last executing test programs: 398.652478ms ago: executing program 3 (id=4): sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x1c, 0x0}, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100, 0x200}, 0x0, 0xfffffffffffffffc, 0x82df}) r0 = kqueue() r1 = fcntl$getown(r0, 0x5) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x8, [{&(0x7f000049a000/0x2000)=nil, &(0x7f00000e1000/0x4000)=nil, 0x74a}, {&(0x7f000025c000/0x3000)=nil, &(0x7f000074b000/0x7000)=nil, 0x4}, {&(0x7f0000258000/0x2000)=nil, &(0x7f0000505000/0xb000)=nil, 0x40000000000004}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f00002cd000/0x3000)=nil, 0xfdfffffffffff7f1}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000180000/0x4000)=nil}, {&(0x7f000060b000/0x2000)=nil, &(0x7f000012a000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f00000c3000/0x2000)=nil, &(0x7f00002ba000/0x3000)=nil, 0xc099}, {&(0x7f00001f5000/0x3000)=nil, &(0x7f000024a000/0x7000)=nil, 0x5}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f00002cf000/0x1000)=nil, 0x6}, {&(0x7f0000121000/0x2000)=nil, &(0x7f0000750000/0x2000)=nil, 0xc6}, {&(0x7f00005b9000/0x2000)=nil, &(0x7f0000c5c000/0x2000)=nil, 0x9}, {&(0x7f0000851000/0x2000)=nil, &(0x7f0000025000/0x3000)=nil, 0x3}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f00004ca000/0x2000)=nil, 0x10200000000006}, {&(0x7f0000026000/0x4000)=nil, &(0x7f0000164000/0x1000)=nil, 0xfffd}, {&(0x7f0000831000/0x3000)=nil, &(0x7f00001ae000/0x3000)=nil, 0x3}, {&(0x7f0000ed8000/0x3000)=nil, &(0x7f0000479000/0x4000)=nil, 0x5ba3}], './file0\x00', 0x172}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffd83, &(0x7f0000000300)=ANY=[@ANYRES8=r1, @ANYRES16, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r1, @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRES64, @ANYRES16=r2, @ANYRESHEX], 0x9, 0x401}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r2, 0xc1084425, &(0x7f0000000040)={0x403, 0x3, 0x4, 0x6, '!\r\x00\x00\x00\b\x00', 0x4, 0x8}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket(0x18, 0x2, 0x0) close(r3) r4 = socket(0x18, 0x1, 0x0) close(r4) socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0x4, &(0x7f00000001c0)="00000080", 0x4) sendmsg$unix(r3, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0xd}, 0x0) 395.370568ms ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00000100000000", 0xc) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000000)="ea00000100000000", 0x8) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) close(r1) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x3200) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x9, {[0xfffffbfffffffffb, 0x1, 0x6, 0x80, 0x6, 0x7, 0xdf60, 0xffffffffffffffff, 0x0, 0x6, 0x93, 0xfffffffffffffff8, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0xfffffffffffffffe, 0x404000000100], [0x5, 0x80000001, 0xffffff7ffffffffa, 0x20200001, 0x5e, 0x100000000007b94, 0x800, 0x9, 0xfffffffffffffffc, 0x1], [0x1, 0x8000, 0x40000000, 0x0, 0xb, 0x11000, 0xfbffffff00000000], [0x9, 0x1fffffffffb, 0x80000001, 0x4000000, 0xfffffffffffffffe, 0x90000000], [{0x0, 0x3, 0x0, 0x7d08}, {0x9, 0x22, 0x5, 0x7fff}, {0x2, 0x0, 0xfffefffe, 0x27c}, {0x5, 0x4, 0x5, 0xff7fffffffffffff}, {0x0, 0x2, 0x7f, 0x8}, {0x0, 0x9, 0x9, 0x2000000000000000}, {0x5, 0x0, 0xfffffff7, 0xb}, {0xe, 0x100, 0x1, 0xb}], {0x1, 0x8, 0x80000006, 0x3}, {0xfffe, 0xfffffffb, 0x6d5, 0x6}}}) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r3 = open$dir(&(0x7f0000000300)='.\x00', 0x8, 0x4a) ioctl$FIONREAD(r3, 0x4004667f, &(0x7f0000000080)) r4 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) select(0x40, &(0x7f0000000040)={0x40007, 0xffffffff, 0x8, 0x8000000000000003, 0x3, 0x5, 0x5afc, 0x2a}, 0x0, 0x0, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$BIOCGRTIMEOUT(r5, 0x4010426e, &(0x7f0000000380)) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VT_GETACTIVE(r4, 0x40047607, &(0x7f00000000c0)) ioctl$VNDIOCSET(r6, 0xc0785101, &(0x7f0000000040)={0x0, 0x0, 0x0}) ioctl$WSDISPLAYIO_LSFONT(r4, 0xc058574e, &(0x7f0000000100)) open(&(0x7f0000000040)='./bus\x00', 0x10005, 0x0) 384.254706ms ago: executing program 0 (id=1): syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e702f2ffef1f97b0ae1a006b86dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001743893495e0da8120a4f"]) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff0200000000"]) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="e706f2ffff1f391e7dd7a2d786dd609907a600302c03cb697a653e336f000000500000000000ff020000000000000000000000000001020090"]) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x450c) r0 = open(&(0x7f00000002c0)='./bus\x00', 0x2, 0x0) pread(r0, &(0x7f0000000180)="9a17881d8443489e73383a3c97055a071fd1642d43471464", 0x18, 0x9) ioctl$WSMUXIO_INJECTEVENT(r0, 0x80185760, 0x0) pipe2(&(0x7f0000000380), 0x4) sysctl$kern(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)="4f1d4c6344b80ed788b6a4515248df3aa745bb992c574ab4cdf5587145812eab4a988f7fafd7a01d99776d988908cd186b51f34f8c15ffa0c685ad4116c783959eff4278384b4000384dbb1c2aaeff10b4135529a1da6fda67c67469d954be811b25ec5521559154c586eefff122009f659cd3e27e98a3241495005f102d9101d158284c0ee3250aa7c1", 0x8a) r1 = socket(0x2, 0x3, 0x0) close(r1) r2 = socket(0x2, 0x3, 0x0) close(r2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x7}) r3 = socket(0x18, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setsockopt$sock_int(r1, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) r4 = socket$inet(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0x80206979, &(0x7f0000000100)) write(0xffffffffffffffff, 0x0, 0x0) sysctl$kern(&(0x7f0000000080)={0x1, 0x41}, 0x2, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x8, 0x144) r5 = openat$vnd(0xffffffffffffff9c, 0x0, 0x40, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) r6 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x0) close(r6) ioctl$VNDIOCSET(r5, 0xc0384600, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) 364.780886ms ago: executing program 6 (id=7): sysctl$net_inet_ipip(&(0x7f0000000400), 0x4, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) open(0x0, 0x615, 0x80) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x0, 0xfffffffc}, {}, {0x2}, {0x3}, {0x0, 0x1}, {0x0, 0xaa59}, {0x2}, {0x1, 0xffffffff}, {0x2}, {0x3, 0x4}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x80000001}, {0x2, 0xffffffff}, {0x2, 0x1}, {0x2}, {0x0, 0xffffffff}, {0x3, 0x7ff}, {0x1}, {0x2, 0xffffffff}, {0x3, 0xfffffffc}, {0x3}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x200}, {0x2}, {0x1, 0xfffffffd}, {0x2, 0xa}, {0x2}]}) r0 = syz_open_pts() syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x0, 0x6, 0x0, @multicast1, @local={0xac, 0x14, 0x0}}, @tcp={{0x2, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x8000, 0x0, 0xfffc, {[@window={0x3, 0x3, 0xfe}]}}}}}}}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB]) close(r0) socket$inet(0x2, 0x2, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x80, 0xfa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x1, 0x6, 0x1000, 0x40008, 0x5, 0x18002, 0x10, [{0x40006, 0x2, 0xfffeffff, 0x200a24}, {0xc5c, 0x7fff, 0x8, 0xffffdff9}, {0x800008, 0x20f89, 0x7d, 0x9}, {0xfffffff9, 0x800, 0x3, 0x6}, {0x4, 0x803, 0xfffffff7, 0x4d89}, {0x1ff, 0x3, 0x3, 0xb4}, {0x8000008, 0x7, 0x81ec, 0x2d}, {0x2, 0x836, 0x17, 0x100002}, {0x2, 0x87e, 0x5, 0x9}, {0x4, 0x40000090, 0xd1d, 0x88}, {0x1c1, 0xd, 0x4, 0x101}, {0x10001, 0x6, 0x20004, 0xc}, {0xb8d, 0x1453, 0xa, 0x2c4}, {0x29a71720, 0x474d, 0xd, 0x6}, {0x6, 0xb, 0xfffffff9, 0x7}, {0x0, 0x8, 0x1002, 0xc}]}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000040)={0x0, 0x0, 0xf, 0x100000001}) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r2, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$VNDIOCSET(r3, 0xc0184406, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = syz_open_pts() mknod(&(0x7f0000000040)='./bus\x00', 0x100000000205f, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="89ffa23f3c252adb0070162e86dd6009000000200600030000000000000037f87ccdc0c4a92cff0000000001ea443d080000000001004e204e22", @ANYRES32=0x0, @ANYRES8=r4]) 289.157225ms ago: executing program 2 (id=9): r0 = syz_open_pts() syz_open_pts() r1 = msgget$private(0x0, 0x7fc) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000240)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000380)={0x3, &(0x7f0000000040)=[{0x5c, 0x5, 0x25, 0x2}, {0x2, 0x10, 0xfd, 0x7}, {0x6, 0x11, 0x53, 0x7}]}) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) setgid(0xffffffffffffffff) mknod(&(0x7f0000000000)='./bus\x00', 0x2000, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x10, 0xb3) ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000080)={0x3, 0x7, 0xe150, 0xffe, "0000000000008471050000000010000447ff00", 0x10000000}) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x9}, {0x0, 0x4}}, 0x0) msgsnd(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="0300000000010000"], 0x8, 0x0) ioctl$TIOCSTAT(r0, 0x20007465, 0x0) r4 = socket(0x11, 0x3, 0x0) sendto$unix(r4, &(0x7f0000000340)="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", 0x265, 0x20a, 0x0, 0x62) 288.372441ms ago: executing program 6 (id=10): r0 = socket(0x18, 0x3, 0x0) setsockopt(r0, 0x1000000029, 0x1a, &(0x7f0000000080)='\"\x00\x00\x00', 0x4) syz_emit_ethernet(0x1092, &(0x7f00000010c0)={@broadcast, @random="e04b1c561ac4", [], {@ipv4={0x800, {{0x1f, 0x4, 0x0, 0x9, 0x1084, 0x68, 0x5, 0xf, 0x16, 0x0, @multicast1, @local={0xac, 0x14, 0x0}, {[@rr={0x7, 0xb, 0x4, [@loopback, @remote={0xac, 0x14, 0x0}]}, @end, @ssrr={0x89, 0x1f, 0x7, [@remote={0xac, 0x14, 0x0}, @empty, @remote={0xac, 0x14, 0x0}, @empty, @empty, @loopback, @empty]}, @rr={0x7, 0x7, 0x0, [@local={0xac, 0x14, 0x0}]}, @rr={0x7, 0xf, 0x0, [@multicast2, @local={0xac, 0x14, 0x0}, @broadcast]}, @timestamp={0x44, 0x10, 0x4, 0x0, 0x2, [{[@multicast1], 0x9}, {[], 0xffff}]}, @ssrr={0x89, 0x7, 0x81, [@local={0xac, 0x14, 0x0}]}, @ra={0x94, 0x6, 0x81}, @generic={0x89, 0x8, "840f17730a5d"}]}}, @udp={{0x1, 0x3, 0x8}, {"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"}}}}}}) syz_emit_ethernet(0xad, &(0x7f00000000c0)={@empty, @random="3716b5832891", [], {@generic={0x88a8, "286645949df2039310953f41ad0458de2291bc4c06f5006d7bb50d10782b5c9986e71ebaeeb833042f82376659206384bf9fc06087a5de2fd63526ee8d07776df335329fb3bcbcc934f2d0f64bbd49f4f8a68fd7841dc99f51cd6bd25ee87d7531a58d240bee61e51b5af9d7b7d6b05abd3b9a6c3252548d568867c7e372f844b07e28a80468fdcadd8b91d37ac6af81fa35eb967763b0e727aef3b9cb26af"}}}) (async) syz_emit_ethernet(0xad, &(0x7f00000000c0)={@empty, @random="3716b5832891", [], {@generic={0x88a8, "286645949df2039310953f41ad0458de2291bc4c06f5006d7bb50d10782b5c9986e71ebaeeb833042f82376659206384bf9fc06087a5de2fd63526ee8d07776df335329fb3bcbcc934f2d0f64bbd49f4f8a68fd7841dc99f51cd6bd25ee87d7531a58d240bee61e51b5af9d7b7d6b05abd3b9a6c3252548d568867c7e372f844b07e28a80468fdcadd8b91d37ac6af81fa35eb967763b0e727aef3b9cb26af"}}}) 274.472578ms ago: executing program 3 (id=11): sysctl$hw(&(0x7f00000000c0)={0x6, 0x12}, 