last executing test programs: 2.56790238s ago: executing program 7 (id=6629): mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0xd02) r0 = open(&(0x7f0000000080)='./bus\x00', 0x880, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) getpid() getsockopt$SO_PEERCRED(r0, 0xffff, 0x1022, &(0x7f0000000280)={0x0}, 0xffffffffffffffba) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setreuid(0xee00, 0x0) r2 = getuid() setreuid(0x0, r2) r3 = socket(0x18, 0x0, 0x4d) setsockopt(r3, 0x1000000029, 0x35, &(0x7f0000000040)="03000000", 0x4) ktrace(&(0x7f0000000000)='./file0\x00', 0x4, 0x40000530, r1) mknod(&(0x7f0000000180)='./file0\x00', 0x2000, 0x202) r4 = socket(0x18, 0x2, 0x0) close(r4) socket(0x800000018, 0x1, 0x0) symlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./bus\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) chmod(&(0x7f0000000040)='./file0\x00', 0x23f) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) setuid(0xffffffffffffffff) faccessat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) r5 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) ioctl$WSMUXIO_LIST_DEVICES(r5, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x3, 0xfffffffe}, {0x1, 0x1c}, {0x3, 0x70b1}, {0x2, 0x11}, {0x2, 0xa}, {0x0, 0x20000001}, {0x1, 0x5}, {0x0, 0x5}, {0x3}, {0x1}, {0x1}, {0x0, 0xa8}, {}, {}, {0x3}, {0x1, 0xfffffffe}, {0x1, 0xb4}, {0x1}, {0x2, 0x1fe}, {0x2, 0x2}, {0x3, 0x4}, {0x2, 0x6}, {0x2}, {0x2}, {0x0, 0x5}, {0x0, 0x1}, {}, {0x1, 0x80000000}, {0x2, 0xfffffff8}, {}, {0x0, 0x4ab60683}]}) connect$unix(r4, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r6 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r6, 0xc0384600, &(0x7f0000000140)={&(0x7f0000000180)='./file0\x00', 0x567, 0x0}) ioctl$WSKBDIO_SETBACKLIGHT(r0, 0x800c5712, &(0x7f00000001c0)={0x488e, 0x5, 0xff}) open(&(0x7f0000000100)='./bus\x00', 0x400, 0x162) 2.368345445s ago: executing program 7 (id=6638): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x8) close(r1) 2.368021394s ago: executing program 7 (id=6639): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0) r0 = openat$diskmap(0xffffffffffffff9c, &(0x7f0000000000), 0x888, 0x0) ioctl$DIOCMAP(r0, 0xc0106477, &(0x7f00000000c0)={&(0x7f0000000140)='./file0\x00', r0, 0x3}) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="69e1629b6174aaaaaaaaaabb86dd60062e0b"]) execve(0x0, 0x0, 0x0) 2.256006661s ago: executing program 7 (id=6646): r0 = openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x88d0, 0x0) ioctl$TIOCGETD(r0, 0x4004741a, &(0x7f0000000040)) ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f0000000080)=0x9) ioctl$TIOCMBIC(r0, 0x8004746b, &(0x7f00000000c0)=0x3) ioctl$TIOCSTOP(r0, 0x2000746f) ioctl$TIOCSBRK(r0, 0x2000747b) ioctl$TIOCMGET(r0, 0x4004746a, &(0x7f0000000100)) ioctl$TIOCSTSTAMP(r0, 0x8008745a, &(0x7f0000000140)={0x7, 0x3}) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@in, &(0x7f00000001c0)=0xc) sysctl$hw(&(0x7f0000000200)={0x6, 0x8}, 0x2, &(0x7f0000000240)="0af088c4e7cbe65e0257c68f6dae25e64ecfa3f925c4c1da9460cee545f5ee18099a41", &(0x7f0000000280)=0x23, &(0x7f00000002c0)="f29b3f49efe6147e591e722d611622614e238eac69a33cf54288c170d8542d7a6dc6bfbd21e8f55cb52837d28635fe3a7fc44995551e66fd73924fcea849df03d7885b48daf9eaff5d355d9e4deff0faef46f100fbea51c4b665269137346e30e68230477e699ab29a6e5611bf6c40f1da83e30af344f31d83e58b7a7afa3e46bc107b5c696540c76ecb6456e07c11fdb052", 0x92) r2 = openat$wsmouse(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) ioctl$WSMOUSEIO_GTYPE(r2, 0x40045720, &(0x7f00000003c0)) ioctl$FIONREAD(r0, 0x4004667f, &(0x7f0000000400)) ioctl$TIOCSCTTY(r0, 0x20007461) fchdir(r0) r3 = openat$tty(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$WSMOUSEIO_GTYPE(r2, 0x40045720, &(0x7f0000000480)) read(r3, &(0x7f00000004c0)=""/148, 0x94) fcntl$setstatus(r1, 0x4, 0x4) recvmmsg(r1, &(0x7f0000000780)={&(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)}], 0x2, &(0x7f0000000700)=""/23, 0x17}, 0x5}, 0x10, 0x40, &(0x7f00000007c0)={0x1}) r4 = syz_open_pts() ioctl$TIOCCLRVERAUTH(r4, 0x2000741d) ioctl$TIOCSCTTY(r0, 0x20007461) r5 = openat$tty(0xffffffffffffff9c, &(0x7f0000000800), 0x80, 0x0) ioctl$TIOCSBRK(r5, 0x2000747b) r6 = openat(0xffffffffffffffff, &(0x7f0000000840)='./file0\x00', 0x80, 0x18) chflagsat(r6, &(0x7f0000000880)='./file0\x00', 0x10001, 0x0) sysctl$kern(&(0x7f00000008c0)={0x1, 0x34}, 0x2, &(0x7f0000000900)="0f356b4e3032e8e8970e882c5a50f8101b72fba02cbb3449e83af93a41acdd0da95df1be677504d548449cb4cdb885a631dd0c06daa2592b33ddca4eeb240e02edf9c1554e95dbe3de0552bdf3f396a2aa07e1ce39041373fead7ab5c7e2", &(0x7f0000000980)=0x5e, &(0x7f00000009c0)="41708de2745ecd6d48e724052f51da240c1c78a929c65a3b41874411453e5003160ec45301e83e83d7d895f8d08e6e0ab97e65d202ce32a99fcca23a0d49a49c0863", 0x42) ioctl$WSMOUSEIO_GCALIBCOORDS(r2, 0x41205725, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) fchdir(r3) 2.252271966s ago: executing program 7 (id=6648): r0 = socket(0x10, 0x2, 0x1) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x2}, 0x8) setsockopt(0xffffffffffffffff, 0x0, 0x21, &(0x7f0000000080)="c5", 0x1) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f00000000c0)=0x400, 0x12) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000380)={0xf669, 0x3dd, 0x101, 0x5ffffd55, "9ddc1f2e7d3504000000000000000568cd330400", 0x203fb, 0xe32a}) writev(r1, &(0x7f0000000040)=[{&(0x7f00000003c0)="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", 0x261}], 0x1) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0xdc4, 0x564, 0x4, 0x0, 0x9, 0xffffffffffffffff}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r0, &(0x7f0000000000), 0x10) r3 = socket(0x2, 0x5, 0x4) setsockopt$sock_int(r3, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x3000) r5 = shmget$private(0x0, 0x3000, 0x101, &(0x7f0000ffd000/0x3000)=nil) r6 = shmat(r5, &(0x7f0000ffe000/0x2000)=nil, 0x2000) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0) sysctl$kern(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) getgid() getegid() shmdt(r6) r7 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x10000, 0xc) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$SO_PEERCRED(r3, 0xffff, 0x1022, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xc) openat$wsmuxmouse(0xffffffffffffff9c, &(0x7f0000000200), 0x10, 0x0) fchown(r7, r8, r9) 2.21352864s ago: executing program 7 (id=6653): open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7941) r0 = syz_open_pts() r1 = syz_open_pts() ioctl$TIOCSTAT(r0, 0x20007465, 0x0) ktrace(&(0x7f0000000180)='./file0\x00', 0x4, 0x51d73188af82c397, 0xffffffffffffffff) r2 = socket(0x800000018, 0x1, 0x0) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f00000000c0)=0x6, 0x4) listen(r2, 0x1) ioctl$TIOCCBRK(r1, 0x2000747a) r3 = kqueue() kevent(r3, 0x0, 0x1, 0x0, 0x7fffffff, &(0x7f0000000500)={0xfffffffffffffffc, 0x7fffffffffffffff}) 1.615911848s ago: executing program 5 (id=6680): r0 = socket(0x18, 0x3, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) setuid(0xffffffffffffffff) sendmsg$unix(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1000000000000000f0ff000001000000"], 0x10, 0x6}, 0xc) open(&(0x7f0000000140)='./file0\x00', 0x78e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$lock(r1, 0x8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x100000401}) r2 = open(&(0x7f0000000400)='./file0\x00', 0x2, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x269000000, 0xffffffffffffffff}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc5005601, &(0x7f0000000000)={0x10, 0x0, [{&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f00006ac000/0x4000)=nil, &(0x7f00006af000/0x1000)=nil}, {&(0x7f0000060000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x678b}, {0x0, &(0x7f0000ffb000/0x3000)=nil, 0x10000}, {0x0, &(0x7f0000ffb000/0x1000)=nil, 0x104}, {&(0x7f00001e0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil}, {&(0x7f00002ba000/0x4000)=nil, 0x0, 0xfffffffffffffff9}, {&(0x7f00001c9000/0xb000)=nil, &(0x7f00005f0000/0x3000)=nil, 0x1}, {&(0x7f0000ad4000/0x2000)=nil, &(0x7f0000ad5000/0x1000)=nil}, {&(0x7f0000110000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x402}, {0x0, &(0x7f0000156000/0x1000)=nil, 0x40000000000001fc}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {0x0, &(0x7f0000ffd000/0x3000)=nil, 0x1000}, {&(0x7f00004c1000/0x2000)=nil, 0x0, 0x10000000000002}, {&(0x7f00001cf000/0x4000)=nil}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000403000/0x3000)=nil}], './file0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$TIOCSETA(0xffffffffffffffff, 0xc0084463, &(0x7f00000000c0)={0x742, 0xffffffff, 0xd, 0x3, "c9f75500000000003b0bca8f00075a6b47c0d100", 0xfffffffd, 0xe07}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0xc) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x37}, 0x4, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000140)=0x2c, 0x0, 0x2e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r4 = socket(0x18, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x801) r5 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x0) setreuid(0xee00, 0x0) r6 = getuid() setreuid(0xee00, r6) ioctl$TIOCSFLAGS(r5, 0x8004745c, &(0x7f0000000040)=0x80000000) r7 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_int(r7, 0xffff, 0x1003, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$sock_cred(r4, 0xffff, 0x1024, &(0x7f0000000140)={0x0}, &(0x7f0000000280)=0xc) ktrace(0x0, 0x5, 0x128, r8) getpeername$inet6(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) 1.546548351s ago: executing program 5 (id=6683): ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x390, 0xe5, 0x543, "22f006000000009ba340c3000000000000007600", 0x3, 0xf}) sysctl$kern(&(0x7f0000002480)={0x1, 0x57}, 0x2, &(0x7f00000024c0), 0x0, 0x0, 0x0) link(0x0, &(0x7f0000000080)='.