last executing test programs: 1.111561837s ago: executing program 6 (id=7): syz_emit_ethernet(0x136, &(0x7f0000000040)={@local, @remote, [], {@ipv6={0x86dd, {0x8, 0x6, "4498fb", 0x100, 0x3c, 0xb, @rand_addr="33a8020fc8d98480657b31de55aacc0e", @empty, {[@hopopts={0x2b, 0x18, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x9, 0xb5, "a9c3eb234e036f605388d68b059c76607372289e626962e1d51dc223e95f653bab8ba6fd39415d6c8ce031ba61f31d911fb680aad221a3cad7e0c012172c3215b63ab9b43173b96edbfcc954f116411a3ae04b193b2bf582102eeccbb6040ee05db8befa58b49e915084ffaf1d647592f354562d606bc055737b286bf26343a235e707de6f67d059932f2dcb9d85a96316154f854c675b733426bc67ce97f00946df51ba512412bd8d05c6aca17e9c94c7be62d6fd"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x3, 0x6, "4d2c03", 0x1ff, 0x57, 0x5, @empty, @rand_addr="184d07005935c5149b48dcb8a03534e1"}}}}}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r0, 0x3) r1 = syz_open_pts() syz_open_pts() syz_open_pts() lseek(r1, 0x6, 0x1) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1) 1.095516733s ago: executing program 3 (id=4): symlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x10, r0, 0x0) r1 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1003, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@un=@file={0x9, 0x1, './file0\x00'}, 0xa) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) select(0x7, &(0x7f0000000000)={0x400}, &(0x7f0000000040), &(0x7f0000000080)={0xcb}, &(0x7f0000000180)) readlink(&(0x7f0000000040)='./file0\x00', 0x0, 0x2f) 891.774462ms ago: executing program 6 (id=9): sync() mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x200, 0x9e) readv(r0, &(0x7f0000000a80)=[{&(0x7f0000000a00)=""/121, 0x79}], 0x1) (async) unveil(0x0, &(0x7f0000000140)='x\x00') (async) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0e99db6de761f86, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x59}, 0x3, &(0x7f0000000100)="00e0ae5b7e0d0000bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x50, 0x0, 0x37) (async) getsockopt$sock_cred(r1, 0xffff, 0x1022, &(0x7f00000000c0), &(0x7f0000000240)=0x5d) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x2, 0x0, 0x0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) (async) rename(&(0x7f0000004580)='.\x00', &(0x7f00000045c0)='./file0\x00') 890.458986ms ago: executing program 3 (id=10): recvmmsg(0xffffffffffffff9c, &(0x7f0000001300)={{&(0x7f0000000000)=@in6, 0x1c, &(0x7f00000011c0)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001040)=""/80, 0x50}, {&(0x7f00000010c0)=""/70, 0x46}, {&(0x7f0000001140)=""/73, 0x49}], 0x4, &(0x7f0000001200)=""/237, 0xed}, 0x2d3}, 0x38, 0x3000, 0x0) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) close(r0) r1 = syz_open_pts() connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x1c, 0x18, 0x0, 0x5e0, "eb9029ba428bca25f805461d0e5a5882"}, 0x1c) fcntl$lock(r1, 0x9, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x1000300000080}) r2 = socket(0x18, 0x2, 0x0) getsockopt(r2, 0x657, 0x3, 0x0, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000180)="a9be", 0x2}], 0x1, 0x40000) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) flock(r1, 0x1) fcntl$lock(r1, 0x9, &(0x7f0000000080)={0x3, 0x0, 0x6, 0x100000003}) closefrom(r1) socket$inet6(0x18, 0x1, 0x29) select(0x40, &(0x7f0000001640)={0x78ad, 0xc, 0x101, 0x7, 0xcb, 0x7, 0x6, 0x80000000}, &(0x7f0000001680)={0x9, 0x1000, 0x5, 0x3, 0x2, 0x7, 0xfffffffffffffbff, 0xffffffffffffffff}, &(0x7f00000016c0)={0x3, 0x9, 0x10000, 0x9, 0x8, 0x2, 0xd}, &(0x7f0000001700)={0x42d, 0x3}) execve(&(0x7f0000001340)='./file0\x00', &(0x7f00000013c0)=[&(0x7f0000001380)='\x00'], &(0x7f0000001600)=[&(0x7f0000001400)='!\x00', &(0x7f0000001440)='@/\x00', &(0x7f0000001480)='(\x00', &(0x7f00000014c0)='*\x00', &(0x7f0000001500)='(\\/\x00', &(0x7f0000001540)='$(+\x00', &(0x7f0000001580)='\x00', &(0x7f00000015c0)=')#}\x00']) 888.16286ms ago: executing program 4 (id=5): fsync(0xffffffffffffffff) r0 = kqueue() (async) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async, rerun: 64) r2 = kqueue() (async, rerun: 64) r3 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x10000) kevent(r0, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffe, 0x90, 0x40000094, 0x5, 0x5}, {{r2}, 0xfffffffffffffff8, 0xc, 0x2, 0xfffffffffffffffe, 0x7}, {{r3}, 0xfffffffffffffffc, 0xc, 0x4, 0x81, 0x3}], 0xfffffe00, &(0x7f0000000140)=[{{r4}, 0xfffffffffffffff8, 0x92, 0x4, 0xffffffffffff59c7, 0x6}], 0x9, &(0x7f0000000180)={0xfe, 0xfffffffffffffe00}) (async) kevent(r0, &(0x7f00000001c0)=[{{r4}, 0xfffffffffffffffe, 0x81, 0x4, 0x9, 0x1ff}, {{r4}, 0xfffffffffffffff9, 0x80, 0xf0000000, 0xd, 0x200}, {{r4}, 0xfffffffffffffff8, 0xf8, 0x8, 0x8, 0x3}, {{r3}, 0xfffffffffffffffd, 0x40, 0x20, 0x7f, 0x8}, {{r2}, 0xfffffffffffffff7, 0x8, 0x40, 0xa, 0x80000000}, {{r1}, 0xfffffffffffffffb, 0x18, 0x1, 0x0, 0xfa6}], 0x7, &(0x7f0000000280)=[{{r4}, 0xfffffffffffffff9, 0x4, 0x80000000, 0xffffffffffffff26, 0x8}, {{r2}, 0xfffffffffffffff7, 0x4, 0x20, 0x10000, 0x100000001}, {{r0}, 0xfffffffffffffff6, 0x84, 0x8, 0x1f2, 0x2}, {{0xffffffffffffff9c}, 0xfffffffffffffffa, 0x0, 0x2, 0x2, 0x4}], 0x5, &(0x7f0000000300)={0xe}) (async) ioctl$DIOCGETRULE(r5, 0xcd604407, &(0x7f0000000340)={0x7, 0xf5, 0x800, './file0\x00', './file0\x00', 0x0, "8fe69dde530b94decd7a6ce39def389dd6c9aac44b6584d8b52b94546ee5acb4daffb9583b4216e66718057d1a24c398b4ed78aa078e101aad77cc54dbc7cd4a0331b14367ebf7635b0ed3f6608da0db0814c8e0590a5d3f15f8806e3713c8e320453e2a40cfff7e0123387b9d13ebe6addc9bfa7a1ea195619c3d509fd397dfb7882caa0b980eb42fef8b6f053b66ffa6117114b7f2fab6fc22209950da69f474f1c17839d4dfbc9a6ad7f00e99b277b08666c3950ee7a7772fd604bb2e5258fe64c8aad472e811fe6b53f0f648b3f7f15acfe18117c890641008e2c6451bb95d823debc671d57398b86557f91dc36a36ceaea38f5edd0dc21b13afafa2adfec449f8377b0b27b7fe84ad43d58f9b8749fe9a5e9ec3d2b0a3c79f69e9393cc70e0f878d2a607c5935d41a484014e6c806e0c6fc42e71dce03d25d7bb3e540733738b18d3ffa68d3753fdd0a2d06cd5912faab822f56f3aaae62ce9e9a1be7cad7b545d9c132234915f92e31a632959752e4b24655442f4932d056d42829e9290f541c8fd1c1e361693c1ad74a092fb5ec8ed7b5ecc20e7ebc13cf737fb68ff6e7ae66857fc37ea5b2c867641d2a402afaa3facded5f7e9eb2b5618a9a1c740119366f47e25e1cdeab02e59cbb9028d868acd2c74c51a01402f063ce61a93294d4b6f5de645cc374cdb42c3f2f2c7c08084fd1ad059d39462c404544ac23f52df10ceb408259fccdc5dde6998a8f7b33f850154ec52811e47d00c2ef7b7faf6337148fe48304858807e818ae512de317bdd123d46ab44db924