3, 0xc9e, "00000000000000000000000000000006", 0x1}, 0x1c) 109.755301ms ago: executing program 0 (id=593): r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (rerun: 32) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', r1, 0x1}) (async) r3 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DIOCGETSTATES(r1, 0xc0104419, &(0x7f0000000980)={0x8, &(0x7f0000000140)=[{0x0, ""/16, [{[@v4, @v4=@multicast2]}, {[@v4=@remote, @v6=@mcast2]}], {}, {}, @v6=@mcast1}, {0x0, ""/16, [{[@v4=@broadcast, @v4=@remote]}, {[@v6=@ipv4={""/10, ""/2, @remote}, @v6=@remote]}], {}, {}, @v4=@broadcast}, {0x0, ""/16, [{[@v6=@ipv4={""/10, ""/2, @loopback}]}, {[@v4=@broadcast, @v4=@local]}], {}, {}, @v6=@ipv4={""/10, ""/2, @broadcast}}, {0x0, ""/16, [{[@v6=@remote, @v6]}, {[@v6, @v4=@broadcast]}], {}, {}, @v4=@multicast2}, {0x0, ""/16, [{[@v6=@local, @v4=@local]}, {[@v4=@loopback, @v6=@local]}], {}, {}, @v4=@rand_addr}, {0x0, ""/16, [{[@v6=@mcast1, @v6=@empty]}, {[@v6=@empty]}], {}, {}, @v4=@local}, {0x0, ""/16, [{[@v6=@empty, @v6=@remote]}, {[@v4=@rand_addr, @v4=@loopback]}], {}, {}, @v6=@mcast1}, {0x0, ""/16, [{[@v4=@local, @v4=@broadcast]}, {[@v4=@multicast2, @v6=@mcast2]}], {}, {}, @v4=@loopback}]}) (async) r4 = openat$pf(0xffffffffffffff9c, &(0x7f00000009c0), 0x80, 0x0) ioctl$DIOCADDRULE(r4, 0xcd604404, &(0x7f0000000a00)={0x7, 0x6f2e, 0xffffff80, './file0\x00', './file0\x00', 0x0, "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"}) (async) ioctl$KDSETMODE(r1, 0x20004b0a, &(0x7f0000001780)=0x1) (async) sysctl$vfs_ffs(&(0x7f00000017c0), 0x3, &(0x7f0000001800)="9824fc265d24f008f2b40b46b8f3cc082beea085eacf41c6e86a41f743e35d6b3e9e8d4bbc4ed7ffaaf84fc25cf334ec750985b24ddde77391f31a8143f376f6df83ac907e0aa2472b2694902f50a03e4c8e6122773c012564f0847a6b647576f905c9f368315d7e40546cce5474bcdad2701e562e2a5f4dbe342a140a090b83ddcdc2a4d54b83cc60c71fb71c80420509caaf8f980e7c2c2686541a2a3e709094d681f7b8de2034730e721c7d2c5f36c11f1a731c1c909cec0e5ce596ca7a5aeb7779440636133b82f2ba7d3f5fc39fe6733c8dc6fba5e4d14b4463f28408fae25c49ca42ecd2a30d5876853de5e767afb4", &(0x7f0000001900)=0xf2, &(0x7f0000001940)="8f5309c1fd900d97cbc21fd0dae24770fa51e47a016e2dfd96a70a3d5d1e58c7266ef5650d172693163d4993d3cd17f5982de76d7fc2686075acad2079d79a5ae7d786af1c0bc96d6ead6792ef9e189a84ab9d28c90ee12191e836be50ecbaf3f97d08b79d5b3f989ece7057ec68f14c58794c87c2b47fd1e6ec936ac27832139c121ef2a7e8681b72f9f8ec368c74af63e53008fc9d718809e58bec8b898f553458d562", 0xa4) (async) ioctl$WSDISPLAYIO_GETSCREENTYPE(r1, 0xc028575d, &(0x7f0000001a00)={0x10a6, 0x1, './file0\x00', 0x94e7, 0x9, 0x1, 0xf000000}) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000001a40), 0x20000, 0x0) ioctl$DIOCSETSYNCOOKIES(r5, 0xc0014462, &(0x7f0000001a80)=0x1) ioctl$DIOCSTOP(r5, 0x20004402) ioctl$WSDISPLAYIO_SMODE(r1, 0x8004574c, &(0x7f0000001ac0)=0x1) r6 = openat$pf(0xffffffffffffff9c, &(0x7f0000001b00), 0x80, 0x0) ioctl$DIOCGETRULESETS(r6, 0xc444443a, &(0x7f0000001b40)={0xfffff1a5, './file0\x00', './file0\x00'}) (async, rerun: 64) ioctl$DIOCRSETTFLAGS(r2, 0xc450444a, &(0x7f0000001fc0)={{'./file0\x00', './file0\x00', 0x0, 0x1}, 0x0, 0x0, 0x0, 0x2, 0xdc, 0x5, 0x6, 0x54, 0x4}) (async, rerun: 