last executing test programs: 2.660905722s ago: executing program 7 (id=4218): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$WSKBDIO_SETMAP(r0, 0x8010570e, &(0x7f0000000040)={0x2, &(0x7f00000002c0)=[{0x1fc4, 0x9, 0x8000, 0x9, 0x6}, {0x8001, 0x2, 0x7, 0x4b, 0x8}]}) pledge(&(0x7f0000000000)='tty V\xef\x86\xce3|#\xcb\x13\x12\xe0\x19\x9c\xe6\x98\x0f \x01\xa6~\xd0|/?\xc9\xd5k\xbe\xa9kGS\x00\x00K\x00\x00\x00\x00\x00\x10\xeb\x91vr)\\\x9el\x03(rut\xd4\x9a\xbak\x04\x88J\x19\x9aU8\xee\xcf\xb4B\x95\x15\xb6\r^o\xfa\x03\x8bgI\xbdf\xc0\x9ffXo\x95\xad\x1f\x88\xd5\x95\xd9?!`\xbf\x8a\xeb5&\xdf\xeb\x04rN\\\x10\x18\xc3Unm\x84\vg\xef\xe8\xe3\xb1\x01\xdfZ\xfe\xd0\xa3\xa9E?\xa0\xcc\xd8\x8f\xff\x1e\xcd\x87_\xb9\xc2I0xffffffffffffffff}, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3}, {0x0, 0x300}, {0x0, 0x4}, {0x0, 0x10}, {0x2}, {0x0, 0x5}, {0x3, 0x5}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0xb4}, {0x1}, {}, {}, {0x0, 0x4}, {0x2}, {0x2}, {0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x1}, {0x1, 0x80000000}, {0x3, 0x6}, {}, {0x0, 0x4ab60683}]}) socket$inet(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1021, 0x0, 0x0) sendmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) recvmmsg(r2, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/25, 0xfffffec6}, 0xfffffffd}, 0x15, 0x2000, 0x0) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r5, 0x20004102, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff94ea09068bbd86dd60db83440008110000fe00feffffff030000000000000000ff0200000000000000000000000000014e204e2200089078"]) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x9, "9a2dcb795b48a4e11e60e041743c0c055f214a43", 0x1000, 0xbde}) 1.918036369s ago: executing program 7 (id=4238): r0 = socket$unix(0x1, 0x5, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r1 = socket(0x2, 0x3, 0x2f) r2 = dup(r1) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0x68, &(0x7f0000000040)={{0x18, 0x3, 0x800, 0x8}, {0x18, 0x1, 0x93, 0x8001}, 0x5, [0x6, 0x4, 0x6, 0x4, 0x4, 0x1, 0x2]}, 0x3c) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000450000/0x1000)=nil, 0x1000, 0x5) r3 = socket(0x2, 0x3, 0x0) r4 = dup(r2) dup2(r4, r3) setrlimit(0x2, &(0x7f0000000280)={0xfffffffffffffffc, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000000), 0x10) sendto$inet(r2, 0x0, 0x0, 0x8, 0x0, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x0) select(0x40, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x3, 0xe661, 0x2, 0x6, 0x7ffb, 0xffffffffffff8001}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x8, 0x44809e9d, 0xffffffffffffffff, 0xd7c9, 0x2000000000000000, 0xfffffffffffffff4, 0x4, 0x7}, 0x0, 0x0, 0x0) 1.696041514s ago: executing program 1 (id=4242): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0xae828e137847f62, 0x0) setrlimit(0x1, &(0x7f0000000000)={0xf7ffffffffffffed, 0xffffffffffffffff}) openat$bpf(0xffffffffffffff9c, 0x0, 0x1, 0x0) ftruncate(r0, 0x40000000007) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x40, 0x50) preadv(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/99, 0xfffffd23}], 0x20, 0x0) open$dir(0x0, 0x10, 0x4) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) 1.599889192s ago: executing program 6 (id=4249): setrlimit(0x1, &(0x7f0000000100)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x40086475, &(0x7f0000000500)={0x0, 0x0, 0x0}) (async) r1 = openat$klog(0xffffffffffffff9c, &(0x7f00000003c0), 0x10, 0x0) (async) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) sysctl$net_inet_tcp(&(0x7f0000000000)={0x4, 0x2, 0x6, 0x16}, 0x4, 0x0, 0x0, &(0x7f0000001040)="2bc7f973", 0x4) (async) r2 = socket(0x2, 0x5, 0x4) (async) r3 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r3, &(0x7f0000000200)=[{&(0x7f0000000440)="3e82", 0x2}], 0x1, 0xfffffffffffffff8) r4 = socket$inet6(0x18, 0x4000, 0xfc) (async) r5 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$TIOCSETA(r5, 0xc0284414, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x80, "561a8ebd00", 0x10005, 0xe62}) (async) socket(0x1, 0x1, 0x80) kevent(0xffffffffffffffff, &(0x7f0000000300)=[{{}, 0xfffffffffffffff8, 0x80, 0x8, 0x4, 0x2735}, {{r2}, 0xffffffffffffffff, 0xd0, 0x2, 0x0, 0x6}, {{0xffffffffffffff9c}, 0xfffffffffffffffc, 0x50, 0x10, 0x9, 0x26e9}, {{}, 0x0, 0xc4, 0xfffde, 0x106, 0x2007fffffff}, {{}, 0xffffffffffffffff, 0x50, 0x1, 0x7fc, 0x10001}], 0x401, &(0x7f0000000400)=[{{r0}, 0xfffffffffffffffc, 0xc0, 0x40000000, 0x7, 0x100}, {{r1}, 0xfffffffffffffff9, 0x0, 0x40, 0x0, 0x7}, {{}, 0xfffffffffffffffc, 0xc0, 0x40000000, 0x1, 0xfffffffffffffff9}, {{r2}, 0xfffffffffffffffe, 0xa, 0x2, 0x9, 0xd5}, {{r3}, 0xfffffffffffffff8, 0x45, 0x2, 0xb, 0x3}, {{r4}, 0xfffffffffffffffc, 0xf1, 0x2, 0x5, 0xffffffffffffffff}, {{r5}, 0x1aa467164ff59dd6, 0x0, 0x10, 0x5}, {{0xffffffffffffff9c}, 0xfffffffffffffffb, 0x40, 0x1, 0x5a, 0x4}, {{}, 0xfffffffffffffffd, 0x10, 0x10, 0x10, 0x9}], 0x7, &(0x7f0000000540)={0xffffffffffffff63, 0x7}) (async) r6 = socket(0x2, 0x2, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="00001c00ac14"]) (async) r7 = kqueue() kevent(r7, &(0x7f0000000040)=[{{}, 0xfffffffffffffff9, 0x1, 0x80000000, 0x6, 0x207}], 0x5, 0x0, 0x1000, &(0x7f0000000140)={0x0, 0x8}) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r6, &(0x7f0000000000), 0x10) (async) write(r6, 0x0, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r8, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/46, 0x2e}], 0x1) (async) ioctl$FIONBIO(r9, 0x8004667e, &(0x7f0000000000)=0x28) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) (async) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0xffffffffffffffff) (async) mknod(&(0x7f0000000240)='./file0\x00', 0x1000, 0x1e5f) 1.536189299s ago: executing program 6 (id=4250): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8, 0x0) sysctl$net_inet_tcp(&(0x7f0000000040)={0x7, 0x2, 0x2, 0xa0000204}, 0x4, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r1, 0x0) (async) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000080), 0x1c, 0x0}, 0x0) getpgrp() (async) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) (async) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x10000000000001}}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r2 = socket(0x18, 0x1, 0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff}, 0x10004) select(0x40, &(0x7f0000000140)={0x3ff}, 0x0, 0x0, 0x0) (async) readv(r3, &(0x7f0000000340)=[{0x0}], 0x1) (async) kevent(0xffffffffffffffff, &(0x7f0000000440)=[{{}, 0xfffffffffffffff6, 0x13, 0x10, 0xfd, 0x10000}], 0x1, 0x0, 0x9b6c, 0x0) (async) kevent(0xffffffffffffffff, &(0x7f0000000800)=[{{}, 0xfffffffffffffff9, 0x1, 0x0, 0x80000000, 0x2}], 0xe4a, 0x0, 0x3, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xfffffffffffffff6, 0x1000100010008, 0xffffffffffffffff}) r4 = kqueue() kevent(r4, 0x0, 0xfffffffd, &(0x7f0000000040), 0x5, 0x0) (async) kevent(r4, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) close(r2) r5 = socket(0x18, 0x2, 0x0) setsockopt(r5, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) (async) sendmsg$unix(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 1.350767204s ago: executing program 0 (id=4257): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80206913, &(0x7f0000000100)) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b10005130000000000003e0004000000000013fecea10500fef96ecf2ac72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf7f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f335c223e7d0c032bfa896443a41c18000000720fd38bfbb770c1f5a872c88106002ec5890400000000000000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab7196fcbd80407000000c011200000", 0x2000, 0x0, 0x0, 0x0) 1.35013349s ago: executing program 2 (id=4258): r0 = socket$inet(0x2, 0x5, 0x2) setsockopt$inet_opts(r0, 0x0, 0x64, &(0x7f0000000240), 0x0) setuid(0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) close(r2) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x1000000000029, 0x3c, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000080), &(0x7f00000000c0)=0xc) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x23f) setuid(0xffffffffffffffff) r4 = dup2(r3, r0) connect$unix(r4, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0xa) r5 = socket$unix(0x1, 0x5, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) setrlimit(0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r6, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setrlimit(0x8, &(0x7f0000000080)={0xe, 