last executing test programs: 769.057932ms ago: executing program 0 (id=1): r0 = socket(0x18, 0x1, 0x0) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000000029, 0x3d, &(0x7f0000000080), 0x0) getsockopt(r0, 0x29, 0x25, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x200, 0x0) r2 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) mmap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x3, 0x4011, r2, 0x24e) recvmmsg(r2, &(0x7f0000001440)={&(0x7f0000001400)={&(0x7f0000000080)=@in6, 0xc, &(0x7f0000001340)=[{&(0x7f00000000c0)=""/233, 0xe9}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/199, 0xc7}, {&(0x7f00000012c0)=""/79, 0x4f}], 0x4, &(0x7f0000001380)=""/118, 0x76}, 0x9}, 0x10, 0x1042, &(0x7f0000001480)={0x4}) mprotect(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000003000/0x3000)=nil, 0x3000) 583.032986ms ago: executing program 0 (id=9): open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x1fa) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0x0, [{&(0x7f0000695000/0x3000)=nil, &(0x7f000051f000/0x4000)=nil}, {&(0x7f0000695000/0x2000)=nil, &(0x7f0000159000/0x2000)=nil}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000690000/0x4000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000234000/0x2000)=nil}, {&(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x100000000000}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil}, {&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f000013f000/0x2000)=nil, &(0x7f0000750000/0x4000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, 0x8}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f00004e6000/0x3000)=nil}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil}, {&(0x7f00003f2000/0x2000)=nil, &(0x7f00005e4000/0x1000)=nil}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff3000/0x2000)=nil, 0x2}], './file0/file0\x00'}) r1 = open$dir(&(0x7f0000000340)='./file0\x00', 0x1, 0x5f) ioctl$FIONREAD(r1, 0xc0106978, &(0x7f0000000140)) close(r0) r2 = socket(0x6, 0x3, 0x3) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0xe8, 0x0) r4 = fcntl$dupfd(r3, 0x3, 0xffffffffffffffff) ioctl$FIONREAD(r4, 0x800c745b, &(0x7f0000000080)) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x1}, 0x8) r5 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{}, {0x1}, {0x6, 0x0, 0x0, 0xff}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r6 = open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) sysctl$net_inet_divert(&(0x7f0000000040)={0x4, 0x1e, 0x2, 0x2}, 0x4, 0x0, 0x0, 0x0, 0x0) r7 = open$dir(&(0x7f0000000000)='.\x00', 0x200, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r7, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r7, &(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r7, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(&(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r6, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x46) 582.592025ms ago: executing program 5 (id=6): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = socket(0x2, 0x2, 0x0) ioctl$FIOASYNC(0xffffffffffffffff, 0x80047460, &(0x7f00000000c0)=0xc06) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = socket(0x18, 0x2, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{0x3, 0x3, 0x80}, {0x1, 0x0, 0x0, 0x2}, {0x4, 0x0, 0xd, 0xff}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x2, &(0x7f0000000100)="71f91e34", &(0x7f0000000080)=0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sysctl$kern(&(0x7f00000000c0)={0x1, 0x42}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1918, 0x0, 0x37) open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) connect$unix(r0, &(0x7f0000000000), 0x10) sendto$unix(r0, &(0x7f0000000340)="f553cfc41e5bd58d31f0572ad4f83b07b1597a3f065d7d3b85589678f5b731c19c94c37bec6552d8c786fd4903478edbd770d7c34917911f9d5b60e0fb223dd169acc2de0b9d5638505380c1ae4df140a0b41538bbd83946aec55481b7", 0x5d, 0x0, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x1}, 0x8) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f00000000c0)="9876d692a3ef9c7ab923a2f0", 0xc) r2 = open(&(0x7f0000000140)='./file0\x00', 0x78e, 0xd9) setrlimit(0x8, &(0x7f0000000080)={0xa, 0x54}) ktrace(&(0x7f0000000000)='./file0\x00', 0x0, 0x120, 0x0) pwritev(r2, &(0x7f0000000040), 0x100000000000013f, 0xf) write(r0, &(0x7f0000000240)="14bdfa5d1d34e2fecb284a6498307dcda9aec43050036123339a346f737850551408753f95b7688ad4c4e1dd5489e7bafc58d3e5823757ae8b630719ef187ccad995f13dbe19a6dd4e6902bd8297b0799b426aabe9fad9db6996571c6d9f8bb5d542c2148aa42be940970fe88d34d8f99afe7e7820237400000000008000000100"/138, 