\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r0 = syz_open_pts() ioctl$TIOCCONS(r0, 0x80047462, &(0x7f0000000080)=0x500) r1 = syz_open_pts() ioctl$TIOCCONS(r1, 0x80047462, &(0x7f0000000200)=0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002a40)={&(0x7f0000000000), 0x10, 0x0}, 0x0) r2 = socket(0x11, 0x3, 0x0) setsockopt(r2, 0x11, 0x3, &(0x7f00000005c0), 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x2, 0x0) connect$unix(r3, &(0x7f0000000000), 0x10) sendmsg$unix(r3, &(0x7f0000002a40)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_pts() ioctl$TIOCGETA(r4, 0x402c7413, &(0x7f00000000c0)) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket(0x11, 0x3, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) sendto$unix(r5, &(0x7f0000000200)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f000800000000000000e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x400, 0x0, 0x0) 1.545387566s ago: executing program 5 (id=6685): r0 = syz_open_pts() syz_open_pts() (async) syz_open_pts() (async) fchmod(r0, 0x121) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x40000802) r2 = open(&(0x7f0000000100)='./file0\x00', 0x20000, 0x20) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x8000, 0x0) (async) ioctl$TIOCSBRK(r2, 0x2000747b) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000240)="c02a166f7bb36876cdd948ec609d2b3905d691d388e765eec4d5782500d4d5da1c732520ea8179bde1ce506defad3678cf33d8fdbeb7a6b569a77cc144ec6dc9a2c991462b97c76542ac2eacf7c9719c54a435dde5883b9b37616f7b4d6adbb2785c0620ae839869d54c209bb98979517e03a54fbc0c14a7dafb2e25550976c5b2411607d13346ba462d336e3b22c92863", 0x91}], 0x1, &(0x7f0000001400)=ANY=[@ANYBLOB="10000000ffff000001"], 0x10, 0x400}, 0xa) 1.541154062s ago: executing program 5 (id=6686): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) truncate(&(0x7f00000004c0)='.\x00', 0x8000000000000001) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000040)="6f98aeb9d9bd19ecdf33286c", 0xc) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xd5d3, 0xf9, 0x3, 0x9, 0x3, 0x181c, 0x4, 0x2}, 0x0, 0x0, 0x0) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x4, 0x1, 0x7, 0x2, 0x3, 0x80002001, 0x800, 0x10, [{0x0, 0x207, 0x4, 0x7}, {0x7, 0x4, 0x8, 0x7}, {0x6, 0xf86, 0x100, 0xaf9}, {0x5, 0x5, 0xb, 0x3}, {0xa, 0xfffffffe, 0xe, 0x7}, {0x2, 0x7, 0xffffffff, 0x9c}, {0x80000cdf, 0x1, 0x5, 0x6d}, {0x2000a, 0x2, 0x14, 0x8}, {0x2, 0x81, 0x1, 0x9}, {0x3ff, 0x8001, 0xc7, 0x87}, {0x4, 0xfffb, 0x9, 0xaeb}, {0x803, 0x40, 0xa, 0x5}, {0xe0, 0x4, 0x5, 0x3ff}, {0x29a71717, 0xfffffffa, 0x6, 0x100006}, {0x4, 0x7, 0x4}, {0x0, 0x5, 0x4, 0x30000}]}) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000300)="085593be129a94af13ba3ba2dcba06d4c9f04faeb65a363faa297e139bbb978d12fd57f85029dd89128253b697376cc6d02a7fb6c80fa7113e05020a43d4e4b9f474b420997594e1f1a460e41041332ae15e7ddf08ecba6b2d4dc18c228a768ab8bb37f5df96547be61e589518d9557cbc284d60111d64428106be66d54dffac548f66a9da5e98ce81bdcf8d781bcb4c1ddfdcd1bcd325b594a08549ef700888eb26177c1dfb91be710f6668cc019f1f0031f2236284f91f84c070dc048ebffa6b2dac9aa63873eb00c6b7295b4db98f4622648fab5c39285018", 0xda) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x2, 0x8, 0xd5, '\x00', 0x8, 0xff}) r3 = openat$vmm(0xffffffffffffff9c, &(0x7f00000000c0), 0x768411e3c0995088, 0x0) ioctl$VMM_IOC_INTR(r3, 0xca605601, &(0x7f0000000040)={0xb, 0x0, 0x200d}) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x2) syz_open_pts() shutdown(r2, 0x2) r4 = openat$tty(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TIOCSTAT(r4, 0x20007465, 0x0) getsockname(r2, &(0x7f0000000240)=@un=@file={0x0, ""/89}, &(0x7f00000002c0)=0x5b) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) r5 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$BIOCSETIF(r5, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r5, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x54, 0x5, 0x5, 0xe}, {0x2c, 0x80, 0xb, 0x7}, {0x816, 0x24, 0x14, 0x80}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000440)=ANY=[]) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) ioctl$WSDISPLAYIO_USEFONT(0xffffffffffffffff, 0x80585750, &(0x7f0000000140)={'./file2\x00', 0xc, 0x4000, 0xfff6, 0x0, 0x3, 0x2d, 0x80000007, 0x0, 0x2, 0x1ff, 0x4000000000f19}) 1.088592518s ago: executing program 1 (id=6701): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)="c886b4d3e0", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) r2 = socket(0x2, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f00000004c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r3, 0x2) ioctl$BIOCGRTIMEOUT(r1, 0x4010426e, &(0x7f0000000040)) close(r2) 1.087690378s ago: executing program 1 (id=6704): pipe(0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x60) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="890704", 0x3) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x1, &(0x7f0000000080)="0315f1d8dec5a317a93546ba", 0xc) connect$unix(r1, &(0x7f0000000000), 0x10) sendto(r1, &(0x7f0000000380)="98edc1cf9d242ff3974da44a7d14135bd0", 0x11, 0x0, 0x0, 0x0) read(r0, &(0x7f0000000040)=""/120, 0x78) ioctl$FIOSETOWN(r0, 0x8004667c, &(0x7f00000000c0)=0x8) 1.038282875s ago: executing program 2 (id=6707): sysctl$ddb(&(0x7f0000000000)={0x9, 0x7}, 0x2, &(0x7f0000000040)="c2f6f47e3a58193ef690db4f591333", &(0x7f0000000080)=0xf, &(0x7f00000000c0)="d0ca95c7cf7540d86a1b230623e295fadbad6ffd9331626e659b71f54f1e12cfcfed7997345e372d8dbc4e3fd7e214566c8e1aec8559b5df9097e55987681fab9dc6daa107b06bab510831be4cefa38f45ff77b1be6e4f8fb76536e2a5c206cea9bf9b3a56a3aac62301bd30b9f7da62bb45a864fb007320542435837def4c99d8977830836544b506cce2cc589f8627999f3e67ebe023aeb60b27118764bcee4e7065f2d351cc976afebf34ed63ac43f764c2c20bab970208927cfe1b0849f78a672d259cf947301772b430fb3cb5e35a3d6c73b7ff00ad68d355c0bbf2da8b7069545c1388f0574d400bf72f444780cd31f786a20e0812", 0xf8) syz_emit_ethernet(0x148, &(0x7f0000000280)={@broadcast, @remote, [{[{0x88a8, 0x1, 0x0, 0x3}], {0x8100, 0x1, 0x1, 0x3}}], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x132, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20, {[@generic={0x2, 0x11, "8ee328c400ecdb2d18b12807122720"}, @eol, @window={0x3, 0x3}, @nop, @eol]}}, {"96b08d069e33c53c3d2480a4770f47630c0bf5ebf237bb602dff8676b8e0413202540f0bb52f5950dd32dfb77542f6c96e9fd7fab95b5f865fe8a298faeefe708cc83447da1db087f7520ee34cf806a2b0636d1ae4b31e8c21c7ec29ff90b8fd58adaeb089dfcf390ee42a3d13cd3e329195787c71ce51ccaceec734da3bbc74fc21e7ed0943dff53d9376df96590004c1d1190d01101451fa060000000000000000bc6b53b716fed37f4b3cba7a101485b9edc3782273bf7c03e2d49d6dfdbb7ee17c8bdcccfbf1833621a016c1f9447ad8adbe3d3d76e7c93b77268a1f12cae00d9410f4da4e461402f9fff48b92000000"}}}}}}) sysctl$ddb(&(0x7f0000000000)={0x9, 0x7}, 0x2, &(0x7f0000000040)="c2f6f47e3a58193ef690db4f591333", &(0x7f0000000080)=0xf, &(0x7f00000000c0)="d0ca95c7cf7540d86a1b230623e295fadbad6ffd9331626e659b71f54f1e12cfcfed7997345e372d8dbc4e3fd7e214566c8e1aec8559b5df9097e55987681fab9dc6daa107b06bab510831be4cefa38f45ff77b1be6e4f8fb76536e2a5c206cea9bf9b3a56a3aac62301bd30b9f7da62bb45a864fb007320542435837def4c99d8977830836544b506cce2cc589f8627999f3e67ebe023aeb60b27118764bcee4e7065f2d351cc976afebf34ed63ac43f764c2c20bab970208927cfe1b0849f78a672d259cf947301772b430fb3cb5e35a3d6c73b7ff00ad68d355c0bbf2da8b7069545c1388f0574d400bf72f444780cd31f786a20e0812", 0xf8) (async) syz_emit_ethernet(0x148, &(0x7f0000000280)={@broadcast, @remote, [{[{0x88a8, 0x1, 0x0, 0x3}], {0x8100, 0x1, 0x1, 0x3}}], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x132, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}}, @tcp={{0x0, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20, {[@generic={0x2, 0x11, "8ee328c400ecdb2d18b12807122720"}, @eol, @window={0x3, 0x3}, @nop, @eol]}}, {"96b08d069e33c53c3d2480a4770f47630c0bf5ebf237bb602dff8676b8e0413202540f0bb52f5950dd32dfb77542f6c96e9fd7fab95b5f865fe8a298faeefe708cc83447da1db087f7520ee34cf806a2b0636d1ae4b31e8c21c7ec29ff90b8fd58adaeb089dfcf390ee42a3d13cd3e329195787c71ce51ccaceec734da3bbc74fc21e7ed0943dff53d9376df96590004c1d1190d01101451fa060000000000000000bc6b53b716fed37f4b3cba7a101485b9edc3782273bf7c03e2d49d6dfdbb7ee17c8bdcccfbf1833621a016c1f9447ad8adbe3d3d76e7c93b77268a1f12cae00d9410f4da4e461402f9fff48b92000000"}}}}}}) (async) 1.035991806s ago: executing program 1 (id=6708): execve(0x0, &(0x7f0000000340), 0x0) writev(0xffffffffffffffff, 0x0, 0x0) select(0x40, &(0x7f0000000180)={0x1fd, 0x44809e9d, 0xffffffffffffffff, 0x2, 0x2000000000000000, 0x181c, 0x100000000000008, 0x9}, 0x0, 0x0, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r1 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r1, 0x82907003, &(0x7f0000000140)=0x1) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) openat$wskbd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$FIONBIO(r1, 0xc0307004, &(0x7f0000000140)=0x5) 945.131411ms ago: executing program 2 (id=6711): sysctl$vm_swapencrypt(&(0x7f0000000040)={0x7, 0x2, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f0000000040)={0x1, 0x59}, 0x3, &(0x7f00000000c0)="3bf2ee74e747c82dad6eb2a36fa755e1a3925fe49afca7e63b52fa65ccaa74d6e6b85b6cdced70357ef201f97842b1068dca31553fa2d7031f38c03e56ad0e24dfc4f97b8b7f81499647e6e7725765d61436c85e43c15d12a78cb8c57ddde87021d7b685507fd3e0652f35e45bdaa3afd86c4fe557433e4c2b632de71c951516adff26aa2e48b45f8ce92bcefd3eceefabee7e3ebe806fdb4f6af569ae94b5d127", &(0x7f0000000080)=0x4, &(0x7f0000000340)="5a67923ef0cb189971421989ebcff78831a7581e2f27caa362f1363042efb27688b2c899220fb2fe37e467d974592496856ca7b78060998608c2f952e43bc0bf11555cc5cb0fe17b2ec1be389871829bfe10dd4c4d2c8f9da2bd2868fd86791dc09dc4fa89a217458bdaed31003fdc3a7323189ba3ccbad6c8af17516e4557f61ad20180000000000000125f568ca7d3396b9057255f381855110eb3a673713716cdf010ddfa7977f92cf061ad125ca670353b45d53aae196b00271f9d3452b523b3dea22d6027625614312183724b71c7eb02083a410c1c99fa455013521f98686e472b70b560f7021f567adf4d", 