df66e54567973d0a4e59414cdd5c85c4810565bea7f4e4fc7518a8aa6526368af42c1bb6ac8c5d3fafd8fe8dc334c0241a456b8ed2b9be938279903f460ad875a94d9d1753e770960b3dee896b2a9762384e71f8ebc29e1688ff231de1dc91d83590f69f175432e79dd13ea0e4266a8d8f092f002092980ab08fc090dd03949e32379e77e50d616f39cd3a9decde7fc1ea31ff9e850222deb430e96683f47d7ae9528470536fe0619557de5f5b05cf038d60690ac8a8d9a546caadd15f13c097ee4e7d1a9820f1f9cac80a81e459d3b1033154de5e9aa5b458d0814e6a0174fc9be1a2c8dce87a98c0fbe9c0ae3a0f4fd1f1b9382e77a0bd07f511fb4b94e99910cbdef46ce7409afabcea464028e6718a365f0308d1ce0cb9f2e8a02aeb1ea1d730b5086ba5b92ef5ad94b3d21c25bb373701ab5234d55bda0d76c15f73d788c4842fa5ca9ac7ce1b10a4f1bb9f40ac90f28eb2fe1ced515c077fd6a6392d6abfb30156385ffad6c7153e1e85b551d0b53fbdfc6d71662c921f0094938fd4cc5b2ea34be8ea6a4d4f8951f2b427188dcd64ded10d7c5f452280227fcd36114f18bf592988ae1277fb4302aa49e55db994c19d8e9f085c6e384a44a16ed9c1e2d301df1f99be90870ccc4a704f04c689fe526ba75ac31a94f498b56aff830b89138ecb705360b3dc239fb2e06a48ad76e2389d32f1b550276a88473a60c23c00b39f53626ac34b57b3e5596ebfc0629dc550fa0a7075f0906ba7c1877f875427b7cfe282f835c2daf8f975429cf8b0fb8771ba44849e9e0a444373bcc4b79a257d27b3815bb56be9ebbf907a46e87bc0a072d65c88e25798f1f07b593f74c41f137537f54a3b263caa9e545d322cfdaf6f2571a94b1d5b6fef70c0a444bc3f46fdd1f66a88cab0160590adc3c954b4ef12c7bc7504a67eecc7e0c997fd8c9cc2da6b7b32b97e136b8310098da964984a9e8ab745eb26c49a771e61e386dabd93498a61b5e2d1eff93f77eb29c7d86650eb030200b232c94017cd5d2774e3a3f8c19dc951b5bc3354622f35a2497f45f6ba122c5172753e680d0c0536d4e7c396c967a8f0a1d116e67e48e7a24030c6ca601caa1b0b4469"}) ioctl$WSKBDIO_SETMAP(r5, 0x8010570e, &(0x7f0000001100)={0x4, &(0x7f00000010c0)=[{0x1000, 0x400, 0x8, 0x1, 0x2}, {0x92af, 0x6, 0x8, 0x89, 0x7f}, {0xfffa, 0x783, 0xfff6, 0xfff9, 0x9}, {0x0, 0x9, 0x3, 0x100, 0x3}]}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000001240)={&(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0], 0x5, 0x6, 0x3, 0x3, 0x3, 0x2, 0x7, 0x3}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000001600)={&(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000012c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000001580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x7, 0x0, 0x0, 0xf, 0x3e, 0x9, 0x6, 0xfffffffa, 0x4}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000001780)={&(0x7f0000001680)=[0x0], &(0x7f00000016c0)=[0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001740)=[0x0, 0x0], 0x1, 0x1, 0x7, 0x2, 0x5bc, 0xe46, 0x0, 0x2}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000001800)={0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_DIRTYFB(r5, 0xc01864b1, &(0x7f0000001880)={0x0, 0x1, 0x2008000, 0x1, &(0x7f0000001840)=[{0x7ae, 0xc000, 0x9, 0xe}]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000018c0)={&(0x7f00000017c0)=[r6, r7, r8, 0x0], 0x4, r9, r10, 0x9, 0xffffff12, 0x5, 0x6507, {0x1ff, 0x1, 0x9, 0xab, 0x1, 0x1, 0x3, 0x5, 0x1, 0x6, 0x7f, 0xff, 0x1c000, 0x5, "a46de86d5927dbc51e64580df33d29d9c6eae2b91bd81ae9f77fc61becb12fe2"}}) r11 = socket(0x18, 0x2, 0x9) r12 = fcntl$dupfd(r11, 0x0, r5) ioctl$WSKBDIO_GETBELL(r4, 0x40105704, &(0x7f0000001940)) (async) r13 = open$dir(&(0x7f0000001980)='./file0\x00', 0x8, 0x60) utimensat(r13, &(0x7f00000019c0)='./file1\x00', &(0x7f0000001a00)={{0x400, 0x9}, {0x1, 0x3}}, 0x0) (async) ioctl$BIOCGDLTLIST(r5, 0xc010427b, &(0x7f0000001a80)={0x8, &(0x7f0000001a40)=[0x80, 0x1ff, 0xc6, 0x40, 0xfdcb, 0xdcd6, 0x7, 0x5]}) ioctl$DIOCRCLRTABLES(r12, 0xc450443c, &(0x7f0000001ac0)={{'./file1\x00', './file1\x00', 0x0, 0xfe}, 0x0, 0x0, 0x0, 0x7, 0xf8f, 0x19f, 0x5, 0x68, 0xfffffeff}) fstatat(r12, &(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5) fchownat(r13, &(0x7f0000001f40)='./file1\x00', r14, 0x0, 0x5) (async) r16 = shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffc000/0x3000)=nil) r17 = getsid(0xffffffffffffffff) (async) r18 = fcntl$getown(r3, 0x5) shmctl$IPC_SET(r16, 0x1, &(0x7f0000002040)={{r14, r15, r14, r15, 0x168, 0x7c5a, 0x0, 0x0, 0x3374}, 0x1, r17, r18, 0xa, 0x0, 0xffffffff, 0x5cc, 0x9, 0x3d77, 0x4, 0x3ff000000000}) (async) ioctl$BIOCSHDRCMPLT(0xffffffffffffffff, 0x80044275, &(0x7f0000002100)=0x1) 886.851837ms ago: executing program 6 (id=13): mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r1, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) (async) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x40000) (async) socket$inet(0x2, 0x3, 0x0) (async) open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) unveil(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='x\x00') 620.289462ms ago: executing program 1 (id=2): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x65d, &(0x7f0000ffa000/0x3000)=nil) getgroups(0x2, &(0x7f0000000000)=[0x0, 0xffffffffffffffff]) r2 = getthrid() shmctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0xfffd, 0x7, 0x0, 0x9}, 0x0, 0xfffc, r2, 0x0, 0x4, 0x0, 0x800000800000004}) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x2, 0x0, 0x1c}, 0x4, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x1b}, 0x4, &(0x7f0000000080)="7c2b70d2680800758a0d0fef6c23ae8bb5d1c7b0480df30856083376b80e4fc26a3fa82ef3a1b84001e742563a746e0c63b0c022f588815999ba0aa71962420933298871", 0x0, 0x0, 0x0) 619.876689ms ago: executing program 2 (id=16): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket(0x22, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0xffff, 0x1024, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) getsid(r1) r2 = socket$inet(0x2, 0x2, 0xce) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000000)="36cf5ceab91d44402f927e", 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000000d40)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/13, 0xd}, 0x10}, 0x38, 0x2000, &(0x7f0000000d80)={0x77ad, 0x7}) shutdown(r3, 0x2) r5 = socket(0x11, 0x3, 0x8) sendto$unix(r5, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a421020000e8710fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) select(0x40, &(0x7f00000000c0)={0x4, 0xed, 0x8, 0x81, 0x2, 0x4, 0x8000000000000000, 0xb}, 0x0, 0x0, 0x0) 619.341043ms ago: executing program 7 (id=8): semop(0x0, &(0x7f00000000c0)=[{0x2, 0x0, 0x1800}, {0x4, 0x2ff, 0x800}], 0x2) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x4001, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) connect$unix(r0, &(0x7f0000000000), 0x10) sysctl$vfs_ffs(&(0x7f00000000c0)={0x4, 0x1, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) shutdown(r0, 