0x2, 0x0, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg(0xffffffffffffffff, 0x0, 0x0) mknod(&(0x7f0000000140)='./file0\x00', 0x2000, 0x8) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x11b) ioctl$TIOCSPGRP(r0, 0x40047477, &(0x7f0000000080)) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f00000001c0), &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="8f6f77ede655ffffffffffff86dd605f6ad900283a0000000000000000000000000000000000fe8000000000000000000000000000aa02"]) 273.834374ms ago: executing program 6 (id=12): r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) r1 = socket(0x24, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2, &(0x7f0000000080)={0x18, 0x2, 0x80000001, 0x7}, 0xc) (async) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff"]) (rerun: 64) setsockopt(r0, 0x1000000029, 0xd, &(0x7f0000000000), 0x14) (async, rerun: 64) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (async, rerun: 64) syz_extract_tcp_res$synack(&(0x7f0000000300), 0x1, 0x0) openat$pci(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) (async) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) (async) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f00000000c0)={0x2, &(0x7f0000000200)=[{0xb1, 0x7, 0xe, 0x10001}, {0x6, 0x3, 0x9, 0x6}]}) (async, rerun: 32) r3 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (rerun: 32) write(r3, &(0x7f00000002c0)="3727e8a62580410b3f", 0x9) (async) write(r2, &(0x7f0000000080)="d81ad3d20cf7eb4e9b0800bc1a30", 0xe) (async) syz_emit_ethernet(0x52, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6603816a001c0630000000000000000042eec211b9010100000000fffb9eb96e8d1655ebff00000005fe80000000001c0400000000c28250c22f659560c5", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700200bd907800010204090003030400"]) r4 = socket(0x18, 0x3, 0xa7) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f00000000c0), 0x2, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$unix(r4, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x409}, 0x8) (async) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x7, 0x8, 0x4, 0xd3f5}, {0x3, 0x10, 0x81, 0x7}]}) 272.162395ms ago: executing program 1 (id=2): sysctl$hw(&(0x7f0000000000)={0x7, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f0000000000)={0x7, 0x6}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) 197.256087ms ago: executing program 3 (id=13): mkdir(&(0x7f0000000300)='./file1\x00', 0x0) (async) r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r0, 0xc0104451, &(0x7f0000000740)={0x5, 0x408, 0x7, 0x10001, "2700001000fb000000000000934445f0388a19a0", 0x33c3300a, 0xc}) chroot(&(0x7f0000000240)='./file1\x00') (async) unveil(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='x\x00') ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x1e, 0x3, 0x0) ioctl$FIONREAD(r1, 0x80606941, &(0x7f00000001c0)) (async) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendto$unix(r2, &(0x7f00000000c0)="452bd3c90b43ff7ea9d9395fe3d94dbf2c4d0f83346aea1baefc4ea9e1ddfcbce5e0f28c9389cf687cae8b9e5813eb4a897f739da655e509a9d5ba0815de7f5d95379cefd0a832ff1b578f722fa65d8aea784fd54226cf8ac111fd83f442b0c1e510a8b97817b80d5217d608253885431ae2345e9173b28103072352f11a996ec8d78da9eab0e9feb0cd8bfc37a9eed0439553f1f82e37032ebed1e95c14f6ccef3a33936eb8d64cd370fef24100091a2304681257d991b80da283ec3e64b03f3e8d7077eba8d5ef06d43d5d7d623880d3281f24f8b90b693cfff92d1b833bd92f14", 0xe2, 0xf, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x2}, 0x8) 192.879515ms ago: executing program 2 (id=14): r0 = socket(0x11, 0x3, 0x0) (async) r1 = socket(0x24, 0x2, 0x0) close(r1) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) (async) r2 = open(&(0x7f0000000240)='./file0\x00', 0x70e, 0x24) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x8625, "0100012d29fb000700000000098002005e00"}) close(r2) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000140)=""/178, 0xfffffdf0}], 0x5e) (async) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) ioctl$WSKBDIO_SETBACKLIGHT(r3, 0x800c5712, &(0x7f00000000c0)={0x1, 0x8, 0x8001}) sendto$unix(r0, &(0x7f0000000200)="b1000502000000000000023401000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc256699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x2b) 192.279217ms ago: executing program 1 (id=15): r0 = socket(0x2, 0x3, 0x2f) r1 = dup(r0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x8018, 0x2020007, 0x101, 0x80000001, 0x81ac, 0x10001, 0x10, [{0x0, 0x9, 0xafde, 0x71002}, {0x2, 0x9, 0x8, 0x34}, {0x4, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200724, 0x7, 0x7}, {0x1, 0x650, 0x3, 0x7}, {0xce1, 0x400, 0x4f8, 0x6d}, {0xfff, 0x7ff, 0x401, 0x8}, {0x40002, 0x82, 0x8000005, 0x5}, {0x6a75, 0xff000000, 0xa94, 0x4}, {0x1cf, 0x10001, 0x0, 0x3}, {0x8, 0x9, 0x8, 0x8000002}, {0xb89, 0x555981aa, 0x70e, 0x112b}, {0x29a71717, 0x9, 0xfffffffd, 0x6}, {0xc, 0x2000002, 0x0, 0x848}, {0x0, 0x1, 0x1002, 0x30000}]}) setrlimit(0x8, &(0x7f0000000980)={0x8, 0x54}) r2 = syz_open_pts() close(r2) r3 = syz_open_pts() ioctl$TIOCSETAF(r3, 0x802c7416, &(0x7f0000000180)={0x1040978a, 0xfe, 0xf7fffc00, 0x80a19f, "bb080300b2a47bbc8756da043f57000000000080", 0x0, 0x4}) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) r4 = socket(0x1e, 0x3, 0x0) getsockname$unix(r4, 0x0, &(0x7f00000002c0)) r5 = socket(0x11, 0x3, 0x0) sendto$unix(r5, &(0x7f00000000c0)="b100050160000004000020000700000008008106cfa1e4fffdf96ecfc73fd3357ae36caa0416fa4f376b36acf00b7805be301e4991f7c8cf5f3fc303ebe1aa5323edeb51e2f0ca3ebbc257699a1f133ea7acb5d602000d7d026ba8af6300371c2102000000720fd38bfbb770c1f5a8aec872ea772ec58904000000008d9800361b1257aba8c500002012010000de5000"/177, 