0x0) r0 = msgget(0x3, 0x84) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xcbdf4d1d31039a48}, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x1, 0x1, 0x52fb}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1e}, 0x5, &(0x7f0000000140)="e33745e84d5ebfb9cc2f7fa3a7f7891721720e69dac610a4fb5eaf3e3c6e1d648a8ca6ebc70f949c442aee9dc79e2cd74f4e106f382caf01ada3bc4efb0f6bc50690e5d879fac2492f4a0491b1ea3359aa5c5164ad97ac7c3aaddd498c0f962f5167b69cfdc8287fc34b8138340e60c404a855858ea5fc", &(0x7f0000000000)=0x59, 0x0, 0xfffffdfd) r1 = socket$inet(0x2, 0x1, 0x0) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6}, 0x4, 0x0, 0x0, &(0x7f0000000200)="e1000000", 0x4) r2 = kqueue() kevent(r2, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0x2b}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sysctl$net_inet_carp(&(0x7f0000000040)={0x4, 0x2, 0x6, 0x2}, 0x4, 0x0, 0x0, &(0x7f00000010c0)="e1000000", 0x4) r3 = syz_open_pts() ioctl$TIOCCONS(r3, 0x80047462, &(0x7f0000000080)=0x500) r4 = syz_open_pts() ioctl$TIOCCONS(r4, 0x80047462, &(0x7f0000000200)=0x7) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000080), 0x0) sysctl$net_inet_carp(&(0x7f0000000080)={0x4, 0x2, 0x70, 0x1}, 0x4, &(0x7f00000000c0)="ffd4a9d73eb2e7a221b5fa669e98f2d227e8309f8bb8e1e6306e6f23", &(0x7f0000000100)=0x1c, &(0x7f00000001c0)="86b9b3", 0x3) 943.168291ms ago: executing program 1 (id=6713): mknod(&(0x7f0000000000)='./file0\x00', 0x2100, 0x5f00) r0 = open(&(0x7f0000000300)='./file0\x00', 0xf7e9ba9cb4c6b300, 0x168) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSETA(r0, 0xc0205603, &(0x7f00000002c0)={0xe64, 0x4, 0x6, 0x80000000, "97f3b45700", 0x2000, 0xffffffff}) execve(0x0, &(0x7f00000001c0)=[0x0, &(0x7f00000000c0)='/dev/speaker\x00'], 0x0) r1 = socket(0x1, 0x5, 0x2) syz_emit_ethernet(0x42, &(0x7f0000000180)=ANY=[@ANYRESHEX=r1]) ioctl$FIONREAD(r1, 0xc0106924, &(0x7f00000001c0)) r2 = kqueue() kevent(r2, &(0x7f00000000c0), 0x8, &(0x7f00000001c0), 0x15, 0x0) r3 = socket(0x18, 0x1, 0x3) sysctl$net_inet6_ip6(&(0x7f0000000100)={0x4, 0x18, 0x29, 0x32}, 0x4, &(0x7f0000000140)="c826a1b0cf59dba5df00745ad120deb0d2ad33a1c7d3881498c84b86810961002dcd34c6e15ce8717480ab9fc7411e45aa0e62c3aec90859", &(0x7f0000000180)=0x38, &(0x7f00000001c0)="f623b165", 0x4) ioctl$FIONREAD(r3, 0xc02069b6, &(0x7f00000001c0)) poll(&(0x7f0000000000), 0x200000000000002c, 0x0) socket(0x0, 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/231, 0xe7}, 0x0) sendmsg(r4, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socket(0x18, 0x5425521056f4672, 0x3d) syz_open_pts() syz_open_pts() syz_open_pts() syz_open_pts() syz_open_pts() kqueue() r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r6, 0x80104277, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x61, 0x6, 0xfe, 0xc}, {0x9e, 0x9, 0x0, 0x3}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 929.042851ms ago: executing program 2 (id=6715): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) syz_emit_ethernet(0xe, &(0x7f0000001940)={@local, @broadcast, [], {@generic={0x8149}}}) openat$bpf(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x1, 0xbf, 0xd, 0x4}, {0x7c, 0x9, 0xc4, 0x8}, {0x816, 0xa, 0x9, 0x5}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) bind$unix(r1, &(0x7f0000000040)=@file={0xd19450564dee018c, './file0\x00'}, 0xa) connect$unix(r1, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f00000019c0)=@abs={0x1, 0x0, 0x1}, 0x8) syz_emit_ethernet(0xd0, &(0x7f0000000180)={@remote, @local, [], {@ipv4={0x800, {{0xd, 0x4, 0x0, 0x18, 0xc2, 0x64, 0xd2, 0x1, 0x11, 0x0, @local={0xac, 0x14, 0x0}, @broadcast, {[@rr={0x7, 0x1f, 0x5, [@multicast2, @local={0xac, 0x14, 0x0}, @broadcast, @empty, @empty, @loopback, @multicast1]}]}}, @icmp=@source_quench={0x4, 0x0, 0x0, 0x0, {0x21, 0x4, 0x1, 0x2c, 0x7, 0x66, 0xf, 0x40, 0x37, 0x6, @local={0xac, 0x14, 0x0}, @multicast2, {[@timestamp={0x44, 0x34, 0x1, 0x1, 0x1, [{[@multicast1], 0x725}, {[@loopback], 0xfff}, {[], 0xc0}, {[@remote={0xac, 0x14, 0x0}], 0x5}, {[@multicast1], 0x80}, {[], 0x10000}, {[@empty], 0x9}]}, @timestamp={0x44, 0x3c, 0x8, 0x1, 0x2, [{[@local={0xac, 0x14, 0x0}]}, {[@multicast1], 0x5}, {[@local={0xac, 0x14, 0x0}], 0x1}, {[@empty], 0xa131}, {[], 0x7}, {[], 0x8}, {[], 0x3}, {[], 0xc95}, {[@remote={0xac, 0x14, 0x0}], 0x4}]}]}}, "b87c"}}}}}) 841.49183ms ago: executing program 2 (id=6716): setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) setrlimit(0x6, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x8000, 0xa) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x101, 0x2, 0x80000081, 0x5, 0x10, [{0x0, 0x7, 0x4, 0x71002}, {0x7, 0x88, 0x8, 0x7}, {0x8, 0x6, 0x0, 0x9}, {0x3, 0x900, 0xe}, {0x3fd, 0x200326, 0x2800, 0x7}, {0x82, 0x27f6, 0x3, 0x99}, {0xce1, 0x4, 0x4f8, 0x6d}, {0xc, 0x801, 0x8, 0x4}, {0x2, 0x82, 0x9, 0x9}, {0x7, 0x100, 0xd1b, 0x1088}, {0x1e6, 0x10001, 0xc, 0x6}, {0x800, 0x9, 0x8, 0x9}, {0xb8e, 0x4, 0x8, 0x4}, {0x29a7171a, 0x8, 0x1, 0xf}, {0xc, 0x7, 0x4, 0xfffffffe}, {0x0, 0x7ff, 0x1002, 0x30004}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0x2, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r3 = socket(0x2, 0x1, 0x0) r4 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0xc0206923, &(0x7f00000001c0)) ioctl$FIONREAD(r3, 0x8040691a, &(0x7f00000001c0)) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r5, &(0x7f0000000140)=[{&(0x7f0000001040)="bd", 0x1}], 0x1) write(r5, &(0x7f00000000c0)='C', 0x1) close(r6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 830.788397ms ago: executing program 1 (id=6719): r0 = getppid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, 0x0, 0x1000, r0, 0x0, 0x0, 0x100000000, 0x0, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) setuid(0xffffffffffffffff) ioctl$WSKBDIO_GETMAP(r1, 0x80047476, &(0x7f0000000100)={0x0, 0x0}) r2 = fcntl$getown(r1, 0x5) ktrace(0x0, 0x1, 0xd27d43220c7df9b, r2) r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0xf66f7a131731869, 0x0) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x2, 0x0, 0x35, 0x7}, {0x2c, 0x8, 0xc4, 0xfff}, {0x6, 0xb9, 0x7f, 0x6}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000140)=ANY=[]) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) 738.404644ms ago: executing program 1 (id=6722): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb}, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) (async) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) ioctl$FIONREAD(r0, 0x802069af, &(0x7f0000000100)) fchflags(r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)={&(0x7f0000000240)=@un=@file={0x0, ""/529}, 0x213, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r1, &(0x7f0000000080)={0x0}, 0x6a, 0x0) sendmsg$unix(r1, &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0xab, 0xf8f45ad47d2d40ee}, 0xd344adcdc08468f2) 651.406598ms ago: executing program 5 (id=6728): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) pwritev(r0, &(0x7f00000004c0)=[{&(0x7f0000000240)="b75db78df0bf9c836b6e78ff10c3d6685605b8a89a7c9b2b0f56fec0e43a36f05c8ed39c0a2093d6302e3e0bce0c793f134b033db5967f153be495953bf877302f9a03f3115281122793030780fde4fd7e362e2d30c593", 0x57}], 0x1, 0x4) execve(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x2ea) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x180) mkdir(&(0x7f0000000000)='./file1\x00', 0x100) chmod(&(0x7f0000000080)='./file1\x00', 0x80) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) setrlimit(0x8, &(0x7f0000000980)={0x1, 0x62}) socket$inet(0x18, 0x3, 0x102) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x2, 0x1, 0x0) ioctl$VNDIOCSET(0xffffffffffffffff, 0xc0384600, &(0x7f0000000180)={&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xd, &(0x7f0000000140)='./file2\x00', 0x8}) r2 = dup(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) r4 = dup(r3) recvmmsg(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{0x0}, {0x0}, {&(0x7f0000000240)=""/90, 0x5a}], 0x3, 0x0}, 0x1}, 0x10, 0x0, 0x0) dup2(r2, r4) execve(0x0, 0x0, 0x0) symlink(0x0, 0x0) shutdown(r1, 0x2) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='W\x00') socket(0x24, 0x4000, 0x0) 651.183746ms ago: executing program 0 (id=6729): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x1f, 0x2) r1 = getpid() ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x510, r1) setgid(0xffffffffffffffff) ktrace(&(0x7f0000000100)='./file0\x00', 0x1, 0xd27d43220c7c8b3, r1) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) select(0x40, &(0x7f0000000180)={0xfffffffffffffff9, 0x44809e9d, 0xffffffffffffffff, 0xfffffffffffffffd, 0x2800000000000000, 0x181c, 0x8, 0x2000000000000004}, 0x0, 0x0, 0x0) kevent(0xffffffffffffffff, &(0x7f0000000200)=[{{}, 0xfffffffffffffffd, 0x10, 0xc0000004, 0x100000001, 0x2d51}, {{}, 0xc2dbbd4ed51ee144, 0xb, 0x4, 0x6, 0xd}], 0x8, &(0x7f00000001c0), 0x0, 0x0) r2 = socket(0x2, 0x2, 0x0) r3 = socket(0x2, 0x400000000002, 0x0) setsockopt(r3, 0x0, 0x1f, &(0x7f0000000080)="c5f5d915", 0x4) dup2(r3, r2) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r2, &(0x7f0000000000), 0x10) r4 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xa) write(r4, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) poll(0x0, 0x0, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb8100400086dd6880058000303b03356d0140558d3dfd766d0a62aab10b9bfe4d1aafbaf5c2c66da2acf4faeb1e580100907828"]) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="673bb5b8cc0c16ed0822c57dd02217f981aa6a78ef1d35e6abbbdabb26a52ad7", 0x20}], 0x1) ioctl$FIONBIO(0xffffffffffffffff, 0x82907003, 0x0) ioctl$TIOCSETA(r5, 0xc4504443, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8000000100000002) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$WSMUXIO_LIST_DEVICES(r0, 0xc1045763, &(0x7f00000003c0)={0x0, [{0x3}, {0x1, 0xd}, {0x0, 0x1}, {0x0, 0x2}, {0x2}, {}, {0x1}, {0x2, 0x1ffffffe}, {0x1, 0xffffffff}, {0x0, 