0x2) shutdown(r0, 0x1) sysctl$net_inet_tcp(0x0, 0x0, &(0x7f00000000c0)="9b18", 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0xc, 0x7) syz_open_pts() bind(r1, &(0x7f00000000c0)=@in={0x10, 0x2, 0x0}, 0x1c) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) 618.971457ms ago: executing program 6 (id=17): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) (async) r0 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x48, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) (async) ioctl$FIONREAD(r0, 0xc0206917, &(0x7f0000000100)) 618.582754ms ago: executing program 2 (id=18): sysctl$hw(&(0x7f0000000080)={0x6, 0x6}, 0x2, &(0x7f00000003c0)="573c060e", &(0x7f0000000500)=0x4, 0x0, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = syz_open_pts() ioctl$TIOCSFLAGS(r0, 0x8004745c, &(0x7f0000000080)=0xa4e) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x1}, {0x2, 0x2}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x18, 0x1, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$FIONREAD(r1, 0x8020699f, &(0x7f00000001c0)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) read(r2, &(0x7f00000000c0)=""/129, 0x81) mprotect(&(0x7f0000101000/0x1000)=nil, 0x1000, 0x2) open$dir(&(0x7f0000000000)='./file0\x00', 0xed57584586f5abc7, 0x1d4) 440.758724ms ago: executing program 6 (id=19): msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x48, 0x44, 0x6}, 0x80000000, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4}) poll(0xffffffffffffffff, 0x0, 0x1002) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x18, 0x2, 0x0) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r0, 0x1000000029, 0x2e, &(0x7f0000000000)="ebf6cbdf13b9fd812eaa4e712e54e69931929648", 0x14) 439.585941ms ago: executing program 6 (id=20): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r0, &(0x7f00000000c0), 0xfffffffffffffec8) ioctl$SPKRTONE(0xffffffffffffffff, 0x80085301, &(0x7f00000000c0)={0x2f06, 0x81}) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff0200000000000000000000000000010001c2"]) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$lock(r2, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x300000003}) fcntl$lock(r2, 0x9, &(0x7f0000000080)={0x1, 0x0, 0xe, 0x2ffffff7c}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0xa2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r3, 0x0) madvise(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x6) mmap(&(0x7f000009b000/0x2000)=nil, 0x2000, 0x3, 0xb013, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0xafffe) read(r0, &(0x7f0000001600)=""/4096, 0x1000) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0xfffffe98}], 0x1) 439.221638ms ago: executing program 1 (id=21): mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000c1d000/0x1000)=nil, 0x1000, 0x2) r0 = socket(0x2, 0x1, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) shutdown(r0, 0x1) shmget$private(0x0, 0x1000, 0x105, &(0x7f00003ac000/0x1000)=nil) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$net_inet_tcp(&(0x7f00000000c0)={0x4, 0x18, 0x6, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0x3d, 0x0, 0x0) mmap(&(0x7f0000957000/0x3000)=nil, 0x3000, 0x2, 0x3010, r1, 0x0) 438.344176ms ago: executing program 4 (id=22): socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) shutdown(r0, 0x1) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x200007, 0x7, 0x101, 0x7, 0x7, 0xffffff00, 0x10, [{0x0, 0x7, 0x4, 0x35}, {0x7, 0xfffffffc, 0x8, 0xfffffff8}, {0x9, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x8, 0x400}, {0x401, 0x4, 0xe, 0x80000000}, {0x2, 0x6, 0x3, 0x99}, {0xddf, 0x1, 0x40000005, 0x101}, {0x7, 0x7ff, 0x14, 0x8}, {0x5, 0x7fffffff, 0x1, 0x9}, {0xfffffffe, 0x7, 0xc8, 0x88}, {0x3, 0x50001, 0x9, 0xaec}, {0x7ff, 0x9, 0x3, 0x4}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x2, 0x6}, {0x4, 0x80000004, 0x6}, {0x0, 0x132e, 0x2, 0xfe}]}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x7ff, 0x200007, 0x7, 0x101, 0x7, 0x7, 0xffffff00, 0x10, [{0x0, 0x7, 0x4, 0x35}, {0x7, 0xfffffffc, 0x8, 0xfffffff8}, {0x9, 0xf86, 0x0, 0xaf9}, {0x1, 0x800, 0x8, 0x400}, {0x401, 0x4, 0xe, 0x80000000}, {0x2, 0x6, 0x3, 0x99}, {0xddf, 0x1, 0x40000005, 0x101}, {0x7, 0x7ff, 0x14, 0x8}, {0x5, 0x7fffffff, 0x1, 0x9}, {0xfffffffe, 0x7, 0xc8, 0x88}, {0x3, 0x50001, 0x9, 0xaec}, {0x7ff, 0x9, 0x3, 0x4}, {0xb8c, 0x4, 0x5, 0x6}, {0x29a71717, 0xfffffffa, 0x2, 0x6}, {0x4, 0x80000004, 0x6}, {0x0, 0x132e, 0x2, 0xfe}]}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) poll(&(0x7f0000000000), 0x35, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000c, &(0x7f0000000240)="ea00eb0100000000", 0x8) setsockopt(r1, 0x0, 0x9, &(0x7f0000000000), 0x0) r2 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000280)=0x3, 0x4) (async) setsockopt$sock_int(r2, 0xffff, 0x1, &(0x7f0000000280)=0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000002c0)="0a1973667fa7d55fa4900301b3f1a20470fb5fefd60fe3d44871b312ab4943c2df211c6e25221c463f5dfa494c731b9ced15c3c2b8f67305848775877d212c9d65714f186c7f438fb119c9c10599dd50d2c4c3173784d0b256579f2b72a09af8ee4bb0a5084e7bbc29274ab7bc0d7ef68b00a0b81ebf99b51a4f49041d16d12741dea457a95ce2e091bcc34036c96a8f4c6de4175a5c16bc5853c54b77a9c7994b2c3079ae51a34318058d6e3b26e4f84853264c6873311ec05c39f58ce3b83fa639980ba4af0f1dacba986edab50a0241b76fa4fa", 0xd5) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r2, &(0x7f0000000000), 0x10) read(r2, &(0x7f0000000140)=""/193, 0xc1) (async) read(r2, &(0x7f0000000140)=""/193, 0xc1) 315.51764ms ago: executing program 2 (id=23): munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000800142b030000000002000000000000000000000000000000000000000000ffff"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = socket(0x2, 0x1001, 0x0) accept$inet(r0, 0x0, 0x0) r1 = shmget$private(0x0, 0x4000, 0x240, &(0x7f0000383000/0x4000)=nil) shmat(r1, &(0x7f0000639000/0x3000)=nil, 0x0) r2 = geteuid() getsockopt$sock_cred(r0, 0xffff, 0x1022, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r4 = semget$private(0x0, 0x4, 0x4) r5 = geteuid() lchown(0x0, r5, 0x0) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000003c0)={{0x0, 0x0, r5, 0x0, 0x1c0, 0x7e, 0x0, 0x0, 0x4}, 0x0, 0x103, 0x0, 0x0, 0x40, 0x0, 0x7ffe}) r6 = getegid() r7 = fcntl$getown(r0, 0x5) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000000c0)=@file={0xe, 0x1, './file0\x00'}, 0xa) r9 = getpid() fcntl$setown(r8, 