0x51}) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setregid(r7, 0x0) 1.34700692s ago: executing program 0 (id=4259): r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0) r1 = kqueue() ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f00000019c0)={0xfffffffc, 0xfffffffe, {[0xfffffffffffffffc, 0x8, 0x5, 0x100000000, 0x0, 0x80008000, 0x8000002e, 0x0, 0x0, 0x2f01, 0x1, 0x3, 0xfffffffffffffffe, 0x1, 0x4, 0x4, 0xfffffffffffffff5, 0x100], [0x5, 0x5, 0xfffffffbfffffff8, 0x0, 0x1, 0x80000000, 0xee4, 0x0, 0x0, 0x43], [0x8, 0x2, 0x100000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe], [0x3, 0x20000000000, 0x0, 0x100000002, 0xfffffffffffffffe], [{0x0, 0xc, 0x4, 0x7d06}, {0x2, 0x2, 0x1, 0x3}, {0x0, 0xfffffffd, 0xfffffffd, 0xffc}, {0x1008, 0x0, 0x6, 0xfffffffffffffffe}, {0x0, 0x400, 0xd, 0x40}, {0x7ffe, 0x2000, 0x40003, 0x1}, {0x6, 0x1, 0x7}, {0x0, 0x95b, 0x200, 0xc}], {0x0, 0x5, 0x0, 0x849}, {0x203, 0x10, 0x5, 0x2}}}) kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) mkdir(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlinkat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) 1.277989285s ago: executing program 1 (id=4260): setrlimit(0x8, &(0x7f0000000040)={0x7, 0x2000000000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28}, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100000088a8"]) recvmmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000000), 0x63}}, 0x10, 0x0, 0x0) 1.276553605s ago: executing program 2 (id=4261): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = socket(0x18, 0x1, 0x0) getsockopt(r0, 0x29, 0x3c, 0x0, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x8, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r1, 0x3}) syz_emit_ethernet(0x0, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1]) execve(0x0, 0x0, 0x0) 1.253732267s ago: executing program 1 (id=4263): sysctl$kern(&(0x7f00000000c0)={0x1, 0x53}, 0x2, &(0x7f0000000180)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082f9740f62f49ead69c9b3b32c84f8d320018983cea251ec1a2350c127dcdf7c69e1f0e8247ea3b5df5b16134f032c75405a000048044f2c0495f1496131b46051a74f58c9fcbec9fd0312aa24f63eb91489a05c8cf36b67310f648b950e7e7ca075ed83ed454a949c585f359084bd96d93a33c82ae1124227ed69ab8942a9ab7e", &(0x7f0000000080)=0xfeba, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x84) getitimer(0x2, &(0x7f0000000140)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, &(0x7f0000000000)=0x9) r1 = open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000280)={0x2, 0x0, 0x3b5, 0x1000381210089}) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000040)={0x5, './file0\x00'}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) 1.153819367s ago: executing program 0 (id=4264): r0 = semget(0x0, 0x1, 0x281) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000000)) r1 = getegid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x3a) setregid(0x0, r3) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x3, 0x0, r6, 0x0, 0x0, 0x41, 0x2000}, 0x0, 0x2, 0x2}) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xc) r8 = socket(0x11, 0x3, 0x0) sendto$unix(r8, &(0x7f0000000280)="b1000503000004000000000003000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42112000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c2300008abfba0900000008e371a3f8343712051eeab71d89e00004070000000013000000", 0xb1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$sock_cred(r9, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, r10}}) getgroups(0x3, &(0x7f0000000080)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) setgroups(0x7, &(0x7f00000000c0)=[r1, r3, r4, r6, r7, r10, r11]) 1.153378982s ago: executing program 3 (id=4265): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000440)="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", 0x34e}], 0x1) ioctl$TIOCSETA(r0, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0x0, 0xfffffffc, '\x00', 0x11, 0x1100a}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xcbdf4d1d31039a48}, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x1, 0x1, 0x52fb}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x5, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e69dac610a4fb5eaf3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5d879fac2492f4a0491b1ea3359aa5c5164ad97ac7c3aaddd498c0f962f5167b69cfdc8287fc34b8138340e60c404a855858ea5fc", &(0x7f0000000000)=0x59, 0x0, 0xfffffdfd) openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x20, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) 1.152567974s ago: executing program 3 (id=4266): mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) minherit(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) r0 = dup(0xffffffffffffffff) fcntl$getflags(r0, 0x3) ioctl$TIOCSBRK(r0, 0x2000747b) ioctl$BIOCVERSION(r0, 0x40044271, &(0x7f0000000000)) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$getown(r1, 0x5) r4 = geteuid() getsockopt$SO_PEERCRED(r2, 0xffff, 0x1022, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc) setsockopt$sock_cred(r2, 0xffff, 0x1022, &(0x7f0000000100)={r3, r4, r5}, 0xc) ioctl$TIOCSETVERAUTH(r1, 0x8004741c, &(0x7f0000000140)=0xe4a) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) ioctl$TIOCCONS(r2, 0x80047462, &(0x7f0000000180)=0x1) ioctl$BIOCGHDRCMPLT(r2, 0x40044274, &(0x7f00000001c0)) r6 = fcntl$getown(r2, 0x5) ioctl$VMM_IOC_CREATE(r1, 0xc2585601, &(0x7f0000000200)={0x10, 0x9, [{&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x5}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x7}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0xa}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x10000}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x1}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x10001}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0xa}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x80000001}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x1}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x1}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x11b0}, {&(0x7f0000ff3000/0xd000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0xcf53}, {&(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x8}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x8}], './file0\x00', 0x401}) mquery(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0xb) fchownat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', r4, r5, 0x2) r7 = socket$unix(0x1, 0x0, 0x0) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f0000000700)={0x0, 0x0, 0x0}, &(0x7f0000000740)=0xc) r9 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000780), 0x100, 0x0) sendmsg$unix(r7, &(0x7f0000000840)={&(0x7f0000000440)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f00000006c0)=[{&(0x7f0000000480)="c684f72d96af1b50a1e000fef3e48b", 0xf}, {&(0x7f00000004c0)="249970d9aaec010049a0bb59f3029dcedf7e9ab175f533547296b99594a0fb11367e211133813e9921eeb57f9c2e65a668c9fd04a5a767f1c588d2fae94bf9d7f47ea0b347b432f8bc1b9f781ff57335eb2c44aa6ca2b7a9c002300aa240aa5edac3345f6f8308b6cf", 0x69}, {&(0x7f0000000540)="0500f2a6ebbdc503cfcde20a3d828430f7cf8cff9c9a8f7739650ebc9ad80e79db0986d37435a4719701620da76cce05097baf210af3e9bb1233eeb76db9d3ca6f038fcdb503372c9b0ebbb993e714", 0x4f}, {&(0x7f00000005c0)="89a9558f1f373a639eff6ac652f1f49706690b2bd8f43fd1e7c46a7ab27dc66a9089f91bf18b434010b6184d14715934c80c010c48e5dca2cd8252e4d85fedbe55d60631aac008f62172744f072041818aa528eb567baf22efbfc66e56dc8dfdb4027ba24a99f3bdcf546abe62bea50d9a31c535c9f20694308b108a2e3bd290accf57c58f1113d8f5c9c40fcd96d54a001755c2c88f24e24496dda31a9760acba6c6510a594e445f8865990b026a73be9ca3d24ab0f1bc4988bfb4aec50cd8d456fe22d0c03494a3c041f19d7c6f9d36ee0ca2f796efd8b56c09bd15b880f923851", 0xe2}], 0x4, &(0x7f00000007c0)=[@cred={0x20, 0xffff, 0x0, r6, r4, r8}, @rights={0x28, 0xffff, 0x1, [r2, r1, r9, r0, r2]}], 0x48, 0x8}, 0xa) fcntl$setown(r7, 0x6, r6) mlock(&(0x7f0000ff3000/0x3000)=nil, 0x3000) openat$vnd(0xffffffffffffff9c, &(0x7f0000000880), 0x200, 0x0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f00000008c0)={0xa, 0x6, 0x8948, 0x6, "389a19102c5b435ef40a22dce013665618258c5c", 0x7, 0xfffffffe}) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000900)={'tap', 0x0}) renameat(r1, &(0x7f0000000940)='./file0\x00', 0xffffffffffffffff, &(0x7f00000009c0)='./file0/file0\x00') 1.149930841s ago: executing program 4 (id=4267): mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) (async) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r0, 