last executing test programs: 1.540034589s ago: executing program 0 (id=1): sendmsg(0xffffffffffffffff, 0x0, 0x402) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x6, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0xbe, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x1c5) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x1, 0xffffaf35, 0x7f, 0x5, 0x80000001, 0x7fbffffd, 0x5, 0x10, [{0x10000000, 0x40, 0x3, 0x3}, {0xfffffff3, 0xfffffffe, 0x9, 0x2}, {0x20006, 0x8000b86, 0xa, 0x4}, {0xa, 0x200, 0x5, 0x6}, {0x42, 0x9, 0x2, 0x800007}, {0x20002, 0x8, 0x8, 0x95}, {0x4cdf, 0xdf61, 0x200004f8, 0x66}, {0x8, 0xf, 0xa43, 0x8d}, {0xfffffffd, 0x8e2b5, 0x40000003, 0x6}, {0x4, 0x2d1, 0x8, 0x3}, {0x1e7, 0x400fff9, 0x927c, 0x4}, {0x1016, 0x25, 0x9, 0x2d0b}, {0x3, 0x4f6, 0x80000001, 0x408}, {0x29a71718, 0x4, 0x3, 0x2579}, {0x0, 0xf8f, 0x8}, {0x1, 0x800bd3d, 0xf778, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) r1 = socket$unix(0x1, 0x1, 0x0) getsockname$unix(r1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r4 = open(&(0x7f0000000800)='./file1\x00', 0x8000, 0x2b) ioctl$FIONBIO(r4, 0x82907003, &(0x7f0000000140)) closefrom(r2) 1.394599679s ago: executing program 1 (id=2): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) sysctl$hw(&(0x7f0000000080)={0x6, 0x1}, 0x2, 0x0, 0x0, &(0x7f00000000c0), 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) r2 = socket(0x18, 0x2, 0x0) sendmsg(r2, &(0x7f0000000240)={&(0x7f0000000280)=@in6={0x1c, 0x18, 0x1, 0xfffffffd, "00000000000000000000000000000001", 0x101}, 0x1c, 0x0, 0x0, 0x0}, 0x0) listen(r1, 0x1) shutdown(r1, 0x2) select(0x37, &(0x7f0000000180)={0xfffffffffffffff9, 0x8, 0xffff, 0xfffffffffffffffd, 0x800, 0x181c, 0xa, 0x2}, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x4c) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x400000000003, [{&(0x7f0000385000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x100}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0xffffffffffffff7c}, {&(0x7f0000644000/0x1000)=nil, &(0x7f0000191000/0x1000)=nil, 0x2}, {&(0x7f00001da000/0x4000)=nil, &(0x7f00000d6000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000188000/0x2000)=nil, 0x3fd}, {&(0x7f000060b000/0x2000)=nil, &(0x7f00005c0000/0x1000)=nil, 0x8}, {&(0x7f000055e000/0x4000)=nil, &(0x7f000032f000/0x2000)=nil, 0xa}, {&(0x7f0000613000/0x2000)=nil, &(0x7f00000ce000/0x4000)=nil, 0x5}, {&(0x7f00005d8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil}, {&(0x7f00003bc000/0x3000)=nil, &(0x7f00003f2000/0x2000)=nil, 0xa}, {&(0x7f000064b000/0x2000)=nil, &(0x7f000038f000/0x4000)=nil, 0x12b}, {&(0x7f0000008000/0x3000)=nil, &(0x7f0000688000/0x4000)=nil, 0x9}, {&(0x7f000043b000/0x1000)=nil, &(0x7f000076c000/0x4000)=nil, 0x9}, {&(0x7f00000a5000/0x1000)=nil, &(0x7f000079e000/0x4000)=nil, 0xffffffffbffffff9}, {&(0x7f0000576000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x5e04}, {&(0x7f0000009000/0x2000)=nil, &(0x7f0000001000/0x800000)=nil, 0x8}], './file0\x00', 0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3dd0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10001, 0x0, 0x0, 0x9, 0x0, 0x401, 0x0, 0x0, 0x3, 0x0, 0x0, 0x87, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, 0x2cb28a84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x800, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfa65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x200006, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x0, 0xfffffffd, 0xcb1e, 0x10000, 0x204, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc09, 0x0, 0xfffffffd, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xd09f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x0, 0x8]}) r3 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000080)="eaef125c00000000", 0x8) setsockopt$inet_opts(r3, 0x0, 0x200000000000c, &(0x7f0000000240)="eaef125c00000000", 0xc) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x38a}) r4 = syz_open_pts() close(r4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000180)="0fc5", 0x2) write(r5, &(0x7f0000000140)="e67e843146dfb33d7809c19da343e772a2933512", 0xfffffffb) writev(r4, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) mknod$loop(&(0x7f0000000ac0)='./file0\x00', 0x1000, 0x1) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(r0, 0x82405605, &(0x7f0000000280)={0x4, 0x2, {[0x5, 0x0, 0x7, 0x2637, 0x2, 0x8, 0x5, 0x31, 0x800, 0x5, 0x9, 0xfffffffffffffff9, 0x0, 0x9, 0x9, 0x4, 0x4], [0x8000000000000000, 0xae27, 0x2, 0x2, 0x1, 0x6d, 0x7f8, 0x6, 0xffff, 0x9], [0x3, 0xfff, 0x5, 0x2, 0x0, 0x3, 0x4], [0x8009, 0x53c6, 0xfffffffffffffffe, 0x1, 0x5], [{0xd822, 0xfffffffa, 0x7, 0x8}, {0x811e, 0x0, 0x8001, 0x1}, {0x10, 0x40000, 0x1, 0x6cf}, {0x7, 0x0, 0xa, 0x3}, {0x40, 0x4, 0x84, 0xebe}, {0xff, 0x4, 0x9, 0x8000000000000000}, {0xffff, 0x7, 0x2f, 0x784c}, {0x5, 0x7, 0x3, 0xa}], {0x963, 0xdff, 0xfffffff2, 0x7}, {0x8, 0xd, 0x0, 0x9}}}) getsockname$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) 1.38494184s ago: executing program 4 (id=5): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getentropy(&(0x7f0000000000)=""/249, 0xf9) writev(r0, &(0x7f00000007c0)=[{&(0x7f0000000140)="2d2ad32d1d6bc1e2878d64704b56cb6d4e", 0x11}], 0x1) unveil(0x0, &(0x7f0000000a40)='w\x00') sysctl$kern(&(0x7f0000000100)={0x1, 