0x6, r9) shmctl$IPC_SET(r1, 0x1, &(0x7f00000000c0)={{r2, r3, r5, r6, 0x40, 0xfff8, 0x0, 0x0, 0xc}, 0x2, r7, r9, 0x4, 0x0, 0x5, 0x7ff, 0x1, 0xfffffffffffffff8, 0x9, 0x46}) 315.22556ms ago: executing program 3 (id=24): r0 = syz_open_pts() fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x3, 0x0, 0xa, 0x100000001}) (async) fcntl$lock(r0, 0x8, &(0x7f0000000080)={0x3, 0x0, 0xa, 0x100000001}) r1 = setsid() kill(r1, 0x1e) fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x2, 0x2, 0x800000000000009, 0x300000000, r1}) (async) fcntl$lock(r0, 0x8, &(0x7f00000001c0)={0x2, 0x2, 0x800000000000009, 0x300000000, r1}) setresgid(0x0, 0x0, 0x0) setgid(0x0) 314.880234ms ago: executing program 3 (id=25): r0 = socket(0x2, 0x4001, 0x0) shutdown(r0, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) r1 = socket(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0xffff, 0x1, &(0x7f0000000280)=0x3, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r1, &(0x7f0000000000), 0x10) fstat(r0, &(0x7f00000005c0)) 314.439534ms ago: executing program 7 (id=26): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x4, @broadcast}, @icmp=@time_exceeded={0xb, 0x1, 0x0, 0x0, 0xb, 0x0, {0x5, 0x4, 0x1, 0x2, 0x2, 0x68, 0x1, 0xed, 0x11, 0x61a, @broadcast}}}}}}) syz_emit_ethernet(0x1000e, &(0x7f0000000000)=ANY=[]) syz_emit_ethernet(0x34, &(0x7f0000000040)={@broadcast, @random="d5ebe14de313", [], {@arp={0x806, @generic={0x1, 0x3c0b, 0x6, 0x2, 0x3, @empty, "be96", @broadcast, "f4a81cb4147701c63c2ca0cfaba3f0c1"}}}}) 171.148082ms ago: executing program 3 (id=27): syz_open_pts() (async) setsid() (async) syz_open_pts() (async) openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x10102, 0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) (async) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) kevent(0xffffffffffffffff, &(0x7f00000002c0)=[{{r0}, 0xfffffffffffffffa, 0x5, 0x4, 0x3, 0xa}, {{r0}, 0xfffffffffffffffa, 0x8, 0x10, 0x1, 0x3c}], 0x2, 0x0, 0x7, 0x0) (async) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) (async) ioctl$TIOCSCTTY(r0, 0x20007461) (async) read(r0, &(0x7f00000001c0)=""/244, 0xf4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x8, "ff3177d8ffff0020c65c004000000001", 0x7}, 0x1c) sysctl$hw(&(0x7f0000000040)={0x6, 0xb}, 0x3, &(0x7f0000000080)="bd0f192e", &(0x7f0000000000)=0xfffffffffffffe76, 0x0, 0x0) sendto(r1, &(0x7f0000000180)="b6", 0x1, 0x404, 0x0, 0x0) (async) write(r1, &(0x7f0000000040)="3ba7a5d2bc77d6bd7b2f1d130d202a222aa47d1876c2df8b59bc9813884e02ad5b9abf18c51db43d1df4b1e8fa875931d575a8e0cc0fc71b74569ed813f7d3b5d0b6e08c9b77fc2fa3d3ddcda509908caff87be37593e4ed64dacb17ce4f84294203c935dae1e3024132a4f46ebf62d1e9e0cb03762988e302299b7f2d672db7f419a3cbdf00be57c95ebfc0b10c603c53", 0x91) (async) sendmmsg(r1, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x2) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x2, 0x0, 0x5}, 0x10) openat$tty(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) sendto(r0, &(0x7f0000000300)="d5adc4066d0ae947de662d6b24da7f72c550507052dd8cae98b285c2ff422666782cfd16efe076e16398af6aa01dfd2bd003f99cab479dae35064cd8777ccfa13c38b097db2ab69baa9323abf04318034adde80bd954f4000100eaf6e26297435873bfc1a93940a1445e1adf488155fc30613156e1b747aa3de27c3f3f903b66eb7a524a9ab2bc72145f3e2f1e19aea26f91d7e90b48a955dfa21d7140b39e3e146b9dc411a2e45ea557d40b02d6535249996e8a872014882776ea8618493a5524de23659d82c4bb0366f5a9b65f2d24a8b74356c1c553343255fdcb3959afcc3930052568", 0xe5, 0xc, 0x0, 0x0) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x1, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x2, 0x8, 0x6, 0xfff}, {0x7, 0xfffffffe, 0x2006, 0xd}, {0x2, 0x7, 0xf}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0x7, 0x80d2}, {0x2024, 0x1, 0x85, 0x5}, {0x0, 0x40009, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x400005, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x106, 0x7, 0x3d}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x6, 0x69}]}) (async) poll(&(0x7f0000000000), 0x35, 0x0) 169.317243ms ago: executing program 3 (id=28): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) sendmmsg(r2, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, 0x0}}, 0x38, 0x8) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0) setpgid(0x0, 0x0) unveil(0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x6, 0x0) ioctl$DIOCGETSTATES(r2, 0xc0104419, &(0x7f0000000480)={0x2, &(0x7f0000000240)=[{0x0, ""/16, [{[@v4=@loopback, @v6=@remote]}, {[@v4=@broadcast, @v4=@loopback]}], {}, {}, @v4=@broadcast}, {0x0, ""/16, [{[@v4=@remote, @v6=@ipv4={""/10, ""/2, @broadcast}]}, {[@v6=@mcast2, @v4=@loopback]}], {}, {}, @v4=@broadcast}]}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) flock(r3, 0x2) r4 = semget$private(0x0, 0xb, 0x19f) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) fcntl$lock(r5, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300000023}) semop(r4, &(0x7f0000000000)=[{0x1, 0x9469}], 0x1) semop(r4, &(0x7f00000000c0)=[{0x1, 0x2, 0x1000}, {0x4, 0x9, 0x800}, {0x2, 0x7}, {0x3}, {0x3}, {0x0, 0x5}, {0x3, 0x6, 0x1000}, {0x4, 0x8001, 0x1800}, {0x2, 0x2, 0x800}], 0x9) unveil(0x0, 0x0) r6 = socket$inet(0x2, 0x1, 0x0) unveil(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='c\x00') recvmmsg(r6, &(0x7f0000001cc0)={{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/200, 0xc8}, 0xac}, 0x38, 0x801, 0x0) 167.292342ms ago: executing program 7 (id=29): r0 = setsid() fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x1, 0x2, 0x3369, 0x5, r0}) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x9, 0x0, 0x0) sysctl$net_inet_ip(&(0x7f0000000040)={0x4, 0x11, 0x0, 0x2}, 0x6, &(0x7f0000000080), 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000e80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0xffff, 0x1023, &(0x7f0000000f80)=0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffffffffffff0000000000000000000000bbfe8000000000000000000000000000aa01009078840000006200000000004e08ff0200000000000000000000000000010000000000000000000000000000000100"/102]) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x10091, 0x0) fcntl$lock(r3, 0x9, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x300000023}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0x2, 0x2, 0x0) getsockopt$sock_timeval(r6, 0xffff, 0x1005, 0x0, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0xd, {[0x3, 0x0, 0x6, 0x6, 0x3, 0x8000, 0x4, 0x0, 0x7, 0xffffffffffffffff, 