0x80046478, &(0x7f0000000500)={0x0, 0x0, 0x0}) r1 = socket(0x18, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f00000001c0)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000000029, 0x9, &(0x7f0000000040)="8858cd06", 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300101000000019078ac1400e18b1400aa0c009078000000004500f11604e66dc5fe63d3d6c5ff38150500"/76]) 882.98843ms ago: executing program 0 (id=4269): ioctl$TIOCFLUSH(0xffffffffffffffff, 0x80047410, &(0x7f0000000100)=0xf) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x1, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) syz_emit_ethernet(0x21f, &(0x7f0000000400)={@remote, @local, [], {@ipv6={0x86dd, {0x4, 0x6, "c7852a", 0x1e9, 0x77538ce5e86fd429, 0x1, @rand_addr="77119aa51d9ce971b34cf4f7d4aa29a9", @mcast2, {[@routing={0x2, 0xe, 0x0, 0x5, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @rand_addr="e069ec49d2b57f0fce8e84a951f3fdf6", @empty, @empty, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @remote={0xfe, 0x80, '\x00', 0x0}]}, @fragment={0x88, 0x0, 0x9, 0x1, 0x0, 0xf, 0x64}, @routing={0xc, 0x4, 0x0, 0x81, 0x0, [@local={0xfe, 0x80, '\x00', 0x0}, @mcast1]}, @routing={0x33, 0x6, 0x0, 0x6, 0x0, [@mcast1, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @fragment={0x61, 0x0, 0x4, 0x0, 0x0, 0x2, 0x66}, @dstopts={0xf0, 0xd, '\x00', [@generic={0xa, 0x35, "4aaa7cbae3a35f38bdd4dffe1306fa248385d2020afb712eb1453d3b4ff9a0c2e59bd0b2cc3236c77fa6a03cd90646d3818a1f5caa"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0xf8}, @generic={0x4, 0x25, "80e251fd873cb16ae934ecf3cccf64c745e26dfcbf92eba577485a1f7eb74e64b59086ccb9"}]}, @fragment={0xf0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x67}], @icmpv6=@ni={0x8c, 0x0, 0x0, 0x9, 0x1, 0x7, "efdf2dcef62a3da709d74f024e6561c975712baa9bb825e77d2b08333df48d6bb3efbfe3658dd4330bb690f8d7beabaf16fbe7e837847fc269d121929766f922b05ebc3d7ba56ff96774bc2c4d5df33557c118ba6274cb9e6dfc9c53c6e46cfb46a10cd4d77c4ba07eaee0d26f9525cf15"}}}}}}) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x7, 0x4) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000040), 0x0) sendto$inet(r0, &(0x7f00000003c0)="757b76e82a131fb5cb58ab04550e8cd0b87f55d3dcd687935791b886712bfb1d2b86ae835434d7190973455e46441c4e0cab43df0d715b62a38cbbd63383", 0x3e, 0x3, 0x0, 0x0) 882.64839ms ago: executing program 2 (id=4270): mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x6d4) r0 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/185, 0xb9}], 0x1) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000640)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x4001, 0x0) r2 = fcntl$dupfd(r1, 0x2, r1) close(r2) openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) r3 = socket(0x20, 0x1, 0xfe) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x1}, {0x6, 0x12, 0xe4, 0xfc}]}) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="ec6813b6d238c1ba7c041e7fa1cf42d0c584fffffffffff800000000251cd159d0f9c801497fb642605f9fc054e078879eaf7612e630", 0x36}], 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @local={0xac, 0x14, 0x0}}}}}}}) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="e16879dbc7e2ff80ff63050000000207000000547f5bd809bd20f58426628401feefad4b05c236813d550e3f0249287de23a6ed5b65767d9a326984e219a6e3d065195e7346656b54fc88eab33333c8dba9b0a81aa6fa3882f000000000000000000009c2f4979f7599b274a", &(0x7f0000000080)=0x6c, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) connect$unix(r3, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000080), 0x4) shutdown(r2, 0x2) listen(r3, 0x9) execve(0x0, 0x0, 0x0) 880.419539ms ago: executing program 5 (id=4271): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1, 0x0}}, 0x10, 0x2842, 0x0) close(0xffffffffffffffff) (async) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) (async, rerun: 64) setrlimit(0x0, 0x0) (rerun: 64) fcntl$lock(0xffffffffffffffff, 0x8, 0x0) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xffffffffffffff2c, [{&(0x7f000062c000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x100d3b5}, {&(0x7f0000419000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffffff}, {&(0x7f0000419000/0x1000)=nil, &(0x7f00006b9000/0x1000)=nil, 0x9}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f00004ac000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f00006b8000/0x2000)=nil, &(0x7f0000188000/0x2000)=nil, 0x401}, {&(0x7f000060b000/0x2000)=nil, &(0x7f000076e000/0x2000)=nil, 0x2}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f00005a9000/0x1000)=nil, 0x4}, {&(0x7f000041f000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x1000000000005}, {&(0x7f0000197000/0x3000)=nil, &(0x7f00002d0000/0x4000)=nil, 0x1}, {&(0x7f000069e000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x3}, {&(0x7f000042f000/0x1000)=nil, &(0x7f0000689000/0x3000)=nil, 0x3}, {&(0x7f0000418000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0xb}, {&(0x7f0000196000/0x3000)=nil, &(0x7f00000a6000/0x3000)=nil, 0xb}, {&(0x7f000006a000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0xffffffffbffffff9}, {&(0x7f0000419000/0x3000)=nil, &(0x7f0000fed000/0x10000)=nil, 0x1000039fa}, {&(0x7f000042d000/0x3000)=nil, &(0x7f0000239000/0x2000)=nil, 0x7}], './file0\x00', 0xfffffffe}) r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) fcntl$dupfd(r1, 0xa, 0xffffffffffffffff) r2 = openat$diskmap(0xffffffffffffff9c, 0x0, 0x80, 0x0) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r3 = socket(0x18, 0x3, 0x0) r4 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r4, 0xc0106924, &(0x7f00000001c0)) (async) r5 = semget$private(0x0, 0x1, 0x0) semctl$GETVAL(r5, 0x0, 0x5, &(0x7f0000000300)=""/188) ioctl$FIONREAD(r3, 0x81206919, &(0x7f0000000100)) (async) ioctl$DIOCMAP(r2, 0xc0106477, &(0x7f00000000c0)={&(0x7f00000003c0)='./file0/file1\x00', r1, 0x1}) (async, rerun: 64) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, 0x0) (async, rerun: 64) ioctl$TIOCSETA(r0, 0xc1084425, &(0x7f0000000040)={0x0, 0xff, 0x8, 0x6}) (async) r6 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$DIOCMAP(r6, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r6, 0x3}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="66e1629b6174aaaaaaaaaabb86dd60062e0b"]) (async) ioctl$VT_RELDISP(r1, 0x20007604, &(0x7f00000002c0)) execve(0x0, 0x0, 0x0) 849.674176ms ago: executing program 0 (id=4272): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCSETA(r1, 0xcd504406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1"}) close(r1) dup2(r1, 0xffffffffffffffff) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb5219f1000b913f1, 0x0) r2 = getpid() ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x308, r2) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x48, 0x7, 0x5, 0x1}, {0x80, 0x81, 0xb, 0xff}, {0x816, 0x1, 0x14, 0x80}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$TIOCSETA(r1, 0xcd504406, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "97aa224ff1c14649ebb178926cc1c75a6b47c1d1"}) (async) close(r1) (async) dup2(r1, 0xffffffffffffffff) (async) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb5219f1000b913f1, 0x0) (async) getpid() (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0x308, r2) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x48, 0x7, 0x5, 0x1}, {0x80, 0x81, 0xb, 0xff}, {0x816, 0x1, 0x14, 0x80}]}) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) (async) 849.234503ms ago: executing program 4 (id=4273): mlock(&(0x7f000042b000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setregid(r1, 0x0) unveil(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000140)='c\x00') setregid(0x0, 0xffffffffffffffff) madvise(&(0x7f0000450000/0x4000)=nil, 0x4000, 0x4) 807.419217ms ago: executing program 3 (id=4274): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x923e, 0x0, 0x80, 0x7}]}) (async) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) r1 = socket(0x18, 0x3, 0x0) r2 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100)) (async) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 797.1547ms ago: executing program 7 (id=4275): syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffff16f2b58f9227b9e1aaaa86dd60006f3300383a008a21f8d1450021b07f5a195768f30000fe8000000000000000000000000000aa02009078080000006000000000003a00fe8000000000000000002000000000aa00"]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) execve(0x0, &(0x7f0000000140), 0x0) (async, rerun: 64) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x82, 0x0) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async, rerun: 32) ioctl$TIOCSETA(r2, 0xc0284416, &(0x7f0000000100)={0xa00, 0x0, 0x741, 0x0, "97000000efffffff00", 0x900, 0x7}) (async, rerun: 32) r3 = socket(0x2, 0x2, 0x0) r4 = socket(0x2, 0x400000000002, 0x0) (async) r5 = geteuid() ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000140)={""/16, @ifru_flags}) r6 = getgid() fchown(r0, r5, r6) (async) setsockopt(r4, 0x0, 0x20, &(0x7f0000000080)="01000000", 0x4) dup2(r4, r3) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32) bind(r3, &(0x7f0000000000), 0x10) (rerun: 32) r7 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) (async) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) chroot(&(0x7f00000002c0)='./file0/file0\x00') rename(&(0x7f0000000080)='./file0/file0/..