0x15}, 0x2, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) 1.374916132s ago: executing program 3 (id=4): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xca605601, &(0x7f0000000080)={0x10, 0x9, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000279000/0x2000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffff822d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x73}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xb}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000565000/0x4000)=nil, 0x800000}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffffff89}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x6c6}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000feb000/0x14000)=nil, 0xffffffff}], './file0\x00', 0x5, 0x9, 0x0, 0x8, [0x9, 0x7, 0x6, 0x4, 0x0, 0x3ff, 0x2, 0x8, 0xfff, 0x10003, 0x7, 0x401, 0x1, 0x9, 0x4, 0x8, 0x298, 0x5, 0x100, 0x5, 0x8, 0x7, 0x5, 0xffff, 0x1, 0x8, 0x7, 0x9, 0x5e5, 0x6, 0x0, 0xb677, 0x7f, 0x8, 0xa094, 0x2, 0x100, 0x2, 0x1, 0x4, 0x1, 0x9248, 0x100, 0xb, 0x10000, 0x51, 0xfffffffe, 0x81, 0xa, 0x6, 0xd19d, 0xf, 0x24, 0xabf4, 0x6, 0x3, 0x100, 0x4, 0x2, 0x2, 0xd1, 0xb, 0x4, 0xfffffffe, 0x5, 0x6, 0x7, 0x2, 0x7, 0x6, 0x7, 0xfffffff4, 0x4, 0xb370, 0x2, 0x0, 0x2, 0x3ff, 0xfba, 0x7, 0x0, 0x5, 0x40000007, 0x51, 0xfff, 0xb9, 0x7, 0x5, 0xf, 0x0, 0x1, 0xbe000000, 0x2, 0x1, 0x8, 0xfffffffb, 0x0, 0x7063, 0xa, 0x6, 0x7, 0xa23d, 0x80000001, 0x8, 0x8, 0x9, 0x2, 0x1, 0x6, 0xbc6, 0x5, 0x6, 0x1, 0x2, 0xffe, 0x2, 0x7fffffff, 0x4, 0xffff, 0x5, 0xfffffffc, 0xa000, 0x9, 0x3, 0x3ff, 0x1, 0xd7d9, 0x100, 0xb, 0x1, 0x9, 0x79, 0x2, 0x5, 0xa, 0xb, 0x3, 0x2, 0x5, 0x7, 0xd, 0x9, 0x8001, 0x80000000, 0x52f, 0x5, 0x2, 0x6, 0x5, 0x7a9f, 0xcf, 0x0, 0xea3c, 0xffff, 0x8, 0x4, 0x0, 0x3, 0xffffffff, 0x2, 0x9, 0x4, 0x80, 0xf5a, 0x200, 0xfffffc8f, 0x2, 0x5, 0x5, 0x101, 0x0, 0xaf, 0x8, 0x4, 0x1, 0x2, 0x2, 0x6, 0x7fd, 0x7, 0x6, 0x7fff, 0x6, 0x800, 0x24, 0x9, 0x5, 0x8, 0x48, 0x64a, 0x5, 0x7c, 0x2204fbed, 0x0, 0x8, 0x1, 0x1, 0x800, 0x9, 0x75a1, 0x0, 0x0, 0x32, 0xe04d, 0x4, 0x2, 0xc, 0x1ff, 0x2, 0x8, 0x9, 0x9229, 0x0, 0xb0, 0xc, 0xe11, 0x891a74b, 0xd39, 0x2, 0x9, 0xe73, 0x2, 0x7, 0x9, 0x7fffffff, 0x5, 0x0, 0x2d5, 0xfffffff7, 0xc74c, 0xff, 0x8, 0x6, 0x4, 0x8a, 0x8, 0x2, 0x4774, 0x7, 0x8003, 0x7, 0x81, 0x3, 0x8, 0x1, 0x2, 0xb, 0x8e6, 0x5, 0x7ff, 0x80, 0x2, 0x7f, 0xe, 0x80000000, 0x4, 0x4, 0x9, 0x1, 0x1, 0x9, 0x180, 0x401, 0x7, 0x10000, 0x81, 0x4c1, 0x3, 0x6, 0x4, 0xf7ffffff, 0x12000, 0x10001, 0x99, 0xba8, 0x1, 0xfffffffb, 0xa, 0x1, 0x200, 0x7, 0x0, 0x80, 0x8, 0xef2f, 0x9, 0x0, 0x0, 0xffffffd6, 0x80, 0x1b, 0x7f, 0x0, 0x0, 0x1, 0x1, 0x7, 0xffff, 0x99, 0x8, 0x8, 0xe, 0xfff, 0x3, 0x8, 0x3, 0x8, 0xfffffe00, 0x8000, 0x8, 0xd, 0x1, 0x6, 0x5, 0x0, 0x2, 0x401, 0xbf73, 0x3, 0x7ff, 0x0, 0x5, 0xf, 0x0, 0x1, 0xfffffffc, 0x5, 0xa, 0x6, 0x2, 0x800, 0x2, 0x1006, 0x80000000, 0xed, 0x2, 0x7, 0x8, 0x0, 0x6, 0xfffffff9, 0x7, 0x9, 0xffffffff, 0x0, 0x9, 0x1ff, 0xfa7, 0x6, 0x5, 0x9, 0x2c, 0x2, 0xffffffff, 0x7, 0x8, 0x80000000, 0x4ef69553, 0xf, 0xe80, 0x7fffffff, 0x5, 0x1, 0x1, 0x2, 0x61, 0xc, 0x9, 0x800, 0x2, 0x100, 0xfffffffa, 0x2, 0x1, 0x10000, 0x5, 0x51, 0x8, 0xfffffff8, 0x1, 0x5ed, 0x2, 0x9, 0x22, 0x2, 0x8001, 0xdf, 0x5, 0x6, 0x5, 0x4d7e, 0x5, 0x6, 0x62e4, 0x9, 0x7ff, 0x101, 0x5c, 0x95, 0x6, 0xe, 0xe14, 0x6, 0x8, 0x3, 0x101, 0x5, 0x8001, 0x81, 0x0, 0x1, 0x4, 0x1, 0xa, 0xfffffffa, 0x1000, 0xfff, 0x7fff, 0x75da, 0xd8e3, 0x1, 0xb1a, 0x827, 0x8, 0x81, 0x80000000, 0x9, 0x0, 0x4, 0xd, 0x7, 0xfffffffa, 0x1, 0x1, 0x3, 0x2, 0x50b, 0x10000, 0x5, 0x80e, 0x4, 0xd92, 0x4, 0x40, 0x3, 0xd59, 0x2, 0x4, 0xa53d, 0x8, 0x7, 0xb63, 0xd, 0x4, 0x2, 0x1, 0x5, 0x10, 0x8001, 0x0, 0x8, 0x4, 0x2, 0x9, 0x8001, 0x7fffffff, 0x9, 0x4, 0x4, 0x4, 0x8, 0xffffffff, 0x7f, 0x7fffffff, 0x4, 0x3, 0x7, 0x7, 0x8, 0x10000, 0xb, 0xbb5c, 0x3, 0xa, 0x80000001, 0x3, 0x132, 0x80000001, 0x5, 0xb, 0x9, 0x0, 0x80000000, 0x200, 0xa, 0xa0d, 0xff, 0x4, 0xcf71, 0x1e46c000, 0x9, 0xe, 0xb, 0xfffffffd, 0xf2, 0x7, 0x1000, 0x9, 0x9, 0x1000, 0x5, 0x80000001]}) r0 = socket(0x18, 0x3, 0x0) getsockopt(r0, 0x29, 0x28, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x2000, 0x1e5f) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80184404, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r1, 0x80146950, &(0x7f00000001c0)) 1.36850496s ago: executing program 5 (id=6): r0 = socket(0x2, 0x1, 0x0) r1 = dup(r0) r2 = socket(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000000)={0x10, 0x2, 0x1}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmmsg(r2, &(0x7f0000000c00)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}}, 0x38, 0x8) connect$inet(r1, &(0x7f0000000080)={0x10, 0x2, 0x0}, 0x10) 1.36106117s ago: executing program 2 (id=3): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) r1 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r1, 0x8020697a, &(0x7f0000000000)) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x188) r2 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r2) getrusage(0xffffffffffffffff, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2011, r0, 0x0) setuid(0xffffffffffffffff) getrusage(0xffffffffffffffff, &(0x7f0000000280)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) sysctl$net_inet_esp(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x1}, 