64) flock(0xffffffffffffff9c, 0x0) (async, rerun: 32) ioctl$DIOCSTART(r4, 0x20004401) (async, rerun: 32) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) (async) ftruncate(r3, 0x3) r7 = open(&(0x7f0000002440)='./file0\x00', 0x10000, 0x109) ioctl$DIOCSETSYNCOOKIES(r7, 0xc0014462, &(0x7f0000002480)=0x1) ioctl$DIOCSETDEBUG(r5, 0xc0044418, &(0x7f00000024c0)=0x1) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000002580)={0x9, &(0x7f0000002500)=[{0x66b, 0x9, 0x2, 0x40}, {0x0, 0x2, 0x6, 0x4}, {0x79, 0x8, 0x5, 0x10001}, {0x5c, 0xa, 0x7, 0xff}, {0x5, 0x9, 0x2, 0x2}, {0x8, 0x1d, 0x4, 0x7}, {0x3, 0x8, 0x6, 0x2b}, {0x1, 0x7, 0x9, 0x3}, {0x8, 0x8, 0x6, 0xfffffe00}]}) ioctl$DIOCXCOMMIT(r1, 0xc0104452, &(0x7f0000003200)={0x3, 0x639, &(0x7f00000025c0)=[{0x1, './file0\x00', 0xc4}, {0x0, './file0\x00'}, {0x0, './file1\x00'}]}) dup(r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003240)) (async) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) sysctl$vfs_ffs(&(0x7f0000003280)={0xa, 0x1, 0xf}, 0x3, &(0x7f00000032c0)="1cc5329cbcb5dcd3e117b29a8ee384f563e456e22ca89a", &(0x7f0000003300)=0x17, &(0x7f0000003340)="e2743e0cedbd16691b43be5822db6db107c72e128fa257df23b3eff6c75bc4ea3e0742cc73dd0f0ccab4f817c05e186e1789c067cc632c9f9e7849f98d179bc6a0aa1bd6ceaaf71ee1bdfcc9ad0d53ac2a680820fa7ee8dc5bb36eb48f1f1bc06db6d3c01d9a8b48bf249b3066c41970a0e71ced9d6f49c496cc1c683b55f3a8cafe6b50fa1e72206946db89fd14e1e2b971582257ce2ad77ab06a", 0x9b) 44.895448ms ago: executing program 3 (id=594): sysctl$kern(0x0, 0x0, &(0x7f0000000180)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa43029cb73dbf1a1f7a2065ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031faef03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8", &(0x7f0000000080)=0x65, &(0x7f0000000280)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496852a9ad15fa4b0bc2c6ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b5", 0xee) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) 5.692348ms ago: executing program 7 (id=595): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f5) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000100)='./file1\x00') fchown(r0, 0x0, 0x0) acct(&(0x7f00000000c0)='./file1\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 5.052617ms ago: executing program 1 (id=596): r0 = kqueue() ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x4, [{0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x3}, {}, {0x3, 0x8}, {}, {0x0, 0x5}, {0x1, 0xffffffff}, {}, {0x0, 0x40}, {0x1, 0x1ff}, {0x3}, {0x15b03984a1547ab4, 0x1000}, {0x2, 0x4}, {}, {0x2, 0x2}, {0x2}, {0x3, 0x5}, {0x0, 0x10000800}, {0x5}, {0x2}, {0x5, 0x5}, {0x2, 0x400}, {}, {0x2}, {0x2, 0xfffffffd}, {0x3}, {0x3, 0xfffffffa}, {0x3, 0x9}, {0x2, 0x4}, {0x1}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000580)={0x0, &(0x7f0000000540)}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x33, 0x0, 0x37) r2 = openat$pci(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) fcntl$setstatus(r2, 0x4, 0x8) kevent(r0, 0x0, 0x9, 0x0, 0x100, 0xfffffffffffffffe) 1.155834ms ago: executing program 3 (id=597): syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000008ff9078ac1400aaac1400ff4e214e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="98c900ff9078000829816fcb7e5693303472f03db508036c0ded4751b0b985758c8d69beca7831b8350606a642107898863031"]) open(&(0x7f0000000040)='./file0\x00', 0x9cab835cfdc52675, 0x10) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r1 = socket(0x6, 0x3, 0x3) r2 = syz_open_pts() sendmsg$unix(r0, 0x0, 0x0) execve(0x0, &(0x7f00000002c0)=[&(0x7f0000000100)='tap'], 0x0) r3 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r3, 0xc028698b, &(0x7f0000000100)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendto$unix(r0, &(0x7f0000000100)="47c5479ee7e4652bfcbfbd63036408a2d7940ffdc44697720d0bb4561878a0abffc8f292c72b34beec169e5de31fff45f67601489ac88505f31b1b1ab59d7107865abdc4f6586669cafb4cd3294f651843b54df8217b1b2a18661c3442a35c0f9da5a6d88988ef1dc3bf5f4141060e2dc26d41e6c1164ddaef2230e2f98dffcfcc31774af6180e9599577011ce81d71e", 0x90, 0x2, &(0x7f00000001c0)=@file={0xe, 0x0, './file0\x00'}, 0xa) unveil(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='c\x00') sysctl$kern(&(0x7f0000000240)={0x1, 0x4b}, 0x2, &(0x7f0000000280), 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000240)={0x1, 0x30}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$FIOASYNC(r2, 0x80047460, &(0x7f00000000c0)=0x4) r4 = syz_open_pts() setreuid(0xee00, 0x0) r5 = getuid() setreuid(0xee00, r5) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f0000000300)=0x5) ioctl$VMM_IOC_CREATE(r0, 0xca605601, &(0x7f0000000340)={0x10, 0x1, [{&(0x7f00005f7000/0x3000)=nil, &(0x7f00001d6000/0x4000)=nil, 0x4}, {&(0x7f0000153000/0x1000)=nil, &(0x7f00002a3000/0x3000)=nil, 0x8}, {&(0x7f00006c5000/0x2000)=nil, &(0x7f00002aa000/0x2000)=nil, 0x34b}, {&(0x7f000052c000/0x4000)=nil, &(0x7f0000712000/0x1000)=nil, 0xd2}, {&(0x7f000012d000/0x12000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0xfffffffffffffff9}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000290000/0x4000)=nil, 0x3}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xc094}, {&(0x7f00002df000/0x1000)=nil, &(0x7f0000220000/0x3000)=nil, 0x3}, {&(0x7f0000245000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0xf}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f000034b000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, 0xd}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6}, {&(0x7f0000664000/0x2000)=nil, &(0x7f0000162000/0x1000)=nil, 0x6}, {&(0x7f000057a000/0x4000)=nil, &(0x7f00006cd000/0x4000)=nil, 0x8}, {&(0x7f000049d000/0x1000)=nil, &(0x7f00002db000/0x1000)=nil, 0x4}, {&(0x7f00004e0000/0x2000)=nil, &(0x7f0000360000/0x3000)=nil, 0x10001}], './file0/file0\x00', 0x2, 0x7a42, 0xf, 0xffffff00, [0x8, 0x2d, 0x3, 0x1, 0xa, 0x5, 0x3, 0x8, 0xff, 0x9, 0x8, 0xff, 0x800, 0x0, 0x7fff, 0x9, 0x0, 0x9, 0xb0, 0x9, 0xc9c9, 0x8, 0x0, 0xd, 0x10000, 0x40, 0x9, 0x0, 0xfde, 0xdd67, 0x1, 0x6, 0x3, 0x6, 0x0, 0xfff, 0x7, 0xcc2, 0x3, 0x0, 0x4, 0x7f, 0x0, 0x9, 0x4, 0x3, 0x10000, 0x4, 0x1ff, 0x1, 0x5e, 0x743, 0x6, 0x3, 0x7, 0x8, 0x40, 0x200, 0xffc00000, 0xfffffff8, 0x1, 0x5, 0x3000000, 0x9, 0x75f39aee, 0x9, 0x4, 0x8, 0x6e15, 0x8, 0x0, 0xe4b, 0x8, 0x4, 0xd56, 0x1, 0x4, 0xfffffff6, 0x9, 0xca4, 0x4, 0x6, 0x48, 0x1, 0x6, 0x3d, 0x80000000, 0x7, 0x9, 