\x00', &(0x7f00000003c0)='./file0/file0/..\x00') (async) connect$unix(r7, &(0x7f0000000000), 0x10) write(r7, 0x0, 0x0) (async) read(r1, &(0x7f0000000000)=""/178, 0xb2) (async) readv(r4, &(0x7f0000000200)=[{&(0x7f0000000340)=""/102, 0x66}, {&(0x7f0000000180)=""/56, 0x38}, {&(0x7f00000002c0)=""/113, 0x71}], 0x3) 796.857459ms ago: executing program 5 (id=4276): kevent(0xffffffffffffffff, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000005, 0xe, 0x80000001, 0x9, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x8, 0x8, 0x8, 0xfffffff9}, {0x6, 0xf86, 0xfffffffe, 0x9}, {0x1, 0x800, 0x8007}, {0xfff, 0x200725, 0xd197, 0x7}, {0x2, 0x2, 0x418a, 0x99}, {0xce1, 0xffffffff, 0x4f8, 0x6c}, {0x6, 0x300, 0x8, 0x1}, {0x101, 0x2, 0x5, 0x9}, {0x0, 0x8001, 0xd1b, 0x88}, {0x8001ce, 0x10001, 0x0, 0x3}, {0x80, 0x9, 0x9, 0x9}, {0xb8c, 0x4, 0x8, 0x4}, {0x29a71717, 0xfffffffa, 0x1, 0x6}, {0x0, 0x6, 0x5}, {0x8000, 0x7, 0x1002, 0x30004}]}) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1) r0 = socket(0x2, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r1 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r1, 0x802069b4, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x80206910, &(0x7f00000001c0)) r2 = socket(0x18, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x6}, 0x10, 0x6) ioctl$FIONREAD(r2, 0x8020699d, &(0x7f00000001c0)) r3 = shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) shmctl$IPC_STAT(r3, 0x2, 0x0) getuid() getpid() shmctl$IPC_SET(r3, 0x1, 0x0) shmget(0x0, 0x4000, 0x2, &(0x7f0000ff9000/0x4000)=nil) getgroups(0x0, 0x0) shmctl$IPC_RMID(r3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x8013, r0, 0x0) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r4 = syz_open_pts() ioctl$TIOCSETD(r4, 0x40047463, 0x0) 796.619346ms ago: executing program 4 (id=4277): r0 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) fcntl$lock(r0, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xbffffffffffffff6, 0x1000100010009}) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) r1 = getpid() open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x1510, r1) r2 = getpgrp() ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0x40000010, r2) close(0xffffffffffffffff) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000400)='./bus\x00', 0x8000, 0x0}) openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) fcntl$lock(r0, 0x9, &(0x7f0000000140)={0x0, 0x0, 0xbffffffffffffff6, 0x1000100010009}) (async) mknod(&(0x7f00000000c0)='./bus\x00', 0x2000, 0x450c) (async) getpid() (async) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x1510, r1) (async) getpgrp() (async) ktrace(&(0x7f0000000100)='./file0\x00', 0x4, 0x40000010, r2) (async) close(0xffffffffffffffff) (async) openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) (async) ioctl$VNDIOCSET(r3, 0xc0384600, &(0x7f0000000440)={&(0x7f0000000400)='./bus\x00', 0x8000, 0x0}) (async) 796.227423ms ago: executing program 3 (id=4278): clock_getres(0x0, 0xffffffffffffffff) 779.019564ms ago: executing program 3 (id=4279): open(&(0x7f0000000040)='./file0\x00', 0x80, 0x12) sysctl$kern(&(0x7f0000000000)={0xa, 0x300}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) setrlimit(0x1, &(0x7f0000000080)={0x0, 0x1}) sysctl$kern(&(0x7f0000000380)={0x1, 0x32}, 0x2, &(0x7f0000000400)="71f91e34", &(0x7f0000000440)=0x4, 0x0, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x80, 0x12) (async) sysctl$kern(&(0x7f0000000000)={0xa, 0x300}, 0x7, &(0x7f0000000080), 0x0, 0x0, 0x24) (async) setrlimit(0x1, &(0x7f0000000080)={0x0, 0x1}) (async) sysctl$kern(&(0x7f0000000380)={0x1, 0x32}, 0x2, &(0x7f0000000400)="71f91e34", &(0x7f0000000440)=0x4, 0x0, 0x0) (async) openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) (async) ktrace(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) (async) 596.592225ms ago: executing program 5 (id=4280): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) unveil(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='W\x00') r0 = socket(0x1e, 0x3, 0x0) socket(0x1e, 0x3, 0x0) close(r0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000001f40)={0x2, 0x2}, 0xc) r1 = open$dir(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) close(r1) 596.200266ms ago: executing program 3 (id=4281): ioctl$FIONREAD(0xffffffffffffffff, 0xc0106924, &(0x7f00000001c0)) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000280)={&(0x7f0000000000)=@un=@abs, 0x8, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/80, 0x50}, {&(0x7f0000000140)=""/154, 0x9a}], 0x2, &(0x7f0000000200)=""/86, 0x56}, 0x8d09}, 0x10, 0x0, &(0x7f0000000300)={0x10, 0x3}) r0 = socket(0x800000018, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) sendmsg$unix(r1, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB=' \x00'/16, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00('], 0x48, 0xf8f45ad47d2d40ee}, 0x404) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) close(r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) unveil(0x0, &(0x7f00000000c0)='r\x00') r3 = kqueue() sysctl$hw(&(0x7f0000000000)={0x6, 0xf}, 0x2, &(0x7f0000000100)="8207", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f0000000000)={0x1, 0x1a}, 0x2, &(0x7f0000000080), &(0x7f0000000100), 0x0, 0x0) kevent(r3, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffffe, 0x1, 0x10, 0x80000, 0x5}, {{r0}, 0xfffffffffffffffe, 0x42, 0x80, 0xa5, 0x7f}], 0x4003fc, 0x0, 0x8000800, 0x0) 594.444643ms ago: executing program 6 (id=4282): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x400000000002, 0x0) setsockopt(r2, 0x0, 0x21, &(0x7f0000000080)="c5f5d915", 0x4) (async) r3 = dup2(r2, r1) (async) setsockopt$sock_int(r1, 0xffff, 0x800, &(0x7f00000000c0)=0x400, 0x4) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) bind(r1, &(0x7f0000000000), 0x10) shutdown(0xffffffffffffffff, 0x0) (async) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) (async) connect$unix(r4, &(0x7f0000000000), 0x10) (async) write(r4, 0x0, 0x0) (async) recvmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x802) (async) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="258b300ad15114aa764dce08000000000000002199248d49b76fcf4cf33cd932e3987039", 0x24}], 0x1, 0x0, 0x0, 0xb}, 0x3) (async) sysctl$kern(0x0, 0x0, &(0x7f0000000300)="e26cc7058037c3fafa9d401aa841d0cb7a62f11ba0489a3bd4bb0d0000054c01000000b4c4e67381b10d00"/53, &(0x7f0000000080)=0x35, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) syz_open_pts() (async) close(0xffffffffffffffff) fcntl$dupfd(r3, 0x0, r3) (async) r5 = open(&(0x7f0000000140)='./file0\x00', 0x1, 0x10) ioctl$TIOCSETAF(r5, 0x802c7416, &(0x7f0000000280)={0x7, 0x8, 0x0, 0xffffffff, "47ceb4030e6f9a486d813214dd3c0789f0d29d83", 0xffffff7f, 0x5}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 594.06915ms ago: executing program 4 (id=4283): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) r0 = accept$inet(0xffffffffffffffff, &(0x7f00000005c0), &(0x7f0000000600)=0xc) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x11, 0x7}, 0x85c, 0x800000000000000c, 0x0, 0x0, 0x2, 0x5, 0x7, 0x2000000004}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, &(0x7f00000002c0)="e15a79c7def7ffffff635a54860602af124413450200a1f515b49156f305df5a9da4070000", &(0x7f0000000080)=0x25, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2c}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0xfffffffffffffef1) (async) r1 = getpid() fcntl$setown(r0, 0x6, r1) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/140, 0x8c}, {&(0x7f00000000c0)=""/122, 0x7a}, {&(0x7f0000000140)=""/98, 0x62}, {&(0x7f00000001c0)=""/76, 0x4c}, {&(0x7f0000000240)=""/159, 0x9f}, {&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f00000004c0)=""/84, 