0xb1, 0x802, 0x0, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r1, 0xc014575e, &(0x7f0000000080)={0x81, './file1\x00'}) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x20}], 0x20000059, 0x0) socket(0x18, 0x3, 0x9ef) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000300)="747cc5a00d24d2007b92eccdc751fcb2ebab4df0bf2057eb03ebc489564151d72b3daa193004f4f735f598c88aa9653f862f1941009f49e93a80449171df4383a1b565cc6c1103b19f50ccadc0a17775b3c35806dc31d0e36514e3a065cf0073119a195d8df0b1522293cbe64532ea7e29a8262b8416050bafd44fbd20c409c85f81bb1f6d66c7e15950cc2b7339e4ddd7c3d81acc3019da1ea19a3b24b68078189f72be9b00794b8646", 0xaa}], 0x1) 183.312162ms ago: executing program 3 (id=16): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000380), 0x10, 0x0) ioctl$TIOCSETA(r0, 0xc4504440, &(0x7f00000001c0)={0x2000001, 0x800, 0x3ab, 0xb, "00003f000000000000000000000005000600", 0x2000009, 0x4}) sysctl$kern(&(0x7f0000000000)={0x1, 0x33}, 0x2, &(0x7f0000000040)="21b8a653953396c881b3e7a909879d18c686aa5aad64ef942e28c2925f763b3ea6123a500f0d2c34c7a773e4d277598579d1ae58898d42d7d9752384ae8a3419a2fa89708216fc5604f10223b4fccd7e2344c56008dcd2b50f09511bfd3a01255d95258a517979b9c3287cc9d9cd4040ec03051df7dc94c04ffcc382d4539f34fd89f395c68fd7b3c7f7f240651fea8d4e925842adabfc4e105e699f12b0c675210f6df6fb7783c74d7e575455dd51bbaa38cfe032da5b1cef8f84d28c94dbb442a56ff30c070f7de499cacac5d2355b53863f12ca70b2911cc8", &(0x7f0000000140)=0xda, &(0x7f0000000180)="2afc02a781e2f4db762ce597330f651e1f75704f8032edd28ea6038a09dae8a15e82cf489071", 0x26) 177.511434ms ago: executing program 1 (id=17): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="dd74"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x2, 0x0) close(r0) r1 = socket(0x2, 0x3, 0xfe) setsockopt$sock_int(r1, 0xffff, 0x1000, &(0x7f0000000000)=0x4, 0x4) bind(r1, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000000), 0x10) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) 177.254678ms ago: executing program 4 (id=5): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0x2}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000f09000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f00005dc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xb}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0xffff}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4) sendto(r1, &(0x7f0000000140)="6710f0ea2ab6845a09e446b8d274f2f0619b6e97c170439b9282807e9e369240940bd6f7a7bbf68cc0b3d1bb05ba834f8d23eae2e73359a7f301cbf746d078bd", 0x40, 0x800, &(0x7f0000000180)=@in={0x2, 0x0}, 0xc) ioctl$TIOCFLUSH(r1, 0x80047410, &(0x7f0000000000)) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r2, 0x8020699d, &(0x7f00000001c0)) ioctl$TIOCSETA(r0, 0xc0084428, &(0x7f0000000740)={0x2, 0x40002, 0x2000000, 0x3, "01d04b0a0047c1d100", 0x3, 0x2000006}) 176.978773ms ago: executing program 6 (id=18): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x84000000, 0xffff63de, 0x5, 0x2, 0x8, 0x1, 0x44, 0x10, [{0x5, 0x9, 0xfffff115, 0x80000001}, {0x3, 0xffffffff, 0x9, 0xfff}, {0x1, 0x4baa, 0x3, 0x9}, {0xf85, 0xe2, 0xf, 0xfe}, {0x3, 0x2000007, 0x5, 0x84}, {0x788c, 0xffff, 0x8, 0x5}, {0x4, 0x800, 0x3, 0xfffffffa}, {0x8, 0xffffffff, 0x28000, 0xffffe2e9}, {0x9, 0x801000, 0x2006, 0x7fff}, {0xfffffffb, 0x1, 0x6, 0x8bfd}, {0x0, 0x0, 0x8, 0x6}, {0x10000, 0x0, 0x800000, 0xa6a}, {0x5, 0x4, 0x400009, 0xa1}, {0x3, 0x6e2, 0x4, 0x6f5fc48f}, {0x3, 0x101, 0x3, 0x9}, {0x9be2, 0x1, 0x2, 0x400}]}) setuid(0xee01) setreuid(0xee00, 0x0) setuid(0x0) r1 = semget(0x0, 0x0, 0x1) semctl$GETZCNT(r1, 0x4, 0x7, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) ioctl$TIOCSETA(r0, 0xcd504404, &(0x7f0000000580)={0x20000b, 0x2, 0x1, 0x2f, "cd0000008000000008000000001500", 0x40048003, 0x6}) 81.016444ms ago: executing program 3 (id=19): chmod(&(0x7f0000000040)='.\x00', 0x35e) r0 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x4, &(0x7f0000000040)=0xf7ffc5db, 0x0) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xc4) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x18a) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021", 0x8a, 0x8, 0x0, 0x0) socket(0x2, 0x3, 0x0) recvfrom$unix(r0, &(0x7f0000000280)=""/97, 0x61, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0xfe) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x1b6, 0x3ff}, 0x400, 0x10000, 0x0, 0x0, 0x200000001, 0x80000000000010c, 0x4, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) sendto$unix(0xffffffffffffff9c, &(0x7f0000000000)="b100050460000000000000000041", 0xe, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x3, 0x0) setsockopt(r1, 0x1000000029, 0x1a, &(0x7f0000000080)='\"\x00\x00\x00', 0x4) syz_emit_ethernet(0xb8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) rename(&(0x7f0000000200)='.