0xfc7e) shutdown(r2, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_cred(r3, 0xffff, 0x1022, &(0x7f0000000280), &(0x7f0000000140)=0xc) ioctl$FIOASYNC(r3, 0x8004667d, &(0x7f0000000300)=0x6) r4 = syz_open_pts() close(r1) ioctl$TIOCSETA(r4, 0x802c7414, &(0x7f0000000180)={0x1f66c, 0x106, 0xfffffff9, 0xfffffffd, "61b6e57ecca000000000000000162b52df2c3300", 0x6, 0x7}) ioctl$TIOCSTOP(r4, 0x2000746f) writev(r4, &(0x7f0000000040)=[{&(0x7f00000001c0)="b389e5aede5da3459bc3ebb27e9dcf45299570c11b1e085ac39bd5200eb2ff3252b7e1b07844c9711dac9b66d8effc15f3c4c099f79e563c154decba1de1d82278bab644d81436aa16e7857fe751b6ff8d9d808b5ae8d88cae333aa17a0bc488124b577d860e85a2ffe03bc4d984974ba70034a05fae62705e6c2ba3fced0bd3bc7fdc297968002195f37c0100000030a4b482df3f9fd95aac29fce5fc3467a4c23d2f2edc3300000000000000000000acbb0596c54e3e7f03773023ac7acdff8f45c87f78be6513af9a784476a18400dc5e", 0xd2}], 0x1) 582.477071ms ago: executing program 3 (id=4): setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r0 = syz_open_pts() close(r0) r1 = syz_open_pts() r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0xb, &(0x7f0000000000), 0x0) ioctl$FIOASYNC(r0, 0x80047469, &(0x7f0000000040)=0xfffffffc) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/227, 0xe3}], 0x1) execve(0x0, 0x0, 0x0) writev(r0, &(0x7f0000000700)=[{0x0}], 0x1) 582.050508ms ago: executing program 7 (id=8): msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x10003, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc0}, 0x1ff, 0x85d, 0x0, 0x0, 0x9, 0x100000002, 0x2000000000b, 0x4}) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) sysctl$hw(&(0x7f00000002c0)={0x6, 0x5}, 0x2, &(0x7f0000000280)="000000b3fa", &(0x7f0000000040)=0x5, 0x0, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x10003, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc0}, 0x1ff, 0x85d, 0x0, 0x0, 0x9, 0x100000002, 0x2000000000b, 0x4}) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="b1000504600000000000000007000000331c13fecea10500fef9e906c72fd3357ae320b37b673039d2d236073705ae04be38164991f7accf5f882b297be1aa5b236deb51e2f0ac3ebbc257699a5f139b672f4d335d223e7d029d6ba8af630037282102000000720f70c1f5a472c881ea6e69e0bb76d907c400000200361b1257aea8c5000020020000000000008abfba09", 0x91, 0x404, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) socket(0x11, 0x3, 0x0) (async) sendto$unix(r0, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42102000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) (async) sysctl$hw(&(0x7f00000002c0)={0x6, 0x5}, 0x2, &(0x7f0000000280)="000000b3fa", &(0x7f0000000040)=0x5, 0x0, 0x0) (async) 581.568145ms ago: executing program 1 (id=2): r0 = syz_open_pts() ioctl$TIOCSTART(r0, 0x2000746e) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x3, 0x0, 0x0) getsockopt(r1, 0x3, 0x6, &(0x7f0000001840)=""/164, &(0x7f0000000080)=0xa4) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) mknod(&(0x7f0000000280)='./file0\x00', 0x10, 0x58ae) writev(r1, &(0x7f0000000240)=[{&(0x7f00000002c0)="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", 0x1000}], 0x1) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0xffffffffffffffff) ioctl$VMM_IOC_RESETCPU(0xffffffffffffff9c, 0x82405605, &(0x7f0000000100)={0xfffffffc, 0x0, {[0xfffffbfffffffffb, 0x5, 0x2, 0x1, 0x0, 0x0, 0xdf5e, 0x0, 0x0, 0x2f04, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0xa4, 0x2, 0xce5], [0xfffffffffffffffe, 0x80000001, 0xfffffffffffffffb, 0x2, 0x102, 0x7b9b, 0x1fe, 0x3, 0x1], [0x100000001, 0x2, 0x40000000, 0x0, 0xffffffffffffffff, 0x11000, 0xfffffffffffffffe], [0x100, 0x20000000000, 0x4, 0x100000000, 0xffffffffffeffffe, 0x8], [{0x0, 0x4, 0x0, 0x7d06}, {0xfffc, 0x2, 0x3, 0x2}, {0x6, 0x0, 0xfffffffe, 0x1}, {0x3, 0x2, 0x6, 0x80000001}, {0x871f, 0x2, 0x0, 0x808}, {0xb, 0x2003, 0x40000, 0x2000000000000000}, {0x0, 0x0, 0xfbd}, {0x0, 0x965, 0x0, 0x8}], {0x2000, 0x1000001, 0x3ff}, {0x80, 0x0, 0x73e8, 0x2}}}) r4 = socket(0x2, 0x2, 0x0) r5 = socket(0x2, 0x400000000002, 0x0) setsockopt(r5, 0x0, 0x1f, &(0x7f0000000080)="c1", 0x1) dup2(r5, r4) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0x0, 0x0, 0x564, 0x9ce8, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x138, &(0x7f00000019c0)=ANY=[@ANYBLOB="ed2792ee880c3e5a7b2daece71eef5a0c6126ce629306a0901d885aa9ccf9dfc3bd96e9f41193368b0af4ac4d79264cd99ad4a30064da63a6effdb92d09fabee060c42d7b37cc6df48f028a4329e8e75b6e093af7dbbcde0289aec579cb5a292551321ed1215069686cae35df02c80b3579f7bb45f701823e68179a7241a5a5fdb6aa6d26744d146ccb7e77205b714d1", @ANYRESDEC=r1, @ANYRES16=r2, @ANYRESHEX=r4]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind(r4, &(0x7f0000001800)=@un=@abs={0x1, 