0x0, 0x2, 0x80000001, 0xff, 0x9, 0x1, 0x4e, 0x5, 0x0, 0x76bb, 0xe, 0x1, 0x4, 0x80000001, 0xbe, 0x3ff, 0x7, 0x6, 0x4, 0x0, 0x9a71, 0x2, 0x2, 0x4, 0x3, 0x8001, 0xd67d, 0x3, 0x0, 0x72, 0x7, 0x0, 0x2, 0x5, 0x0, 0xffffffff, 0x4, 0x0, 0xcf, 0x7, 0x3, 0x0, 0x80, 0x3, 0x8, 0x3, 0x5, 0x3, 0x2, 0x2, 0x6ba, 0x7, 0x5, 0xad, 0x7, 0x6, 0x1, 0x10001, 0x9, 0x219, 0xfffffffc, 0x5, 0x8, 0x71f, 0x1, 0x92, 0x8, 0x8000, 0x0, 0x9, 0x4, 0x8, 0x5ad4, 0x2, 0x10, 0x3, 0x80, 0xa4000, 0x3, 0x7, 0x5, 0x4, 0x1, 0x4, 0x5, 0x45f, 0x80000001, 0xfffffffb, 0x9522, 0x71af, 0x3, 0x5, 0xbd, 0x2, 0x6, 0xc853, 0x3, 0x6, 0x1, 0xfdc3, 0x6, 0x3, 0x0, 0x7, 0x7, 0x4, 0x1, 0x4, 0x8, 0xff, 0x4, 0x3, 0x4, 0x6, 0x2, 0xd, 0x6142df3d, 0x40, 0x7fff, 0x800, 0xffffffff, 0x40, 0x5, 0x80000000, 0x9, 0x507, 0x6, 0x6, 0x8, 0x1, 0x6ee52fd0, 0x5, 0x9, 0x7, 0x1, 0x0, 0x7d, 0x9, 0x8, 0x6de8, 0x400, 0x0, 0x3, 0x8, 0x2, 0x9, 0xf9, 0x9, 0x2, 0x1, 0x4, 0x46, 0x0, 0x8, 0x2, 0xffff, 0x1, 0x4c1, 0x1, 0x5b, 0x4, 0x1, 0x3, 0x8, 0x5, 0x8, 0x4, 0x0, 0x225b, 0x3, 0x81, 0x3e10, 0x401, 0x8, 0x8, 0x3, 0x1000, 0x5, 0x6, 0xa, 0xd6d, 0x4, 0xc00000, 0xf169, 0x888, 0xd4e5, 0x800, 0x6, 0xfffffa7d, 0xb02, 0x5, 0x4, 0x7, 0x3, 0x41, 0xfffff000, 0x1000, 0xffffffff, 0x3fd1, 0x0, 0x8, 0xffff3c54, 0x7, 0xac, 0x8, 0xbc, 0x5, 0x2, 0x5, 0x6, 0x4, 0x3, 0x2, 0x2, 0x1, 0xfffff07e, 0xe, 0x9, 0x6, 0x9, 0x83, 0x81, 0x7, 0xcf, 0x7, 0xf7c4, 0xadf, 0x10, 0x402, 0x7f, 0x10000, 0x1973, 0xd8f, 0x2, 0x7, 0x9, 0x7ff, 0x800, 0x8, 0x8, 0x7d, 0x1ff, 0x8, 0x101, 0x0, 0x6, 0xfffffff1, 0x80, 0x1, 0x80, 0x9, 0x3, 0x214, 0x4, 0x3, 0x1, 0x2, 0x9a, 0x8001, 0x80000000, 0xd, 0xfffffffc, 0xfffffffc, 0x7, 0x1, 0x3, 0x7, 0xff, 0xd, 0xb, 0x10001, 0x8, 0xc, 0x2650, 0x0, 0x3, 0x6, 0xf8, 0x4a2, 0xfffffffd, 0x8, 0x2e, 0x68b, 0xade, 0x3, 0x4, 0x4, 0x7, 0x1, 0x4f, 0xfffffffa, 0x9, 0x2, 0x1, 0x6, 0x3, 0xa, 0x40, 0x3, 0x3392, 0x4, 0x23ed, 0x5, 0x7, 0xca60, 0x3, 0x9, 0x5, 0xbb, 0x10001, 0x7, 0x769, 0x4, 0x8, 0xef, 0x56, 0xffff, 0xe, 0xff, 0x101, 0x8, 0x2, 0x7, 0x7, 0xc, 0x10, 0x1, 0x81, 0x0, 0x8001, 0x2, 0xff, 0xd, 0x6, 0x5800, 0x6, 0x6, 0x2, 0xb, 0x2c99, 0x7ff, 0x2, 0x0, 0x1, 0x1, 0x8, 0x7b, 0x2, 0x58, 0x7, 0x1, 0x8, 0x7, 0x8, 0x0, 0x3, 0x4, 0xfffffff9, 0x0, 0x8, 0x1975, 0x5, 0x100, 0x7, 0x3, 0xfffffff7, 0x80000000, 0x9, 0x4, 0x100, 0x1, 0x3, 0x1800000, 0x7ff, 0x8, 0x9, 0x4, 0x2, 0x1ff, 0x2, 0x6, 0xff, 0xf, 0x9, 0x0, 0x4, 0x1, 0x6, 0xfffff14e, 0x7, 0x2, 0x8, 0x1, 0x7, 0xe95d, 0x1, 0x10, 0x7ff, 0x7, 0x3, 0x6, 0x81, 0x4, 0x9, 0x592ce19b, 0x8, 0x8, 0x100, 0xffffb37c, 0x2, 0x2f, 0x40, 0x40, 0x8, 0x765, 0xfffffff7, 0x3, 0x3, 0x9, 0xd1ca, 0x0, 0x7ff, 0xfffffe00]}) sendto$unix(r1, &(0x7f00000014c0)="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", 0x1f1, 0xd, 0x0, 0x0) kqueue() 0s ago: executing program 1 (id=598): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000000)={0xc6, 0xe3, 0xffffffffffffff9c}) mkdirat(r0, &(0x7f00000000c0)='./file1\x00', 0xa7210e10bc3c9de9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x70e, 0x0) (async) r3 = getppid() fcntl$setown(r2, 0x6, r3) (async) r4 = getpgid(r3) (async, rerun: 32) r5 = getsid(r3) (rerun: 32) kill(r5, 0xb) (async) fcntl$setown(r2, 0x6, r4) (async) fchdir(r1) (async, rerun: 64) getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000140), 0xc) (async, rerun: 64) r6 = fcntl$dupfd(r1, 0xc, r0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r6, 0xc01864c2, &(0x7f0000000040)={0x0, 0x1, r0, 0x0, 0x2}) sysctl$hw(&(0x7f0000000180)={0x6, 0xa}, 0x2, &(0x7f00000001c0)="88856bd74e2063e8829328e4abce05e1ccd4e8b058c686c4d78aacd099883585a9ee6a31390c0e1adf9115d389b4866808afc4f3c7f387c0af2192f78ebd69b7132113fdafe25402c480426ce959d06238142ae084c4aeff28750abf5e90fff8e3c36e2642c6c933a64c96e6ce2540ee032ea283232a30d677a464668b3fd08a796b48c32fac6d39f7f1d424c101ce582ea23c388dacf4bb8bcb47fa10ed1a9a0b5684a1875e85cdb42cf7f02c8f51d7a80f31a55da1432836e9fe712d691c6a2279f90a3b8e1f3976e32830b9f21f7355a276ee41762f082ce0dc1c5cca170da458bbd2d81119da", &(0x7f00000002c0)=0xe8, &(0x7f0000000300)="58835948946377abc244f76f4a3a8ab56a6b308c1f", 0x15) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.46' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error Data modified on freelist: word -35183653057176 of object 0xffff800000c57330 size 0x10 previous type ifgroup (invalid addr 0x2cc0853c8f5fdbb4) kernel: protection fault trap, code=0 Stopped at malloc+0x855: movq 0x8(%rbx),%r14 ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> show kasan No such command ddb> trace malloc(10,62,2) at malloc+0x855 amap_alloc1(20,2,0) at amap_alloc1+0x291 amap_alloc(20000,2,0) at amap_alloc+0xad amap_copy(ffffee806d8422f8,ffffee807ebf5580,2,0,d004f58000,d004f58001) at amap_copy+0x6ac uvm_fault_check(ffff80003c919b10,ffff80003c919b48,ffff80003c919b80,0) at uvm_fault_check+0x457 uvm_fault(ffffee806d8422f8,d004f58000,0,2) at uvm_fault+0xe6 upageflttrap(ffff80003c919cb0,d004f58ef8) at upageflttrap+0xa0 usertrap(ffff80003c919cb0) at usertrap+0x413 recall_trap() at recall_trap+0x8 end trace frame: 0x0, count: -9 ddb> show registers rdi 0x2cc0fac38f5fdbc4 rsi 0x7fff00000070 rbp 0xffff80003c9197b0 rbx 0x2cc0853c8f5fdbb4 rdx 0 rcx 0x4 rax 0xffff80003c997a20 r8 0xd004f58000 r9 0xd004f58001 r10 0 r11 0x36362fb39074f04d r12 0x7fff00000070 r13 0xffffffff839ca8c0 kmemstats+0x1880 r14 0xa30c333 __kernel_phys_end+0x670c333 r15 0x2cc0fac38f5fdbc4 rip 0xffffffff816fe505 malloc+0x855 cs 0x8 rflags 0x10206 __ALIGN_SIZE+0xf206 rsp 0xffff80003c9196f0 ss 0 malloc+0x855: movq 0x8(%rbx),%r14 ddb> show proc PROC (syz-executor) tid=398356 pid=7616 tcnt=2 stat=onproc flags process=0 proc=4000000 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c8e3248,0xffffffff83a81720 process=0xffff800045ff9b18 user=0xffff80003c914000, vmspace=0xffffee806d8422f8 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 7616 431832 98496 0 2 0 0 syz-executor * 7616 398356 98496 0 7 0 0x4000000 syz-executor 89804 345542 47268 0 2 0 0 syz-executor 89804 397784 47268 0 3 0 0x4000080 fsleep syz-executor 88413 64305 4182 0 2 0 0 syz-executor 88413 158481 4182 0 3 0 0x4000000 biowait syz-executor 73884 176132 42400 0 2 0 0 syz-executor 73884 327128 42400 0 3 0 0x4000080 fsleep syz-executor 73884 408950 42400 0 3 0 0x4000080 fsleep syz-executor 26291 250809 67193 0 2 0 0 syz-executor 26291 32977 67193 0 2 0 0x4000000 syz-executor 56022 303553 53451 0 3 0 0x80 nanoslp