0x4000000000000006, 0x0, 0x0, 0x0, 0x0) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240)="0003521e", &(0x7f0000000100)=0x64, &(0x7f0000001900), 0x4) 1.339738921s ago: executing program 6 (id=7): r0 = socket$inet6(0x18, 0x1, 0x6) (async, rerun: 64) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async, rerun: 64) r1 = kqueue() (async) select(0x40, &(0x7f0000000180)={0xfffffffffffffffd, 0x44809e9d, 0xfffffffffffffffb, 0x9, 0x2000000000000000, 0x210, 0x8, 0x3}, 0x0, 0x0, 0x0) kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x55, 0x0) (async, rerun: 64) r2 = open(&(0x7f0000000800)='./file1\x00', 0x1, 0xf) (async, rerun: 64) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) ioctl$DIOCGETRULESETS(r3, 0xc444443a, &(0x7f0000000500)={0xf34d, './file0\x00', './file0\x00'}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) (async, rerun: 32) connect$inet6(r0, &(0x7f0000000040)={0x1c, 0x18, 0x0, 0x10000007, "fe809e000000000000103fe63da2855e", 0x3}, 0x1c) (rerun: 32) 1.313287006s ago: executing program 7 (id=8): setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) getrlimit(0x1, &(0x7f00000000c0)) r0 = syz_open_pts() close(r0) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x3fb}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETD(r1, 0x8004741b, &(0x7f0000000000)=0x9) writev(r1, &(0x7f00000028c0)=[{&(0x7f00000017c0)="a6867daaeb85d37b190fe08b8df2de4dbf6a7132019ef519986083d78fdbe6f3d34484f200963a260456bf48485aec7348266a7be03f4b87424f4ebc1233eefb8961e423692262fe0de35904f71f10d0f89ddc6862447b3c9472eb4b41151d7bf919d128a7fee82ef84f36174f9d4fb016b429ab94961d8b2af8d91b69829e2beac8e6561dd427c20b168391057cb619e39447522b8bff86069e657230177daa502b65d6e7928df4ec5393286935bfd918bc1945e04a1d77480148c962189cbbccdf93d329db855ad11ce306e780edcd4b78b3a95707f0d3bbf59abc9e2ccb506d9c5b9b7f2e7fb8e1e5682d819b0c41ed67890778db4ff7962ec6b9b058e754ba7358c02b528f2cd1dacfe52618e3b89a4558c88a73052e753422d385bbc607d8df86aa4473572c34450b8e2b1c3796793ac9c0f826d8808c4c6549733e7a52f9b608d6bd84c19c3a06373304ef889dadc053e502629de0e9a37f1ec6c09dd8d0147888a53af3c9b9f6c9727aaddf43b81e679d1789694d0a002055b03e3a69a1911004349264620c2cd8dd29910605688c24c799e7adc0c88faa765bfb956fa8884352bb22a3804647f8ead9e5997a16947a1e70d3d40b22606a356e471edab9cd6cb608f547059210ec8e562c58de2eae5ab8c1bb544be128baba867646c77cafff166147645c7af3fc5b3efece13dbe6ebbcff04292f1138af51db91715c4e1aab90a04f291533f9f4569c97b124aa7ae6433007c3ce23f1805cac1625da60834c969aea774d5be45ef7332b5c646506c5622f1cd539b766cd95dad51d18dba7e59fa69e17c3b383d71efa9e73f1d49849ceb2a557997e78f7a952501c2e242b6b3f6bd6ddb7f0ca2e0d11a50d5d4341467a269b548c293ccd594e60a1b2873d10683352af6da4ca4969b09db1838f0b0df044801aa6b15ae9ea10188c8f664daf8deafbe6baa42293a1956ccc8d0c85f0a597365f37f231933900f6619393e8bc221c5901cd5b5978b9d3bef7358fe378014c268072fe6c2c5610f55842a71405778de87e5f6264bac0363c90295bc3022ba260cd6bfbdf652c73bba91e3f40bdd24e8cf81682a46119869b6a891867608bdbbec771177cc3566e39527d033e4d101fb66194eb06f867dc99e47152142da49e8bbd3343f6a0fd23fe7cc900c0a14591aed5b61f20934f30e7160b8065ae5d7af696adf1793d8777e2f22d652d58742042d129734d5d1ec23608b7737df4f5b3700553eb139db3c9d8ace63cc9eb8bed7ec788d134caf97585f61aec51fd088e0cd33bba0913bda82aefaa3997e2ca75061d54ade98eedd999b63a50ba33b2ef87dccf5d2441596133449ca1850d96e08b00182dbca40de7df3a19b1fb85d3ab86a70cce7caf28f70e2798c69fe8ad93b1888c9ed64956e716fac0cfcbdc9e5f3aa946ee0cda15bccbab38b19f16bd4d45e014b3f3ca3f110d35c0b2ba5f2ea522981b77ecdacf61a5762457851d698022c35982030a1a83c717802c5df60ecb730243bda5c07ede22616120522b8eeb02e738263f52defcf21257afec7ca049badee6efcf716fe0a14365262bf54fada40cc9a7e5d0d91f28069da74c71887be410f41bf4a90a35e811693ac0138edf2abe6038490ad1df253d12ec022c1ba8c3b87eef9ecaa5ce939ed2c2d1f1a4a7a5cf86bf91280e5b1b1cc3428265956fcd9f9ccda592e13df6c7db66bbf99f89cd3ecd998c3153ff6f9087dee8ff343135172955fb15f26d8892c257c263b8265bf44bd617e55fc5a891b6a4d38f2c2ead583ae787c05a6f74a6610e7e58c69a45f54d6981ae70818858b8bda244aef4ac7cd346462cca3573a0c8a86edc7c87a7f0f375efa6ae8d58da0507d0866a8f0195c1c6af591a0fdb0abf9531d584f749d364a77766f7ba6e4bbc25237dcdeeb96de2178c6bc59aa61052986cbecb2d42d1608b51e8f80b4b2b5bcd86b7d00d741523456a3c3f1271a609dbf55c913fdd79fbfa135c85a41a59647e6764b11a9d5e0156d8472ed05bee3ed38d47bdca7d7ad89f83eefa8ce59e1e37712f6b9b3d53c000fc199ff04e4981f19bf686d740f613e92bc3551846ad3b585ab1ad0f8e212ae03740fa2bac55cc51c973edb2f8bde85e20f58b7864a37e1355cbf1c4f997ae55ead58e8ab553cb4d879d04324b02052376759af325aef71b4131484e77155371abdb10a3c525f93dcb392539f4c5aa8feb5313aa708d52c32e4287022fb4be6f25179dbdb4f1a1a4ef7d1a1b188d3397100541310a9cd98a72cf34bea190c171818c22c266a7fd5c3be0cb12cece20d5e2cb7dd2cf66c30cf89a64edc65e484d6620499d826f82e0ebf037f3d1cd98274f84bf062af2d267d2032704412036a1bb913aa8057b7ab6aaf64fb401d58440a8b74320e2b39e2a502e9178a8646aa710f2ce9cd04ac44a2cc0dc0fa706faa6d0d638c7f6ebf1ce6224726be73412079335f93d29b0e7fb6be991d8cdee5974eb081f2069be41ce7de51bb06b77ad8728c5c31e1636655005f97297948057407df930aaa679964db31c0cd1d2e7d0aab658b390bb0015b215e0ba168d44afe0a3fedb7f334d03e23dff6a5a511d1aa5a5ddc09c3c32e41427e769e3f77a8bd65585dd464f6b9674341babc8735275bb586a74b5d86baa58e3386a7ab4eff94320f10eab1a1e65a0a0ead4788ea1156602ad01f172980f32e874220cdebad437f315ada27887765266557f39889293488169949a11e988033c56fb70d8a6c7ae07b24ca9f4c2a09d3377e40921e4ec10ac6e51e931344c0a", 