0x9, 0x91c, 0xa, 0x100180, 0xfffe, 0xb8, 0x74, 0xffffffffffdffff7], [0x5438b950, 0x3, 0x1005, 0xf14, 0x6f1a683a, 0x8000001, 0x8, 0x7, 0x1, 0x3], [0x6, 0x9, 0x10000, 0x800000000a, 0x10000, 0x8, 0x100000000002], [0x100000000, 0x10803, 0x0, 0x10000000000005, 0x3, 0x200000000008], [{0x5ad, 0x7, 0x5, 0x7}, {0x2, 0x926, 0x8002}, {0x1000, 0x40, 0x1, 0x5}, {0x6, 0x8, 0x1003, 0x8000}, {0x4, 0x3, 0x2, 0x10000}, {0xeff8, 0x4, 0x5, 0xfffffffffffffffe}, {0x5f, 0xffffff7e, 0x1fb, 0x9}, {0x3, 0x10000, 0x6, 0x4}], {0x52f, 0x4, 0xfffffffc, 0x8}, {0x690, 0x3, 0x40000048, 0x80000001}}}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x2, 0x0, 0x0, 0x0, 0x0) ioctl$SPKRTONE(r4, 0x80085301, &(0x7f0000000c40)={0x2, 0x212}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xfe10, 0x0, 0x37) r7 = socket(0x10, 0x2, 0x8) setsockopt(r7, 0x1000000000029, 0xb, &(0x7f0000003680)='\x00\x00\x00\x00', 0x4) dup2(r5, 0xffffffffffffffff) r8 = open(&(0x7f0000000100)='./file0\x00', 0x9cab835cfdc52675, 0x58) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r8, 0x0) ftruncate(r8, 0xbc) ioctl$FIONBIO(0xffffffffffffffff, 0x8004667e, &(0x7f0000000040)=0x2) mlock(&(0x7f0000000000/0x1000)=nil, 0x1000) recvmmsg(r8, 0x0, 0x0, 0x3040, &(0x7f0000001b40)={0x2, 0xffffffffffffffff}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x1d}, 0x2, 0x0, 0x0, 0x0, 0x0) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5) ioctl$VMM_IOC_CREATE(r5, 0xca605601, &(0x7f0000000240)={0x10, 0x23eb, [{&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x10b}, {&(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x2}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0xffff}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x400000}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x100000000}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xfffffffffffffffd}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x4}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x5}, {&(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0xfffffffffffffffe}, {&(0x7f0000fee000/0x12000)=nil, &(0x7f0000ff4000/0x1000)=nil, 0xc}, {&(0x7f0000ff4000/0x3000)=nil, &(0x7f0000fef000/0x4000)=nil, 0xb}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x8}, {&(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, 0x6}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3}], './file0\x00', 0x5, 0x8, 0x5398051b, 0xf, [0x9, 0x101, 0xffff, 0x3, 0x6d5, 0x0, 0x73, 0x80000000, 0x4, 0x6, 0x5, 0x4, 0x3, 0x4, 0xb2, 0x6923, 0x5, 0x7, 0x7f, 0x2, 0x7f, 0x0, 0x1, 0x6, 0x0, 0xfffff800, 0x101, 0x5, 0x8, 0x617, 0xb9, 0x0, 0xe, 0xfffffff8, 0x200, 0x8000, 0x4, 0xf, 0x4, 0x1ff, 0xffff7fff, 0xfffffffe, 0x3, 0x20000000, 0x2847, 0xbc2, 0x80, 0x2, 0x2, 0x2, 0xf7, 0x7, 0x8, 0x8c, 0x5, 0x7ff, 0xed, 0x3, 0x5, 0x80, 0x7, 0x8, 0x1, 0x9, 0xa, 0x3ff, 0x0, 0x7fff, 0xa, 0x5, 0xa69d, 0xfb, 0x9, 0x2, 0x6, 0x40, 0xffff, 0x6, 0x2, 0x6, 0x3, 0x1, 0x4, 0x6, 0x5, 0x8001, 0x10001, 0x10, 0x3, 0x2, 0x1, 0x8, 0x3, 0x4, 0x2, 0x9, 0x8001, 0xa, 0x2, 0x2, 0xb, 0x4, 0x225d, 0x872, 0x101, 0xd, 0xe, 0x5c22, 0x1ff, 0x0, 0x8, 0x5, 0xf9b, 0x7, 0x800, 0x4, 0x1, 0x101, 0x6, 0x4, 0x8, 0x6, 0x8, 0x800, 0x8, 0x10000, 0x1000, 0x3, 0xfffff801, 0x3, 0xffff, 0x8001, 0x7fff, 0x8, 0x3, 0x0, 0x2, 0x4, 0x7fff, 0xfff, 0x5, 0x8, 0x1, 0x9, 0x3, 0xc, 0x5, 0x7, 0x7fff, 0x2, 0x8, 0x8b2, 0x8, 0xfffffff9, 0x9, 0x5, 0x1, 0x1, 0x4c0a, 0xe, 0x5, 0x2, 0x4, 0x33, 0xeb5, 0xebb, 0x8000000, 0x80000001, 0x5, 0x12, 0x1ff, 0x2, 0x6, 0x6, 0x1, 0x4, 0x68587365, 0x6150, 0xf3, 0xcb3, 0x43f1, 0xe, 0x3, 0x7, 0x6, 0x2, 0x2, 0xca, 0x1ff, 0x6, 0xffffff9f, 0x3, 0x3, 0x10001, 0x0, 0x0, 0xfffffff8, 0x710d, 0x6, 0xffffffff, 0x4, 0x2, 0xe36a, 0x6, 0xfffffff7, 0x0, 0x7fffffff, 0x1, 0x1000, 0x7, 0x7ff, 0x21e8, 0x1, 0x1, 0x100, 0x7, 0x4, 0x9, 0x7, 0x0, 0x300, 0xcb34, 0x8000, 0x6, 0xdf, 0x3, 0x10001, 0x3, 0x9, 0x7, 0x5, 0x2, 0x4, 0x6, 0xfff, 0x800, 0x60000000, 0x25, 0x8, 0x3, 0x3, 0xc, 0xc, 0xa, 0x73d, 0x3ff, 0x5, 0x3, 0xe, 0x7, 0x6, 0x6, 0xc, 0x0, 0x5, 0x8001, 0x6, 0x7, 0x2, 0x7, 0x6, 0xc, 0xf9c0, 0x9, 0xc, 0x7f, 0x3ff, 0x7, 0x1, 0x7, 0xb9, 0xa, 0x3f68, 0x0, 0x8, 0x0, 0x1, 0x8, 0x7fffffff, 0xc, 0x8, 0x2, 0x3, 0x6, 0x6, 0x9, 0xc, 0x2, 0xfffffff7, 0xc, 0x800, 0x2, 0x1, 0xb, 0x1, 0x4, 0x8100000, 0xa, 0x100, 0x2, 0xcb6, 0xffffffff, 0x81, 0x8, 0x1, 0x7, 0x2, 0x2, 0x5, 0xffffffff, 0xc08a, 0x4, 0xc, 0x45, 0x5, 0x6, 0x8000, 0x1, 0x8, 0x401, 0x6, 0x6, 0x10001, 0x7, 0x4, 0xfffffffb, 0x0, 0x3, 0x4, 0x2, 0x3ae75b01, 0x7, 0x8, 0x7, 0x0, 0x4, 0x8, 0xfffffff8, 0xfff, 0x6, 0x1, 0x4, 0x6, 0x81, 0x2e90, 0x891d, 0x0, 0x0, 0x1, 0x1, 0x9, 0x3, 0x7, 0x6, 0x7, 0x4, 0xffffffff, 0x8, 0x14, 0x400, 0x4, 0x4, 0xfffffff8, 0x0, 0x3, 0x2, 0x4, 0x7, 0x1, 0x8, 0x5, 0x8001, 0x8, 0xffffffff, 0x7, 0x7, 0x200, 0x2, 0x7, 0x5, 0x5, 0x0, 0x80, 0x6b5, 0x200, 0x1, 0x1, 0xfff, 0x8, 0x1, 0x120, 0x1, 0xffff, 0x5, 0x1, 0x8000, 0x2, 0x101, 0xb, 0x9, 0x3, 0x9, 0x0, 0x7, 0x8, 0xfff, 0xe2d9, 0xc, 0x9, 0x200, 0x7, 0x4b5, 0x5, 0x10, 0x7, 0x74ff, 0xb, 0xd, 0x7, 0x3, 0x5, 0x1, 0x2, 0x5, 0x24, 0x42, 0x1c, 0x6, 0x1000, 0x8, 0x8, 0x3, 0xff, 0x8, 0x2, 0x5, 0x4, 0x6, 0x95, 0x80000001, 0x9, 0xfffffe01, 0x9, 0x10001, 0x1ff, 0x9, 0xffffff81, 0x7ff, 0x9, 0x8, 0x5, 0xd, 0x6, 0x5, 0x3, 0x4, 0x6, 0x5, 0x1, 0xc, 0x3, 0x7, 0x325, 0x1000, 0x5, 0x8, 0x8001, 0x5, 0x345, 0xf, 0xd, 0x2, 0x100000, 0x3, 0x50fb, 0x6a0a, 0x3, 0x5, 0x1, 0x8, 0x2, 0x3, 0xf37, 0x1ff, 0x7, 0x200, 0x1, 0x0, 0x1, 0x21c0, 0xfffffffb, 0x5, 0x5, 0xd015, 0x80000000, 0xf, 0x3, 0x6, 0xc, 0x3, 0x72c2, 0x9, 0xda6, 0x8001, 0x2, 0x5, 0x3, 0x7, 0x800, 0x16, 0x0, 0x4]}) 166.898912ms ago: executing program 5 (id=6): r0 = socket(0x18, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x800, "fe80000400000000fdff00"}, 0x1c) r1 = socket(0x18, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x1, 0xffffffff, '\x00', 0x4}, 0x1c) connect$unix(r1, &(0x7f0000000b00)=@abs={0x4e, 0xe7acb8a8e3d7a412, 0x0, 0x2}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r2, &(0x7f0000000180)="94dcf5adbabca6df7f04c5c547960f0698c2631af0c336b77f2950bf3fa7820f570000000000000060b1b88bebee0fd445a18e4166477f3065eb7b8d5f9ec9891131460e4766c8602db34e371d2bdc0fa9259446106e9f1b7adfad5ba6299ecdef0b899e7900ec9d1e2342c102fb6a290ec0c74d80e577bd5145ddc90d0635eb9509f03d2bf8b065c560bd26db805d1fd2", 0x91, 0x404, 0x0, 0x0) write(r2, &(0x7f0000000040)="3ba7a5d2bc77d6bd7b2f1d130d202a222aa47d1876c2df8b59bc9813884e02ad5b9abf18c51db43d1df4b1e8fa875931d575a8e0cc0fc71b74569ed813f7d3b5d0b6e08c9b77fc2fa3d3ddcda509908caff87be37593e4ed64dacb17ce4f84294203c935dae1e3024132a4f46ebf62d1e9e0cb03762988e302299b7f2d672db7f419a3cbdf00be57c95ebfc0b10c603c53", 