0x54}], 0x8, 0x0) (async, rerun: 64) shmget(0x3, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) (rerun: 64) 593.575708ms ago: executing program 6 (id=4284): r0 = socket(0x1, 0x5, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0xffff, 0x2000, 0x0, 0x0) write(r0, &(0x7f0000001680)="04bdfa5d1d2873c63e3534825ba166e2fea9aec43050006123339a346f731573d8d508753f95b7688ad48b8cf6bbca325cebc37fc4e1dd543dbe2da6dd", 0x1001c) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='r\x00') 508.58861ms ago: executing program 5 (id=4285): r0 = semget(0x0, 0x4, 0x2ab) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) setsockopt(r1, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) setsockopt(r2, 0x1000000000029, 0x9, 0x0, 0x0) ioctl$FIONREAD(r2, 0x4004667f, &(0x7f0000000000)) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000000)) 474.92909ms ago: executing program 2 (id=4286): r0 = socket(0x2, 0x1, 0x0) getsockopt(r0, 0x6, 0x9, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async, rerun: 32) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (rerun: 32) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) (async, rerun: 32) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async, rerun: 32) r2 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x2, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) faccessat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80, 0x1) (async) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x12b) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000740)={0x7ff, 0x17, 0x9, 0x101, 0x80000004, 0x80000001, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x71000}, {0x7, 0x8, 0x8, 0x9}, {0x8, 0xd86, 0x6d, 0x9}, {0x1, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x5}, {0x2, 0x6, 0x1003, 0x99}, {0xce1, 0xffffffff, 0x6, 0x3}, {0x6, 0xfff, 0x80000014, 0x8}, {0x6, 0x1082, 0x5, 0x9}, {0x4, 0x8001, 0xd1b, 0x88}, {0x1ce, 0xffff, 0x9, 0x3}, {0x7ff, 0x9, 0x8, 0x9}, {0xb8c, 0x4, 0xf, 0x4}, {0x29a71717, 0xfffffffa, 0x985, 0x6}, {0xc, 0x7, 0x5}, {0x0, 0x1, 0x1002, 0x30004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x1010, 0xffffffffffffffff, 0x0) (async) r4 = open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCSET(r4, 0x41406474, &(0x7f0000000500)={0x0, 0x0, 0x0}) (async, rerun: 32) ioctl$FIONREAD(r2, 0xc0106978, &(0x7f0000000140)) (async, rerun: 32) syz_emit_ethernet(0x11f, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa080045000111000020000400907800000000000000004e234e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"]) ioctl$TIOCSETA(r1, 0xc1084413, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, "9786224ff1c102d1000100000000100df000", 0x0, 0x100000}) (async) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff60}, 0xfefffffeffffffff}) (async, rerun: 32) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 32) r5 = socket(0x2, 0x2, 0x0) (async) pipe(&(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000340), 0xd4e688a67930cd) (async) close(r6) close(r7) (async) ioctl$FIONREAD(r5, 0x8040691a, &(0x7f00000001c0)) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 474.435212ms ago: executing program 5 (id=4287): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, 0xffffffffffffffff, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xa7, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f00002a6000/0x3000)=nil, 0x1}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f00001c5000/0x4000)=nil, 0xfffffffffffffffe}, {&(0x7f0000692000/0x3000)=nil, &(0x7f00007f8000/0x4000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f00006b6000/0x2000)=nil, 0x100}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000696000/0x2000)=nil}, {&(0x7f0000363000/0x3000)=nil, &(0x7f0000604000/0x3000)=nil}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f000069b000/0x3000)=nil, 0x8}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000376000/0x2000)=nil, 0x40003}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f00007d8000/0x2000)=nil, 0x4}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f00001b5000/0x400000)=nil, 0xe00000040000000}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000581000/0x4000)=nil, &(0x7f000051f000/0x4000)=nil, 0x8}], './file0\x00'}) sysctl$kern(&(0x7f0000000040)={0x1, 0x32}, 0x2, &(0x7f0000000180)="5f2a1ff1", &(0x7f00000000c0)=0x2b, &(0x7f0000001180), 0x4) setitimer(0x2, &(0x7f0000000140)={{0xc, 0x9}, {0xfbffffff, 0xb}}, 0x0) r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) sendmmsg(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x210}, 0xfffffffa}, 0x10, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{0x0}], 0x1) r1 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETA(r1, 0xc4504447, &(0x7f0000000000)={0x4, 0x8, 0x7fff, 0xfffffffe, "cd002200000400", 0x8000, 0x1003}) mknod(0x0, 0x2000, 0x40000800) ioctl$TIOCSETD(0xffffffffffffffff, 0x8004741b, 0x0) r2 = socket(0x6, 0x5, 0x0) r3 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0xa010, 0xffffffffffffffff, 0x0) ioctl$FIONREAD(r2, 0x81206919, &(0x7f0000000100)) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r4 = syz_open_pts() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$sock_cred(r5, 0xffff, 0x1022, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) chown(&(0x7f0000000180)='./file0\x00', 0x0, r6) lchown(&(0x7f0000000440)='./file0\x00', 0x0, r6) close(r4) r7 = syz_open_pts() sysctl$net_inet_icmp(&(0x7f0000000a00)={0x4, 0x2, 0x1, 0x7}, 0x4, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETAF(r7, 0x802c7416, &(0x7f0000000180)={0x10, 0x5, 0xfffbfc06, 0x80e19e, "bb080006020900d91050080000000f00", 0x40, 0x80000c1}) writev(r2, &(0x7f0000000700), 0x0) openat$pf(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FIONREAD(r0, 0x8080691a, &(0x7f0000000100)) 474.048291ms ago: executing program 2 (id=4288): r0 = semget(0x0, 0x1, 0x281) r1 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="e702f2ffef1faaaaaaaaaabb86dd609907a600382c03cb697a653e336f000000500000000000ff0200000000310000000000000000010600000100000000020090780000007a6900de000006010826651f52e2840a3a68632730c0fc4357ff010000000000000000000000000001c6c63ee646ee19c9b34c15cb2a901fd44f6b"]) setreuid(0x0, 0xee01) ioctl$WSKBDIO_SETDEFAULTBELL(r1, 0x80105705, &(0x7f00000000c0)={0xfffff800, 0x7, 0x8000, 0x7}) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open$dir(0x0, 0x0, 0x0) mknodat(r2, 0x0, 0x2000, 0x3361) r3 = open(0x0, 0x0, 0x0) ioctl$VNDIOCSET(r3, 0x40204402, 0x0) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) syz_open_pts() r4 = syz_open_pts() close(r4) syz_open_pts() ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000040)={0x807, 0x3, 0xffff, 0x200495, "084880fa870000bd090088d11554e90d6602ff07", 0xb52, 0x2a6d}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = syz_open_pts() ioctl$TIOCSWINSZ(r5, 0x80087467, &(0x7f0000000140)={0x6, 0x1, 0x29, 0x9}) r6 = syz_open_pts() writev(r4, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000180)}, {&(0x7f0000000480)="f33d7960f0b9698ff75689333e2dd1ab476a7120db565abf1fbadbc5fd4bf7a8f783b452c2bc91fdf4f24b57f51ea3f02d807af26a7bc0c0aeb8ee1a4b93a1b9e5c66926a0eae1c485969b24c0836f9852481723db78dfca4b91beef525842c815d068e50f121307ff0fd4de66cd856d7cdc4b5c30fd0f9176c10e628df74958800a00f225d783c1c9a08609eda63728c0236e8fa4e43b0c2514076180f29100b1212cce59b0821d22008f63badbbb01df735d3a1c71e49fe581aff89a42ff26e10a6cca9008bef7d15572543848282c19a65be2c0f7ec21903f33ee97ed", 0xde}, {&(0x7f00000019c0)}, {&(0x7f00000001c0)="6bb20d6073891947227bb27b7ed49f19727a854675df24aa14d843bf365942", 0x1f}], 0x5) read(r6, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0x6, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(0xffffffffffffffff, 0x81206919, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) 473.596385ms ago: executing program 6 (id=4289): socket(0x18, 0x3, 0x0) (async) r0 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r1 = socket(0x10, 0x5, 0x0) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0xc1206925, &(0x7f0000000100)) open(0x0, 0x200, 0x6) (async) open(0x0, 0x200, 0x6) ktrace(0x0, 0x4, 0x51d73188af82cb95, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) (async) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000b80)="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"/285, 0x11d}, {&(0x7f0000000200)="b389e5aeb7b42eab8dd001567bf060f918", 0x11}], 0x2) (async) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000b80)="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"/285, 