syz-executor 56022 79266 53451 0 3 0 0x4000080 lockf syz-executor 56022 482376 53451 0 3 0 0x4000080 fsleep syz-executor 19289 256231 18378 0 3 0 0x80 nanoslp syz-executor 19289 358493 18378 0 3 0 0x4000088 kqread syz-executor 19289 345417 18378 0 3 0 0x4000080 fsleep syz-executor 20706 12395 13154 0 3 0 0x80 nanoslp syz-executor 20706 129559 13154 0 3 0 0x4000080 kqpoll syz-executor 20706 507417 13154 0 3 0 0x4000080 fsleep syz-executor 65755 268748 0 0 3 0x14000 0x280 nfsidl nfsio 90307 248811 0 0 3 0x14000 0x280 nfsidl nfsio 92673 295970 0 0 3 0x14000 0x280 nfsidl nfsio 76283 244527 0 0 3 0x14000 0x280 nfsidl nfsio 47290 387799 0 0 3 0x14000 0x280 nfsidl nfsio 86124 83324 0 0 3 0x14000 0x280 nfsidl nfsio 68402 122833 0 0 3 0x14000 0x280 nfsidl nfsio 86879 85727 0 0 3 0x14000 0x280 nfsidl nfsio 40437 43816 0 0 3 0x14000 0x280 nfsidl nfsio 35606 508826 0 0 3 0x14000 0x280 nfsidl nfsio 17824 257128 0 0 3 0x14000 0x280 nfsidl nfsio 65520 283620 0 0 3 0x14000 0x280 nfsidl nfsio 11111 226103 0 0 3 0x14000 0x280 nfsidl nfsio 92450 60597 0 0 3 0x14000 0x280 nfsidl nfsio 11911 468611 0 0 3 0x14000 0x280 nfsidl nfsio 35225 269114 0 0 3 0x14000 0x280 nfsidl nfsio 68935 141426 0 0 3 0x14000 0x280 nfsidl nfsio 19712 336485 0 0 3 0x14000 0x280 nfsidl nfsio 45998 342585 0 0 3 0x14000 0x280 nfsidl nfsio 39639 444458 0 0 3 0x14000 0x280 nfsidl nfsio 4182 23966 82737 0 3 0x2 0x80 nanoslp syz-executor 53451 494675 82737 0 3 0x2 0x80 nanoslp syz-executor 13154 44503 82737 0 3 0x2 0x80 nanoslp syz-executor 18378 266033 82737 0 3 0x2 0x80 nanoslp syz-executor 47268 251318 82737 0 3 0x2 0x80 nanoslp syz-executor 67193 203645 82737 0 3 0x2 0x80 nanoslp syz-executor 98496 8141 82737 0 3 0x2 0x80 nanoslp syz-executor 42400 286363 82737 0 3 0x2 0x80 nanoslp syz-executor 82737 410040 99140 0 3 0x2 0x80 kqread syz-executor 99140 112730 96607 0 3 0x100002 0x88 sigsusp ksh 96607 472215 5776 0 3 0x10 0x88 kqread sshd-session 5776 124716 15986 0 3 0x12 0x80 kqread sshd-session 70486 95280 1 0 3 0x100003 0x80 ttyin getty 15986 492173 1 0 3 0 0x88 kqread sshd 49406 405133 70095 73 3 0x1100010 0x80 kqread syslogd 70095 373617 1 0 3 0x100002 0x80 sbwait syslogd 14900 20219 1 0 3 0x100000 0x80 kqread resolvd 34525 192327 94368 77 3 0x100012 0x80 kqread dhcpleased 29130 505566 94368 77 3 0x100012 0x80 kqread dhcpleased 94368 259100 1 0 3 0 0x80 kqread dhcpleased 3201 241864 0 0 3 0x14000 0x200 bored smr 1553 490498 0 0 2 0x14000 0x200 zerothread 73062 271128 0 0 3 0x14000 0x200 aiodoned aiodoned 92982 362418 0 0 3 0x14000 0x200 syncer update 71131 304201 0 0 3 0x14000 0x200 cleaner cleaner 5439 25053 0 0 3 0x14000 0x200 reaper reaper 15472 295989 0 0 3 0x14000 0x200 pgdaemon pagedaemon 67215 94713 0 0 3 0x14000 0x200 bored viomb 8071 463278 0 0 3 0x14000 0x40000200 acpi0 acpi0 65346 173402 0 0 3 0x14000 0x200 bored softnet0 29079 32938 0 0 3 0x14000 0x200 smrbar systqmp 38580 278615 0 0 3 0x14000 0x200 bored systq 77202 341394 0 0 3 0x14000 0x40000200 tmoslp softclock 29254 176683 0 0 3 0x14000 0x40000200 idle0 1 445254 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10010000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11052 12174K 