0xfffffffd}, {}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x107e}, {0x3, 0x400000}, {0x3, 0xe9b}, {0x2, 0x3}, {0x3, 0x800}, {0x2}, {0x0, 0x7ff}, {0x5}, {}, {0x3}, {0x3, 0x400}, {0x2, 0x3}, {0x2}, {0x0, 0xfffffffd}, {}, {0x3}, {}, {0x1, 0xa}, {0x1}]}) ioctl$TIOCSETA(0xffffffffffffffff, 0xcd50441a, &(0x7f0000000040)={0x6, 0x3ff, 0x8, 0xd5, "00000000000000000000001500", 0x3, 0xff}) 532.78471ms ago: executing program 6 (id=6731): syz_emit_ethernet(0x66, &(0x7f0000000080)={@random="e706f2ffff1f", @random="391e7dd7a2d7", [], {@ipv6={0x86dd, {0x0, 0x6, "9907a6", 0x30, 0x2c, 0x3, @rand_addr="cb697a653e336f0000005000", @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x3, {0x9, 0x6, "c46dea", 0x6, 0x6, 0x8, @loopback, @mcast2}}}}}}}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x1, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0286988, &(0x7f00000001c0)) syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000050"]) 532.460406ms ago: executing program 0 (id=6732): r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async, rerun: 32) r1 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (rerun: 32) r2 = fcntl$dupfd(r1, 0x14, r1) (async, rerun: 32) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x1b0) (rerun: 32) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) r4 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r4, 0xc0206922, &(0x7f00000001c0)) (async) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x2012, r0, 0x0) (async) msgget(0x0, 0x0) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x637e) r5 = open(&(0x7f0000000040)='./file0\x00', 0x40, 0x100) ioctl$TIOCSETAF(0xffffffffffffffff, 0x802c7416, &(0x7f0000000000)={0x6, 0x40, 0xe5, 0x543, "22f006000000009ba340c3000000000000007600", 0x3, 0xf}) (async) link(0x0, &(0x7f0000000080)='.\x00') (async, rerun: 64) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b10005040000040000", 0x9, 0x400, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r6 = socket(0x11, 0x3, 0x0) sendto$unix(r6, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a378343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x7}, &(0x7f0000000380)={0xffb, 0x5, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0) (async) select(0x40, &(0x7f0000000080)={0xa, 0x3ff, 0x0, 0x0, 0xfffffffffffffffc, 0x8000000003, 0x1, 0x7}, 0x0, 0x0, 0x0) (async) close(r5) 531.723653ms ago: executing program 6 (id=6733): mknod(&(0x7f00000000c0)='./file0\x00', 0x8000, 0xe02) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) openat$vnd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setgid(0xffffffffffffffff) setgroups(0x0, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r0, 0x81205724, &(0x7f0000000100)={0x6, 0x40, 0x2000007, 0x9, 0x80000001, 0x1ad, 0x10001, 0x10, [{0x0, 0x9, 0xfffffffe, 0x71003}, {0x2, 0x9, 0x8, 0xfffffff9}, {0x100, 0x9, 0x0, 0x9}, {0xffffffff, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x2000}, {0x1, 0x3, 0x8, 0x7}, {0x1, 0xffffffff, 0x4f5, 0x6d}, {0xfff, 0x7ff, 0x14, 0x8}, {0x2, 0x82, 0x8000005, 0x5}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1cc, 0x10001, 0x0, 0x3}, {0x5, 0x9, 0x8, 0x8000002}, {0xb8c, 0x555981a8, 0x9, 0x4}, {0x29a71717, 0xfffffffa, 0xffffffff, 0x6}, {0x4c, 0x2000005, 0x5, 0x10000000}, {0x0, 0x1, 0x1003, 0x30404}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$VNDIOCGET(r1, 0x20006473, 0x0) setuid(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x2, 0x0, 0x5266, 0x100000003}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VNDIOCSET(r2, 0xc0104407, &(0x7f0000000000)={0x0, 0x0, 0x0}) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11}, 0x4000000000000007, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000740000/0x3000)=nil, 0x3000, 0x3, 0x10, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x21, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x200023}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x18, 0x2, 0x0) setsockopt(r3, 0x5, 0x6, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) setsockopt(r3, 0x1000000029, 0xd, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929649", 0x14) 469.609899ms ago: executing program 2 (id=6735): open(&(0x7f0000000000)='./file0\x00', 0x615, 0x166) (async) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f0000000740)=@un=@file={0x0, ""/524}, 0x20e, 0x0, 0x0, 0x0}, 0x4000}, 0x10, 0x1040, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1003f8d}, 0x10, 0x1001, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) (async) close(r0) (async) r1 = socket(0x2, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) (async) unveil(0x0, &(0x7f00000000c0)='r\x00') (async) setitimer(0x1, 0x0, 0x0) (async, rerun: 32) getitimer(0x2, &(0x7f0000000040)) (rerun: 32) 466.792416ms ago: executing program 3 (id=6738): mknod(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x205b9a) open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x13) (async) mknod(&(0x7f0000000280)='./file1\x00', 0x2000, 0x285b98) ktrace(&(0x7f0000000200)='./file1\x00', 0x0, 0x40001600, 0x0) 441.656271ms ago: executing program 0 (id=6739): pipe2(&(0x7f00000000c0), 0x4) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, 0x0) r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x7c, 0x9, 0x0, 0x8}, {0x7, 0xbf, 0xd}, {0x816, 0xa, 0x14, 0x5}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000200)=ANY=[]) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x69) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/231, 0xe7}, 0x0) sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socket(0x18, 0x3, 0x3d) syz_open_pts() syz_open_pts() syz_open_pts() kqueue() open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x1, 0x0) kqueue() r3 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r3, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r3, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x61, 0x6, 0xfe, 0xc}, {0x50, 0x0, 0x10, 0x2}, {0x9e, 0x9, 0x0, 0x3}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$BIOCSETF(r3, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) 369.469395ms ago: executing program 4 (id=6740): r0 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x8, 0x0) writev(r0, &(0x7f0000000c80)=[{&(0x7f0000000b80)="ca5948132d9c0b5ecb", 0x9}], 0x1) ioctl$TIOCSETA(r0, 0xc4504444, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, "97a2224ff1c14649ebb178926cc9795a6b47c1d1"}) sysctl$vfs_nfs(&(0x7f00000003c0)={0xa, 0x2, 0x2}, 0x3, &(0x7f0000000240), 0x0, 0x0, 0x0) 368.977715ms ago: executing program 3 (id=6741): r0 = semget$private(0x0, 0x0, 0x0) semctl$GETALL(r0, 0x0, 0x6, &(0x7f0000000000)=""/198) semctl$GETPID(r0, 0x4, 0x4, &(0x7f0000000100)=""/111) r1 = semget(0x2, 0x2, 0x0) semop(r1, &(0x7f0000000180)=[{0x4, 0x81}, {0x0, 0xa75}, {0x1, 0x8, 0x1800}, {0x1, 0xbe4c, 0x1800}, {0x0, 0x5980, 0x800}], 0x5) r2 = openat$diskmap(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = getppid() fcntl$lock(r2, 0x8, &(0x7f0000000200)={0x2, 0x2, 0x100, 0x90, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0xa) r6 = accept$unix(r5, 0x0, &(0x7f00000002c0)) r7 = fcntl$getown(r4, 0x5) semctl$SETALL(r0, 0x0, 0x9, &(0x7f0000000300)=[0xfc3, 0x2, 0x3, 0xc0, 0x1, 0x401, 0xfff, 0x6]) setsockopt$sock_timeval(r6, 0xffff, 0x1005, &(0x7f0000000340)={0x9, 0x7}, 0x10) r8 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000380), 0xc00, 0x0) ioctl$WSDISPLAYIO_GETSCREEN(r8, 0xc0245755, &(0x7f00000003c0)={0x9, './file0\x00', './file0\x00'}) syz_emit_ethernet(0x35, &(0x7f0000000400)={@remote, @empty, [], {@arp={0x806, @generic={0x1, 0xbd42, 0x6, 0x3, 0x3, @remote, "9064d8", @local, "1d9efc103737d99a3d5c38dfe28005dd"}}}}) getpgrp() r9 = semget(0x1, 0x3, 0x48) semctl$SETALL(r9, 0x0, 0x9, &(0x7f0000000440)=[0x2, 0x173, 0xd]) semctl$SETVAL(r1, 0x2, 0x8, &(0x7f0000000480)=0xb) ioctl$WSDISPLAYIO_GETSCREENTYPE(r8, 0xc028575d, &(0x7f00000004c0)={0x7, 0x9, './file0\x00', 0x80000000, 0x1, 0x10001, 0x3}) r10 = socket(0x6, 0x4, 0x1) r11 = accept$inet(r10, &(0x7f0000000500), &(0x7f0000000540)=0xc) readv(r11, &(0x7f0000001940)=[{&(0x7f0000000580)=""/126, 0x7e}, {&(0x7f0000000600)=""/20, 0x14}, {&(0x7f0000000640)=""/151, 0x97}, {&(0x7f0000000700)=""/8, 0x8}, {&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/213, 0xd5}], 0x7) kqueue() ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffff9c, 0x80185760, &(0x7f00000019c0)={0x0, 0x10, {0x5, 0xbb2}}) semctl$IPC_RMID(r1, 0x0, 0x0) ioctl$WSDISPLAYIO_WSMOUSED(r8, 0x80185758, &(0x7f0000001a00)={0x7, 0xcd4f, {0x5, 0x6}}) fcntl$lock(r8, 0x9, &(0x7f0000001a40)={0x2, 0x1, 0x4, 0x81, r7}) 368.464842ms ago: executing program 5 (id=6742): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) (async) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x60}) syz_open_pts() (async) r0 = syz_open_pts() close(r0) syz_open_pts() kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}) (async) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffb}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) r2 = kqueue() kqueue() (async) r3 = kqueue() kevent(r3, &(0x7f00000000c0), 0x56, 0x0, 0x7fff, 0x0) kevent(r2, &(0x7f0000000000), 0x138, 0x0, 0xffffffff, 0x0) (async) kevent(r2, &(0x7f0000000000), 0x138, 0x0, 0xffffffff, 0x0) r4 = kqueue() kevent(r4, &(0x7f00000000c0), 0x8, 0x0, 0x15, 0x0) close(r1) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000340)={0x0, 0x5, 0xffffdf82, 0xffffff8d, "08ed95990000000000006000ff61b30000ffffe6", 0x4000001, 0x20000}) accept$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x85) (async) open(&(0x7f00000000c0)='./file0\x00', 0x10000, 0x85) poll(&(0x7f0000000040), 0x0, 