0x11d}, {&(0x7f0000000200)="b389e5aeb7b42eab8dd001567bf060f918", 0x11}], 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r2, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000046230000000000003c0c68f3e01a0744edc10b7c61ff337b6e71c87a7007a26163"]) r3 = semget(0x0, 0x1, 0x281) semop(r3, &(0x7f0000000180)=[{0x1, 0xa0b8, 0x800}], 0x1) semctl$IPC_RMID(r3, 0x0, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r4, &(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x26) (async) bind$unix(r4, &(0x7f0000000040)=@abs={0x0, 0x0, 0x3}, 0x26) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) connect$unix(r6, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r4, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x3}, 0x8) mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r8 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$TIOCCONS(r8, 0x80047462, &(0x7f0000000080)=0x5) socket(0x1, 0x2, 0x0) (async) r9 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r9, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r9, 0xc0106924, &(0x7f00000001c0)) 200.071374ms ago: executing program 1 (id=4290): r0 = socket(0x2, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000), 0x10) r1 = syz_open_pts() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) open(&(0x7f0000000140)='./file0\x00', 0x10686, 0x8) r4 = getpid() ktrace(&(0x7f0000000280)='./file0\x00', 0x0, 0x928, r4) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x200000008}, {0x0, 0x4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="28000000ffff000001"], 0x28, 0x4}, 0x5) sendmmsg(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x4c, 0x0, 0xfcad}, 0xd}, 0x10, 0x3) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0xffffffffffffff, 0x10040000000001}}) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, 0x0, 0x0, &(0x7f0000001900), 0x0) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000340)={'tap', 0x0}) sysctl$vfs_nfs(&(0x7f00000001c0)={0xa, 0x2, 0x1}, 0x3, &(0x7f0000000240)="ab92c7e62e544d87caa9f22243a4", &(0x7f00000002c0)=0xe, &(0x7f0000000300)="4240da030bb5737047d0abde1ce6faf1b9440ec78e6fce5bdb2259d81068668fabfa18", 0x23) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x5}, {0x6, 0x12, 0xe4, 0x5}, {0x6, 0xa, 0x83, 0x8}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="258b300ad15127aa764dce743f06b3f3e8347a217a866229b76fc0ee69bed932e3987039aa23fde8365147bf6cbcf81d389cb970cb", 0x35}], 0x1, 0x0, 0x0, 0xb}, 0x3) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="7bcb42008037c3faadf9efff587d3d72d1c876915474be2ffae13a7fe039054cad080000000000000080b4c4e6c40900000033112a2d2d2a87843f5abd88cc44", &(0x7f0000000080)=0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket(0x18, 0x2, 0x0) setsockopt(0xffffffffffffffff, 0x1000000000029, 0xb, &(0x7f00000003c0)="d2aeb5c0936500000000", 0xa) setsockopt(r7, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2810, r3, 0x8) writev(r6, &(0x7f0000000140)=[{0x0}], 0x1) 199.436971ms ago: executing program 4 (id=4291): recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x500, &(0x7f0000000100)=""/236, 0xec}, 0x0) ioctl$WSKBDIO_SETMAP(0xffffffffffffff9c, 0x8010570e, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9, 0x0, 0x7, 0x800, 0xfff}]}) 199.231428ms ago: executing program 5 (id=4292): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10080, 0x0) ioctl$TIOCFLUSH(r0, 0x80047476, &(0x7f00000003c0)) 181.445921ms ago: executing program 0 (id=4293): open(0x0, 0x70e, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={0x0, r0}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x31}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34bf5fe84cf71b59c7afec37082", &(0x7f0000000080)=0x1c, 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, 0x0, 0x80, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0xffff, 0x1022, 0x0, 0x0) ioctl$FIOASYNC(r1, 0x8004667d, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5904) open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x0) utimes(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x4ce, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$BIOCIMMEDIATE(r1, 0x80044270, &(0x7f0000000100)=0xf341) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000440)="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", 0x34d}], 0x1) ioctl$TIOCSETA(r3, 0xc0504417, &(0x7f0000000740)={0x0, 0x0, 0xfffffffe, 0x10, "000000000000522ebc03c72000eb27e8f500", 0x80000006, 0x10004}) ioctl$VMM_IOC_TERM(r3, 0x80045604, &(0x7f0000000080)={0x3}) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000a00)=""/4096, 0x1000, 0x1802, &(0x7f0000000140)=@file={0x0, './file0/../file0\x00'}, 0x13) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x2, 0x3, 0xf1, 0x2}, {0x40, 0xf, 0x3, 0x9}, {0x1ae, 0x8, 0x5, 0x9}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 178.755273ms ago: executing program 4 (id=4294): writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="673bb5b8cc0c16ed08f1b8d24e2217f981aa6a78ef1d35e6abbbdabb26a52ad7", 0x20}], 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) r1 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ktrace(&(0x7f0000000040)='./file0\x00', 0x4, 0xb1c, 0x0) select(0x40, &(0x7f0000001300)={0x1, 0x8, 0x8000000000000001, 0x6, 0x5, 0x7, 0x4, 0x41}, &(0x7f0000001340)={0x9, 0x100000001, 0xffffffff, 0x2, 0x56f1f392, 0x7ff0000000000000, 0x401, 0x4}, 0x0, 0x0) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r0, 0x2}) close(r0) sysctl$net_inet_udp(&(0x7f0000000000)={0x4, 0x2, 0x11, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_ip(&(0x7f0000000000)={0x4, 0x2, 0x0, 0x5}, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x0, 0xb, 0x2, 0x2}, {0x6, 0x12, 0xe4, 0xfc}, {0x6, 0xa, 0x83, 0x400f}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="258b300ad15114aa764dce743f06b3f3e8347a217a866229b76fcf4cf33cd932e3987039aa23fde8365147bf", 0x2c}], 0x1, 0x0, 0x0, 0xb}, 0x3) sysctl$kern(0x0, 0x0, &(0x7f00000000c0)="7bcb42008037c3faadf9efff587d3d72d1c876915474be2ffae13a7fe039054cad080000000000000080b4c4e6c40900000033112a2d2d2a87843f5abd88cc44", &(0x7f0000000080)=0x40, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x9}, 0x0, 0x0, 0x0) r3 = kqueue() sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f13630b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be3898718e85a774dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad2018000", 0x80) kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r4 = open(&(0x7f0000000800)='./file1\x00', 0x80, 0x0) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)=0x1) 899.255µs ago: executing program 6 (id=4295): r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$WSDISPLAYIO_LSFONT(r0, 0xc058574e, &(0x7f0000000100)) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0) mquery(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x1) r1 = openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x29}, 0x2, &(0x7f0000001480)="4ba7841143175a319d82c85c66ddbabe4d20d6c90758f73f9092178b67099fbb9a053ffe4885163d21d969434491ad5d03e628d94eb34b74c7b7e3d24afe21ffb0c864cb888c0007a0a7564a504e17a44850d9b2ef0f232b041286db0ce0db21", &(0x7f0000000040)=0x60, 0x0, 0x0) sysctl$ddb(&(0x7f00000000c0)={0x9, 0x2}, 0x2, 0x0, 0x0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4) 0s ago: executing program 2 (id=4296): r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{{r0}, 0xfffffffffffffffa, 0x23, 0x20000008, 0x3c, 0x6}], 0x1, &(0x7f0000000100)=[{{r0}, 0xfffffffffffffff9, 0x1, 0x1, 0x0, 0xad}], 0x5, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="c2c215c47f0eeccebb0987523e468d2e1afcfac26b7c410fc34e38e2d4484ae4bed53e09a8222aa94fee58bfcd8af74c08199744a37a98b2f431bb8ccd84ca986ef3a59c29d0e810c81a201c4fd8af9301c925d3d8103966f2f83cfc6c110e440c1af681d9dc", 0x66}], 0x1) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{0x3}, {}, {}, {0x3}, {0x0, 0xffffffff}, {}, {0x0, 0xaa59}, {}, {0x0, 0xfffffffb}, {0x0, 0x20}, {0x2, 0x4}, {0x0, 0x2}, {}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x3}, {0x0, 0xfffffffc}, {0x0, 0x7ff}, {0x3}, {}, {0x3}, {}, {}, {0x2, 0x3}, {}, {0x0, 0x200}, {0x2, 0x8}, {0x0, 0x6}, {0x1, 0xa}, {0x2}]}) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x6) acct(0x0) r1 = syz_open_pts() syz_open_pts() syz_open_pts() socket(0x18, 0x2, 0x0) openat$bpf(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x1, 0x8000000000006, 0x181f, 0x7, 0xfff}, 