0x0, 0x3}, 0x8) r6 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0xffff, 0x20, &(0x7f0000000080)=0x6, 0x4) connect$unix(r6, &(0x7f0000000000), 0x10) write(r6, 0x0, 0x0) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffffffffcf5, 0x0}, 0x1800) ioctl$FIONREAD(r3, 0xc0106924, &(0x7f00000001c0)) getsockname$unix(r2, 0x0, &(0x7f0000000080)) close(r3) recvmmsg(r6, &(0x7f00000017c0)={&(0x7f0000001780)={&(0x7f00000012c0)=@in6, 0xc, &(0x7f0000001680)=[{&(0x7f0000001300)=""/224, 0xe0}, {&(0x7f0000001400)=""/231, 0xe7}, {&(0x7f0000001500)=""/65, 0x41}, {&(0x7f0000001580)=""/194, 0xc2}], 0x4, &(0x7f00000016c0)=""/159, 0x9f}, 0x6}, 0x10, 0x800, 0x0) sysctl$net_inet6_ip6(&(0x7f0000000040)={0x4, 0x18, 0x29, 0xf}, 0x4, &(0x7f00000000c0)="00af51d44840f646cfa7558a879bf81f424026a9de4aed8e2f13f7ef4b656cd769417f514915a34bfc65eaba68eae898105f871ad46197a2f87610c588e0cf596a597bdf08a7e188c089f6520ef4517a13d6a49b95d2310bee87f2ff019bd1df0b03fdfbce316b187dc20fde67533f2c31035b1854b8686f9cb61073c041aaf518e6ce62673edc41c97b1c306ef22d4d9fe92a8c28963c717a1b095c854a57d24c84bcfe9a98f05c4f22a0c789513e000000000000", &(0x7f0000000000)=0xb5, 0x0, 0x0) 580.169817ms ago: executing program 6 (id=7): r0 = syz_open_pts() r1 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) writev(r1, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x1}], 0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x1, 0x0, 0xfbfffffe, 0x0, "d76c1f46000000ef1f0160fbff2000404b00"}) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000003, 0xffff63de, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x2, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x1}, {0x2, 0xdf, 0xf}, {0x2, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80cf}, {0x24, 0x5, 0x85, 0x5}, {0x0, 0x40009, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x106, 0x9, 0x40}, {0x200003, 0xee2, 0x2, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x5}, {0x9be2, 0x8003, 0x6, 0x69}]}) poll(&(0x7f0000000000), 0x35, 0x0) syz_open_pts() (async) open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) (async) writev(r1, &(0x7f00000008c0)=[{&(0x7f00000007c0)='C', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x3, 0x10, r1, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) (async) ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f0000000140)={0x1, 0x0, 0xfbfffffe, 0x0, "d76c1f46000000ef1f0160fbff2000404b00"}) (async) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000040)={0x80000003, 0xffff63de, 0x7, 0x2, 0x8, 0x3, 0x40, 0x10, [{0x5, 0x3, 0x775, 0x80000201}, {0x2, 0x8, 0x6, 0xfff}, {0x1, 0xfffffffe, 0x6, 0x1}, {0x2, 0xdf, 0xf}, {0x2, 0x7, 0xf11, 0x7}, {0x3, 0xffff, 0x80cf}, {0x24, 0x5, 0x85, 0x5}, {0x0, 0x40009, 0xfffffff8, 0xfbffe2e9}, {0x8, 0xffe, 0x6, 0x7fff}, {0x3, 0xfffffff8, 0x5, 0x8bfd}, {0x0, 0x8000000, 0x8, 0x7}, {0x4, 0xc7cb, 0x800000, 0xa66}, {0x401, 0x106, 0x9, 0x40}, {0x200003, 0xee2, 0x2, 0x6f5fc48f}, {0x81, 0x101, 0x3, 0x5}, {0x9be2, 0x8003, 0x6, 0x69}]}) (async) poll(&(0x7f0000000000), 0x35, 0x0) (async) 579.809295ms ago: executing program 2 (id=3): setrlimit(0x8, &(0x7f0000000040)={0x42, 0x62}) r0 = syz_open_pts() close(r0) syz_open_pts() ioctl$TIOCSETD(r0, 0x8004741b, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) write(r0, &(0x7f0000000180)="2800ca3800d0f55d20281775000000000000000070e5522431ebc85b35143c622c8e8d39cb42ef23b5d3b173c17334e281fceef0f45211a769a15db3d005d381c6aeacf5ef6e4c386a2893842d94d0c02da7f718447f65ad7a5094a89c6f62bc343a71844b7e775f3a0e65ff79d2517fa7aef5c5ba45a7633870ead97be96d4a62386de35584db01515fe9a359b66d5f8ad5c6530805e60c99a63b125c773a801d51c579ab693f2d4aaa59a813dd36e3520d4c07c4feb8dfce286493e69771", 0xbf) 575.169207ms ago: executing program 0 (id=10): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$BIOCGHDRCMPLT(r0, 0x40044274, &(0x7f0000000040)) r1 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$BIOCSDIRFILT(0xffffffffffffffff, 0x8004427d, &(0x7f00000000c0)=0x6) close(r1) r2 = fcntl$dupfd(r1, 0xa, r1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r4 = accept(r2, &(0x7f0000000140)=@in6, &(0x7f0000000180)=0xc) r5 = fcntl$dupfd(r3, 0xa, r4) accept$inet(r4, &(0x7f00000001c0), &(0x7f0000000200)=0xc) r6 = getuid() r7 = getgid() fchownat(r5, &(0x7f0000000240)='./file0\x00', r6, r7, 0x2) r8 = socket$inet6(0x18, 0x8000, 0xfc) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0x66, &(0x7f0000000280)={0xfffd, 0x0, 0x40, 0xa0a9, 0x6}, 0xc) ftruncate(r0, 0x9) socketpair(0x26, 0x3, 