0xffffa010) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="112312738958407d8d04a346c298459c96d69cdfb24c80798094adcfebf098e81a9512b5fac16411d43db7d480f603f59127e8ca6da39f85b27afcc2de0eb109f91ced314507b9cadc2130c8d0b00236f5a4b5d8ed088e406ee4e34e685fac9a0190a091b0226c7e204d4c26e65e393a71de0b0f1ec00f742d22c7562fc385c620376b95d4cacce5b71f3dba1c839d93a0bef64a37996bb3eabf6fbc6e9700edb0363b8b8096a8bc42ec289cf245cdcf444c50acdf4dfbb8c9202668a9010aa7120ddef81971916489089a8788f366acd4db82782aa1693a35f3bb53420199b5ad0342fcc82f7705011f028987979657e80708e4d08852acd5593c01efa7f8ddebf09660438dc8459b538290f639bea5edd5d34538dd94bddf65898695159a3c7f6f6e211bfc67533b7e4a5f8fb8a3364d4dab1acc81a996b1ad10ee586662c5099339a336583f064449f132b09603b9356bfa80487abb828ad5baa04b3660e0d8df355fd7c5aaa468cdcc7b2f56df8c9af7f58beef1b2d4f6be85624956dabfb43c7803dabc801b979945a5fb04e882a8e484e8456d959131788444415f43b9f9dddc8a10cb034f82c5964d4e93cfb736a47af831e4e203939f2fa8ad51", 0xfffffe84}], 0x1) mknod(0x0, 0x2000, 0x881) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) 313.663218ms ago: executing program 4 (id=6743): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() close(r0) setrlimit(0x8, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETWF(r1, 0x80104277, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x60, 0x4, 0xfe, 0xc}, {0x50, 0x0, 0x10, 0x2}, {0x9e, 0x9, 0x0, 0x3}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdir(0x0, 0x0) syz_emit_ethernet(0x0, 0x0) chmod(0x0, 0x2ea) chdir(0x0) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x1000e, &(0x7f0000000280)=ANY=[]) r2 = syz_open_pts() ioctl$TIOCSETD(r2, 0x8004741b, &(0x7f0000000000)=0x8) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="26af", 0x2}], 0x1) 312.702249ms ago: executing program 6 (id=6744): r0 = openat$speaker(0xffffffffffffff9c, &(0x7f0000000080), 0x6, 0x0) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000000)={0x240, 0x401}) msync(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x6) execve(0x0, 0x0, 0x0) ioctl$SPKRTUNE(r0, 0x20005302, &(0x7f0000000040)={0xf, 0x4}) 233.681205ms ago: executing program 4 (id=6745): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000080)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0x4) (async) setrlimit(0x8, &(0x7f0000000980)={0x45, 0x62}) (async) r1 = syz_open_pts() close(r1) (async) r2 = syz_open_pts() writev(r1, &(0x7f0000000040)=[{&(0x7f00000002c0)="0002000004", 0x2a}], 0x1) (async, rerun: 64) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000000)={0xfba, 0x10000004, 0x5, 0xffffffdf, "a100ec00", 0x461b, 0x1}) (async, rerun: 64) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000540)=""/140, 0x8c}], 0x1) (async) execve(0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) 233.339829ms ago: executing program 0 (id=6746): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = syz_open_pts() ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0xbe, 0x7fffffff, 0x9, 0x100, "09032e4faceb089b351c0a164d16b0763047c900", 0x28, 0x3}) close(r0) r1 = syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xfffdff7e, 0x160350d, "04e4ee0d090000deffffffff0fe0ff0405080800", 0x200001, 0x9}) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) r3 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0xffff, 0x1022, 0x0, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) syz_open_pts() (async) ioctl$TIOCSETAW(r0, 0x802c7415, &(0x7f0000000080)={0xbe, 0x7fffffff, 0x9, 0x100, "09032e4faceb089b351c0a164d16b0763047c900", 0x28, 0x3}) (async) close(r0) (async) syz_open_pts() (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000180)={0x7fffffff, 0xcacf, 0xfffdff7e, 0x160350d, "04e4ee0d090000deffffffff0fe0ff0405080800", 0x200001, 0x9}) (async) mknod(&(0x7f0000000000)='./file1\x00', 0x2000, 0x285b9a) (async) open(&(0x7f0000000800)='./file1\x00', 0x800, 0x120) (async) ioctl$FIONBIO(r2, 0x82907003, &(0x7f0000000140)=0x1) (async) socket$unix(0x1, 0x2, 0x0) (async) getsockopt$sock_cred(r3, 0xffff, 0x1022, 0x0, 0x0) (async) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) (async) 230.587825ms ago: executing program 4 (id=6747): r0 = syz_open_pts() setitimer(0x0, &(0x7f0000000000)={{0x400, 0x75}, {0x6, 0x3ff}}, 0x0) open(&(0x7f00000007c0)='./file0\x00', 0x200, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) getitimer(0x0, &(0x7f0000000140)) ioctl$TIOCNXCL(r0, 0x2000740e) 230.293228ms ago: executing program 2 (id=6748): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = kqueue() r3 = dup(r2) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r3}, 0xfffffffffffffffa, 0xd5, 0x40000080}], 0x6, 0x0, 0x0, 0x0) (async) r4 = kqueue() kevent(r4, &(0x7f0000000040), 0x30, 0x0, 0x57d, 0x0) (async, rerun: 64) close(r0) (rerun: 64) writev(r1, &(0x7f0000001640)=[{0x0}, {&(0x7f0000001540)="c7fb31be8fd78aec34af7713deae4406a86ace87f91e10ec21958b31233ddd7a588f5a2f2729ae09a8aba2d30e91534d1972d13bc5e0aee3d6d3cdd03f87d9b5a3344562e7f472059e5edefd1618a81d0cebedc2efd6935725ebce4c672edabdbd0aa724b71d14a1b9c3190b756f0f101467f72d82988bae18fd197419ef4fcb74add808c8d53fbc07e591265d99e9e13265984e71cbc4c8cff39f309426f98edcf9622b785dbef8ab267bc56f09ba3f3d25416b7e06cecb3ce18deedbf175b6a4a1fdb443bff3abd9b6588089a7394b8e57e5", 0xd3}], 0x2) r5 = fcntl$getown(r0, 0x5) (async) r6 = socket(0x18, 0x3, 0x0) close(r6) (async) openat$speaker(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) write(r6, &(0x7f0000000040)="04bdfa5d1d2873c63e3534825ba166e2fe612333", 0x14) (async) r7 = geteuid() (async) r8 = getpgrp() r9 = getegid() r10 = openat$tty(0xffffffffffffff9c, &(0x7f00000001c0), 0x20, 0x0) (async) r11 = getpgid(0xffffffffffffffff) (async) r12 = getuid() r13 = kqueue() r14 = open$dir(&(0x7f00000013c0)='./file0\x00', 0x40, 0x1b4) sendmsg$unix(r1, &(0x7f0000001500)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000001340)=[{&(0x7f00000000c0)="f71d924d4326973b2ecbbc29a7734a14e89a4bf5c7f7cdbd44c8ccd23b5b4592a707adb208d826", 0x27}, {&(0x7f0000000100)="e97ef6a5c1a9362e513287d3bcfdba6459884dd4ac3799e0e7038f23761bf279ee", 0x21}, {&(0x7f0000000140)="0fa373e35950d43c35bfa25bba8ef4e63d0ed4a819bb3305feb06c8189ec44d0f4d20afda8", 0x25}, {&(0x7f0000000180)="c21bca7f04e4ec850de4168ba6f9", 0xe}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="8d67df043b7ef08a463e7bd2a0b55b3d4d7dc2994247a5957ae021d63501055a69d499ef09fa012c9170b29ecf860ea68932691e505e03fbaaccd2b0077e4a240f8b4ea69424ea07e467d4ddee3fad8164d750ffbfc47863169432489ebb4d238ff3997b023fff2903ef58eb13fceefe9c867db33386a3bae1e209cec2cc2d13cf03a4744a5e3ba1e4297e94524c12387854d6a4fb12a0b52a7c717de709a382c1687ef96428222332458c84aaa1a190290887634c6848d0ad56b4d1bad2037ea74294f982515f5034e2177b76408b9e2659a60f7ee4bfda3c860686cace386409184407fa39eb9cd227108411", 0xed}], 0x6, &(0x7f0000001400)=[@rights={0x20, 0xffff, 0x1, [r0, r3, r2]}, @cred={0x20, 0xffff, 0x0, r5, r7, 0xffffffffffffffff}, @cred={0x20, 0xffff, 0x0, r8, 0x0, r9}, @rights={0x28, 0xffff, 0x1, [r3, r0, r2, r3, r10, r4]}, @cred={0x20, 0xffff, 0x0, r11, r12, 0xffffffffffffffff}, @rights={0x20, 0xffff, 0x1, [r4, r3, r3]}, @rights={0x20, 0xffff, 0x1, [r1, r1, r13, r14]}], 0xe8}, 0xb) 134.002032ms ago: executing program 6 (id=6749): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x17, 0x2000007, 0x3, 0x3ff, 0x80000001, 0x38e7, 0x10, [{0x0, 0x3, 0x4, 0xa25}, {0xc5f, 0x7, 0x7, 0xfffffff9}, {0x8, 0x8, 0x4, 0x9}, {0x80000000, 0x800, 0x3, 0x5}, {0x401, 0x7ff, 0x1082805, 0x4d8a}, {0x2, 0x86, 0x2, 0xb4}, {0x4, 0xd16f, 0x4f8, 0x1}, {0x3, 0x803, 0xfffffffe, 0xb}, {0x2, 0x9, 0x6, 0x9}, {0x4, 0x90, 0xd1c, 0x88}, {0x1c7, 0x40000005, 0x2, 0x3}, {0x7fc, 0x6, 0x7, 0x9}, {0xb8c, 0x4, 0x1, 0x2c4}, {0x29a7171a, 0xfffffefa, 0x1, 0x6}, {0xff, 0x5, 0xfffffff9}, {0xfffffffe, 0x1, 0x1002, 0xc}]}) r1 = socket(0x18, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)="77bd673bb5b8cc0c16ed080500000000000000d7f4601faa903493e339865dce0f225da73c1eede2526d", 0x2a}], 0x1) sysctl$kern(&(0x7f0000000140)={0x1, 0x29}, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000040)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="14"], 0x20, 0x401}, 0x0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x50, 0x6, 0x5, 0x7}, {0x16, 0x6, 0x10, 0x80}]}) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@empty, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0xd, 0x1c, 0x66, 0x3, 0x3, 0x2c, 0x0, @multicast1, @broadcast}, @udp={{0x1, 0x1, 0x8}}}}}}) r2 = socket(0x11, 0x3, 0x8) sendto$unix(r2, &(0x7f0000000300)="b1000503000004000000080007000000331c13fecea10500fef96ec0c72fd3357ae30200004e3039d2d236acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad09000000000000009b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b1257aea8c500002002fbfe0c230000a37f50b60900000008e371a3f8343712051eeab71d1889e0000000000000000000", 0xb1, 0x0, 0x0, 0x0) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000180)='./file0\x00') unveil(&(0x7f0000000040)='./file0/file0/..