0x91) getpeername(r0, &(0x7f0000000040)=@in, &(0x7f0000000080)=0x10) write(r3, &(0x7f0000000340)="3cc37ff9d9973b67135379d00e3da3a67a900f53c4943ac16fe7a319b9e6be76d1ce1aa466e08652b36085a5", 0x2c) 166.577915ms ago: executing program 2 (id=30): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) rename(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x82) rename(&(0x7f00000012c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file1\x00') mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0xffffffffffffffff) 165.793022ms ago: executing program 5 (id=31): r0 = socket(0x11, 0x3, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x200, 0xffff63de, 0x7, 0x2, 0x1000008, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x6, 0x80000201}, {0x8, 0x8, 0x0, 0xfff}, {0x7, 0xfdfffffe, 0x7, 0x20001}, {0xffffffff, 0xdf, 0x5}, {0x0, 0x800, 0xf11, 0xb}, {0x3, 0xfbff, 0x80cf, 0x1}, {0x3, 0x800, 0x100, 0x1005}, {0x81, 0x40008, 0x2, 0x3}, {0x9b, 0xffe, 0x9, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000000, 0x0, 0x800007}, {0x4, 0xc7ce, 0x800000, 0x5}, {0x401, 0x106, 0x92fb, 0x40}, {0x200003, 0x80000000, 0x9, 0x6f5fc48b}, {0x2f, 0x101, 0x1003, 0x4}, {0x9be2, 0x8001, 0x6, 0x69}]}) setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) listen(r0, 0x5) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(r1, &(0x7f00000006c0)={&(0x7f0000000080)=@abs={0x8, 0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x4c, 0x401}, 0x2) r2 = syz_open_pts() close(r2) syz_open_pts() writev(r2, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0x0, 0x0, {[0xfffffbfffffffffe, 0x0, 0x8, 0x100200000, 0x6, 0x7, 0xdf60, 0xfffffffffffffffe, 0x0, 0x2f01, 0x93, 0x3, 0xffffffffffffffff, 0x21, 0xf, 0x6, 0xfffffffffffffffe, 0x400000000100], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffd, 0x525, 0x5e, 0x200000000207b98, 0x80000000000001fe, 0x0, 0x0, 0x9], [0x100000001, 0x8000, 0x3ffffffe, 0x6, 0x8001, 0x11000, 0xffffffff00000000], [0x104, 0x1fffffffffb, 0x2, 0x1, 0xfffffffffffffffe, 0x1], [{0x0, 0x0, 0xfffffffa, 0x7d02}, {0x1, 0x22, 0x5, 0xfffffffffffffff9}, {0x4, 0x0, 0xfffffffe, 0x80}, {0x3, 0x0, 0x5, 0x8000000000000000}, {0x0, 0x2, 0x7f, 0x8}, {0xfffd, 0x9, 0x9, 0x1fffffffffffffff}, {0x0, 0x0, 0x91c5}, {0x0, 0x100, 0x0, 0x8}], {0x1, 0x81, 0x1, 0x3}, {0xfbfe, 0x4, 0x6d9, 0x3}}}) r3 = kqueue() kevent(r3, &(0x7f0000000000), 0x3ff, 0x0, 0x8000800, 0x0) 5.923385ms ago: executing program 1 (id=32): r0 = socket$inet(0x2, 0x1, 0x0) getgid() bind$inet(r0, &(0x7f0000000000)={0x10, 0x2, 0x3}, 0x10) listen(r0, 0xfffffffa) r1 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf79e5) writev(r1, &(0x7f0000000100)=[{&(0x7f0000001200)='#', 0x1}, {&(0x7f0000000040)="2187fe", 0x3}], 0x2) r2 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x4ebfac6bbaf7959) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="7f454c4602", 0x5}], 0x1) write(r1, &(0x7f0000000400)="00004e48af9dcb20dce7fcb3b17639daa7f34da917d924effde27c133631cdc862931170f487985a5afcbdd2f48f98142d0da5a15e9d1bad62ca699e", 0x3c) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setsockopt(r0, 0x6, 0x4, &(0x7f0000000040)="d2674561", 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa9faaaa0755823a1178c24573f4c0c7042d80f9d7834dfd8b8902932c0a94f8724faaffffffffffff08007800200005ac1400aa4e234e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a00282009078fffc13128094d3555ee04e56ede729d2fc7bad300402"]) 5.559371ms ago: executing program 2 (id=33): r0 = socket(0x1, 0x2, 0x0) close(r0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="b233ee2f3ee1f1be2ab285deccf5047740ff67ce283e43f7645cb97dc24eff6ce57c4abf76b3ec1c500534d68e58883c9f888809a2738c1c1161568b6f68fd68868572aef8cf7e03278b8f", 0x4b}, {&(0x7f0000000080)="d4d615f5c9538ebb1bb49e2b001e214f905db3d4a2d23faf6c3dad632fc38cdcc94eaff63904a1e4c645d8ca4e6bbde962c3d316b726745acad8b50bef22926462946e89a68ea638a35124d964a4a4fdf4bf06ffdc8bcba53fee160c87706f6beaa7e39fb534960ae57e6638da45c5ee5c606115d6bd2bba315525e6c3e2e1c0fb834a11cecdd67089a74758d4553a49f84a5eefad448e92", 0x98}], 0x2, 0x4) getsockopt(r0, 0x29, 0x2c, 0x0, 0x0) 4.667196ms ago: executing program 1 (id=34): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x4e}) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x18, 0x1, 0x0) setsockopt(r0, 0x6, 0x2, &(0x7f0000000040)="01000000", 0x4) r1 = syz_open_pts() close(r1) r2 = syz_open_pts() ioctl$FIOASYNC(r1, 0x80047469, &(0x7f00000000c0)=0x7) readv(r2, &(0x7f0000000a40), 0x0) r3 = syz_open_pts() fcntl$lock(r3, 0x9, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x1000300000080}) flock(r3, 0x1) flock(r3, 0x3) fcntl$lock(r3, 0x8, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x100000003}) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000100)="812d08f756f4", 0x6}], 0x1) 4.111344ms ago: executing program 2 (id=35): sysctl$hw(&(0x7f0000000280)={0x6, 0xc}, 0x2, 0x0, &(0x7f0000000240), 0x0, 0x5a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = shmget$private(0x0, 0x4000, 0x95a999646a72d5f2, &(0x7f0000022000/0x4000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x2000) shmat(r0, &(0x7f0000024000/0x4000)=nil, 0x2000) shmat(r0, &(0x7f000047e000/0x1000)=nil, 0x0) sysctl$hw(&(0x7f0000000280)={0x6, 0x8}, 0x2, &(0x7f0000000000), &(0x7f0000000240), 0x0, 0x0) 0s ago: executing program 7 (id=36): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) mlock(&(0x7f0000302000/0x1000)=nil, 0x1000) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x6, 0x80000001, 0x80000201}, {0x2, 0xfffffffb, 0x6, 0xfff}, {0x7, 0xfffffffe, 0x2006, 0x1}, {0x4000002, 0x7, 0xf}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x2024, 0x1, 0x85, 0x80005}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x400005, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x8, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x6, 0x69}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x8c2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) open(&(0x7f0000000040)='./file1\x00', 0x18289, 0x110) (async) mlock(&(0x7f0000302000/0x1000)=nil, 0x1000) (async) syz_emit_ethernet(0x1000e, &(0x7f00000001c0)=ANY=[]) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000000, 0xffff63de, 0x2, 0x2, 0x8, 0x100003, 0x40, 0x10, [{0x5, 0x6, 0x80000001, 