\x00', &(0x7f0000000240)='./file0/file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept$unix(r3, 0x0, &(0x7f0000000180)) 80.298869ms ago: executing program 1 (id=20): ioctl$TIOCSETA(0xffffffffffffff9c, 0x802c7414, &(0x7f0000000000)={0x6, 0x0, 0xf, 0x4, "21453270a46d6b361d27599c1e96ec8ba73b10d0", 0x5, 0x101}) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x10000) close(0xffffffffffffffff) r1 = syz_open_pts() ioctl$TIOCSPGRP(r1, 0x40047477, &(0x7f0000000080)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r3 = accept$unix(r2, 0x0, &(0x7f0000000100)) ioctl$WSMUXIO_LIST_DEVICES(r2, 0xc1045763, &(0x7f0000000140)={0x0, [{0x1, 0xbc}, {0x1}, {0x1, 0x4}, {0x1, 0x5}, {0x3, 0x14}, {0x2, 0x9}, {0x3, 0x9}, {0x1, 0x3ff}, {0x3, 0x2beb35f8}, {0x2, 0x2}, {0x3, 0xe}, {0x2, 0xfffffffb}, {0x2, 0x1000}, {0x2, 0x2}, {0x2, 0x65b}, {0x2, 0x1}, {0x3, 0x6}, {0x3, 0x4}, {0x2, 0x60}, {0x3, 0x8}, {0x1, 0x5}, {0x3, 0x996}, {0x1, 0xb}, {0x2, 0x101}, {0x2, 0x8}, {0x2, 0x4}, {0x3, 0xdb}, {0x3, 0x4}, {0x3, 0x6e34}, {0x2, 0x3347}, {0x3, 0x2}, {0x1, 0x8}]}) r4 = getpgrp() r5 = getpgid(r4) ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000280)=0xffffffff) sysctl$net_inet_carp(&(0x7f00000002c0)={0x4, 0x2, 0x70, 0x4}, 0x4, &(0x7f0000000300)="fbcae9854a8af7b1e7b34dfc791d2e01d615c10eb7ac35f8f04d33b3cce2f2e239d69672f9b9083a06f091a5a262efee0f83d62f1f35f948c2a73effab8e60200ffd391103ef9cdf6f5423d17ec053da3e7cce0e188c3e5e4bbdbeb69cc03314cbdde64a1231cce8d66c9db5c09ff725f5c2cdb35bb899dee6032497af01cd87960a015d731ff9ada0fab14e190e78eb44b63ce6945a8accfdeee30f0e53cfbe05948997bd2c93f11252dc61ee3de61b24c577f231cd1d7d1de502ffb07abb3275a97f420d5916c800d5c71f4518957fb05a9aeaa833759dc9b82e3ea0d1624de3403c", &(0x7f0000000400)=0xe3, &(0x7f0000000440)="c1eb4870cd84de8376bb4de24be25fd8acf48e189a256213acde301fc85e4c892fb6adaae7e0a27bbdfa64ab8e2881fb8d4458d4d98a3fb32588aeda01bd61a86720c4b12427e9d37fde704511427ce047b68331ad3668239a8008cf816e395da594b6f8b2c0f04337231a78669df943325bde3d2a79ce6dc6eae8dfea8c0c72493fd2e44b579f598ba748dbd5d7603a2abad0941fb68c80ee600f6c77", 0x9d) mknod$loop(&(0x7f0000000500)='./file1\x00', 0x2, 0x1) r6 = accept$unix(r3, &(0x7f0000000540)=@file={0x0, ""/60}, &(0x7f0000000580)=0x3e) setsockopt$sock_int(r6, 0xffff, 0x1008, &(0x7f00000005c0)=0xfffffffb, 0x4) ioctl$TIOCSETAF(r1, 0x802c7416, &(0x7f0000000600)={0x2, 0x6, 0xd, 0x7fff, "9de791f800aa29b949273550245cdf22872d5035", 0x4, 0xfffffffb}) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) execve(&(0x7f0000000640)='./file1\x00', &(0x7f0000000840)=[&(0x7f0000000680)='+\'\x00', &(0x7f00000006c0)='*\x00', &(0x7f0000000700)='/dev/bpf\x00', &(0x7f0000000740)='/dev/bpf\x00', &(0x7f0000000780)='/dev/bpf\x00', &(0x7f00000007c0)='*\xa7].%\x00', &(0x7f0000000800)='/dev/bpf\x00'], &(0x7f0000000900)=[&(0x7f0000000880)='\x00', &(0x7f00000008c0)='\x00']) r7 = shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffd000/0x1000)=nil) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0xc) getsockopt$SO_PEERCRED(r6, 0xffff, 0x1022, &(0x7f0000000980)={0x0, 0x0}, 0xc) getgroups(0x3, &(0x7f00000009c0)=[0x0, 0x0, 0x0]) r11 = getpgid(r4) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000a00)={{0x8001, 0xffffffffffffffff, r8, r9, r10, 0x1, 0x7fff}, 0xc, 0x1, r5, r11, 0x50f1, 0x4, 0x1}) ioctl$WSKBDIO_GETENCODINGS(r2, 0xc0105715, &(0x7f0000000a80)={0x1, [0x0]}) r12 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$BIOCFLUSH(r12, 0x20004268) write(r6, &(0x7f0000000b00)="c3f8af061273a06a9a0cabc8fad1cf6f1a8aa865", 0x14) ioctl$TIOCMSET(r1, 0x8004746d, &(0x7f0000000b40)=0x7ff) 79.568768ms ago: executing program 3 (id=21): select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x2008, 0x9}, 0x0, 0x0, 0x0) (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x2008, 0x9}, 0x0, 0x0, 0x0) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x1, [{&(0x7f0000695000/0x3000)=nil, &(0x7f00003cf000/0x1000)=nil, 0x2}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil}, {&(0x7f0000f08000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000672000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, 0xfffffffffffffffe}, {&(0x7f0000422000/0x4000)=nil, &(0x7f000069a000/0x1000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x91e8}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000c44000/0x2000)=nil, 0x5}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff5000/0x4000)=nil, 0x4}, {&(0x7f0000c18000/0x4000)=nil, &(0x7f0000cc4000/0x2000)=nil, 0x7f}, {&(0x7f00005dc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0xb}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000c0c000/0x2000)=nil, 0x2ff}, {&(0x7f000000e000/0x4000)=nil, &(0x7f00000f4000/0x1000)=nil, 0x7fffffff}, {&(0x7f00000e0000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00002e6000/0x3000)=nil, &(0x7f00000dd000/0xa000)=nil, 0x10001}, {&(0x7f0000394000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000265000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x380b00a4}], './file0\x00'}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x18, 0x1, 0x0) (async) r0 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0x8020699d, &(0x7f00000001c0)) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x19, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f0000000080)='./file1\x00', 0x40, 0x132) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) ioctl$FIONBIO(r2, 0x80487008, &(0x7f0000000140)=0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f00000001c0)={0x3, 0x7, 0xd, 0x4, 0x3, 0x8001, 0x9fc, 0x10, [{0xe9, 0x2, 0x80000001, 0x5}, {0xf4fc, 0x8, 0x1, 0x8}, {0x8000, 0x9, 0x0, 0x125}, {0x3, 0xfffffffe, 0x5, 0x8001}, {0x7, 0x6, 0x2, 0x3}, {0x9, 0xa9, 0x0, 0x10}, {0x71, 0x5, 0x78d, 0x80000001}, {0xa, 0x1, 0x8, 0x6ba18004}, {0x449, 0x2, 0x7}, {0xeb5, 0xffffffff, 0x4, 0x1}, {0xb02, 0x6, 0x166, 0x2}, {0x10000, 0x5, 0x2, 0xfffffffe}, {0x0, 0x0, 0x7, 0xfff6}, {0x7, 0x1, 0x6f16, 0x89}, {0xffff, 0x7f, 0x8, 0x9}, {0xe06, 0xa, 0x1, 0xfffffff5}]}) 61.135824ms ago: executing program 1 (id=22): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x1, 0x4c) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x3, 