0x7c1}], 0x1) r2 = syz_open_pts() ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000040)={0x42b789, 0x3, 0x80007, 0xee6b92a, "bb080006062b0800", 0x5, 0x6}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) clock_getres(0x2, 0xffffffffffffffff) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000680)={0x80000000, 0xf, 0xaa61, 0xfffff6b3, "ba06f0100e58ca462faddfdd7f9ec0bbf249e7d7", 0xc, 0xc}) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) setreuid(0xffffffffffffffff, 0x0) ioctl$BIOCFLUSH(0xffffffffffffffff, 0x20004268) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) 1.243004934s ago: executing program 5 (id=9): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x30000) r0 = syz_open_pts() ioctl$TIOCSETA(r0, 0x80047460, &(0x7f0000000080)={0x7, 0x1ff, 0x5, 0xef0b, "f58ac5014dfba6eb0b535b6e00", 0x4, 0x80000001}) ioctl$TIOCSETAF(r0, 0x802c7416, &(0x7f0000000280)={0x7ff, 0xa565, 0xffff96e3, 0xbc7, "bd3b44d236454befe66ab3fa2c13e6599fce5bcb", 0x4, 0x20008001}) writev(r0, &(0x7f0000001580)=[{&(0x7f00000002c0)="f3fef0651b237ed9fff868e1d79668d56ef95fd1b09aa89f86de9425edc0070d4048b87f4bb3f42ade0939", 0x2b}], 0x1) 1.166474513s ago: executing program 3 (id=10): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x404) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x205b92) mknod(&(0x7f0000000080)='./bus\x00', 0x2000, 0x205b1a) open(&(0x7f0000000080)='./bus\x00', 0x2, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x2db) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) ioctl$BIOCSETIF(r0, 0x40384900, 0x0) ioctl$WSDISPLAYIO_GETEMULTYPE(r0, 0x80184901, &(0x7f00000000c0)={0x6, '.\x00'}) ioctl$DIOCCHANGERULE(r0, 0xcd60441a, &(0x7f0000000140)={0x7, 0xffffff9a, 0x9, './file0\x00', './file0\x00', 0x0, "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"}) ktrace(&(0x7f0000000100)='./file0\x00', 0x0, 0x300, 0x0) 1.158880987s ago: executing program 4 (id=11): ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f0000000000)={0x0, 0x1, 0xffffffffffffffff}) fchdir(r0) close(r0) fchdir(r0) closefrom(r0) kqueue() r1 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$WSMOUSEIO_GTYPE(r1, 0x40045720, &(0x7f0000000080)) ioctl$WSMOUSEIO_SCALIBCOORDS(r1, 0x81205724, &(0x7f00000000c0)={0x9, 0x0, 0x1c76, 0x0, 0x50, 0x2, 0x1, 0x10, [{0x7f, 0x8, 0xfffffffd}, {0x2a, 0x6, 0x4, 0x7}, {0x1, 0x1000, 0x1, 0x52}, {0x7, 0x7ff, 0x5, 0xf7eb}, {0xc, 0x4, 0x8, 0x7}, {0xc, 0x7, 0x61, 0x1124}, {0x9, 0xfffffffb, 0x3, 0x9}, {0x1, 0xb5e, 0x2, 0x200}, {0x9, 0x9, 0x7, 0x7f}, {0x3, 0x9, 0x200, 0x5}, {0xf0b4524, 0x2, 0x0, 0x4}, {0x400000, 0x4114, 0x7ec8fee3, 0xfffffffe}, {0x2, 0x4, 0x3, 0x8}, {0xfffffff9, 0x5, 0xd, 0x1}, {0x2, 0x0, 0x69830871, 0x9}, {0x1, 0x3, 0x7ff, 0x9}]}) ioctl$AUDIO_SETPAR_ctl(r0, 0xc0404125, &(0x7f0000000200)={0x0, 0x1, 0x20, 0x1, 0x1, 0x2b11, 0x1, 0xa, 0x9, 0x2bd3}) ioctl$DIOCSETHOSTID(r0, 0xc0044456, &(0x7f0000000240)) ioctl$WSMOUSEIO_SRES(r0, 0x80045721, &(0x7f0000000280)=0x80000001) r2 = openat$dri(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dri/renderD128\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x8010640d, &(0x7f0000000300)={0x4, 0x7}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x8010640d, &(0x7f0000000340)={0x6, 0xfcf4}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) ioctl$DRM_IOCTL_MODE_CLOSEFB(r0, 0xc00864d0, &(0x7f0000000440)) ioctl$WSMOUSEIO_SETPARAMS(r0, 0x80105728, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x4, 0x4}, {0x22, 0x6}, {0x26, 0x8}], 0x3}) ioctl$PCIOCGETROM(r0, 0xc0107005, &(0x7f0000000540)={{0x2, 0x1, 0x3}, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000580)={0x7, 0x3, r1}) pwritev(r0, &(0x7f0000000740)=[{&(0x7f00000005c0)="c972b198673858fbba97386a0975582f", 0x10}, {&(0x7f0000000600)="d75c5437792dcbdc9703965d0d63e2c19c5cd8973de3f26d80b112b7589af2d2c3d3e83df2877829046ccb8d3def92dadeaa4f44591a7a87017a3adc7520", 0x3e}, {&(0x7f0000000640)="dfedb128043867ae3b8ad2242c920fdf4d75c1de195a9c37e2d7bfa0f274df9fb5c1136850f033d59173110147f737d539616278a3e5e892d63e477faf00a3d4e75c90cc5080c0184a549187d9ffd63630e4dfa1bc9649e5d3", 0x59}, {&(0x7f00000006c0)="9a4ddf1793b6d4b765ee05195b7d3eff68d535a30692923d916883374a8921b79ab851f3fe949d5a4402da33fc0f06f5bc8fe326ae0fa8a4fc537c191b73d475475181383306c3fdf9a87a6940a528189cbe01b80998afee0ae48aeb7525adad2b47e45d7c901b53da2fb00b6a5f3837da211ce974e944", 0x77}], 0x4, 0xfffffffffffffffe) mknod(&(0x7f0000000780)='./file0\x00', 0x0, 0x8) pwrite(0xffffffffffffffff, &(0x7f00000007c0)="4b48404f0916ba87b07f70cf4f0028fbd910574d18aff2a404ab8d0a85a52c3ff9bcdd4b70ba66532cb27325220dfa2c37c6e09d883a63b0d2d70ee20eea67fae2b6da", 0x43, 0x1f66) ioctl$DIOCCHANGERULE(r4, 0xcd60441a, &(0x7f0000000840)={0x8, 0x9, 0x2, './file0\x00', './file0\x00', 0x0, "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"}) chroot(&(0x7f00000015c0)='./file0\x00') ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x2000641f) ioctl$DIOCRGETASTATS(r4, 0xc4504447, &(0x7f0000001840)={{'./file0\x00', './file0\x00', 0x3, 0x3}, &(0x7f0000001600)=[{@multicast1, '\x00', './file0\x00', 0xfffffffe, 0x0, 0x18, 0xc, 0x6, 