0x80000201}, {0x2, 0xfffffffb, 0x6, 0xfff}, {0x7, 0xfffffffe, 0x2006, 0x1}, {0x4000002, 0x7, 0xf}, {0xfffffffc, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80d2}, {0x2024, 0x1, 0x85, 0x80005}, {0x0, 0x40009, 0xfffffffb, 0xfbffe2e9}, {0x8, 0xffa, 0x6, 0x7fff}, {0x0, 0xfffffff8, 0x400005, 0x8bfb}, {0xfffff0d1, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x3, 0x2}, {0x401, 0x8, 0x9, 0x40}, {0x200003, 0xee6, 0x2, 0x6f5fc48b}, {0x7e, 0x5, 0x1, 0x5}, {0x9be2, 0x6, 0x6, 0x69}]}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x8c2) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.174' (ED25519) to the list of known hosts. Data modified on freelist: word -35183616984260 of object 0xffff800000c43380 size 0x10 previous type free (invalid addr 0x5d755d75fbcda8fd) kernel: protection fault trap, code=0 Stopped at malloc+0x855: movq 0x8(%rbx),%r14 ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic the kernel did not panic ddb{1}> show kasan No such command ddb{1}> trace malloc(10,62,2) at malloc+0x855 amap_alloc1(20,2,0) at amap_alloc1+0x291 amap_alloc(20000,2,0) at amap_alloc+0xad amap_copy(fffffa006d0ba9b0,fffffa006cd8b168,2,0,30619e0c000,30619e0c001) at amap_copy+0x6ac uvm_fault_check(ffff80003c3e9820,ffff80003c3e9858,ffff80003c3e9890,0) at uvm_fault_check+0x473 uvm_fault(fffffa006d0ba9b0,30619e0c000,0,2) at uvm_fault+0x106 upageflttrap(ffff80003c3e99c0,30619e0cac8) at upageflttrap+0xa9 usertrap(ffff80003c3e99c0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end trace frame: 0x0, count: -9 ddb{1}> show registers rdi 0x5d755d75fbcd98fd rsi 0x3000 __ALIGN_SIZE+0x2000 rbp 0xffff80003c3e94c0 rbx 0x5d755d75fbcda8fd rdx 0 rcx 0xffff80003c3d2fb8 rax 0xffff80002999dff0 r8 0x30619e0c000 r9 0x30619e0c001 r10 0 r11 0xb4824839828d8394 r12 0x3000 __ALIGN_SIZE+0x2000 r13 0xffffffff83b29990 kmemstats+0x1880 r14 0xa30c333 __kernel_phys_end+0x670c333 r15 0x5d755d75fbcd98fd rip 0xffffffff82d5e275 malloc+0x855 cs 0x8 rflags 0x10202 __ALIGN_SIZE+0xf202 rsp 0xffff80003c3e9400 ss 0 malloc+0x855: movq 0x8(%rbx),%r14 ddb{1}> show proc PROC (syz-executor) tid=494330 pid=78017 tcnt=2 stat=onproc flags process=10 proc=4000000 runpri=50, usrpri=50, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff80003c3d22c0,0xffff8000393b8a90 process=0xffff80003c3d4020 user=0xffff80003c3e4000, vmspace=0xfffffa006d0ba9b0 estcpu=36, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S PRLAGS PFLAGS WAIT COMMAND 13527 147828 40939 0 2 0x2 0 ndp 40939 286409 15965 0 3 0x100002 0x88 sigsusp sh 92514 417221 92899 32767 2 0x10 0 syz-executor 78017 281164 63625 32767 2 0x10 0 syz-executor *78017 494330 63625 32767 7 0x10 0x4000000 syz-executor 16052 4350 72000 32767 3 0x10 0x80 nanoslp syz-executor 16052 85530 72000 32767 3 0x10 0x4000080 ttyout syz-executor 16052 436847 72000 32767 3 0x10 0x4000080 fsleep syz-executor 7689 13102 66797 32767 2 0x10 0 syz-executor 7689 385946 66797 32767 3 0x10 0x4000080 semwait syz-executor 7689 339314 66797 32767 7 0x10 0x4000000 syz-executor 42622 75883 33993 27 3 0x1100012 0x80 kqread sshd-auth 33993 386931 23547 0 3 0x2 0x80 kqread sshd-session 64849 215232 38378 32767 3 0x10 0x80 nanoslp syz-executor 64849 156022 38378 32767 3 0x10 0x4000080 fsleep syz-executor 64849 105412 38378 32767 3 0x10 0x4000080 sbwait syz-executor 46048 161886 44619 32767 3 0x10 0x80 nanoslp syz-executor 46048 360462 44619 32767 3 0x10 0x4000080 piperd syz-executor 46048 244317 44619 32767 3 0x10 0x4000080 fsleep syz-executor 15965 262371 58458 0 3 0 0x80 wait syz-executor 96298 507729 90928 32767 3 0x10 0 biowait syz-executor 38378 248248 18412 32767 3 0x10 0x80 nanoslp syz-executor 63625 211720 72738 32767 3 0x10 0x80 nanoslp syz-executor 72000 352782 63692 32767 3 0x10 0x80 nanoslp syz-executor 66797 440592 63592 32767 3 0x10 0x80 nanoslp syz-executor 92899 214895 68375 32767 3 0x10 0x80 nanoslp syz-executor 44619 206789 42825 32767 3 0x10 0x80 nanoslp syz-executor 90928 126354 42680 0 3 0x2 0x80 wait syz-executor 42825 278317 42680 0 3 0x2 0x80 wait syz-executor 63692 256623 42680 0 3 0x2 0x80 wait syz-executor 18412 366295 42680 0 3 0x2 0x80 wait syz-executor 63592 294121 42680 0 3 0x2 0x80 wait syz-executor 68375 516203 42680 0 3 0x2 0x80 wait syz-executor 72738 13868 42680 0 3 0x2 0x80 wait syz-executor 58458 364466 42680 0 3 0x2 0x80 wait syz-executor 42680 988 57703 0 2 0x2 0x80 syz-executor 57703 178657 2235 0 3 0x100002 0x88 sigsusp ksh 2235 260906 22959 0 3 0x10 0x88 kqread sshd-session 22959 186106 23547 0 3 0x12 0x80 kqread sshd-session 73499 15570 1 0 3 0x100003 0x80 ttyin getty 23547 282021 1 0 3 0 0x88 kqread sshd 19674 28709 35479 73 3 0x1100010 0x80 kqread syslogd 35479 58779 1 0 3 0x100002 0x80 sbwait syslogd 75323 479224 1 0 3 0x100000 0x80 kqread resolvd 79342 43208 69750 77 3 0x100012 0x80 kqread dhcpleased 30976 299665 69750 77 3 0x100012 0x80 kqread dhcpleased 69750 255797 1 0 3 0 0x80 kqread dhcpleased 81808 240395 0 0 3 0x14000 0x200 bored smr 72926 163780 0 0 2 0x14000 0x200 zerothread 71881 487912 0 0 3 0x14000 0x200 aiodoned aiodoned 55986 457099 0 0 3 0x14000 0x200 syncer update 85556 169583 0 0 3 0x14000 0x200 cleaner cleaner 53396 117662 0 0 3 0x14000 0x200 reaper reaper 95243 430203 0 0 3 0x14000 0x200 pgdaemon pagedaemon 3517 405091 0 0 3 0x14000 0x200 bored viomb 432 67277 0 0 3 0x14000 0x40000200 acpi0 acpi0 30471 88 0 0 3 0x14000 0x40000200 idle1 91312 477155 0 0 3 0x14000 0x200 bored softnet1 83938 105503 0 0 3 0x14000 0x200 bored softnet0 73398 440599 0 0 3 0x14000 0x200 smrbar systqmp 19247 326826 0 0 3 0x14000 0x200 bored systq 48901 366702 0 0 3 0x14000 0x200 tmoslp softclockmp 76492 409210 0 0 3 0x14000 0x40000200 tmoslp softclock 24222 173845 0 0 3 0x14000 0x40000200 idle0 1 51191 0 0 3 0x2 0x80 wait init 0 0 -1 0 3 0x10000 0x200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex /syzkaller/managers/setuid/kernel/sys/kern/kern_malloc.c:96 r = 0 (0xffffffff839b1688) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 malloc+0x2ef #3 amap_alloc1+0x291 #4 amap_alloc+0xad #5 amap_copy+0x6ac #6 uvm_fault_check+0x473 #7 uvm_fault+0x106 #8 upageflttrap+0xa9 #9 usertrap+0x430 #10 recall_trap+0x8 Process 78017 (syz-executor) thread 0xffff80003c3d2fb8 (494330) exclusive rwlock vmmaplk r = 0 (0xfffffa006d0baab0) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 exclusive mutex /syzkaller/managers/setuid/kernel/sys/kern/kern_malloc.c:96 