12725K 166960K 12977 0 pcb 17 16K 21K 166960K 283 0 rtable 183 6K 6K 166960K 479 0 pf 26 12K 19K 166960K 91 0 ifaddr 30 5K 7K 166960K 59 0 ifgroup 38 1K 2K 166960K 80 0 sysctl 3 1K 9K 166960K 9 0 counters 30 17K 18K 166960K 94 0 ioctlops 0 0K 4K 166960K 172 0 iov 0 0K 28K 166960K 13 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1419 89K 89K 166960K 1849 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 9K 166960K 13 0 VM map 2 1K 1K 166960K 2 0 sem 12 0K 0K 166960K 14 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 18 65K 89K 166960K 728 0 sigio 0 0K 0K 166960K 2 0 proc 60 59K 75K 166960K 537 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 31 0 in_multi 66 4K 7K 166960K 105 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 105 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 217 970K 970K 166960K 217 0 exec 0 0K 1K 166960K 451 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 226 143K 162K 166960K 7836 0 UVM aobj 15 2K 2K 166960K 16 0 pinsyscall 39 78K 93K 166960K 1828 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 6 0 NDP 8 0K 2K 166960K 39 0 temp 51 9110K 9173K 166960K 18740 0 kqueue 16 26K 30K 166960K 138 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 48 0 45 1 0 1 1 0 8 0 rtentry 136 161 0 83 4 0 4 4 0 8 0 unpcb 144 160 0 145 1 0 1 1 0 8 0 syncache 336 10 0 10 1 0 1 1 0 8 1 tcpcb 736 208 0 204 7 0 7 7 0 8 6 arp 96 18 0 6 1 0 1 1 0 8 0 inpcb 328 872 0 863 10 1 9 10 0 8 7 ip6q 72 1 0 0 1 0 1 1 0 8 0 nd6 112 24 0 9 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 59 0 59 1 0 1 1 0 8 1 pppxif 1416 47 0 47 1 0 1 1 0 8 1 pfstscr 40 5 0 0 1 0 1 1 0 8 0 pffrag 232 17 0 12 1 0 1 1 0 482 0 pffrnode 88 17 0 12 1 0 1 1 0 8 0 pffrent 40 51 0 46 1 0 1 1 0 8 0 pfrktable 1344 1 0 0 1 0 1 1 0 8 0 pfstlim 224 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 2 0 0 1 0 1 1 0 8 0 pftag 88 4 0 0 1 0 1 1 0 8 0 pfqueue 320 1 0 1 1 0 1 1 0 8 1 pfstitem 24 6 0 0 1 0 1 1 0 8 0 pfstkey 128 6 0 0 1 0 1 1 0 8 0 pfstate 384 3 0 0 1 0 1 1 0 8 0 pfrule 1360 4 0 3 1 0 1 1 0 8 0 rttmr 136 48 0 48 1 0 1 1 0 8 1 art_heap8 4096 2 0 0 2 0 2 2 0 8 0 art_heap4 256 795 0 468 29 0 29 29 0 8 4 art_table 40 797 0 468 5 0 5 5 0 8 0 art_node 32 161 0 87 1 0 1 1 0 8 0 sysvmsgpl 40 26 0 23 1 0 1 1 0 8 0 semupl 112 1 0 1 1 0 1 1 0 8 1 semapl 72 12 0 2 1 0 1 1 0 8 0 shmpl 112 13 0 1 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 2523 0 1071 92 0 92 92 0 8 0 ffsino 256 2523 0 1071 92 0 92 92 0 8 0 nchpl 144 3435 0 1742 64 0 64 64 0 8 0 vnodes 216 2949 0 0 164 0 164 164 0 8 0 namei 1024 10450 0 10450 1 0 1 1 0 8 1 kstatmem 264 47 0 30 2 0 2 2 0 8 0 scsiplug 72 2 0 2 1 0 1 1 0 8 1 scxspl 216 11766 0 11765 5 0 5 5 1 8 4 plimitpl 152 207 0 187 1 0 1 1 0 8 0 sigapl 424 1044 0 981 8 0 8 8 0 8 0 knotepl 120 24441 0 24388 10 0 10 10 0 8 7 kqueuepl 184 156 0 144 1 0 1 1 0 8 0 pipepl 304 173 0 112 5 0 5 5 0 8 0 fdescpl 448 1010 0 980 5 0 5 5 0 8 1 filepl 120 4539 0 4222 11 0 11 11 0 8 1 lockfpl 104 305 0 299 2 0 2 2 0 8 1 lockfspl 48 141 0 136 1 0 1 1 0 8 0 sessionpl 144 43 0 35 1 0 1 1 0 8 0 pgrppl 48 57 0 41 1 0 1 1 0 8 0 ucredpl 104 522 0 511 1 0 1 1 0 8 0 zombiepl 144 981 0 981 1 0 1 1 0 8 