0x8, 0x8}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x0, 0x6, 0x1a, 0x4, 0xff, 0xe, 0x4}, {@multicast1, '\x00', './file0\x00', 0x4, 0x4040, 0x18, 0x5, 0x52, 0x5, 0xb}, {@multicast1, '\x00', './file0\x00', 0x6, 0x2, 0x18, 0x8, 0x5, 0x6, 0x7}, {@multicast1, '\x00', './file0\x00', 0x5, 0x5, 0x0, 0x9, 0x1, 0x8, 0x3}, {@multicast2, '\x00', './file0\x00', 0x6, 0x400, 0x2, 0x2, 0x10, 0x5, 0x3}, {@empty, '\x00', './file0\x00', 0xed, 0x8, 0x2, 0x1, 0x2, 0x5, 0x1}, {@multicast2, '\x00', './file0\x00', 0x4, 0x81, 0x0, 0x0, 0x8, 0x80, 0xd}, {@empty, '\x00', './file0\x00', 0x1, 0x2, 0x1a, 0x7, 0x2, 0x2, 0x8}, {@remote={0xac, 0x14, 0x0}, '\x00', './file0\x00', 0x0, 0x81, 0x1a, 0xd9, 0xe6, 0x1, 0x2}], 0x9, 0xa, 0x8, 0x3, 0x0, 0x10, 0x0, 0x3}) accept4(r4, &(0x7f0000001cc0)=@in, &(0x7f0000001d00)=0x10, 0x1000) ioctl$FIOGETOWN(r2, 0x4004667b, &(0x7f0000001d40)) 1.092324073s ago: executing program 2 (id=12): chmod(&(0x7f0000000080)='.\x00', 0x11) setuid(0xffffffffffffffff) mknod(&(0x7f0000000040)='./file0\x00', 0x1001, 0x205) mknod(&(0x7f0000000200)='./bus\x00', 0x6000, 0x202) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x6, 0x1, './file0\x00'}, 0x19) open(&(0x7f0000000100)='./bus\x00', 0x615, 0x0) ktrace(&(0x7f00000000c0)='./file0\x00', 0x4, 0x40001514, 0x0) unveil(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='r\x00') 1.076922294s ago: executing program 3 (id=13): r0 = openat$wskbd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffffa, 0x1, 0x2, 0x1, 0xfffffffffffffffe, 0x0, 0xdf5a, 0xffffffffffffffff, 0x0, 0x2efe, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xa8, 0x100000001, 0xce7], [0xfffffffffffffffe, 0x2, 0xfffffffffffffffa, 0x8000ffffffff, 0x100, 0x7b96, 0x1fe, 0xb, 0x1, 0x8], [0x100000001, 0xfefffffffffffffe, 0x40000000, 0x6, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x401, 0x100000000, 0xffffffffffefffff, 0x40006], [{0x8, 0x6, 0x0, 0x8}, {0xfffc, 0x7, 0x5}, {0x10, 0x2001, 0x5bea, 0x814}, {0xf7fe, 0x5, 0x7, 0x8000000c}, {0x13, 0x2, 0xb, 0x808}, {0x400b, 0x40, 0x40000, 0x4}, {0xa, 0x6, 0x4, 0x8}, {0x0, 0x965, 0x400, 0x4}], {0x2000, 0x8, 0x10000}, {0x0, 0x0, 0x3, 0x2}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) socket(0x2, 0x2, 0x0) chflags(0x0, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="630c000000003a9afe51f6f2efa24a85abdd612dd68e59adfebb", 0x1a}, {&(0x7f0000000000)='#\a', 0x2}], 0x2, 0x0}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r1 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000040)) sysctl$kern(&(0x7f00000001c0)={0x1, 0x29}, 0x2, &(0x7f0000000200), 0x0, 0x0, 0x0) r2 = syz_open_pts() setsid() ioctl$TIOCSCTTY(r2, 0x20007461) r3 = openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) closefrom(r2) read(r3, &(0x7f00000002c0)=""/170, 0xaa) accept4(r1, &(0x7f0000000380)=@in, &(0x7f00000003c0)=0x10, 0xa000) ioctl$FIONREAD(r1, 0x8040691a, &(0x7f00000001c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff, 0x0, 0x6}) unlinkat(r4, &(0x7f0000000340)='./file0\x00', 0x0) unveil(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)='w\x00') 18.572574ms ago: executing program 7 (id=14): mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x5900) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x80084904, &(0x7f0000000380)={'tap', 0x0}) (async, rerun: 64) r1 = socket(0x1e, 0x3, 0x0) (rerun: 64) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfffffffffffffe3c, 0x0, 0x37) (async) sendmsg$unix(r1, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[@cred={0x18}], 0x18, 0x40a}, 0x4) (async, rerun: 32) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0x6, 0x8000148, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x1, 0x0, 0x80000001, 0x2, 0x40000009, 0x91c, 0x9, 0x180, 0x0, 0xd3, 0x76, 0xfffffffffffffff7], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x7, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0x10000, 0x200, 0x2], [0x100000000, 0x10801, 0x0, 0x5, 0x200000000007, 0x6], [{0x5ad, 0x7, 0xfffff7fb, 0x6}, {0x2, 0x925, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0xffffffff}, {0xfffc, 0x2, 0x3, 0x895}, {0x4, 0x3, 0x2, 0x9}, {0x1f, 0x222, 0x0, 0x7}, {0xe4, 0x8, 0x1ff}, {0x3, 0xfffffff9, 0x8001, 0x7ff}], {0x52b, 0x5, 0x6, 0x8}, {0xfffb, 0xffffbfc0, 0x8, 0x1aaf}}}) (async, rerun: 32) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) 2.351449ms ago: executing program 0 (id=15): r0 = socket(0x2, 0x1, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e60) (async) r1 = open(&(0x7f0000000440)='./file0\x00', 0x80, 0x48) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x2, 0xffffaf35, 0x7f, 0x4, 0x84000001, 0x7fbefffd, 0x5, 0x10, [{0x10000000, 0x5, 0x4, 0x3f}, {0xffffff73, 0xfffffffe, 0x100001, 0x3}, {0xc7, 0x7, 0x6, 0x9}, {0xb, 0x6, 0xfffffff6, 0x200}, {0xac2, 0x8, 0x1002, 0x800007}, {0x4020002, 0x8, 0x7, 0x9}, {0x9, 0x80df61, 0x200004f8, 0x14}, {0x6, 0x11, 0x2013, 0x6f}, {0xfffffffd, 0x10, 0x40000003, 0xa}, {0x0, 0x3, 0x400, 0x1ff}, {0x1e6, 0x400fff9, 0x10927c, 0x4}, {0x3, 0x25, 0x9, 0x2d0b}, {0xfffffffe, 0x2, 0x80002004, 0x408}, {0x2, 0x8, 0x0, 0x200}, {0x7ffe, 0x1, 0x8, 0x5}, {0xfffffffd, 0xfffffffd, 0xf779, 0x8}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r1, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r1, 