0x7, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = open(&(0x7f0000000300)='./file0\x00', 0x20000, 0x2) sysctl$net_inet6_ip6(&(0x7f0000000340)={0x4, 0x18, 0x29, 0x34}, 0x4, &(0x7f0000000380)="44229efc81bc59", &(0x7f00000003c0)=0x7, &(0x7f0000000400)="e5664ac3765263aa976d5e3401619b953ecb2e182f96e9966877225ca6a5f147cb3950a84b1ba9fef1401afe513c32e470e482b0614795f0925cbd1d7381e2818c4e3c59082db8a74bf54c5891499bd64e2bc5cbc084eab98cb7a479171dc0031a053b", 0x63) write(r5, &(0x7f0000000480)="660afd7e712a5c637d6b28a927e020319b0a3e5106a0e4468d51384252a10ca66e7245d8178f7bb611d989368a56cdec55dad6a0c15181ee73c4a90629fa0266749a", 0x42) writev(r10, &(0x7f0000000800)=[{&(0x7f0000000500)="b910afb7d8e39e8face626af86a02566ad4b", 0x12}, {&(0x7f0000000540)="4e1c44b0409a14521871f8f876b9bccf4beacc90520381d1662d55b5785e20d5f0a32d6f922853b8dccd3b8cddff8318fe72ebf7fd5a658ef5d5f17be0", 0x3d}, {&(0x7f0000000580)="eba31f866e7a2b3a5ed1a44d88745e6b2c8abb3802ec9902bdb355963862348dbc03afb8226938cd1744f09172fb75f3c7565ed9e78bcc8ff60e1dafceeb169144f00f280a78b7f748196cf4347377f051a8b880469da69e8d98aff3dbdd", 0x5e}, {&(0x7f0000000600)="7356d5fc75c125f4999723b15a040f401858bc63462a68737d423f49d6e60a02a8a72a52f492536ebbc1e5026c437532a68d4c7bd4dbf17271477dad411eb6229f376ae5c22ef681311e94e02eb2ca839fdcaf3149afaabe51ff4c371063546abe043b9cad25fc44426d0b50e725365a7ed7f471fa7ec0edd5bbf33a47416ccc771908c8c0f95fbef5ca09cb80bbb2f37a1a29a541f25d55bb46c5aba9fcfbc0de593ff1dbeceb3d41999452b4e1fc7bd95f744a7bfe3ae0fff5684fce89ad19aebadd93fc800b0a57c97457", 0xcc}, {&(0x7f0000000700)="8d59d956e8a21ad31847397e895a7fd9aaf88f661e0a29c910b367e900234efbf78eb4857b6e224e64a64e6d55cf09b5bc80", 0x32}, {&(0x7f0000000740)="30330f16b0f55598cd250cd31d1ba2f1a573b2650e97e8", 0x17}, {&(0x7f0000000780)="74f3c3c9ba04f937bcc4319bb5c12b5772583f02b0580b9bde48ba14522e9e4391a1f7714dd1658d68a816ea5f9a6e4438bc5e4ba54f27d86fe3f6fa60fbeb", 0x3f}, {&(0x7f00000007c0)="aefc402d9c7159d19f7231e7424fb45a0aa24ac8eee6674fe64f137ac32dfe4deaf98e054a84b54b43a3a749141ee12d1df8087b8c69ff88b8f8317e", 0x3c}], 0x8) close(r5) sysctl$net_inet6_ip6(&(0x7f0000000880)={0x4, 0x18, 0x29, 0xa}, 0x4, &(0x7f00000008c0)="e09a4f8b3f66a0618c11a4efe4117ef12f19bf8a9f0e5fce17abd8f76b210c9ed597e53e0de014cee7395f0d42d278dbd1d6bac96c7e3b5af7a154d3177d0d727e4b96f08cc084981f9f022f48a506823a9e16152200a6a9812009f3d6e2b43a354077b8c3d5b033f1c36b462db8cd5ae20f83d53d0c29738af656a00ae4d5d806", &(0x7f0000000980)=0x81, &(0x7f00000009c0)="46d1882ecae2e169a0d7bd9b6368670c290f02e4f8b5af48c6a68f943a5a77b8eb78041b00580ac63dda0811ab1334471a104ccd087a1aabbafffa6c49956b60875704e4d614dfbc07cd4d515c0235f53f5b41542210cc5180be385fa4db367563e13cf72792c151e967ca40816587ddcbaa83eb30a74dd96031300453c89bfa6a59a6d69764b4ad66d8b7eb9e9f8b27ed8b9da6cf7eb03fcb37b44cadf0b3fb9a8d1fbbed67cb31b362796a4cb1ee07", 0xb0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4) sysctl$net_inet6_ip6(&(0x7f0000000a80)={0x4, 0x18, 0x29, 0x36}, 0x4, &(0x7f0000000ac0)="1a7fc07a08335ca5d6e167ac6fd560389781fd8602fe13fe8b609efee08981167243a46b6154e4fa544bc055bc3e488de09e339a00e83be9d9bde026fd8bd22fd42a6463ae83ff5ab7baba709a99e232cbe18deed2b42a17eee27b4c5e678a46230418cf5b4b15fc428ee91e871accf6aea39362e7dc2ec7b525ed8ec2b2dba0627a90fa74ed2f124f6f59bf14c91571c9a0e75e40a5905eb28e00db3a8a0f3663fbf0c350da57162808dbf149e50e11f15bbf2da0879fcc0ad705a31a66e12a0748c48c626cb25008c996dbb278750a959befb68c12f640e95416d3f2ec8c1e922b02f9350237", &(0x7f0000000bc0)=0xe7, &(0x7f0000000c00)="1f436bff900f1446d144a78844ba6a9437d9fd45d534e73e434216b915128e6bc6b7fd18283e90e2415aa383e7e43c82c938807a501ca8ffeeb61bbd9d9d9abf6c168c6178", 0x45) pwrite(r10, &(0x7f0000000c80)="608e3cf59e56cfb3160e6bd6a3055558f93b1d9ee0a6465237d7e2fa19efe7783e528f399c117a70e7102971cb3f3aee8924cd7f71", 0x35, 0xf0c) bind(r2, &(0x7f0000000cc0)=@in={0x2, 0x3}, 0xc) getsockopt(r10, 0x400, 0x4, &(0x7f0000000d00)=""/195, &(0x7f0000000e00)=0xc3) accept$unix(r9, 0x0, &(0x7f0000000e40)) openat$bpf(0xffffffffffffff9c, &(0x7f0000000e80), 0x20000, 0x0) 574.672046ms ago: executing program 7 (id=11): readv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)=""/193, 0xfffffe14}], 0x1) close(0xffffffffffffffff) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) r0 = socket(0x2, 0x2, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) mmap(&(0x7f00004ca000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0xfffffffffffff000) ioctl$FIONREAD(r0, 0xc0206925, &(0x7f00000001c0)) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x1000300000004}) open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x2c) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000040)='\x00', 