0x9e, 0x2000007, 0x100, 0x80000001, 0x80000001, 0x10000, 0x10, [{0x10000002, 0x7, 0x824, 0x71000}, {0x7b82, 0x8, 0x9, 0xfffffff9}, {0x7, 0x8000b86, 0xffffff7c, 0x9}, {0x73f0, 0x8800, 0x80000001, 0x2}, {0x401, 0x2, 0x2800, 0x7}, {0x2, 0xc, 0x3, 0x99}, {0x4cdf, 0xdf61, 0x200004f9, 0x10}, {0x6, 0xfffffffc, 0x12, 0xb}, {0x2, 0x82, 0x4, 0x3}, {0x4, 0x28101, 0x93, 0x1ff}, {0x1e0, 0x10001, 0xffffffff, 0x3}, {0x9, 0x29, 0x9, 0x5}, {0xb8c, 0xc3b, 0x80000003, 0x414}, {0x29a71717, 0xfffffffa, 0x0, 0x6}, {0xc, 0xffffff04, 0x6, 0x2200}, {0xfffffffd, 0xbc3d, 0x4, 0x30005}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0, 0x4c}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x8, 0x0, 0x0, 0x0, 0x0, 0x1b6, 0x3ff}, 0xd3a5, 0x10000, 0x0, 0x0, 0x200000001, 0x3, 0x4, 0x9}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3, 0x25, 0xfe, 0x6}, {0x3, 0x10, 0x6, 0x1}, {0x9e, 0x9, 0x0, 0x40003}]}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x81, 0x5, 0x80, 0x100000}, {0x24, 0x24, 0x40, 0x7}]}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x802, 0x16, 0x1, 0xff, 0x80000004, 0x80000003, 0x10001, 0x10, [{0x0, 0x7, 0x4, 0x70fff}, {0x7, 0x8, 0x8, 0xfffffff9}, {0x8, 0xf86, 0x3, 0x9}, {0x8000001, 0x800, 0x8007}, {0x401, 0x200726, 0x2800, 0x7}, {0xfffffff9, 0x6, 0xffffffff, 0x99}, {0x7, 0xffffffff, 0x4f8, 0x6d}, {0x9, 0x7ff, 0x14, 0x8}, {0x2, 0x82, 0x5, 0x9}, {0x4, 0x7fff, 0xd1b, 0x88}, {0x1, 0x10001, 0xc, 0x3}, {0x7ff, 0xb, 0x8, 0x9}, {0xb8c, 0x4, 0x6, 0x4}, {0x29a79717, 0xfffffffa, 0x1, 0x6}, {0xc, 0x7, 0x5, 0x4}, {0x0, 0x1, 0x1002, 0x34004}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x3, 0x0, 0x6}) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$VNDIOCSET(r3, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r3, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x7, 0x0}) (async) close(r3) sysctl$hw(0x0, 0x0, &(0x7f00000000c0)="00041b000f3e8095043fa8985d012c000001003d0817c53fcb7c7d40b5bf661080397500000000000000000000d7526df8c1561d0f34ca547a3f0fa4280083287365e47615", &(0x7f0000000000)=0x45, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x22, &(0x7f0000000340)=ANY=[]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt(r4, 0x0, 0x23, 0xffffffffffffffff, &(0x7f0000000040)) 43.10522ms ago: executing program 6 (id=23): syz_emit_ethernet(0x66, &(0x7f0000000380)={@broadcast, @remote, [], {@ipv6={0x86dd, {0x8, 0x6, "800580", 0x30, 0x3b, 0x3, @ipv4, @rand_addr="fe4d1aafbaf5c2c66da2acf4faeb1e58", {[], @icmpv6=@dest_unreach={0x1, 0x0, 0x0, 0x38, '\x00', {0x0, 0x6, 'j@\r', 0x3, 0x32, 0x4, @rand_addr="202de03bf203cc442ae33206a327509f", @rand_addr="cc3ccd44957fb2011da86b445babbb82"}}}}}}}) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="968ce1c69d9427e1ad5174636898ad874ffb39b42f574f4f4cbc90acc1eb117d7e3bf3d52de5d57a7f2ec5c0d23a134ee25c5f70eee9f43f9c71342063cfdf9eb60982d3ed95723da70920bd1c6331d3e4e1891e80699e9058b7a39ae56ffa1c545b3dfa90cd36699a984bdaedff8dbf3d11d74e26036a000000fa838dd4ad9cc09b433ad34ab63d1711e3fa427a8ced888e847650be0e41d2a1afaf22989a4d8234bb89b73b604d953ac08a24f8e68fafffe29b109252447a209611a7fb9df28dd753c240977903f03c561fc91b459aab812a3c9ef2cf3e", 0xd8}], 0x1) r1 = socket(0x18, 0x3, 0x0) getsockopt(r1, 0x29, 0x3b, 0x0, 0x0) execve(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f0000000140)={@broadcast, @remote, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x20}}}}}}) sendmmsg(r2, &(0x7f0000000080)={0x0}, 0x6a, 0x0) flock(r1, 0x1) 0s ago: executing program 5 (id=6): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5904) clock_settime(0x4, &(0x7f0000000040)={0xfcbecd02, 0x10}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x2, 0x4001, 0x0) r1 = dup(r0) r2 = fcntl$dupfd(r1, 0x2, 0xffffffffffffffff) close(r2) socket(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-7.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.80' (ED25519) to the list of known hosts. login: uvm_fault(0xfffffd806c113208, 0x48, 0, 1) -> e kernel: page fault trap, code=0 Stopped at witness_checkorder+0xb5: movl 0x20(%r14),%r15d TID PID UID PRFLAGS PFLAGS CPU COMMAND 234561 29026 0 0x14000 0x200 0 reaper witness_checkorder(28,9,0) at witness_checkorder+0xb5 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff8000014b5d30,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000148f000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,2,2000,ffff8000387f4a80) at dtclose+0x109 spec_close(ffff80003c4075e0) at spec_close+0x466 VOP_CLOSE(fffffd806c194030,2,fffffd80097fb548,ffff8000387f4a80) at VOP_CLOSE+0x132 vn_closefile(fffffd80674c6b88,ffff8000387f4a80) at vn_closefile+0x12b fdrop(fffffd80674c6b88,ffff8000387f4a80) at fdrop+0x121 closef(fffffd80674c6b88,ffff8000387f4a80) at closef+0x192 fdfree(ffff8000387f4a80) at fdfree+0x116 exit1(ffff8000387f4a80,0,0,1) at exit1+0x576 sys_exit(ffff8000387f4a80,ffff80003c407950,ffff80003c4078a0) at sys_exit+0x1a syscall(ffff80003c407950) at syscall+0xb17 end trace frame: 0xffff80003c4079d0, count: 0 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: uvm_fault(0xfffffd806c113208, 0x48, 0, 1) -> e ddb{1}> trace witness_checkorder(28,9,0) at witness_checkorder+0xb5 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff8000014b5d30,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000148f000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,2,2000,ffff8000387f4a80) at dtclose+0x109 spec_close(ffff80003c4075e0) at spec_close+0x466 VOP_CLOSE(fffffd806c194030,2,fffffd80097fb548,ffff8000387f4a80) at VOP_CLOSE+0x132 