1 processpl 1152 1044 0 981 5 0 5 5 0 8 0 procpl 664 1803 0 1728 7 0 7 7 0 8 0 sosppl 176 4 0 4 1 0 1 1 0 8 1 sockpl 552 1091 0 1064 10 0 10 10 0 8 7 mcl64k 65536 156 0 155 1 0 1 1 0 8 0 mcl16k 16384 41 0 41 1 0 1 1 0 8 1 mcl12k 12288 7 0 7 1 0 1 1 0 8 1 mcl9k128 9344 15 0 15 1 0 1 1 0 8 1 mcl8k 8192 108 0 107 1 0 1 1 0 8 0 mcl4k 4096 3530 0 3480 14 0 14 14 0 8 7 mcl2k2 2112 2 0 2 1 0 1 1 0 8 1 mcl2k 2048 511 0 509 3 0 3 3 0 8 2 mextrefs 64 496 0 496 1 0 1 1 0 8 1 mtagpl 96 5 0 4 1 0 1 1 0 8 0 mbufpl 256 11002 0 10863 16 0 16 16 0 8 4 bufpl 272 3791 0 106 246 0 246 246 0 8 0 anonpl 24 137075 0 133789 36 0 36 36 0 187 10 amapchunkpl 152 25973 0 25488 31 0 31 31 0 158 11 amappl16 200 1916 0 1883 7 0 7 7 0 8 4 amappl15 192 3 0 3 1 0 1 1 0 8 1 amappl14 184 502 0 501 1 0 1 1 0 8 0 amappl13 176 113 0 103 1 0 1 1 0 8 0 amappl12 168 1275 0 1246 2 0 2 2 0 8 0 amappl11 160 6 0 6 1 0 1 1 0 8 1 amappl10 152 55 0 45 1 0 1 1 0 8 0 amappl9 144 271 0 270 1 0 1 1 0 8 0 amappl8 136 94 0 93 1 0 1 1 0 8 0 amappl7 128 136 0 125 1 0 1 1 0 8 0 amappl6 120 153 0 151 1 0 1 1 0 8 0 amappl5 112 93 0 84 1 0 1 1 0 8 0 amappl4 104 258 0 242 1 0 1 1 0 8 0 amappl3 96 5174 0 5062 4 0 4 4 0 8 1 amappl2 88 523 0 470 2 0 2 2 0 8 0 amappl1 80 12546 0 11990 13 0 13 13 0 8 1 amappl 88 7084 0 6919 5 0 5 5 0 92 0 uvmvnodes 80 121 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 1 0 1 1 0 8 1 dma128 128 253 0 253 1 0 1 1 0 8 1 dma64 64 7 0 7 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 30 0 29 1 0 1 1 0 8 0 aobjpl 72 15 0 1 1 0 1 1 0 8 0 uaddrrnd 24 1010 0 980 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 1010 0 980 1 0 1 1 0 8 0 vmmpekpl 168 9195 0 9159 2 0 2 2 0 8 0 vmmpepl 168 68641 0 66813 86 0 86 86 0 357 5 vmsppl 368 1009 0 980 4 0 4 4 0 8 1 rwobjpl 40 19685 0 18696 11 0 11 11 0 8 0 pdppl 4096 2026 0 1960 100 34 66 78 0 8 0 pvpl 32 422493 0 413482 112 0 112 112 0 265 23 pmappl 216 1009 0 980 2 0 2 2 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 622 0 34 17 0 17 17 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace malloc(10,62,2) at malloc+0x855 amap_alloc1(20,2,0) at amap_alloc1+0x291 amap_alloc(20000,2,0) at amap_alloc+0xad amap_copy(ffffee806d8422f8,ffffee807ebf5580,2,0,d004f58000,d004f58001) at amap_copy+0x6ac uvm_fault_check(ffff80003c919b10,ffff80003c919b48,ffff80003c919b80,0) at uvm_fault_check+0x457 uvm_fault(ffffee806d8422f8,d004f58000,0,2) at uvm_fault+0xe6 upageflttrap(ffff80003c919cb0,d004f58ef8) at upageflttrap+0xa0 usertrap(ffff80003c919cb0) at usertrap+0x413 recall_trap() at recall_trap+0x8 end trace frame: 0x0, count: -9 ddb> machine ddbcpu 1 No such command ddb> trace malloc(10,62,2) at malloc+0x855 amap_alloc1(20,2,0) at amap_alloc1+0x291 amap_alloc(20000,2,0) at amap_alloc+0xad amap_copy(ffffee806d8422f8,ffffee807ebf5580,2,0,d004f58000,d004f58001) at amap_copy+0x6ac uvm_fault_check(ffff80003c919b10,ffff80003c919b48,ffff80003c919b80,0) at uvm_fault_check+0x457 uvm_fault(ffffee806d8422f8,d004f58000,0,2) at uvm_fault+0xe6 upageflttrap(ffff80003c919cb0,d004f58ef8) at upageflttrap+0xa0 usertrap(ffff80003c919cb0) at usertrap+0x413 recall_trap() at recall_trap+0x8 end trace frame: 0x0, count: -9