0x1) setsockopt$inet_opts(r2, 0x0, 0x200000000000a, &(0x7f0000000040), 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000480)=""/240, 0xfffffc47}, {&(0x7f00000000c0)=""/179, 0xfdac}, {&(0x7f00000002c0)=""/229, 0xe2}], 0x50, 0x0) minherit(&(0x7f00001ce000/0x2000)=nil, 0x2000, 0x3) setitimer(0x1, &(0x7f0000000080)={{0x8, 0x8873}, {0x0, 0x7}}, 0x0) getitimer(0x0, &(0x7f00000003c0)) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000200)={0x401, 0x400, 0x5, 0x3, "27b9a72dcbb4f0541a15db0def027a2acba26ed2", 0x3, 0x8}) poll(&(0x7f0000000000)=[{}], 0x20000000000000fe, 0x0) execve(0x0, 0x0, 0x0) 359.388157ms ago: executing program 0 (id=12): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000240)={@random="995de563e155", @random="61ab91c55012", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x9, 0x41, 0x65, 0xfffe, 0x9, 0x67, 0x0, @local={0xac, 0x14, 0x0}}, @icmp=@redirect={0x5, 0x3, 0x0, @local={0xac, 0x14, 0x0}, {0x8, 0x4, 0x2, 0x7, 0x3, 0x65, 0x4, 0x0, 0x16, 0x8, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0xc, 0xa, 0x0, 0xf, [{[], 0x7}, {[], 0xfffff785}]}]}}, "e5b237480e"}}}}}) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x2, 0x0) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x3, 0x1, 0x2, 0x7}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x3e}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x1, 0x0, 0x37) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) link(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') pledge(&(0x7f0000000ac0)='tty \xa8\xb2\x93E\xfc\x84\x88\xdf\x97:|\xe97t\xbe \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00B\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\x1f\x1fj\xa5H\x01nz\x947\xf8Q|o\x80\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01\x03\x00\x00\x00\x00\x00\x00\x00\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8e\xf7\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\xddwB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x\"B\xc8x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc89\x19o\xf5zJ\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\xab\xda\xe2\xd4\xec8\x8b\xb6e\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2ym\x86\xc4\xcbm\x80%\xfc\x9e\x9f', 0x0) rename(&(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rmdir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 222.893316ms ago: executing program 6 (id=13): open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket(0x2, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, r0) close(r1) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) setsockopt$sock_int(r1, 0xffff, 0x1023, &(0x7f0000000080), 0x4) shutdown(r1, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f0000000500)={0x3, &(0x7f00000000c0)=[{}, {0x1}, {0x6, 0x0, 0x0, 0xff}]}) sysctl$kern(&(0x7f00000000c0)={0x1, 0x49}, 0x6, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xff0a, 0x0, 0x37) r3 = socket(0x18, 0x3, 0x5) sendto$unix(r3, &(0x7f0000000000)="b1000504000004000000000001000000331c13fecea10500fef96ec0c72fd3357ae30200004e3003000000acf20b7804be38164991f7c8cf5f882b297be1aa0500000051e2f0ad3ebbc257699a1f139b672f4d335c223e7d0c032bfa896443a42121000000720fd18bfbb670c1f5a872c881ea6e2ec5890400000000008000361b4cc702fac500002021fbfa0c0f00008abfba221554f4e0f668246c0900000008e371a3f8343712051eea040000000000", 0xb1, 0x0, 0x0, 0x0) 219.72024ms ago: executing program 3 (id=14): syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) r0 = socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000be00000000002e907800000000e000000105029078e000000146331e0100640008c15000067f000001e000000244240543000000000000000d000000000000000000000009ffffffffe000000100000800891fd9ffffffff00000004ac1400aae0000001ac1400aae00000010000000101946be22bd23c"]) socket(0x18, 0x4000, 0x29) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x1fc, 0x4) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000029, 0x2e, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) sendmsg$unix(r1, &(0x7f0000001900)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x3}, 0x8, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x10, 0x40c}, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$unix(r0, &(0x7f0000000000), 0x10) shmat(0xffffffffffffffff, &(0x7f000017a000/0x1000)=nil, 0x2000) sendto(r0, &(0x7f0000000040)='_', 0x1, 0x0, 0x0, 0x0) r3 = dup2(r0, r0) mmap(&(0x7f00006e2000/0x1000)=nil, 0x1000, 0x0, 0x3011, r3, 0x100) 217.426534ms ago: executing program 4 (id=5): ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x0, 0x0, {0x0, 0x5}}) (async) r0 = socket(0x18, 0x2, 0x0) connect$unix(r0, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) getsockname$inet(r0, &(0x7f00000000c0), &(0x7f0000000380)=0xffffffffffffff24) (async, rerun: 32) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (rerun: 32) r1 = socket(0x18, 0x1, 0x0) close(r1) r2 = socket(0x18, 0x1, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async) setsockopt(r0, 0x1, 0xfffff377, &(0x7f0000000100)="65ad5c69ecbce2d58276477e85b2de3c990e9e244a715933032e4b9c328bebfbce808acab887df9f01fdb8d4f0b3c5c610cca647467da0e13b012ad86f5d7f7b72b1136aad46cad1b325c6b6227ec1597a85cadd6b85f6f9a14f647eb845349391b0ff407df6052ab8600aa319352e76d97c83db00220b0bb629bc3b8b3888fec34d913ed8e8", 0x86) (async, rerun: 64) socket(0x2, 0x2, 0x0) (async, rerun: 64) setsockopt(r2, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r1, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 216.887553ms ago: executing program 3 (id=15): munlockall() (async) munlockall() r0 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r1 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xa011, r1, 0xe2bc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0xa011, r1, 0xe2bc) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="62dc", 0x2}], 0x1, 0x80000000000) sysctl$kern(&(0x7f0000000080)={0x1, 0x2c}, 0x4000000000000003, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0xfffffffffffffffd) write(r0, &(0x7f0000000280)="b96abcf5aca6ff3ce5e7a096a82afa32a58445315c0d91b6c2340ad31e96a5b6e6d1ec653d0b64ed7c575e7de84d799e184ffcce5007006804f575ef4a", 0x81f89687) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000040)='./file0/file0\x00', r1}) (async) ioctl$DIOCMAP(r1, 0xc0106477, &(0x7f0000000100)={&(0x7f0000000040)='./file0/file0\x00', r1}) 216.547439ms ago: executing program 4 (id=16): open$dir(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x186) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) unveil(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)='x\x00') execve(&(0x7f00000002c0)='./file2\x00', 0x0, 0x0) r0 = msgget$private(0x0, 0xfffffffffffffbe5) msgsnd(r0, &(0x7f0000002ec0)=ANY=[@ANYRESDEC], 0x0, 0x0) msgrcv(r0, &(0x7f00000000c0)={0x0, ""/41}, 0x31, 0x9155c89df728aa38, 0x1000) 212.89306ms ago: executing program 0 (id=17): pledge(0x0, &(0x7f00000000c0)='\x00') (async) r0 = socket(0x18, 0x4001, 0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) close(r1) (async) r2 = socket(0x2, 0x4001, 0x0) r3 = dup(r2) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) sysctl$kern(&(0x7f0000000140)={0x1, 0x58}, 0x2, 0x0, 0x0, 0x0, 0x0) pledge(0x0, &(0x7f0000000000)='tty\x00\x00\x00!\a\x9bp^|#\xcbhl\x97\xaa\xe0\r\xe7\xb9E\xdf\x1d\x96\x01\x98/\x0e\x17\x95 \x95Mj\x84+\xf0B\xaaYu^\xa0\xc9j\xdd-I\x01R\x00wY\x1d\xd7\f>\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b,\x99\x8e\x05\x86\x91IsC}~K\xd97\xae\xb9u\x1c\xfc\xb4Nwl\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xde\r\x8d\xa1\x00\xcc\xd7\xb6\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\x9d\xb8\xbd\xfd4\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8af\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90L\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe2\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xe9A\xe3{\x8d\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00zq\xdb\xee\xa1|a\xb4\xb5)t\x95S\xc5\xec\x10\xc7\r\xe4\xfb`R\xc5&\x9f\x90<\x81pc\x1a\xfa\xe1\xc3\x15$\xd2\xaa46\x8a`\xf0\xc5\x12\xe6\xd5\x9d\xb9%\xd8\xa8\xa6rN}\xe2\x9b\xb4\xfc=G\xc5\x03\x91\x86\xf5\r\x01\x00\x01\x00'/415) setsockopt$sock_int(r4, 0xffff, 0x1023, &(0x7f0000000040), 0xe0) (async, rerun: 32) pledge(&(0x7f0000000000)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00B\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\x1f\x1fj\xa5H\x01nz\x947\xf8Q|o\x80\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\xad\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8e\xf7\nn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\xddwB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc89\x19o\xf5zJ\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\xab\xda\xe2\xd4\xec8\x8b\xb6e\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2ym\x86\xc4\xcbm\x80%\xfc\x9e\x9f', &(0x7f0000002840)='tty \x00\x02\x00!\a\x9bp^|#\xcbhl\x97\xa3_\xbc\x04\x9d!