0x80044403, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r2 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r2, 0xc0206921, &(0x7f00000001c0)) (async) r3 = socket(0x2, 0x1, 0x0) ioctl$WSKBDIO_GETENCODINGS(r1, 0xc0105715, &(0x7f0000000a40)={0x1, &(0x7f0000000a00)=[0x0]}) (async) ioctl$FIONREAD(r3, 0x80206916, &(0x7f00000001c0)) (async) connect$inet(r0, &(0x7f0000000200)={0x10, 0x2, 0x1, 0x200000e3}, 0x10) (async) shutdown(r0, 0x1) (async) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000462000/0x2000)=nil, &(0x7f000057e000/0x2000)=nil, 0x1}, {&(0x7f00001f1000/0x3000)=nil}, {&(0x7f00000cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xfffffffffffffffd}, {0x0, &(0x7f00004f5000/0x4000)=nil, 0x10000}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000181000/0x1000)=nil, 0x1}, {&(0x7f0000000000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x2}, {&(0x7f000028c000/0x4000)=nil, &(0x7f000028b000/0x3000)=nil, 0xe04}, {&(0x7f00003de000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil}, {&(0x7f0000065000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff}, {&(0x7f0000523000/0x1000)=nil, &(0x7f0000063000/0x13000)=nil}, {&(0x7f0000181000/0x3000)=nil, &(0x7f0000156000/0x1000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000463000/0x1000)=nil, 0x8}, {&(0x7f00004c1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1ffffffff}, {&(0x7f00004c1000/0x2000)=nil, &(0x7f000006c000/0x4000)=nil, 0x2}, {&(0x7f00001cf000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x4}, {&(0x7f00000cf000/0x1000)=nil, &(0x7f000028b000/0x4000)=nil, 0x9}], './file0\x00', 0x0, 0x1, 0x0, 0x43b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43]}) (async) mknod(&(0x7f0000000580)='./bus\x00', 0x2000, 0xd02) r4 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x140) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r5 = open(&(0x7f0000000080)='./file1\x00', 0x18289, 0x1f0) write(r5, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) ioctl$VNDIOCSET(r4, 0xc0785101, &(0x7f0000000140)={0x0, 0x3, 0x0, 0x11}) (async) getsockopt$sock_int(r5, 0xffff, 0x1024, 0x0, 0x0) 915.431µs ago: executing program 2 (id=16): mprotect(&(0x7f0000001000/0xd000)=nil, 0xd000, 0x5) setuid(0xffffffffffffffff) (async) setuid(0xffffffffffffffff) msgget$private(0x0, 0x0) msgsnd(0xffffffffffffffff, 0x0, 0x0, 0x800) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) (async) setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000002c0)={0x43ff, 0x1, 0xfff5ff88, 0x160350d, "fee0ff00700907ffdd00", 0x2, 0x3}) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) r1 = syz_open_pts() syz_open_pts() syz_open_pts() fchflags(r1, 0x10000) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sysctl$kern(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x8, &(0x7f00000003c0)={0x42, 0x62}) r2 = syz_open_pts() close(r2) (async) close(r2) syz_open_pts() ioctl$FIOASYNC(r2, 0x80047470, &(0x7f0000000000)=0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write(r2, &(0x7f00000001c0)="8438c9bb5989d77079739ee866a8baae1dd3cfbdb17ca69a159dad59744b471281f1d072cc9653d40ca419e3eda11d74f9ce127c1de1a07748e12ee773174641ae532d3806cd21b55cda90f41c529030bf6b896ae392a0d8d91044ad921f615ba8bcfcb7e9fa9c37eae170711e09b544ddb8f683d32b85dc8325573801f0c2383d", 0x81) read(r2, &(0x7f0000001000)=""/4096, 0x1000) msgget$private(0x0, 0x11d) (async) r3 = msgget$private(0x0, 0x11d) msgget$private(0x0, 0x118) (async) r4 = msgget$private(0x0, 0x118) msgsnd(r4, 0x0, 0x401, 0x0) msgctl$IPC_RMID(r3, 0x0) (async) msgctl$IPC_RMID(r3, 0x0) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) wait4(0x0, 0x0, 0x11, 0x0) 0s ago: executing program 4 (id=17): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_emit_ethernet(0x47, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x39, 0x67, 0x0, 0x0, 0x11, 0x0, @empty, @rand_addr=0xac14ffff}, @icmp=@dest_unreach={0x3, 0xe, 0x0, 0x0, 0x3, 0xf2, {0x6, 0x4, 0x3, 0x19, 0x7fff, 0x67, 0x0, 0x3, 0xf0, 0x2, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@end]}}, "7b1aee0690"}}}}}) (async, rerun: 64) mlock(&(0x7f0000363000/0x3000)=nil, 0x3000) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x6, 0x1, &(0x7f0000000340)="04000000d7fc90fd03c797bb16f5edfd61edbc85363696e0551b2724734db75301d7ac8d37aac04fea8f866e144323c7791672e0d20db4fba0619ac7a41377f11359c9f6618bd4c187f58f833bc05e313a606f825908e3c7db76310fc54f09d96158efa47b46a744033d7a39334165a4b2783b735b5698cfd30ff7568ba07e742a8fa2d98e35c20c5feb235b9f02b9c89194a0516744000000000020001808e2c11aa78b2a6e8494f418faeca147d2294e2abb05f699ce738ec509847135b3406401bdae8f045570805c031e6606b1d1acbb95ed8269f1f07400bb65b788f19f09", 0xe1) (async) open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) (async) setrlimit(0x1, &(0x7f0000000240)={0xad, 0x1fd}) (async) r1 = getpid() setgroups(0x0, 0x0) (async) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) (async) utimes(0x0, &(0x7f0000000140)={{0x10000, 0xffffffff}, {0x2, 0x3}}) (async, rerun: 32) unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000a00)='x\x00') (async, rerun: 32) setuid(0xee01) r2 = kqueue1(0x10000) kevent(r2, 0x0, 0x6, 0x0, 0x5, &(0x7f0000000440)={0x8, 0x5ed0}) (async, rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): kern.securelevel: 0 -> 1 creating runtime link editor directory cache. preserving editor files. starting network daemons: sshd. starting local daemons:. Fri Sep 18 19:57:36 PDT 2026 OpenBSD/amd64 (ci-openbsd-main-5.