vn_closefile(fffffd80674c6b88,ffff8000387f4a80) at vn_closefile+0x12b fdrop(fffffd80674c6b88,ffff8000387f4a80) at fdrop+0x121 closef(fffffd80674c6b88,ffff8000387f4a80) at closef+0x192 fdfree(ffff8000387f4a80) at fdfree+0x116 exit1(ffff8000387f4a80,0,0,1) at exit1+0x576 sys_exit(ffff8000387f4a80,ffff80003c407950,ffff80003c4078a0) at sys_exit+0x1a syscall(ffff80003c407950) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e62d3643da0, count: -15 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c407440 rbx 0 rdx 0 rcx 0xffff8000387f4a80 rax 0xffff8000299edffe r8 0x90 r9 0x1 r10 0xbd7e4e24e89eeb76 r11 0x37098a7b70caaac r12 0xfe r13 0x9 r14 0x28 r15 0 rip 0xffffffff825c1f25 witness_checkorder+0xb5 cs 0x8 rflags 0x10246 __ALIGN_SIZE+0xf246 rsp 0xffff80003c4073a0 ss 0x10 witness_checkorder+0xb5: movl 0x20(%r14),%r15d ddb{1}> show proc PROC (syz-executor) tid=481900 pid=7574 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff8000387f4a80 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff8000ffffc538,0xffff8000387f5a20 process=0xffff80003c429360 user=0xffff80003c402000, vmspace=0xfffffd806c113208 estcpu=36, cpticks=5, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 16666 250401 20298 0 2 0 syz-executor 16666 165296 20298 0 3 0x4000080 bell syz-executor 46236 225314 62366 0 2 0 syz-executor 46236 196184 62366 0 3 0x4000080 fsleep syz-executor 46236 184212 62366 0 3 0x4000080 fsleep syz-executor 46236 221116 62366 0 2 0x4000000 syz-executor 3719 406093 1 0 3 0x82 nanoslp getty 10546 85497 73894 0 2 0 syz-executor 10546 355466 73894 0 3 0x4000080 fsleep syz-executor 27565 201494 94554 0 2 0 syz-executor 27565 308465 94554 0 3 0x4000080 fsleep syz-executor 27565 324104 94554 0 3 0x4000080 pipewr syz-executor 27565 411564 94554 0 3 0x4000080 fsleep syz-executor 41429 132024 82960 0 2 0 syz-executor 41429 229746 82960 0 3 0x4000080 wsevent_read syz-executor 41429 234676 82960 0 3 0x4000080 fsleep syz-executor 72184 9303 95322 0 2 0x2 arp 95322 209754 70753 0 3 0x10008a sigsusp sh 70753 484979 84313 0 3 0x82 wait syz-executor 20298 215600 84313 0 3 0x82 nanoslp syz-executor 80180 363333 84313 0 3 0x2 biowait syz-executor 73894 21785 84313 0 2 0x2 syz-executor 62366 205584 84313 0 3 0x82 nanoslp syz-executor 94554 341348 84313 0 3 0x82 nanoslp syz-executor 58264 17704 84313 0 3 0x82 nanoslp syz-executor 82960 340785 84313 0 3 0x82 nanoslp syz-executor 84313 30141 87660 0 3 0x82 kqread syz-executor 87660 321387 6234 0 3 0x10008a sigsusp ksh 6234 117695 31107 0 3 0x98 kqread sshd-session 31107 437381 86388 0 3 0x92 kqread sshd-session 86388 464025 1 0 3 0x88 kqread sshd 65354 408013 73799 74 3 0x1100092 bpf pflogd 73799 430195 1 0 3 0x80 sbwait pflogd 22025 188491 71770 73 3 0x1100090 kqread syslogd 71770 265794 1 0 3 0x100082 sbwait syslogd 64970 122296 1 0 3 0x100080 kqread resolvd 22541 196294 20899 77 3 0x100092 kqread dhcpleased 93348 292417 20899 77 3 0x100092 kqread dhcpleased 20899 161676 1 0 3 0x80 kqread dhcpleased 18230 180693 0 0 3 0x14200 bored smr 41966 446653 0 0 2 0x14200 zerothread 64816 403986 0 0 3 0x14200 aiodoned aiodoned 86836 11798 0 0 3 0x14200 syncer update 38049 409250 0 0 3 0x14200 cleaner cleaner 29026 234561 0 0 7 0x14200 reaper 22475 372555 0 0 3 0x14200 pgdaemon pagedaemon 66950 283468 0 0 3 0x14200 bored viomb 39698 270444 0 0 3 0x40014200 acpi0 acpi0 87237 325196 0 0 3 0x40014200 idle1 27734 379021 0 0 3 0x14200 bored softnet1 14399 334477 0 0 2 0x14200 softnet0 92276 372891 0 0 3 0x14200 smrbar systqmp 43634 471729 0 0 3 0x14200 bored systq 44804 203330 0 0 3 0x14200 tmoslp softclockmp 66376 260475 0 0 3 0x40014200 tmoslp softclock 60468 249521 0 0 3 0x40014200 idle0 1 392145 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 80180 (syz-executor) thread 0xffff8000fffef240 (363333) exclusive rrwlock inode r = 0 (0xfffffd80677f98f8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c5ceb40) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 Process 29026 (reaper) thread 0xffff8000ffffdc90 (234561) exclusive rwlock kmmaplk r = 0 (0xffffffff8388ab28) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 vm_map_lock_ln+0x12e #3 uvm_unmap+0x7d #4 km_free+0x87 #5 uvm_uarea_free+0x4f #6 reaper+0x1aa #7 proc_trampoline+0x10 Process 92276 (systqmp) thread 0xffff8000ffffe7c8 (372891) shared rwlock systqmp r = 0 (0xffffffff83879148) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10207 11136K 11194K 166960K 11446 0 pcb 18 12K 12K 166960K 22 0 rtable 223 6K 6K 166960K 341 0 pf 35 17K 21K 166960K 48 0 ifaddr 41 7K 7K 166960K 43 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 68 36K 36K 166960K 68 0 ioctlops 0 0K 4K 166960K 1485 0 iov 0 0K 2K 166960K 1 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1408 89K 89K 166960K 1448 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 18 65K 93K 166960K 147 0 proc 71 115K 147K 166960K 532 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 5 0 in_multi 89 6K 6K 166960K 91 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 383 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 247 168K 179K 166960K 3372 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 43 86K 104K 166960K 1305 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 26 1K 1K 166960K 26 0 temp 35 8642K 8706K 166960K 4331 0 kqueue 13 20K 24K 166960K 26 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 39 0 35 1 0 1 1 0 8 0 rtentry 176 104 0 1 5 0 5 5 0 8 0 unpcb 144 35 0 18 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 11 0 5 