\xd9\x9f\x9f\xb4\x96\x13\x12\xe0\r\xe7\xb9E\b\x00\x00\x00l\xaaY\xe1Q<\x19\xc0\xf6Yf\x9au^\xa0\xc9j\xdd-I\x01R\x00w\xf7\x15\x04\xa6\x82aY\x1d\xd7\f>Y\x06\"\xad\xb6\x88_\xeb\at\x91\xd3\xbf\xea\xddt\xe0\bt\x06S,\xdbH\xa7-\xaaw\xcet\x044\xc5\xa9e\xa9\xf6\x1b\x8e\x05\x86\x91IsC\xb9ul\xaeu\x94\x9b\xaf\x04\xc4\x03\"F\x8f\xd5\xe8\r\x8d\xa1\x00\xcc\xd7\xa0\xe1\xeb\xc1>\xbd\t\xc8\x15\v\xb0, \xee\xa4\xa6\xb9a\x01&\xadrj\xd5\xc26p\xa14\xe0\xbf\xa0\x1es\x01=\xdbd\xf0?=\x8afcJ\x8eYEn\xd4<\x00\xec\xe4^\x00\x00\x00\xca\x90\xfa\x98\xc9gty\xce\xab\xd2\xa1\x85E\xe4\xa9\xd5\xab\x83\xda?w\x83\xbc\xcf\xd20(L&b\xed\x8c\x1d\x1a\x9fd\x99H\x9e\x82\x10\xea\x05\xf8\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\xa6\x8c\x05n\x83\x83\x12+\x16\xc1\x00\x04\x00\x00\x13:o\x0f\x1fB\xa4\x00wB\x92h\xde\xfal3\x88e\x04J\\\x00D\xae`\x8e\xadd\xa8;\xee\xc4K\xe8]\x84\x90\xb8d\xfb\x95\xb3\xe9(x_\x80]\xadW\xd5\xa9\xaa\x03\x9c6\xa9\xc4\x01\x03\xea\xe5\x90\x85\x16\xb0DV\x13\x01\xab\x01\xf0\x8f\x02\xc2\xc8\x9b\x03\x1f\xd7\xdbN\\\xc0\xcd?Pg\xd5q\x13\xbd \xfa\xab\xccJK\x11\\\x16~#P.\xc9K\x15r\x04\xd9Z;\xc0\x8dOze\x96\xe9\xc3\x93\xed\x94.\xc2\xa0\x1fU#\x96\xe6\xb6C\xfa\x03/\x8b\x0e2\xec\x96v\x9b/.\v\x9e\x80\x18s\xae.\xf4\x14KS`\x87\x8b4\t\x00\x87{\xa8@e\xbfe\xeb\xee\xa2\xe72\xb8Q:\x9f\xc2b\x897\xbe\r\x04\xdf\xe2\xc0\xf0FV\'m\xcbm\x80%\xfc\x9e\x9f\x87\x80A\xbe\xc2\x00\x00\x00\x00\x00\x006\x96\xbb\x9f\x85\x98\xbb\xbc;\xaa\x97c\xfe\x82jz&t\xa7\xc4\xcd\xb0\b9G\xcag\fY\xe6\r\xcdT\xd3\x1c(\xef\xc0\x038\xbd\xdd\xd9\xc9\x93a]q\xd2\x9b\a\x1e\xf8\xc3\"\xc8:\xb8$\x9f\'P\x17\xfa\xf3Xa\trB-\xf2g\xe6Z\xd5F\xd2\x80\xe0\x99\"\xc12\xe8\b\xc58\x00'/659) (async, rerun: 32) socket(0x20, 0x4, 0x3) r5 = semget(0x0, 0x1, 0x281) poll(0x0, 0x0, 0xffffffff) (async) unveil(0x0, &(0x7f0000000400)='x\x00') (async, rerun: 64) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) (async, rerun: 64) semop(r5, &(0x7f0000000240)=[{0x0, 0x7}, {0x1, 0x7, 0x3000}, {0x0, 0x7, 0x1000}, {0x4, 0x3, 0x3800}, {0x2, 0x4, 0x1800}, {0x2, 0x9, 0x1800}, {0x2, 0x4, 0x800}, {}, {0x4, 0x4, 0x800}], 0x9) 11.927333ms ago: executing program 2 (id=18): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$WSDISPLAYIO_DELFONT(0xffffffffffffff9c, 0x8058574f, &(0x7f0000000000)={'./file0/file0/../file0\x00', 0x98, 0x3, 0x0, 0x0, 0xfac, 0x5, 0x0, 0x0, 0x2, 0x1, 0x1}) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil) getgroups(0x0, &(0x7f00000001c0)) r0 = semget$private(0x0, 0x2, 0x700) r1 = getegid() semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x100, 0x0, 0x0, 0x0, r1, 0x4, 0x6}, 0x9, 0x6, 0x20000000}) chown(0x0, 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x4004667f, 0x0) semop(r0, &(0x7f00000004c0)=[{0x4, 0x9, 0x800}, {0x1, 0x6, 0x800}], 0x2) unveil(&(0x7f0000000240)='./file0/file0/../file0\x00', &(0x7f00000000c0)='x\x00') 1.419617ms ago: executing program 3 (id=19): open$dir(&(0x7f00000000c0)='./file0\x00', 0xf02, 0x186) r0 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x110) write(r0, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) truncate(&(0x7f0000000000)='./file0\x00', 0x30000) r1 = getuid() seteuid(r1) r2 = getegid() chown(&(0x7f0000000080)='./file0\x00', r1, r2) 997.659µs ago: executing program 4 (id=20): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0}, 0x1042) (async) r1 = semget$private(0x0, 0x7, 0x3c0) semop(r1, &(0x7f00000001c0)=[{0x2, 0x9, 0x1800}, {0x3, 0x9, 0x3000}, {0x4, 0x9, 0x1000}, {0x5, 0x5, 0x1000}, {0x0, 0xfffc, 0x1800}, {0x2, 0x10, 0x1800}, {0x2, 0x8, 0x1000}, {0x3, 0x6, 0x1800}, {0x0, 0x4}, {0x4, 0xeff}], 0xa) (async) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r2, 0x0, 0x0, 0x3, 0x1000) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/40) (async) semop(r1, &(0x7f0000000000)=[{0x1, 0x1ad7, 0x800}, {0x0, 0x204, 0x1800}], 0x2) (async, rerun: 32) semop(r1, 0x0, 0x0) (async, rerun: 32) semop(r1, &(0x7f0000000200)=[{0x4, 0x0, 0x1000}, {0x0, 0xfff, 0x800}], 0x2) (async, rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x8) (async, rerun: 32) r3 = socket(0x2, 0x8000, 0x0) (async) socket$inet(0x18, 0x3, 0x102) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000001180), 0x10000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x2000000000000243, &(0x7f0000000100)}) ioctl$FIONREAD(r5, 0xc0106924, &(0x7f00000001c0)) (async) r6 = kqueue() kevent(r6, &(0x7f00000000c0), 0x101, &(0x7f0000000180), 0x6, 0x0) r7 = socket(0x2, 0x2, 0x0) ioctl$FIONREAD(r7, 0x80286989, &(0x7f00000001c0)) pread(r4, &(0x7f0000002fc0)="37d2c18b20", 0x5, 0x9) (async) close(r3) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (rerun: 64) r8 = socket(0x18, 0x2, 0x0) ioctl$BIOCVERSION(r4, 0x40044271, &(0x7f0000000080)) (async) setsockopt(r8, 0x1000000000029, 0xb, &(0x7f0000000040)='\t\x00\x00\x00', 