r = 0 (0xffffffff839b1688) #0 witness_lock+0x5f1 #1 mtx_enter+0x4b4 #2 malloc+0x2ef #3 amap_alloc1+0x291 #4 amap_alloc+0xad #5 amap_copy+0x6ac #6 uvm_fault_check+0x473 #7 uvm_fault+0x106 #8 upageflttrap+0xa9 #9 usertrap+0x430 #10 recall_trap+0x8 Process 7689 (syz-executor) thread 0xffff8000393b9ca8 (339314) exclusive rwlock vmmaplk r = 0 (0xfffffa0076fd9118) #0 witness_lock+0x5f1 #1 rw_do_enter_read+0x3e8 #2 uvmfault_lookup+0x122 #3 uvm_fault_check+0x4f #4 uvm_fault+0x106 #5 upageflttrap+0xa9 #6 usertrap+0x430 #7 recall_trap+0x8 Process 96298 (syz-executor) thread 0xffff8000393b8d18 (507729) exclusive rrwlock inode r = 0 (0xfffffa006ce950c0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_mkdir+0xfc #8 VOP_MKDIR+0x101 #9 domkdirat+0x179 #10 syscall+0xb17 #11 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffa006d325308) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x12b #6 namei+0x7c5 #7 domkdirat+0x8b #8 syscall+0xb17 #9 Xsyscall+0x128 Process 73398 (systqmp) thread 0xffff800045ffe7c8 (440599) shared rwlock systqmp r = 0 (0xffffffff83968808) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11046 12018K 12034K 166960K 12137 0 pcb 17 12K 12K 166960K 17 0 rtable 237 6K 6K 166960K 343 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 31 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1287 81K 81K 166960K 1355 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 4 0 VM map 2 1K 1K 166960K 2 0 sem 4 0K 0K 166960K 4 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1734 201K 291K 166960K 11964 0 file desc 26 97K 117K 166960K 172 0 sigio 0 0K 0K 166960K 3 0 proc 58 99K 163K 166960K 502 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 5 0 in_multi 100 7K 7K 166960K 100 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 361 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 261 185K 199K 166960K 3129 0 UVM aobj 8 2K 2K 166960K 8 0 pinsyscall 51 102K 108K 166960K 1261 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 7 0 NDP 17 0K 1K 166960K 27 0 temp 34 9114K 9120K 166960K 3740 0 kqueue 18 28K 28K 166960K 33 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 28 0 0 1 0 1 1 0 8 0 rtpcb 120 34 0 30 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 65 0 45 1 0 1 1 0 8 0 syncache 336 6 0 6 1 0 1 1 0 8 1 tcpqe 32 2 0 2 1 0 1 1 0 8 1 tcpcb 736 27 0 17 2 0 2 2 0 8 1 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 88 0 74 2 0 2 2 0 8 0 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 466 0 0 30 0 30 30 0 8 0 art_table 40 467 0 0 5 0 5 5 0 8 0 art_node 32 111 0 10 1 0 1 1 0 8 0 semapl 72 2 0 0 1 0 1 1 0 8 0 shmpl 112 5 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1593 0 133 92 0 92 92 0 8 0 ffsino 296 1593 0 133 113 0 113 113 0 8 0 nchpl 144 1823 0 136 63 0 63 63 0 8 0 vnodes 216 1674 0 0 93 0 93 93 0 8 0 namei 1024 5483 0 5482 1 0 1 1 0 8 0 percpumem 16 51 0 0 1 0 1 1 0 8 0 kstatmem 264 25 0 0 2 0 2 2 0 8 0 scxspl 216 6691 0 6690 9 1 8 8 1 8 7 plimitpl 152 37 0 12 1 0 1 1 0 8 0 sigapl 424 465 0 409 7 0 7 7 0 8 0 knotepl 120 293 0 0 9 0 9 9 0 8 0 kqueuepl 224 96 0 83 5 0 5 5 0 8 4 pipepl 344 157 0 128 6 0 6 6 0 8 3 fdescpl 528 449 0 409 3 0 3 3 0 8 0 filepl 160 1854 0 1624 15 0 15 15 0 8 5 lockfpl 104 26 0 22 1 0 1 1 0 8 0 lockfspl 48 10 0 6 1 0 1 1 0 8 0 sessionpl 144 27 0 10 1 0 1 1 0 8 0 pgrppl 48 37 0 11 1 0 1 1 0 8 0 ucredpl 104 134 0 115 1 0 1 1 0 8 0 zombiepl 144 409 0 409 1 0 1 1 0 8 1 processpl 1232 465 0 409 5 0 5 5 0 8 0 procpl 664 521 0 456 6 0 6 6 0 8 0 sockpl 752 188 0 149 5 0 5 5 0 8 1 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 121 0 0 16 0 16 16 0 8 0 mcl2k 2048 22 0 0 3 0 3 3 0 8 0 mextrefs 64 21 0 0 1 0 1 1 0 8 0 mtagpl 96 2 0 0 1 0 1 1 0 8 0 mbufpl 256 174 0 0 11 0 11 11 0 8 0 bufpl 272 2322 0 102 148 0 148 148 0 8 0 anonpl 32 6761 0 0 55 0 55 55 0 247 0 amapchunkpl 152 9208 0 8680 31 0 31 31 0 158 6 amappl16 200 2010 0 1994 5 0 5 5 0 8 3 amappl15 192 27 0 27 1 1 0 1 0 8 0 amappl14 184 420 0 418 1 0 1 1 0 8 0 amappl13 176 116 0 104 1 0 1 1 0 8 0 amappl12 168 692 0 655 2 0 2 2 0 8 0 amappl11 160 4 0 4 1 1 0 1 0 8 0 amappl10 152 62 0 52 1 0 1 1 0 8 0 amappl9 144 271 0 271 1 0 1 1 0 8 1 amappl8 136 89 0 88 1 0 1 1 0 8 0 amappl7 128 144 0 131 1 0 1 1 0 8 0 amappl6 120 150 0 148 1 0 1 1 0 8 0 amappl5 112 100 0 91 1 0 1 1 0 8 0 amappl4 104 267 0 249 1 0 1 1 0 8 0 amappl3 96 1541 0 1416 5 1 4 4 0 8 0 amappl2 88 541 0 472 2 0 2 2 0 8 0 amappl1 80 11170 0 10408 16 0 16 16 0 8 0 amappl 88 2433 0 2249 5 0 5 5 0 92 0 uvmvnodes 80 96 0 0 2 0 2 2 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 7 0 0 1 0 1 1 0 8 0 uaddrrnd 24 449 0 409 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 449 0 409 1 0 1 1 0 8 0 vmmpekpl 168 5989 0 5957 2 0 2 2 0 8 0 vmmpepl 168 39859 0 37544 103 0 103 103 0 357 0 vmsppl 488 448 0 409 7 1 6 6 0 8 0 rwobjpl 80 15352 0 14194 25 0 25 25 0 8 1 pdppl 4096 905 0 818 103 10 93 93 0 8 6 pvpl 32 13447 0 0 109 0 109 109 0 265 0 pmappl 256 448 0 409 4 1 3 3 0 8 0 extentpl 40 46 0 28 1 0 1 1 0 8 0 phpool 112 420 0 13 12 0 12 12 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp ddb{0}> trace x86_ipi_db(ffffffff83984ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 mtx_enter(ffffffff839b1678) at mtx_enter+0x370 malloc(20,62,2) at malloc+0x2ef amap_alloc1(40,2,0) at amap_alloc1+0x291 amap_alloc(40000,2,0) at amap_alloc+0xad amap_copy(fffffa0076fd9018,fffffa006c96c738,2,1,f96c02e000,f96c02e001) at amap_copy+0x6ac uvm_fault_check(ffff800037ba97a0,ffff800037ba97d8,ffff800037ba9810,0) at uvm_fault_check+0x473 uvm_fault(fffffa0076fd9018,f96c02e000,0,2) at uvm_fault+0x106 upageflttrap(ffff800037ba9940,f96c02e000) at upageflttrap+0xa9 usertrap(ffff800037ba9940) at usertrap+0x430 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0xf94821f230, count: -13 ddb{0}> machine ddbcpu 1 Stopped at malloc+0x855: movq 0x8(%rbx),%r14 ddb{1}> trace malloc(10,62,2) at malloc+0x855 amap_alloc1(20,2,0) at amap_alloc1+0x291 amap_alloc(20000,2,0) at amap_alloc+0xad amap_copy(fffffa006d0ba9b0,fffffa006cd8b168,2,0,30619e0c000,30619e0c001) at amap_copy+0x6ac uvm_fault_check(ffff80003c3e9820,ffff80003c3e9858,ffff80003c3e9890,0) at uvm_fault_check+0x473 uvm_fault(fffffa006d0ba9b0,30619e0c000,0,2) at uvm_fault+0x106 upageflttrap(ffff80003c3e99c0,30619e0cac8) at upageflttrap+0xa9 usertrap(ffff80003c3e99c0) at usertrap+0x430 recall_trap() at recall_trap+0x8 end trace frame: 0x0, count: -9