\x00', &(0x7f0000000000)='x\x00') open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) 133.081912ms ago: executing program 3 (id=6750): sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x16}, 0x4000000000000018, 0x0, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="9815ee59e1b6cf3cd11d3a782d31", 0xe}], 0x1) ioctl$FIONREAD(r0, 0x80206979, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x3, 0x2) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_opts(r2, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) setsockopt$inet_opts(r1, 0x0, 0x64, &(0x7f0000000240)="01000000", 0x4) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCSETA(r3, 0xc450443f, &(0x7f0000000040)={0xa, 0x400, 0x6, 0xfffffffe, "45600000000600070000070000000000000200", 0x7, 0x44}) sysctl$vm_swapencrypt(&(0x7f0000000040)={0x6, 0x1b, 0x2}, 0x5, 0x0, 0x0, 0x0, 0x0) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x2, 0x5, 0x2}, 0x3, &(0x7f0000000140)="ffadaa3482701afacd76d40d42ecabc7161c460382804eb20a6b60e5fd3900e57733e24001181592f8927da0f133fdb87b0bd1415cdd66edbfbb2d029f3ad439b3de2e46a681ffb500086a1277c6005f31e0c41cc06a96816a5dfaedcff915139bf6", &(0x7f00000001c0)=0x62, &(0x7f0000000200)="b0e1cd4f4e55b7c5dfcfa4cf41ab2c0b4f87b8e409c025989ecc2b65c7fe314693c6679bcbcadacd055cad18da461ca0ff2b4b756c63c874c39447fa71cf77ba95e26d58a70ac00b1e90f31f71757432a40bc17977f367ca0cbc1dd0d75fd72caba7b93e3fec8e4f05f4501c29989cf59bc89a509b01e8691ab76e4abdb250d75f9ed3b3bc3a6ff278f15e690cb4837f6c69756b4f8b9596a575022a7acd4293bc4dbf08e57f2528c21b993aefdbf0b7e1ae4f0d82253e9f19babafb8e883d3ab338c00071fe513a75b42473a471bf6e968c1a01051d0b53c541d0e567037f0b19c8cd49e186a81a1db8811eab974c3a03baa1dcb844", 0xf6) sysctl$kern(&(0x7f0000000040)={0x1, 0xa}, 0x2, &(0x7f0000000080)="1306721fd0cf76e9cf41aa53ba8d72231d948ef58725b335fb9856cd954aeeb6656318d69fa4c3ba0a232ae9936b492effc21f9bdc57bea7fad95f88a0d9ed5a3a3ec43a61aecec00d972922de9f7bfd51f8005febc87280bcb5e1e4d0b558d22423e016c12bd1bf42e9864bb93ca70ffee0650e71bd51e4b9bc4877294ba76a8748f32842ca300dcf8fcf11d351ec655bc8f5a7c1d51f07a682c6fa33da9e4bcbeb4d1efcfe242c5daaf9263be5e3c87e871d354000"/191, 0x0, 0x0, 0x0) 131.452975ms ago: executing program 4 (id=6751): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@random="73b9ccc300", @random="00f7000400", [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x18, 0x3a, 0x1, @remote={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @generic="8284e355429be5bdc951666267f59f248a8c000dc6b1f639"}}}}}) r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x10, r2, 0x0) ioctl$WSDISPLAYIO_SMODE(r1, 0x8004574c, &(0x7f0000000000)=0x2) (async) ioctl$WSDISPLAYIO_SMODE(r1, 0x8004574c, &(0x7f0000000000)=0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000340)=0x5, 0x4) (async) setsockopt$sock_int(r0, 0xffff, 0x200, &(0x7f0000000340)=0x5, 0x4) connect$unix(r0, &(0x7f0000000000), 0x10) (async) connect$unix(r0, &(0x7f0000000000), 0x10) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0xa) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @empty, [{[], {0x8100, 0x3, 0x1, 0x3}}], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @remote, @loopback, @broadcast, @remote={0xac, 0x14, 0x0}}}}}) 88.249873ms ago: executing program 6 (id=6752): r0 = socket(0x800000018, 0x1, 0x0) listen(r0, 0x1) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0xb3f, {[0xfffffbfffffffffb, 0x3, 0x1, 0x100000000, 0x6, 0x0, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0xfffffffffffffffc, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x100], [0xfffffffffffffffe, 0x80800001, 0xfffffffffffffffd, 0x20000001, 0x62, 0x7b98, 0x1fe, 0x10000000], [0x100000001, 0x2, 0x40000000, 0x0, 0xb, 0x12e, 0xfffffffefffffffd], [0x100, 0x1ffffffffff, 0x7ffffffffffffffc, 0x100000000, 0xfffffffffffffffe, 0x4], [{0x0, 0x4, 0x5, 0x7d05}, {0xfffc, 0x102, 0x5}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x4003, 0x5, 0x6, 0x800}, {0x0, 0x2, 0x3ff, 0x8}, {0x0, 0x3003, 0x9, 0x2000000000000000}, {0x2}, {0x0, 0xfc, 0x0, 0x8}], {0x0, 0x6, 0x5, 0x200000}, {0xfffe, 0x80000000, 0x6d6, 0x2}}}) r1 = kqueue() fchdir(r1) kevent(r1, &(0x7f00000000c0), 0x138, 0x0, 0xffffffff, 0x0) 87.903812ms ago: executing program 4 (id=6753): mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) pipe(&(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, 0xf, 0x1000000000002a2, 0x0, 0x0, 0x7, 0x80000000000000f, 0x3, 0x44}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0xf66c, 0x8, 0x9, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x400, 0xfffff196}) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="2f8a8fc28b5a2dc1066e435e383acb05d6971520a342832bba9c1779585d8ad946c809724b3429211c87b63ebaa0d74c25175abedf76d6fb1be61677758a83d0d86a153943fb7fafacde430e97ca2cba62c8fe631379c56fbb8083178d5db8bc7d8857e0833adcc8bbb7c1903615796a87c988b40435590878336fc9f807f103ccfd681c7d779e394045216bcc1d76a1a9e9bc1903fa8690afc3a1824acc8f7bb334ff0866c32287dd3d8553732d32f6c0597b02ded000fe", 0xb8}], 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) pipe(&(0x7f00000001c0)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) (async) ioctl$VNDIOCSET(r0, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r0, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}, 0xf, 0x1000000000002a2, 0x0, 0x0, 0x7, 0x80000000000000f, 0x3, 0x44}) (async) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) (async) syz_open_pts() (async) close(r1) (async) syz_open_pts() (async) ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000380)={0xf66c, 0x8, 0x9, 0x5fffff5f, "9cdc452e307e0804002f4c0000002f9e68cd3304", 0x400, 0xfffff196}) (async) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000000)="2f8a8fc28b5a2dc1066e435e383acb05d6971520a342832bba9c1779585d8ad946c809724b3429211c87b63ebaa0d74c25175abedf76d6fb1be61677758a83d0d86a153943fb7fafacde430e97ca2cba62c8fe631379c56fbb8083178d5db8bc7d8857e0833adcc8bbb7c1903615796a87c988b40435590878336fc9f807f103ccfd681c7d779e394045216bcc1d76a1a9e9bc1903fa8690afc3a1824acc8f7bb334ff0866c32287dd3d8553732d32f6c0597b02ded000fe", 0xb8}], 0x1) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) (async) 86.97097ms ago: executing program 3 (id=6754): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_open_pts() pipe(0x0) (async) pipe(0x0) openat$zero(0xffffffffffffff9c, 0x0, 0xe8, 0x0) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000080)=0x8) (async) ioctl$BIOCIMMEDIATE(r0, 0x80044270, &(0x7f0000000080)=0x8) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)="ee11", 0x2}], 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)="ee11", 0x2}], 0x1) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) (async) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) select(0x40, &(0x7f0000000180)={0x4e, 0x20000044809e9d, 0xffffffffffffffff, 0x1, 0x2000000000000000, 0x181c, 0x8, 0x6}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[]) socket(0x18, 0x3, 0x0) (async) r2 = socket(0x18, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x6}, 0x10, 0x0, 0x0) semget$private(0x0, 0x3, 0x0) (async) r3 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r3, 0x0, 0x6, &(0x7f00000008c0)=""/4096) close(0xffffffffffffffff) r4 = dup2(r0, r2) pwrite(r4, &(0x7f00000001c0)="e1469cdd2d4d5ff0b61d66352f4a487f7e2075bb712b9d742d8bd9db52d1a3b91239b41fd6683f4ead7345795d7779e51d5a3fe34bd411f73af1181fc5dbd6f31d44ee7069bd861f5350efdb2e0edcf00f1155eefda211a85e950b057325c6a5379e0ad51c35f5035f1eb9fefd18492d072897c29628e8448171828ee9dacef208cfc88170e9b2ba96fa4346cafeb1bbf2626094", 0x94, 0x8) listen(0xffffffffffffffff, 0x0) execve(0x0, 0x0, 0x0) socket(0x1, 0x2, 0x0) socket(0x18, 0x3, 0x0) socket(0x2, 0x1, 0x0) (async) r5 = socket(0x2, 0x1, 0x0) shutdown(r5, 0x2) (async) shutdown(r5, 0x2) connect$unix(0xffffffffffffff9c, 0x0, 0x0) poll(&(0x7f0000000000), 0x200000000000002c, 0x0) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) ioctl$BIOCSRTIMEOUT(r4, 0x8010426d, &(0x7f00000000c0)={0x2, 0x5}) (async) ioctl$BIOCSRTIMEOUT(r4, 0x8010426d, &(0x7f00000000c0)={0x2, 0x5}) 79.264053ms ago: executing program 0 (id=6755): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) (async) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r2 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x29) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x7ff, 0x40, 0x2000007, 0x9, 0x80000001, 0x81ad, 0x10001, 0x10, [{0x0, 0x9, 0xfffffffe, 0x71003}, {0x2, 0x9, 0x8, 0xfffffff9}, {0x100, 0xf86, 0x0, 0x9}, {0x1, 0x800, 0x8007, 0x7}, {0x401, 0x200727, 0x7, 0x2000}, {0x1, 0x3, 0x3, 0x7}, {0x1, 0xffffffff, 0x4f5, 0x6d}, {0xfff, 0x7ff, 0x14, 0x8}, {0x2, 0x82, 0x8000005, 0x5}, {0x6a75, 0x8001, 0xa94, 0x4}, {0x1cc, 0x10001, 0x0, 0x3}, {0x5, 0x9, 0x8, 0x8000002}, {0xb8c, 0x555981a8, 0x9, 0x4}, {0x29a71717, 0xfffffffa, 0xffffffff, 0x6}, {0x4c, 0x2000005, 0x5, 0x10000000}, {0x0, 0x1, 0x1002, 0x30404}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) ioctl$VNDIOCSET(r2, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) (async) ioctl$VNDIOCSET(r2, 0x80044403, &(0x7f00000001c0)={0x0, 0xfffffffffffffffd, 0x0}) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) r3 = socket(0x18, 0x3, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async, rerun: 32) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) (rerun: 32) ioctl$FIONREAD(r3, 0x802069b2, &(0x7f0000000100)) (async) connect$unix(r1, &(0x7f0000000180)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) (async) mkdir(&(0x7f0000000080)='./file1\x00', 0x77) (async, rerun: 64) unveil(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='x\x00') (rerun: 64) 21.035588ms ago: executing program 0 (id=6756): fcntl$getflags(0xffffffffffffffff, 0x1) (async) fcntl$getflags(0xffffffffffffffff, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x2000, 0x801) r0 = open(0x0, 0x615, 0x0) socket(0x800000018, 0x1, 0x0) (async) r1 = socket(0x800000018, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c) listen(r1, 0x1) getsockopt(r0, 0x5, 0x6, &(0x7f0000000040)=""/41, &(0x7f0000000100)=0x29) r2 = socket(0x18, 0x4001, 0x0) fcntl$lock(r0, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x100000000000000, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) connect$unix(r2, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) r3 = socket(0x18, 0x4001, 0x0) connect$unix(r3, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) close(r1) (async) close(r1) sysctl$net_inet6_icmp6(&(0x7f0000000000)={0x4, 0x18, 0x3a, 0x3}, 0x4, &(0x7f0000000040), 0x0, 0x0, 0x0) 20.639173ms ago: executing program 3 (id=6757): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x6, 0x0, @broadcast, @remote={0xac, 0x14, 0x0}}, @icmp=@info_request={0xf, 0x0, 0x0, 0xe20e, 0xd}}}}}) syz_extract_tcp_res(&(0x7f0000000000), 0x9, 0x8000) 1.006938ms ago: executing program 6 (id=6758): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000080)="10", 0x1}], 0x1) r0 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffffff, 0x8058574f, &(0x7f0000000180)={'./file0\x00', 