0x0, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000000)={'tap', 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$FIONREAD(r2, 0x80206979, &(0x7f0000000000)) close(r1) r3 = kqueue() kevent(r3, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) acct(&(0x7f0000000080)='./file0\x00') dup(0xffffffffffffffff) kevent(r0, &(0x7f0000000180)=[{{r0}, 0xfffffffffffffffa, 0x96, 0x2, 0x4, 0x8}, {{r0}, 0xffffffffffffffff, 0x1, 0x80, 0x9, 0x6}], 0x2, &(0x7f0000000240), 0x2, &(0x7f0000000080)={0x1, 0x4}) kevent(r0, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) setrlimit(0x2, &(0x7f0000000240)={0x60000000, 0x8000000000000001}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. pckbd_enable: command error sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error Bê>r¹j¼õ¬|ÿ ž¨E1\…:pckbd_enable: command error fuse: Cannot find fusebuf pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error OpenBSD/amd64 (Amnesiac) (tty00) login: malloc(): allocation too large, type = 6, size = 287762939904 WARNING: thread `nfsio' (460978) exits with status -1 WARNING: thread `nfsio' (268671) exits with status -1 WARNING: thread `nfsio' (128482) exits with status -1 WARNING: thread `nfsio' (80905) exits with status -1 WARNING: thread `nfsio' (411391) exits with status -1 WARNING: thread `nfsio' (309184) exits with status -1 WARNING: thread `nfsio' (42444) exits with status -1 WARNING: thread `nfsio' (183600) exits with status -1 WARNING: thread `nfsio' (40430) exits with status -1 WARNING: thread `nfsio' (246482) exits with status -1 WARNING: thread `nfsio' (489310) exits with status -1 WARNING: thread `nfsio' (135085) exits with status -1 WARNING: thread `nfsio' (402145) exits with status -1 WARNING: thread `nfsio' (243223) exits with status -1 WARNING: thread `nfsio' (91106) exits with status -1 WARNING: thread `nfsio' (186858) exits with status -1 WARNING: thread `nfsio' (331785) exits with status -1 WARNING: thread `nfsio' (406597) exits with status -1 WARNING: thread `nfsio' (468278) exits with status -1 WARNING: thread `nfsio' (356919) exits with status -1 OpenBSD/amd64 (Amnesiac) (tty00) login: OpenBSD/amd64 (Amnesiac) (tty00) login: fuse: Cannot find fusebuf                         OpenBSD/amd64 (Amnesiac) (tty00) login: pppx: unable to set addresses for pppx1, error=17 sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code uvn_flush: obj=0xfffffd806175a350, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! denied attempt to set clock back 2953804962 seconds pppx: unable to set addresses for pppx1, error=17 denied attempt to set clock back 2953804972 seconds uvn_flush: obj=0xfffffd806175ad00, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! fuse: Cannot find fusebuf wStopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806e0ca340,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd806e0ca328,1) at rw_do_enter_write+0xba rrw_enter(fffffd806e0ca328,1) at rrw_enter+0xc6 VOP_LOCK(fffffd806e0c9558,2001) at VOP_LOCK+0xa3 vn_lock(fffffd806e0c9558,2001) at vn_lock+0xa4 vn_closefile(fffffd806bb8b528,ffff80003900b788) at vn_closefile+0x111 fdrop(fffffd806bb8b528,ffff80003900b788) at fdrop+0x121 knote_remove(ffff80003900b788,fffffd806ef23e00,fffffd806ef23e90,3,0) at knote_remove+0x449 knote_fdclose(ffff80003900b788,3) at knote_fdclose+0xf9 fdrelease(ffff80003900b788,3) at fdrelease+0xf9 syscall(ffff80003c4e7180) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x80167c97090, count: -13 ddb{1}> show registers rdi 0 rsi 0x80000 acpi_pdirpa+0x6be71 rbp 0xffff80003c4e6c90 rbx 0 rdx 0xffff800001474040 rcx 0xffff80003900b788 rax 0x7ffff acpi_pdirpa+0x6be70 r8 0xffff80003c4e6b70 r9 0x8080808080808080 r10 0x59f0cd785f855405 r11 0x8377c34ebf666e38 r12 0xfffffd8003ef6c80 r13 0xfffffd80046e3790 r14 0x3 r15 0xffffffff833e0c2c substchar+0x11f9c rip 0xffffffff81031f25 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c4e6c80 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=498310 pid=68200 tcnt=3 stat=onproc flags process=0 proc=4000000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003900bcb8,0xffff8000ffff3778 process=0xffff80003ac32c10 user=0xffff80003c4e2000, vmspace=0xfffffd8061c887d0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 68200 352242 61856 0 2 0 syz-executor *68200 498310 61856 0 7 0x4000000 syz-executor 68200 105976 61856 0 3 0x4000080 fsleep syz-executor 93218 201349 58369 0 2 0xc80 syz-executor 93218 446555 58369 0 2 0x4000000 syz-executor 93218 105813 58369 0 3 0x4000000 inode syz-executor 93218 252756 58369 0 3 0x4000080 fsleep syz-executor 63048 270306 84826 0 2 0 syz-executor 63048 487888 84826 0 7 0x4000000 syz-executor 39366 365059 34672 0 2 0x82000 syz-executor 39366 401116 34672 0 4 0x4082000 syz-executor 39366 192461 34672 0 3 0x4002000 suspend syz-executor 39366 98830 34672 0 4 0x4082000 syz-executor 84826 14467 33708 0 3 0x82 nanoslp syz-executor 1305 121003 0 0 3 0x14280 nfsidl nfsio 85617 288799 0 0 3 0x14280 nfsidl nfsio 48897 491513 0 0 3 0x14280 nfsidl nfsio 29035 158182 0 0 3 0x14280 nfsidl nfsio 25995 124034 33708 0 3 0x82 nanoslp syz-executor 58369 374327 33708 0 2 0xc82 syz-executor 50292 7351 1 0 3 0x100083 ttyin getty 61856 207346 33708 0 3 0x82 nanoslp syz-executor 91419 363674 33708 0 2 0x2 syz-executor 60303 198288 73875 0 3 0x82 sbwait sshd-session 21402 463564 73875 0 3 0x82 sbwait sshd-session 4183 367425 0 0 3 0x14200 bored sosplice 34672 294765 33708 0 2 0xc82 syz-executor 34579 148884 33708 0 2 0x2 syz-executor 17322 242064 33708 0 2 0x2 syz-executor 33708 274931 13170 0 3 0x82 kqread syz-executor 13170 264382 66988 0 3 0x10008a sigsusp ksh 66988 286760 82832 0 3 0x98 kqread sshd-session 82832 184977 73875 0 3 0x92 kqread sshd-session 73875 20409 1 0 3 0x88 kqread sshd 69117 497325 12292 74 3 0x1100092 bpf pflogd 12292 139427 1 0 3 0x80 sbwait pflogd 30737 433090 63725 73 3 0x1100090 kqread syslogd 63725 341511 1 0 3 0x100082 sbwait syslogd 67204 439 1 0 3 0x100080 kqread resolvd 90116 16709 0 0 3 0x14200 bored smr 69818 176476 0 0 2 0x14200 zerothread 77135 76411 0 0 3 0x14200 aiodoned aiodoned 37241 155660 0 0 3 0x14200 syncer update 2764 145754 0 0 3 0x14200 cleaner cleaner 47590 485222 0 0 3 0x14200 reaper reaper 41814 183329 0 0 3 0x14200 pgdaemon pagedaemon 74004 431511 0 0 3 0x14200 bored viomb 92921 372402 0 0 3 0x40014200 acpi0 acpi0 69350 366362 0 0 3 0x40014200 idle1 64981 103525 0 0 3 0x14200 bored softnet7 82346 403583 0 0 3 0x14200 bored softnet6 91037 520628 0 0 3 0x14200 bored softnet5 2218 236834 0 0 3 0x14200 bored softnet4 90158 417817 0 0 3 0x14200 bored softnet3 18127 130198 0 0 3 0x14200 bored softnet2 2526 497516 0 0 3 0x14200 bored softnet1 599 124071 0 0 3 0x14200 bored softnet0 70803 204058 0 0 3 0x14200 bored systqmp 12315 211368 0 0 3 0x14200 bored systq 65877 704 0 0 3 0x14200 tmoslp softclockmp 31042 124622 0 0 3 0x40014200 tmoslp softclock 74600 446052 0 0 3 0x40014200 idle0 1 420523 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks Process 68200 (syz-executor) thread 0xffff80003900b788 (498310) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff839043b8) #0 witness_lock+0x5f1 #1 vn_closefile+0x41 #2 fdrop+0x121 #3 knote_remove+0x449 #4 knote_fdclose+0xf9 #5 fdrelease+0xf9 #6 syscall+0xbd4 #7 Xsyscall+0x128 exclusive rwlock fdlock r = 0 (0xffff80003a423300) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 sys_close+0xd0 #3 syscall+0xbd4 #4 Xsyscall+0x128 Process 93218 (syz-executor) thread 0xffff80003900b258 (446555) exclusive rrwlock inode r = 0 (0xfffffd806e201b10) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_makeinode+0xcd #8 ufs_mknod+0x5b #9 VOP_MKNOD+0x101 #10 domknodat+0x469 #11 syscall+0xb17 #12 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806e156e80) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domknodat+0xb4 #8 syscall+0xb17 #9 Xsyscall+0x128 Process 63048 (syz-executor) thread 0xffff80003900afc0 (487888) shared rwlock vmmaplk r = 0 (0xfffffd800b0272e8) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4a #4 uvm_fault+0x106 #5 kpageflttrap+0x2f4 #6 kerntrap+0x198 #7 alltraps_kern_meltdown+0x7b #8 copyout+0x57 #9 syscall+0xbd4 #10 Xsyscall+0x128 Process 91419 (syz-executor) thread 0xffff80003ac2e038 (363674) exclusive rrwlock inode r = 0 (0xfffffd806e192a50) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vget+0x2a2 #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x1a36 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x93a #11 namei+0x7ca #12 dounlinkat+0xc1 #13 syscall+0xb17 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806ea2e240) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 dounlinkat+0xc1 #8 syscall+0xb17 #9 Xsyscall+0x128 Process 34579 (syz-executor) thread 0xffff80002a2b9a08 (148884) exclusive rrwlock inode r = 0 (0xfffffd806e18d490) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vget+0x2a2 #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x1a36 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x93a #11 namei+0x7ca #12 dounlinkat+0xc1 #13 syscall+0xb17 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c297698) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 dounlinkat+0xc1 #8 syscall+0xb17 #9 Xsyscall+0x128 Process 17322 (syz-executor) thread 0xffff80002a2b8018 (242064) exclusive rrwlock inode r = 0 (0xfffffd806e14c0a8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806cce57b8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10245 11053K 12388K 166960K 14461 0 pcb 18 15K 17K 166960K 916 0 rtable 162 11K 13K 166960K 986 0 pf 42 19K 67486K 166960K 752 0 ifaddr 30 5K 8K 166960K 279 0 ifgroup 63 2K 3K 166960K 562 0 sysctl 4 1K 9K 166960K 23 0 counters 72 37K 38K 166960K 830 0 ioctlops 0 0K 8K 166960K 2814 0 iov 0 0K 24K 166960K 338 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1454 91K 92K 166960K 5119 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 40K 44K 166960K 53 0 VM map 2 1K 1K 166960K 2 0 sem 25 21K 21K 166960K 183 0 dirhash 12 2K 3K 166960K 72 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 14 49K 240K 166960K 4564 0 sigio 1 0K 0K 166960K 105 0 proc 67 83K 163K 166960K 1111 0 subproc 72 4K 4K 166960K 132 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 535 0 in_multi 28 2K 7K 166960K 342 0 ether_multi 1 0K 0K 166960K 46 0 mrt 2 0K 0K 166960K 27 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 241 1076K 1076K 166960K 241 0 exec 0 0K 1K 166960K 932 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 7 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 231 144K 177K 166960K 41649 0 UVM aobj 71 6K 6K 166960K 82 0 pinsyscall 38 76K 102K 166960K 5893 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 343 0 NDP 14 0K 2K 166960K 207 0 temp 117 8652K 8777K 166960K 209714 0 kqueue 9 16K 31K 166960K 781 0 SYN cache 2 8K 16K 166960K 3 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 424 0 423 3 2 1 3 0 8 0 rtentry 176 304 0 255 6 1 5 5 0 8 0 unpcb 144 2938 0 2921 16 13 3 6 0 8 2 syncache 336 24 0 24 10 9 1 1 0 8 1 tcpqe 32 7 0 7 5 4 1 1 0 8 1 tcpcb 736 1564 0 1554 32 30 2 13 0 8 0 arp 128 43 0 30 1 0 1 1 0 8 0 inpcb 328 5283 0 5270 39 32 7 18 0 8 5 nd6 144 36 0 34 1 0 1 1 0 8 0 pkpcb 40 89 0 89 8 7 1 1 0 8 1 kcovpl 48 14 0 6 1 0 1 1 0 8 0 mppekey 1024 2 0 2 1 1 0 1 0 8 0 ppxss 1192 320 0 320 3 2 1 1 0 8 1 pppxif 1504 31 0 31 6 5 1 1 0 8 1 pfstscr 40 14 0 12 2 1 1 1 0 8 0 pffrag 232 50 0 33 2 0 2 2 0 482 0 pffrnode 88 45 0 29 1 0 1 1 0 8 0 pffrent 40 87 0 69 1 0 1 1 0 8 0 pfosfp 40 1440 0 1015 5 0 5 5 0 8 0 pfosfpen 112 1440 0 724 21 0 21 21 0 8 0 pfrktable 1344 49 0 48 1 0 1 1 0 8 0 pfanchor 1288 3 0 0 1 0 1 1 0 8 0 pftag 88 5 0 0 1 0 1 1 0 8 0 pfstitem 24 310 0 146 2 0 2 2 0 8 0 pfstkey 128 427 0 262 7 1 6 6 0 8 0 pfstate 384 368 0 206 17 0 17 17 0 8 0 pfrule 1344 83 0 77 2 1 1 2 0 8 0 rttmr 136 4 0 4 3 2 1 1 0 8 1 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 1099 0 926 34 20 14 28 0 8 1 art_table 40 1103 0 926 5 0 5 5 0 8 0 art_node 32 266 0 230 1 0 1 1 0 8 0 sysvmsgpl 40 52 0 12 2 1 1 1 0 8 0 semupl 112 2 0 2 2 2 0 1 0 8 0 semapl 112 175 0 152 1 0 1 1 0 8 0 shmpl 112 79 0 11 2 0 2 2 0 8 0 dirhash 1024 59 0 42 3 0 3 3 0 8 0 dino2pl 256 10185 0 8673 95 0 95 95 0 8 0 ffsino 296 10185 0 8673 117 0 117 117 0 8 0 nchpl 144 16716 0 16148 64 38 26 64 0 8 0 rtmask 32 33 0 33 6 5 1 1 0 8 1 uvmvnodes 80 6560 0 0 134 0 134 134 0 8 0 vnodes 216 6560 0 0 365 0 365 365 0 8 0 namei 1024 57531 0 57528 6 5 1 2 0 8 0 percpumem 16 430 0 379 1 0 1 1 0 8 0 kstatmem 264 362 0 328 3 0 3 3 0 8 0 acpiwqpl 32 3 0 3 1 0 1 1 1 8 1 scsiplug 72 19 0 19 4 4 0 1 0 8 0 scxspl 216 83069 0 83069 18 17 1 8 1 8 1 plimitpl 152 1241 0 1225 1 0 1 1 0 8 0 sigapl 424 4876 0 4821 9 1 8 9 0 8 0 knotepl 120 594 0 0 17 0 17 17 0 8 0 kqueuepl 224 1862 0 1853 13 12 1 5 0 8 0 pipepl 344 714 0 686 15 9 6 9 0 8 3 fdescpl 528 4818 0 4790 3 0 3 3 0 8 0 filepl 160 34317 0 34101 38 23 15 20 0 8 3 lockfpl 104 1726 0 1725 1 0 1 1 0 8 0 lockfspl 48 700 0 699 1 0 1 1 0 8 0 sessionpl 144 51 0 41 1 0 1 1 0 8 0 pgrppl 48 115 0 97 1 0 1 1 0 8 0 ucredpl 104 5855 0 5845 1 0 1 1 0 8 0 zombiepl 144 5053 0 5052 1 0 1 1 0 8 0 processpl 1248 4876 0 4821 7 0 7 7 0 8 0 procpl 664 12136 0 12072 9 2 7 9 0 8 0 sosppl 168 33 0 33 3 2 1 1 0 8 1 sockpl 752 8838 0 8807 55 45 10 24 0 8 5 mcl64k 65536 27 0 0 4 1 3 3 0 8 0 mcl16k 16384 14 0 0 2 0 2 2 0 8 0 mcl12k 12288 2 0 0 1 0 1 1 0 8 0 mcl9k 9216 3 0 0 1 0 1 1 0 8 0 mcl8k 8192 10 0 0 2 0 2 2 0 8 0 mcl4k 4096 117 0 0 15 0 15 15 0 8 0 mcl2k2 2112 3 0 0 1 0 1 1 0 8 0 mcl2k 2048 57 0 0 8 1 7 8 0 8 0 mtagpl 96 22 0 0 1 0 1 1 0 8 0 mbufpl 256 3145 0 0 196 0 196 196 0 8 0 bufpl 280 73387 0 66823 471 1 470 470 0 8 0 anonpl 32 18642 0 0 152 2 150 150 0 246 0 amapchunkpl 152 146445 0 145896 64 28 36 37 0 158 8 amappl16 200 24918 0 24596 112 76 36 41 0 8 8 amappl15 192 6 0 6 2 2 0 1 0 8 0 amappl14 184 172 0 161 1 0 1 1 0 8 0 amappl13 176 8 0 8 2 2 0 1 0 8 0 amappl12 168 5592 0 5564 3 1 2 2 0 8 0 amappl11 160 101 0 92 1 0 1 1 0 8 0 amappl10 152 7 0 7 1 1 0 1 0 8 0 amappl9 144 261 0 261 1 1 0 1 0 8 0 amappl8 136 37 0 34 1 0 1 1 0 8 0 amappl7 128 148 0 136 1 0 1 1 0 8 0 amappl6 120 274 0 268 1 0 1 1 0 8 0 amappl5 112 170 0 161 1 0 1 1 0 8 0 amappl4 104 397 0 375 1 0 1 1 0 8 0 amappl3 96 31044 0 30946 6 2 4 4 0 8 0 amappl2 88 907 0 847 2 0 2 2 0 8 0 amappl1 80 31674 0 30994 19 2 17 17 0 8 0 amappl 88 40097 0 39933 5 0 5 5 0 92 0 dma32768 32768 1 0 1 1 1 0 1 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma2048 2048 2 0 2 2 2 0 1 0 8 0 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma256 256 11 0 11 4 4 0 1 0 8 0 dma128 128 259 0 259 4 4 0 1 0 8 0 dma64 64 7 0 7 2 2 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 19 0 18 1 0 1 1 0 8 0 aobjpl 72 81 0 11 2 0 2 2 0 8 0 uaddrrnd 24 4818 0 4790 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 4818 0 4790 1 0 1 1 0 8 0 vmmpekpl 168 37304 0 37251 3 0 3 3 0 8 0 vmmpepl 168 317557 0 315373 162 44 118 126 0 357 7 vmsppl 488 4817 0 4790 7 2 5 5 0 8 0 rwobjpl 80 92509 0 84582 181 11 170 172 0 8 3 pdppl 4096 9644 0 9580 142 70 72 84 0 8 8 pvpl 32 28396 0 0 227 0 227 227 0 265 0 pmappl 256 4817 0 4790 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 566 0 145 13 0 13 13 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff837f4ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff839041b0) at __mp_lock+0x192 intr_handler(ffff80003c50ec40,ffff800000069c00) at intr_handler+0xe9 Xintr_ioapic_edge16_untramp() at Xintr_ioapic_edge16_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x67 witness_assert(fffffd800b0272e8,1) at witness_assert+0x3e2 uvm_map_lookup_entry(fffffd800b0271e8,3fd000,ffff80003c50efe8) at uvm_map_lookup_entry+0x75 uvmfault_lookup(ffff80003c50efc0,0) at uvmfault_lookup+0x133 uvm_fault_check(ffff80003c50efc0,ffff80003c50eff8,ffff80003c50f030,0) at uvm_fault_check+0x4a uvm_fault(fffffd800b0271e8,3fd000,0,2) at uvm_fault+0x106 kpageflttrap(ffff80003c50f170,3fd040) at kpageflttrap+0x2f4 kerntrap(ffff80003c50f170) at kerntrap+0x198 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b copyout() at copyout+0x57 syscall(ffff80003c50f5b0) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0xb1ec4a07250, count: -18 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp ddb{1}> trace db_enter() at db_enter+0x25 witness_checkorder(fffffd806e0ca340,9,0) at witness_checkorder+0x10b9 rw_do_enter_write(fffffd806e0ca328,1) at rw_do_enter_write+0xba rrw_enter(fffffd806e0ca328,1) at rrw_enter+0xc6 VOP_LOCK(fffffd806e0c9558,2001) at VOP_LOCK+0xa3 vn_lock(fffffd806e0c9558,2001) at vn_lock+0xa4 vn_closefile(fffffd806bb8b528,ffff80003900b788) at vn_closefile+0x111 fdrop(fffffd806bb8b528,ffff80003900b788) at fdrop+0x121 knote_remove(ffff80003900b788,fffffd806ef23e00,fffffd806ef23e90,3,0) at knote_remove+0x449 knote_fdclose(ffff80003900b788,3) at knote_fdclose+0xf9 fdrelease(ffff80003900b788,3) at fdrelease+0xf9 syscall(ffff80003c4e7180) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x80167c97090, count: -13