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.0.75' (ED25519) to the list of known hosts. login: pckbd_enable: command error kernel: protection fault trap, code=0 Stopped at in_ifdetach+0x67: movzbl 0x1(%rax),%r12d ddb> ddb> set $lines = 0 ddb> set $maxwidth = 0 ddb> show panic the kernel did not panic ddb> show kasan No such command ddb> trace in_ifdetach(ffff8000015e2000) at in_ifdetach+0x67 if_detach(ffff8000015e2000) at if_detach+0x322 tun_clone_destroy(ffff8000015e2000) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a84cf00) at if_clone_destroy+0x1d5 tun_dev_close(5d04,7) at tun_dev_close+0x1d9 spec_close(ffff80002a84cfc0) at spec_close+0x417 VOP_CLOSE(ffffef006e294028,7,ffffef0007ffd548,ffff80002a736538) at VOP_CLOSE+0x129 vn_closefile(ffffef007c7dac40,ffff80002a736538) at vn_closefile+0x11d fdrop(ffffef007c7dac40,ffff80002a736538) at fdrop+0x121 closef(ffffef007c7dac40,ffff80002a736538) at closef+0x190 fdfree(ffff80002a736538) at fdfree+0x115 exit1(ffff80002a736538,43,0,1) at exit1+0x595 sys_exit(ffff80002a736538,ffff80002a84d320,ffff80002a84d270) at sys_exit+0x1a syscall(ffff80002a84d320) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f6b978e7c80, count: -15 ddb> show registers rdi 0 rsi 0 rbp 0xffff80002a84cdf0 rbx 0xffff8000015f6940 rdx 0 rcx 0x4cdecc79052263d2 rax 0xdead4110dead4110 r8 0x1c8 r9 0 r10 0xa4cb7ae9efa1497f r11 0x83c04c4ff826f478 r12 0x8 r13 0xffff8000015e2048 r14 0xffff8000015e2000 r15 0xdead0036dead4110 rip 0xffffffff81c184d7 in_ifdetach+0x67 cs 0x8 rflags 0x10282 __ALIGN_SIZE+0xf282 rsp 0xffff80002a84cda0 ss 0x10 in_ifdetach+0x67: movzbl 0x1(%rax),%r12d ddb> show proc PROC (syz-executor) tid=336384 pid=47339 tcnt=0 stat=onproc flags process=a proc=2000 runpri=32, usrpri=50, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a737230,0xffff80002a736a78 process=0xffff80002a769f90 user=0xffff80002a848000, vmspace=0xffffef006f93a008 estcpu=16, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 30637 459474 98888 -1 3 0x10 0x80 nanoslp syz-executor 30637 321314 98888 -1 3 0x10 0x4000080 kqsel syz-executor 30637 509473 98888 -1 3 0x10 0x4000080 fsleep syz-executor 30637 368209 98888 -1 3 0x10 0x4000080 fsleep syz-executor 54273 122855 21445 0 3 0 0 vmmaplk syz-executor 54273 333531 21445 0 3 0 0x4000000 physio syz-executor 54273 108379 21445 0 3 0 0x4000000 vmmaplk syz-executor 34009 361329 42177 0 3 0x2 0x80 piperd syz-executor 67433 520397 42177 0 3 0x2 0x80 nanoslp syz-executor 51615 174757 42177 0 3 0x2 0x80 piperd syz-executor 98888 92072 42177 0 3 0x2 0x80 nanoslp syz-executor 27399 202791 42177 0 3 0x2 0x80 piperd syz-executor 21445 103300 42177 0 3 0x2 0x80 nanoslp syz-executor 42177 142848 59184 0 3 0x2 0x80 wait syz-executor 59184 116638 25966 0 3 0x100002 0x88 sigsusp ksh 25966 94162 63924 0 3 0x10 0x88 kqread sshd-session 63924 220123 27758 0 3 0x12 0x80 kqread sshd-session 13812 76201 1 0 3 0x100003 0x80 ttyin getty 27758 135703 1 0 3 0 0x88 kqread sshd 39030 167770 60494 73 3 0x1100010 0x80 kqread syslogd 60494 348183 1 0 3 0x100002 0x80 sbwait syslogd 49228 330767 1 0 3 0x100000 0x80 kqread resolvd 19128 480951 46292 77 3 0x100012 0x80 kqread dhcpleased 50504 370678 46292 77 3 0x100012 0x80 kqread dhcpleased 46292 324373 1 0 3 0 0x80 kqread dhcpleased 94967 154895 0 0 3 0x14000 0x200 bored smr 9105 128425 0 0 2 0x14000 0x200 zerothread 2076 51278 0 0 3 0x14000 0x200 aiodoned aiodoned 39715 324444 0 0 3 0x14000 0x200 syncer update 97034 237255 0 0 3 0x14000 0x200 cleaner cleaner 91463 278906 0 0 3 0x14000 0x200 reaper reaper 23777 232403 0 0 3 0x14000 0x200 pgdaemon pagedaemon 37536 155681 0 0 3 0x14000 0x200 bored viomb 77546 476360 0 0 3 0x14000 0x40000200 acpi0 acpi0 92001 220323 0 0 3 0x14000 0x200 bored softnet0 45928 515272 0 0 3 0x14000 0x200 smrbar systqmp 94963 154219 0 0 3 0x14000 0x200 bored systq 60321 393980 0 0 3 0x14000 0x40000200 tmoslp softclock 78821 160600 0 0 3 0x14000 0x40000200 idle0 1 133986 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb> show all locks No such command ddb> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11034 12119K 12136K 166960K 12197 0 pcb 17 12K 12K 166960K 19 0 rtable 239 7K 7K 166960K 357 0 pf 30 12K 14K 166960K 34 0 ifaddr 42 7K 7K 166960K 46 0 ifgroup 50 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 33 17K 18K 166960K 67 0 ioctlops 0 0K 2K 166960K 65 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1291 81K 81K 166960K 1369 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 2 0K 0K 166960K 2 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 13 45K 97K 166960K 147 0 proc 59 59K 116K 166960K 503 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 99 6K 6K 166960K 102 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 4 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 61 281K 281K 166960K 61 0 exec 0 0K 1K 166960K 365 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 192 150K 158K 166960K 3027 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 34 68K 96K 166960K 1247 