0x1, 0x8, 0x9, 0x0, 0x7, 0x8001, 0x304, 0x2, 0x0, 0x7, 0x9e9f}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="cac73ce119f42809f7c30824a593555ffe", 0x11}], 0x1}, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r2 = socket(0x18, 0x1, 0x0) ioctl$FIONREAD(r2, 0xc038694e, &(0x7f00000001c0)) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000300)={0x3, &(0x7f0000000080)=[{0x24, 0x0, 0xfb, 0x1000}, {0x28, 0x4, 0x5, 0x7}, {0x46, 0xb, 0xfc, 0xfffff800}]}) fcntl$dupfd(r0, 0x0, r1) sysctl$hw(&(0x7f00000000c0)={0x6, 0x13}, 0x2, 0x0, 0x0, 0x0, 0x57) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f0000000280), &(0x7f0000000080), 0x0, 0x0) 0s ago: executing program 3 (id=6759): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x10, 0x0) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000400), 0x100, 0x0) ioctl$BIOCSETIF(r1, 0x8020426c, &(0x7f0000000100)={'tap', 0x0}) ioctl$BIOCSETF(r1, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x28, 0x0, 0xd, 0x9000}, {0x28, 0x8, 0xc4, 0xfff}, {0x6, 0xb9, 0xcc, 0xfffffffd}]}) syz_emit_ethernet(0x1000e, &(0x7f0000000140)=ANY=[]) ioctl$BIOCGSTATS(r0, 0x4008426f, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.118' (ED25519) to the list of known hosts. pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 uvn_flush: obj=0xfffffd805d98c768, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 WARNING: thread `nfsio' (412112) exits with status -1 WARNING: thread `nfsio' (160580) exits with status -1 WARNING: thread `nfsio' (390312) exits with status -1 pckbd_enable: command error pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 vnd0: sloppy read from proc 10031 (syz-executor): blkno 0 bcount 4096 uvn_flush: obj=0xfffffd805b2dd7e0, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error malloc(): allocation too large, type = 6, size = 150323855360 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 *uvn_flush: obj=0xfffffd805b2dda60, offset=0x1000. error during pageout. uvn_flush: WARNING: changes to page may be lost! pckbd_enable: command error pckbd_enable: command error WARNING: thread `nfsio' (497219) exits with status -1 WARNING: thread `nfsio' (351854) exits with status -1 WARNING: thread `nfsio' (14466) exits with status -1 WARNING: thread `nfsio' (353749) exits with status -1 pckbd_enable: command error malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700                           OpenBSD/amd64 (Amnesiac) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 pckbd_enable: command error WARNING: thread `nfsio' (440388) exits with status -1 WARNING: thread `nfsio' (375931) exits with status -1 WARNING: thread `nfsio' (215134) exits with status -1 WARNING: thread `nfsio' (295669) exits with status -1 WARNING: thread `nfsio' (333145) exits with status -1 WARNING: thread `nfsio' (352204) exits with status -1 malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back -9223372032620706652 seconds denied attempt to set clock back -9223372032620706652 seconds malloc(): allocation too large, type = 29, size = 16796513700 malloc(): allocation too large, type = 29, size = 16796513700 uvn_flush: obj=0xfffffd805cd72af8, offset=0x0. error during pageout. uvn_flush: WARNING: changes to page may be lost! ¹j¼õ¬|ÿ ž¨E1\…:—¢"OñÁFIë±x’lÉyZkGÁѹj¼õ¬|ÿ ž¨E1\…:denied attempt to set clock back 4194358 seconds malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 396362803 seconds -!,,/#(): !,,/#!4)/. 4// ,!2'%, 490% = 29, 3):% = 16796513700 $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 7381507745249584175 $%.)%$ !44%-04 4/ 3%4 #,/#+ &/27!2$ 4/ 7381507745249584175 $%.)%$ !44%-04 4/ 3%4 #,/#+ "!#+ 396362814 3%#/.$3 load: 7.46 not a controlling terminal malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 OpenBSD/amd64 (Amnesiac) (tty00) login: sd0(vioscsi0:1:0): Check Condition (error 0x70) on opcode 0x1e SENSE KEY: Illegal Request ASC/ASCQ: Invalid Command Operation Code malloc(): allocation too large, type = 29, size = 16796513700 pmap_unwire: wiring for pmap 0xfffffd806ad5d300 va 0x200000001000 didn't change! denied attempt to set clock forward to 13622315181277951 WARNING: thread `nfsio' (504935) exits with status -1 WARNING: thread `nfsio' (233746) exits with status -1 WARNING: thread `nfsio' (32219) exits with status -1 WARNING: thread `nfsio' (359960) exits with status -1 denied attempt to set clock back 396362827 seconds malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 396362836 seconds denied attempt to set clock back 396362839 seconds pppx: unable to set addresses for pppx1, error=17 OpenBSD/amd64 (â’ó½ŒD ß1âåÄ].O£…MM掽‹©®#žd¸”¤ ¿<"®–©wwhLêø,fŒç«¸WdhIÝH™2ÀTxoÒôjÕº¶Oá4 Í!°] qÂÉ) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 denied attempt to set clock back 71303264 seconds pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x200000000000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x200000001000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x200000002000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x200000003000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x200000004000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x200000005000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x200000006000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x200000007000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x200000008000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x200000009000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x20000000a000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x20000000b000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x20000000c000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x20000000d000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x20000000e000 didn't change! pmap_unwire: wiring for pmap 0xfffffd806ad5dc00 va 0x20000000f000 didn't change! malloc(): allocation too large, type = 29, size = 16796513700 OpenBSD/amd64 (â’ó½ŒD ß1âåÄ].O£…MM掽‹©®#žd¸”¤ ¿<"®–©wwhLêø,fŒç«¸WdhIÝH™2ÀTxoÒôjÕº¶Oá4 Í!°] qÂÉ) (tty00) login: denied attempt to set clock back -9223372032620706590 seconds denied attempt to set clock back 71303270 seconds malloc(): allocation too large, type = 29, size = 16796513700 OpenBSD/amd64 (â’ó½ŒD ß1âåÄ].O£…MM掽‹©®#žd¸”¤ ¿<"®–©wwhLêø,fŒç«¸WdhIÝH™2ÀTxoÒôjÕº¶Oá4 Í!°] qÂÉ) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 OpenBSD/amd64 (â’ó½ŒD ß1âåÄ].O£…MM掽‹©®#žd¸”¤ ¿<"®–©wwhLêø,fŒç«¸WdhIÝH™2ÀTxoÒôjÕº¶Oá4 Í!°] qÂÉ) (tty00) login: malloc(): allocation too large, type = 29, size = 16796513700 pppx: unable to set addresses for pppx1, error=17 WuAvRmNI_fNGau: lStP(L0 xNfffOfTf dLO80W7E6RfEfD7 0O3N 0TR,A P0 x0E,XI T0 ,a 1 ) 0- > Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 TID PID UID PRFLAGS PFLAGS CPU COMMAND *477531 54022 0 0 0 1 syz-executor proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7b2aeeb11b00, count: 14 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu0: uvm_fault(0xfffffd8076ff7030, 0x0, 0, 1) -> e ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7b2aeeb11b00, count: -1 ddb{1}> show registers rdi 0 rsi 0 rbp 0xffff80003c429760 rbx 0 rdx 0 rcx 0xffff80003c458558 rax 0x2a r8 0xffff80003c429690 r9 0x1 r10 0x4a68d3f9caa5dfa r11 0xfee92885cda903e5 r12 0 r13 0 r14 0 r15 0 rip 0xffffffff81feb4c7 proc_trampoline+0xc7 cs 0x8 rflags 0x246 rsp 0xffff80003c4296e0 ss 0 proc_trampoline+0xc7: movl $0,%gs:0x688 ddb{1}> show proc PROC (syz-executor) tid=477531 pid=54022 tcnt=2 stat=onproc flags process=0 proc=0 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c459cb0,0xffff8000fffefa18 process=0xffff800035c10ea0 user=0xffff80003c424000, vmspace=0xfffffd806aec09a0 estcpu=36, cpticks=1, pctcpu=0.0, user=0, sys=1, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND *54022 477531 92302 0 7 0 syz-executor 54022 343706 92302 0 3 0x4000080 fsleep syz-executor 49691 266257 14580 0 2 0 syz-executor 49691 2028 14580 0 2 0x4000000 syz-executor 23253 291554 68110 0 2 0 syz-executor 23253 186085 68110 0 3 0x4000080 fsleep syz-executor 23253 179031 68110 0 3 0x4000080 bell syz-executor 85785 312751 68362 0 3 0x80 nanoslp syz-executor 85785 14405 68362 0 3 0x4000080 ttyretype syz-executor 85785 141913 68362 0 3 0x4000080 fsleep syz-executor 85785 491240 68362 0 3 0x4000080 fsleep syz-executor 14651 322874 18686 0 3 0x80 nanoslp syz-executor 14651 90281 18686 0 3 0x4000080 sbwait syz-executor 14651 252032 18686 0 3 0x4000080 fsleep syz-executor 70156 262531 1 0 3 0x100083 ttyin getty 14580 46561 19706 0 3 0x82 nanoslp syz-executor 32709 488856 0 0 3 0x14280 nfsidl nfsio 61033 89704 0 0 3 0x14280 nfsidl nfsio 23423 84328 0 0 3 0x14280 nfsidl nfsio 36969 291600 0 0 3 0x14280 nfsidl nfsio 27955 365916 19706 0 2 0x2 syz-executor 18686 376312 19706 0 3 0x82 nanoslp syz-executor 20363 368867 19706 0 3 0x82 nanoslp syz-executor 92302 506975 19706 0 3 0x82 nanoslp syz-executor 68110 207600 19706 0 3 0x82 nanoslp syz-executor 68362 311511 19706 0 3 0x82 nanoslp syz-executor 11015 259127 19706 0 3 0x82 nanoslp syz-executor 20349 113500 0 0 3 0x14200 bored sosplice 19706 246641 72504 0 3 0x82 kqread syz-executor 72504 157881 47368 0 3 0x10008a sigsusp ksh 47368 371678 92788 0 3 0x98 kqread sshd-session 92788 63356 53512 0 3 0x92 kqread sshd-session 53512 471778 1 0 3 0x88 kqread sshd 83718 396185 71256 74 3 0x1100092 bpf pflogd 71256 421366 1 0 3 0x80 sbwait pflogd 70841 110323 55356 73 3 0x1100090 kqread syslogd 55356 166609 1 0 3 0x100082 sbwait syslogd 44083 225644 1 0 3 0x100080 kqread resolvd 98568 294474 25281 77 3 0x100092 kqread dhcpleased 94205 330669 25281 77 3 0x100092 kqread dhcpleased 25281 100857 1 0 3 0x80 kqread dhcpleased 70083 476762 0 0 3 0x14200 bored smr 29418 427541 0 0 2 0x14200 zerothread 65701 421941 0 0 3 0x14200 aiodoned aiodoned 2736 218220 0 0 3 0x14200 syncer update 