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 81 0 71 1 0 1 1 0 8 0 nd6 152 21 0 0 1 0 1 1 0 8 0 pkpcb 40 2 0 2 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pffrag 232 2 0 1 1 0 1 1 0 482 0 pffrnode 88 2 0 1 1 0 1 1 0 8 0 pffrent 40 3 0 2 1 0 1 1 0 8 0 pfosfp 40 1428 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1428 0 714 21 0 21 21 0 8 0 pfstitem 24 18 0 0 1 0 1 1 0 8 0 pfstkey 128 18 0 0 1 0 1 1 0 8 0 pfstate 384 17 0 0 2 0 2 2 0 8 0 pfrule 1344 22 0 15 2 0 2 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 411 0 0 26 0 26 26 0 8 0 art_table 40 412 0 0 5 0 5 5 0 8 0 art_node 32 104 0 10 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1593 0 77 95 0 95 95 0 8 0 ffsino 296 1593 0 77 117 0 117 117 0 8 0 nchpl 144 1803 0 101 64 0 64 64 0 8 0 vnodes 216 1759 0 0 98 0 98 98 0 8 0 namei 1024 5566 0 5565 2 0 2 2 0 8 1 percpumem 16 49 0 0 1 0 1 1 0 8 0 kstatmem 264 26 0 0 2 0 2 2 0 8 0 scxspl 216 5859 0 5858 3 1 2 2 1 8 1 plimitpl 152 29 0 12 1 0 1 1 0 8 0 sigapl 424 468 0 420 7 0 7 7 0 8 1 knotepl 120 56 0 0 2 0 2 2 0 8 0 kqueuepl 224 24 0 13 1 0 1 1 0 8 0 pipepl 344 123 0 93 3 0 3 3 0 8 0 fdescpl 528 452 0 420 3 0 3 3 0 8 0 filepl 160 1710 0 1487 12 0 12 12 0 8 2 lockfpl 104 18 0 16 1 0 1 1 0 8 0 lockfspl 48 7 0 5 1 0 1 1 0 8 0 sessionpl 144 22 0 14 1 0 1 1 0 8 0 pgrppl 48 30 0 14 1 0 1 1 0 8 0 ucredpl 104 91 0 78 1 0 1 1 0 8 0 zombiepl 144 421 0 420 1 0 1 1 0 8 0 processpl 1232 468 0 420 5 0 5 5 0 8 0 procpl 664 498 0 440 6 0 6 6 0 8 0 sockpl 752 163 0 132 4 0 4 4 0 8 0 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl16k 16384 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 109 0 0 14 0 14 14 0 8 0 mcl2k 2048 19 0 0 3 0 3 3 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 123 0 0 8 0 8 8 0 8 0 bufpl 280 2334 0 129 158 0 158 158 0 8 0 anonpl 32 3917 0 0 32 0 32 32 0 246 0 amapchunkpl 152 9111 0 8613 20 0 20 20 0 158 0 amappl16 200 1950 0 1930 5 0 5 5 0 8 3 amappl15 192 4 0 4 1 0 1 1 0 8 1 amappl14 184 30 0 30 1 0 1 1 0 8 1 amappl13 176 437 0 435 1 0 1 1 0 8 0 amappl12 168 817 0 775 3 0 3 3 0 8 0 amappl11 160 4 0 4 1 0 1 1 0 8 1 amappl10 152 57 0 43 1 0 1 1 0 8 0 amappl9 144 321 0 321 1 0 1 1 0 8 1 amappl8 136 54 0 53 1 0 1 1 0 8 0 amappl7 128 83 0 82 1 0 1 1 0 8 0 amappl6 120 282 0 266 1 0 1 1 0 8 0 amappl5 112 77 0 66 1 0 1 1 0 8 0 amappl4 104 444 0 414 1 0 1 1 0 8 0 amappl3 96 1423 0 1329 3 0 3 3 0 8 0 amappl2 88 566 0 492 2 0 2 2 0 8 0 amappl1 80 9206 0 8599 15 1 14 14 0 8 0 amappl 88 2616 0 2449 4 0 4 4 0 92 0 uvmvnodes 80 1759 0 0 36 0 36 36 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 452 0 420 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 452 0 420 1 0 1 1 0 8 0 vmmpekpl 168 5552 0 5512 2 0 2 2 0 8 0 vmmpepl 168 37343 0 35425 88 0 88 88 0 357 2 vmsppl 488 451 0 420 5 0 5 5 0 8 0 rwobjpl 80 15441 0 12736 57 0 57 57 0 8 1 pdppl 4096 912 0 840 102 16 86 86 0 8 14 pvpl 32 10202 0 0 83 0 83 83 0 265 0 pmappl 256 451 0 420 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 265 0 18 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff8378eff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83917a50) at __mp_lock+0x192 intr_handler(ffff80002a244600,ffff80000007aa80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x16 reaper(ffff8000ffffdc90) at reaper+0x13b end trace frame: 0x0, count: 7 ddb{0}> trace x86_ipi_db(ffffffff8378eff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83917a50) at __mp_lock+0x192 intr_handler(ffff80002a244600,ffff80000007aa80) at intr_handler+0xe9 Xintr_ioapic_edge23_untramp() at Xintr_ioapic_edge23_untramp+0x18f __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x16 reaper(ffff8000ffffdc90) at reaper+0x13b end trace frame: 0x0, count: -8 ddb{0}> machine ddbcpu 1 Stopped at witness_checkorder+0xb5: movl 0x20(%r14),%r15d witness_checkorder(28,9,0) at witness_checkorder+0xb5 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff8000014b5d30,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000148f000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,2,2000,ffff8000387f4a80) at dtclose+0x109 spec_close(ffff80003c4075e0) at spec_close+0x466 VOP_CLOSE(fffffd806c194030,2,fffffd80097fb548,ffff8000387f4a80) at VOP_CLOSE+0x132 vn_closefile(fffffd80674c6b88,ffff8000387f4a80) at vn_closefile+0x12b fdrop(fffffd80674c6b88,ffff8000387f4a80) at fdrop+0x121 closef(fffffd80674c6b88,ffff8000387f4a80) at closef+0x192 fdfree(ffff8000387f4a80) at fdfree+0x116 exit1(ffff8000387f4a80,0,0,1) at exit1+0x576 sys_exit(ffff8000387f4a80,ffff80003c407950,ffff80003c4078a0) at sys_exit+0x1a syscall(ffff80003c407950) at syscall+0xb17 end trace frame: 0xffff80003c4079d0, count: 0 ddb{1}> trace witness_checkorder(28,9,0) at witness_checkorder+0xb5 mtx_enter(18) at mtx_enter+0x4a clockintr_unbind(ffff8000014b5d30,1) at clockintr_unbind+0x56 dt_ioctl_record_stop(ffff80000148f000) at dt_ioctl_record_stop+0xbc dtclose(11e5f,2,2000,ffff8000387f4a80) at dtclose+0x109 spec_close(ffff80003c4075e0) at spec_close+0x466 VOP_CLOSE(fffffd806c194030,2,fffffd80097fb548,ffff8000387f4a80) at VOP_CLOSE+0x132 vn_closefile(fffffd80674c6b88,ffff8000387f4a80) at vn_closefile+0x12b fdrop(fffffd80674c6b88,ffff8000387f4a80) at fdrop+0x121 closef(fffffd80674c6b88,ffff8000387f4a80) at closef+0x192 fdfree(ffff8000387f4a80) at fdfree+0x116 exit1(ffff8000387f4a80,0,0,1) at exit1+0x576 sys_exit(ffff8000387f4a80,ffff80003c407950,ffff80003c4078a0) at sys_exit+0x1a syscall(ffff80003c407950) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7e62d3643da0, count: -15