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 11 0K 2K 166960K 28 0 temp 38 9107K 9116K 166960K 3350 0 kqueue 13 20K 26K 166960K 30 0 SYN cache 2 16K 16K 166960K 2 0 ddb> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle rtpcb 120 36 0 33 1 0 1 1 0 8 0 rtentry 136 112 0 2 4 0 4 4 0 8 0 unpcb 144 42 0 27 1 0 1 1 0 8 0 syncache 336 4 0 4 1 0 1 1 0 8 1 tcpcb 736 78 0 73 7 0 7 7 0 8 6 arp 96 18 0 0 1 0 1 1 0 8 0 inpcb 328 136 0 127 7 0 7 7 0 8 6 nd6 112 24 0 0 1 0 1 1 0 8 0 pkpcb 40 65 0 65 1 0 1 1 0 8 1 kcovpl 48 8 0 0 1 0 1 1 0 8 0 ppxss 1072 33 0 33 1 0 1 1 0 8 1 pppxif 1416 33 0 33 1 0 1 1 0 8 1 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 458 0 6 29 0 29 29 0 8 0 art_table 40 459 0 6 5 0 5 5 0 8 0 art_node 32 112 0 11 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1588 0 127 92 0 92 92 0 8 0 ffsino 256 1588 0 127 92 0 92 92 0 8 0 nchpl 144 1793 0 101 64 0 64 64 0 8 0 vnodes 216 1673 0 0 93 0 93 93 0 8 0 namei 1024 6121 0 6121 3 0 3 3 0 8 3 kstatmem 264 25 0 2 2 0 2 2 0 8 0 scsiplug 72 1 0 1 1 0 1 1 0 8 1 scxspl 216 6175 0 6173 3 0 3 3 1 8 2 plimitpl 152 33 0 16 1 0 1 1 0 8 0 sigapl 424 442 0 404 6 0 6 6 0 8 1 knotepl 120 3207 0 3160 8 0 8 8 0 8 6 kqueuepl 184 30 0 20 1 0 1 1 0 8 0 pipepl 304 123 0 96 3 0 3 3 0 8 0 fdescpl 448 429 0 404 5 0 5 5 0 8 1 filepl 120 1709 0 1495 9 0 9 9 0 8 0 lockfpl 104 10 0 8 1 0 1 1 0 8 0 lockfspl 48 6 0 4 1 0 1 1 0 8 0 sessionpl 144 24 0 16 1 0 1 1 0 8 0 pgrppl 48 32 0 16 1 0 1 1 0 8 0 ucredpl 104 111 0 98 1 0 1 1 0 8 0 zombiepl 144 407 0 404 1 0 1 1 0 8 0 processpl 1152 442 0 404 4 0 4 4 0 8 0 procpl 664 474 0 431 5 0 5 5 0 8 1 sockpl 552 279 0 251 7 0 7 7 0 8 4 mcl64k 65536 3 0 3 1 0 1 1 0 8 1 mcl16k 16384 2 0 2 1 0 1 1 0 8 1 mcl8k 8192 4 0 4 1 0 1 1 0 8 1 mcl4k 4096 2490 0 2434 13 0 13 13 0 8 4 mcl2k 2048 134 0 134 1 0 1 1 0 8 1 mextrefs 64 44 0 44 1 0 1 1 0 8 1 mtagpl 96 4 0 4 1 0 1 1 0 8 1 mbufpl 256 4457 0 4327 11 0 11 11 0 8 0 bufpl 272 2251 0 102 144 0 144 144 0 8 0 anonpl 24 82890 0 78753 32 0 32 32 0 187 7 amapchunkpl 152 8279 0 7847 25 0 25 25 0 158 7 amappl16 200 1144 0 1109 4 0 4 4 0 8 2 amappl15 192 4 0 3 1 0 1 1 0 8 0 amappl14 184 427 0 426 1 0 1 1 0 8 0 amappl13 176 119 0 108 1 0 1 1 0 8 0 amappl12 168 721 0 697 2 0 2 2 0 8 0 amappl11 160 82 0 82 1 0 1 1 0 8 1 amappl10 152 58 0 48 1 0 1 1 0 8 0 amappl9 144 278 0 277 1 0 1 1 0 8 0 amappl8 136 92 0 91 1 0 1 1 0 8 0 amappl7 128 141 0 130 1 0 1 1 0 8 0 amappl6 120 186 0 185 1 0 1 1 0 8 0 amappl5 112 118 0 111 1 0 1 1 0 8 0 amappl4 104 260 0 244 1 0 1 1 0 8 0 amappl3 96 1422 0 1353 3 0 3 3 0 8 0 amappl2 88 545 0 479 2 0 2 2 0 8 0 amappl1 80 10090 0 9557 14 0 14 14 0 8 1 amappl 88 2333 0 2203 4 0 4 4 0 92 0 uvmvnodes 80 96 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 0 1 1 0 8 1 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 0 1 1 0 8 1 dma128 128 254 0 254 1 0 1 1 0 8 1 dma64 64 6 0 6 1 0 1 1 0 8 1 dma32 32 7 0 7 1 0 1 1 0 8 1 dma16 16 19 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 429 0 404 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 429 0 404 1 0 1 1 0 8 0 vmmpekpl 168 5537 0 5500 2 0 2 2 0 8 0 vmmpepl 168 37098 0 35531 80 0 80 80 0 357 5 vmsppl 368 428 0 404 4 0 4 4 0 8 1 rwobjpl 40 13550 0 12637 11 0 11 11 0 8 0 pdppl 4096 864 0 808 96 30 66 82 0 8 10 pvpl 32 208366 0 199745 98 0 98 98 0 265 25 pmappl 216 428 0 404 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 508 0 30 15 0 15 15 0 8 0 ddb> machine ddbcpu 0 No such command ddb> trace in_ifdetach(ffff8000015e2000) at in_ifdetach+0x67 if_detach(ffff8000015e2000) at if_detach+0x322 tun_clone_destroy(ffff8000015e2000) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a84cf00) at if_clone_destroy+0x1d5 tun_dev_close(5d04,7) at tun_dev_close+0x1d9 spec_close(ffff80002a84cfc0) at spec_close+0x417 VOP_CLOSE(ffffef006e294028,7,ffffef0007ffd548,ffff80002a736538) at VOP_CLOSE+0x129 vn_closefile(ffffef007c7dac40,ffff80002a736538) at vn_closefile+0x11d fdrop(ffffef007c7dac40,ffff80002a736538) at fdrop+0x121 closef(ffffef007c7dac40,ffff80002a736538) at closef+0x190 fdfree(ffff80002a736538) at fdfree+0x115 exit1(ffff80002a736538,43,0,1) at exit1+0x595 sys_exit(ffff80002a736538,ffff80002a84d320,ffff80002a84d270) at sys_exit+0x1a syscall(ffff80002a84d320) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f6b978e7c80, count: -15 ddb> machine ddbcpu 1 No such command ddb> trace in_ifdetach(ffff8000015e2000) at in_ifdetach+0x67 if_detach(ffff8000015e2000) at if_detach+0x322 tun_clone_destroy(ffff8000015e2000) at tun_clone_destroy+0x2a2 if_clone_destroy(ffff80002a84cf00) at if_clone_destroy+0x1d5 tun_dev_close(5d04,7) at tun_dev_close+0x1d9 spec_close(ffff80002a84cfc0) at spec_close+0x417 VOP_CLOSE(ffffef006e294028,7,ffffef0007ffd548,ffff80002a736538) at VOP_CLOSE+0x129 vn_closefile(ffffef007c7dac40,ffff80002a736538) at vn_closefile+0x11d fdrop(ffffef007c7dac40,ffff80002a736538) at fdrop+0x121 closef(ffffef007c7dac40,ffff80002a736538) at closef+0x190 fdfree(ffff80002a736538) at fdfree+0x115 exit1(ffff80002a736538,43,0,1) at exit1+0x595 sys_exit(ffff80002a736538,ffff80002a84d320,ffff80002a84d270) at sys_exit+0x1a syscall(ffff80002a84d320) at syscall+0x962 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x7f6b978e7c80, count: -15