94145 281726 0 0 3 0x14200 cleaner cleaner 28843 219273 0 0 3 0x14200 reaper reaper 70521 138517 0 0 3 0x14200 pgdaemon pagedaemon 3059 281890 0 0 3 0x14200 bored viomb 1806 157209 0 0 3 0x40014200 acpi0 acpi0 99537 299425 0 0 3 0x40014200 idle1 78150 212048 0 0 3 0x14200 bored softnet1 45590 45277 0 0 3 0x14200 bored softnet0 25550 406185 0 0 3 0x14200 bored systqmp 18478 222348 0 0 3 0x14200 bored systq 41639 75955 0 0 3 0x14200 tmoslp softclockmp 96990 342213 0 0 3 0x40014200 tmoslp softclock 10539 255993 0 0 3 0x40014200 idle0 1 355426 0 0 3 0x82 wait init 0 0 -1 0 3 0x10010200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806ad5d710) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pmap_enter+0x24b #4 uvm_fault_lower_lookup+0x3d6 #5 uvm_fault_lower+0x89 #6 uvm_fault+0x274 #7 upageflttrap+0xa9 #8 usertrap+0x3c6 #9 recall_trap+0x8 Process 54022 (syz-executor) thread 0xffff80003c458558 (477531) exclusive rwlock uobjlk r = 0 (0xfffffd806d6b0818) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 uvm_fault_lower_lookup+0x53 #3 uvm_fault_lower+0x89 #4 uvm_fault+0x274 #5 upageflttrap+0xa9 #6 usertrap+0x3c6 #7 recall_trap+0x8 shared rwlock vmmaplk r = 0 (0xfffffd806aec0aa0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4a #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x3c6 #7 recall_trap+0x8 exclusive mutex &pmap->pm_mtx r = 0 (0xfffffd806ad5d710) #0 witness_lock+0x5f1 #1 mtx_enter_try+0x1ad #2 mtx_enter+0x62 #3 pmap_enter+0x24b #4 uvm_fault_lower_lookup+0x3d6 #5 uvm_fault_lower+0x89 #6 uvm_fault+0x274 #7 upageflttrap+0xa9 #8 usertrap+0x3c6 #9 recall_trap+0x8 Process 27955 (syz-executor) thread 0xffff80003c459250 (365916) exclusive rrwlock inode r = 0 (0xfffffd800d1a27f8) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806e036e80) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa3 #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10269 11331K 12542K 166960K 22905 0 pcb 17 20K 36K 166960K 1635 0 rtable 253 16K 17K 166960K 1784 0 pf 39 18K 67486K 166960K 724 0 ifaddr 37 10K 12K 166960K 432 0 ifgroup 55 2K 3K 166960K 839 0 sysctl 4 1K 9K 166960K 129 0 counters 68 36K 38K 166960K 1014 0 ioctlops 0 0K 4K 166960K 3146 0 iov 1 12K 36K 166960K 787 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1481 93K 94K 166960K 8340 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 5 0 VM map 2 1K 1K 166960K 2 0 sem 22 21K 21K 166960K 528 0 dirhash 12 2K 2K 166960K 141 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 240K 166960K 7331 0 sigio 0 0K 0K 166960K 172 0 proc 74 115K 163K 166960K 1906 0 subproc 72 4K 4K 166960K 292 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 1239 0 in_multi 68 5K 7K 166960K 526 0 ether_multi 1 0K 0K 166960K 45 0 mrt 1 0K 0K 166960K 26 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 271 1208K 1208K 166960K 271 0 exec 0 0K 1K 166960K 2127 0 fusefs mount 1 32K 32K 166960K 1 0 pfkey data 0 0K 0K 166960K 79 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 246 164K 183K 166960K 65911 0 UVM aobj 56 4K 6K 166960K 60 0 pinsyscall 42 84K 100K 166960K 9077 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 1K 166960K 430 0 NDP 12 0K 1K 166960K 344 0 temp 89 8652K 8908K 166960K 386364 0 kqueue 17 22K 34K 166960K 1435 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 724 0 721 6 5 1 3 0 8 0 rtentry 176 548 0 457 5 0 5 5 0 8 0 unpcb 144 5924 0 5905 47 45 2 6 0 8 1 syncache 336 22 0 22 11 11 0 1 0 8 0 tcpqe 32 8 0 8 5 5 0 1 0 8 0 tcpcb 736 3061 0 3055 55 51 4 7 0 8 3 arp 136 75 0 53 1 0 1 1 0 8 0 inpcb 328 8813 0 8802 85 78 7 13 0 8 5 nd6 144 89 0 71 1 0 1 1 0 8 0 pkpcb 40 90 0 90 15 14 1 1 0 8 1 kcovpl 48 32 0 24 1 0 1 1 0 8 0 mppekey 1024 6 0 6 6 6 0 1 0 8 0 ppxss 1192 375 0 375 6 5 1 1 0 8 1 pppxif 1504 29 0 29 9 8 1 1 0 8 1 pfstscr 40 39 0 37 1 0 1 1 0 8 0 pffrag 232 90 0 74 2 0 2 2 0 482 0 pffrnode 88 79 0 64 1 0 1 1 0 8 0 pffrent 40 319 0 302 1 0 1 1 0 8 0 pfosfp 40 1429 0 1429 5 5 0 5 0 8 0 pfosfpen 112 1429 0 1429 21 21 0 21 0 8 0 pfrktable 1344 6 0 6 5 5 0 1 0 8 0 pfanchor 1288 2 0 2 1 1 0 1 0 8 0 pftag 88 3 0 0 1 0 1 1 0 8 0 pfstitem 24 392 0 261 1 0 1 1 0 8 0 pfstkey 128 466 0 336 5 0 5 5 0 8 0 pfstate 384 426 0 297 14 1 13 13 0 8 0 pfrule 1344 37 0 31 2 1 1 2 0 8 0 rttmr 136 2 0 2 2 2 0 1 0 8 0 art_heap8 4096 4 0 0 4 0 4 4 0 8 0 art_heap4 256 1879 0 1540 44 22 22 28 0 8 0 art_table 40 1883 0 1540 6 2 4 5 0 8 0 art_node 32 471 0 399 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 0 1 0 1 1 0 8 0 semapl 112 518 0 498 1 0 1 1 0 8 0 shmpl 112 57 0 4 2 0 2 2 0 8 0 dirhash 1024 106 0 89 3 0 3 3 0 8 0 dino2pl 256 15559 0 13993 99 0 99 99 0 8 0 ffsino 296 15559 0 13993 122 0 122 122 0 8 0 nchpl 144 25529 0 23778 66 0 66 66 0 8 0 rtmask 32 42 0 42 10 10 0 1 0 8 0 uvmvnodes 80 5926 0 0 121 0 121 121 0 8 0 vnodes 216 5926 0 0 330 0 330 330 0 8 0 namei 1024 93969 0 93968 5 4 1 2 0 8 0 percpumem 16 522 0 473 1 0 1 1 0 8 0 kstatmem 264 564 0 536 6 3 3 3 0 8 0 acpiwqpl 32 6 0 6 1 0 1 1 1 8 1 scsiplug 72 41 0 41 15 14 1 1 0 8 1 scxspl 216 185938 0 185938 38 33 5 8 1 8 5 plimitpl 152 2168 0 2149 1 0 1 1 0 8 0 sigapl 424 7579 0 7527 8 1 7 7 0 8 0 knotepl 120 938 0 0 24 0 24 24 0 8 0 kqueuepl 224 3695 0 3680 42 40 2 9 0 8 1 pipepl 344 1272 0 1243 28 19 9 9 0 8 6 fdescpl 528 7525 0 7494 3 0 3 3 0 8 0 filepl 160 58446 0 58214 89 72 17 28 0 8 3 lockfpl 104 3218 0 3216 5 4 1 3 0 8 0 lockfspl 48 1307 0 1305 1 0 1 1 0 8 0 sessionpl 144 68 0 59 1 0 1 1 0 8 0 pgrppl 48 227 0 210 1 0 1 1 0 8 0 ucredpl 104 10451 0 10437 1 0 1 1 0 8 0 zombiepl 144 8150 0 8148 2 1 1 1 0 8 0 processpl 1232 7579 0 7527 7 2 5 5 0 8 0 procpl 664 19426 0 19365 8 2 6 7 0 8 0 sosppl 168 50 0 50 15 14 1 1 0 8 1 sockpl 752 16000 0 15967 176 165 11 31 0 8 6 mcl64k 65536 15 0 0 2 0 2 2 0 8 0 mcl16k 16384 4 0 0 1 0 1 1 0 8 0 mcl12k 12288 4 0 0 1 0 1 1 0 8 0 mcl9k 9216 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 6 0 0 1 0 1 1 0 8 0 mcl4k 4096 116 0 0 15 1 14 15 0 8 0 mcl2k2 2112 1 0 0 1 0 1 1 0 8 0 mcl2k 2048 122 0 0 9 0 9 9 0 8 0 mtagpl 96 72 0 0 2 0 2 2 0 8 0 mbufpl 256 566 0 0 24 0 24 24 0 8 0 bufpl 280 76806 0 70663 440 0 440 440 0 8 0 anonpl 32 15287 0 0 124 1 123 123 0 246 0 amapchunkpl 152 234804 0 234251 112 78 34 36 0 158 5 amappl16 200 26005 0 25969 150 134 16 35 0 8 4 amappl15 192 6 0 6 1 1 0 1 0 8 0 amappl14 184 232 0 220 1 0 1 1 0 8 0 amappl13 176 5 0 5 1 1 0 1 0 8 0 amappl12 168 8573 0 8542 4 2 2 3 0 8 0 amappl11 160 152 0 138 1 0 1 1 0 8 0 amappl10 152 14 0 14 1 1 0 1 0 8 0 amappl9 144 254 0 252 1 0 1 1 0 8 0 amappl8 136 22 0 19 1 0 1 1 0 8 0 amappl7 128 184 0 172 1 0 1 1 0 8 0 amappl6 120 438 0 434 1 0 1 1 0 8 0 amappl5 112 228 0 218 1 0 1 1 0 8 0 amappl4 104 402 0 383 1 0 1 1 0 8 0 amappl3 96 41877 0 41777 5 1 4 4 0 8 0 amappl2 88 7949 0 7865 3 0 3 3 0 8 0 amappl1 80 43330 0 42726 15 0 15 15 0 8 0 amappl 88 63582 0 63409 5 0 5 5 0 92 0 dma32768 32768 2 0 2 2 2 0 1 0 8 0 dma16384 16384 2 0 2 2 2 0 1 0 8 0 dma8192 8192 2 0 2 2 1 1 1 0 8 1 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 2 0 1 1 0 1 1 0 8 0 dma512 512 1 0 1 1 1 0 1 0 8 0 dma256 256 8 0 8 2 2 0 1 0 8 0 dma128 128 260 0 260 7 7 0 1 0 8 0 dma64 64 9 0 9 4 4 0 1 0 8 0 dma32 32 8 0 8 2 2 0 1 0 8 0 dma16 16 22 0 21 1 0 1 1 0 8 0 aobjpl 72 59 0 4 1 0 1 1 0 8 0 uaddrrnd 24 7525 0 7494 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 7525 0 7494 1 0 1 1 0 8 0 vmmpekpl 168 53658 0 53586 5 1 4 4 0 8 0 vmmpepl 168 471814 0 469718 167 61 106 119 0 357 0 vmsppl 488 7524 0 7494 7 2 5 5 0 8 0 rwobjpl 80 122151 0 115212 164 15 149 155 0 8 0 pdppl 4096 15058 0 14988 158 86 72 84 0 8 2 pvpl 32 23632 0 0 188 0 188 188 0 265 0 pmappl 256 7524 0 7494 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 451 0 190 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff837c9ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_write_1(3f8,0,20) at x86_bus_space_io_write_1+0x40 comcnputc(800,20) at comcnputc+0x1ab cnputc(20) at cnputc+0x67 db_putchar(65) at db_putchar+0x126 kprintf() at kprintf+0x29a5 db_printf(ffffffff8331333c) at db_printf+0x9b fault(ffffffff833d8cc2) at fault+0xa7 kpageflttrap(ffff80002a3364e0,0) at kpageflttrap+0x37d kerntrap(ffff80002a3364e0) at kerntrap+0x198 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800010fdd000) at dt_ioctl_record_stop+0x108 end trace frame: 0xffff80002a336610, count: 0 ddb{0}> trace x86_ipi_db(ffffffff837c9ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 x86_bus_space_io_write_1(3f8,0,20) at x86_bus_space_io_write_1+0x40 comcnputc(800,20) at comcnputc+0x1ab cnputc(20) at cnputc+0x67 db_putchar(65) at db_putchar+0x126 kprintf() at kprintf+0x29a5 db_printf(ffffffff8331333c) at db_printf+0x9b fault(ffffffff833d8cc2) at fault+0xa7 kpageflttrap(ffff80002a3364e0,0) at kpageflttrap+0x37d kerntrap(ffff80002a3364e0) at kerntrap+0x198 alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b dt_ioctl_record_stop(ffff800010fdd000) at dt_ioctl_record_stop+0x108 dtclose(21e5f,81,2000,ffff8000fffee2b0) at dtclose+0x109 spec_close(ffff80002a336690) at spec_close+0x466 VOP_CLOSE(fffffd805d2c8708,81,fffffd80097fb5b0,ffff8000fffee2b0) at VOP_CLOSE+0x132 vn_closefile(fffffd805dd27240,ffff8000fffee2b0) at vn_closefile+0x12b fdrop(fffffd805dd27240,ffff8000fffee2b0) at fdrop+0x121 closef(fffffd805dd27240,ffff8000fffee2b0) at closef+0x192 fdfree(ffff8000fffee2b0) at fdfree+0x116 exit1(ffff8000fffee2b0,0,0,1) at exit1+0x576 sys_exit(ffff8000fffee2b0,ffff80002a336a00,ffff80002a336950) at sys_exit+0x1a syscall(ffff80002a336a00) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x711283932d10, count: -25 ddb{0}> machine ddbcpu 1 Stopped at proc_trampoline+0xc7: movl $0,%gs:0x688 proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7b2aeeb11b00, count: 14 ddb{1}> trace proc_trampoline() at proc_trampoline+0xc7 end of kernel end trace frame: 0x7b2aeeb11b00, count: -1