0x4) (async) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) write(r3, 0x0, 0x29) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 411.598µs ago: executing program 6 (id=21): setrlimit(0x8, &(0x7f0000000100)={0x7, 0x54}) r0 = syz_open_pts() setrlimit(0x8, &(0x7f0000000580)={0xa, 0x56}) r1 = syz_open_pts() close(r1) syz_open_pts() ioctl$TIOCSETA(r1, 0x802c7414, &(0x7f0000000340)={0x7fff, 0x5, 0xffffdf82, 0xffffff8d, "08ed95990000000000000000ffffffffffffffe6", 0x4000000, 0x20000}) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0xffaa}], 0x1) close(r0) r2 = syz_open_pts() ioctl$TIOCSETA(r0, 0x802c7414, &(0x7f00000000c0)={0x0, 0x4, 0x8a38, 0x0, "07160a009cef01098b748200"}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000280)="a65764a0c9f281e64e353149e7adbac2fa5a6cb1c36892bf896d352eb5da4c54f3111aab5405d4b4c1af559bb8fbbe524c1eacfa5fbe4dd8eb2315ca1a25cc289dbec983efc81e2eddd943ae523c904338991b31ec010fc5e085f5fddfae1f47a9aa015b9d34cad06b6fd3581eb13c1a8cd36c7e4b8f72ce5300af7265fb78c486b7eaa7ba49838d8e972dd51068d142e2e04d08", 0x94}], 0x1) r3 = dup2(r2, r0) ioctl$TIOCSETA(r2, 0x802c7414, &(0x7f0000000080)={0xffffffff, 0x1, 0xfffffffe, 0x7fc, "2cf9892af9a590e4cb52e88608007673ca9e5fd7", 0x6}) poll(&(0x7f0000000000)=[{r3, 0x40}], 0x1, 0x0) syz_emit_ethernet(0x1000e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "15f2ff", 0xffc2, 0x0, 0x0, @rand_addr="eee21f0000003c00000500004c58053b", @local={0xfe, 0x80, '\x00', 0x0}}}}}) 0s ago: executing program 2 (id=22): r0 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) r1 = kqueue() kevent(r1, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000980)={0x0, 0x3}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0xa011, r0, 0x0) ftruncate(r0, 0x79c7) (async) writev(0xffffffffffffffff, &(0x7f0000001480)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async) sysctl$kern(&(0x7f00000000c0)={0x1, 0x2a}, 0x2, &(0x7f0000000100), 0x0, 0x0, 0x0) ioctl$TIOCSETAW(0xffffffffffffffff, 0x802c7415, &(0x7f0000000140)={0xffffffff, 0x1, 0xfffffff0, 0x1, "8b030003000100787d902b56d864d3c3a3f4d3c9"}) (async) r2 = socket(0x18, 0x2, 0x0) setsockopt(r2, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) setsockopt(r2, 0x1000000000029, 0xa, &(0x7f0000000140)='\x00\x00 \x00', 0x4) (async) mknod(&(0x7f0000000100)='./file0\x00', 0x100, 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x14e) (async) msync(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x18289, 0x7b) write(r3, &(0x7f00000004c0)="b96abcf5ac7cffa09ea845315c0d853a14", 0xffffff1c) madvise(&(0x7f0000047000/0x2000)=nil, 0x2000, 0x6) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-setuid-2.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.50' (ED25519) to the list of known hosts. login: panic: mtx 0xffffffff839bd848: locking against myself Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND * 42929 67513 32767 0x10 0 0 syz-executor 113859 52201 32767 0x10 0x4000000 1 syz-executor db_enter() at db_enter+0x25 panic(ffffffff833dc0d5) at panic+0x1e5 mtx_enter_try(ffffffff839bd848) at mtx_enter_try+0x1bf mtx_enter(ffffffff839bd848) at mtx_enter+0x60 uvm_pageclean(fffffd8008249ec0) at uvm_pageclean+0x290 uvm_pagefree(fffffd8008249ec0) at uvm_pagefree+0x26 uvn_get(fffffd806b8d6850,0,ffff80003c43a778,ffff80003c43a754,0,2,a05b4659155fa827,ffff80003c43a9d0) at uvn_get+0x68b uvm_fault_lower_io(ffff80003c43a998,ffff80003c43a9d0,ffff80003c43a800,ffff80003c43a808) at uvm_fault_lower_io+0x319 uvm_fault_lower(ffff80003c43a998,ffff80003c43a9d0,ffff80003c43a910) at uvm_fault_lower+0x278 uvm_fault(fffffd806b1c0028,200000000000,0,2) at uvm_fault+0x272 upageflttrap(ffff80003c43ab20,2000000000c0) at upageflttrap+0xa9 usertrap(ffff80003c43ab20) at usertrap+0x2d8 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7eb1714d8c30, count: 2 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{0}> ddb{0}> set $lines = 0 ddb{0}> set $maxwidth = 0 ddb{0}> show panic *cpu0: mtx 0xffffffff839bd848: locking against myself ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff833dc0d5) at panic+0x1e5 mtx_enter_try(ffffffff839bd848) at mtx_enter_try+0x1bf mtx_enter(ffffffff839bd848) at mtx_enter+0x60 uvm_pageclean(fffffd8008249ec0) at uvm_pageclean+0x290 uvm_pagefree(fffffd8008249ec0) at uvm_pagefree+0x26 uvn_get(fffffd806b8d6850,0,ffff80003c43a778,ffff80003c43a754,0,2,a05b4659155fa827,ffff80003c43a9d0) at uvn_get+0x68b uvm_fault_lower_io(ffff80003c43a998,ffff80003c43a9d0,ffff80003c43a800,ffff80003c43a808) at uvm_fault_lower_io+0x319 uvm_fault_lower(ffff80003c43a998,ffff80003c43a9d0,ffff80003c43a910) at uvm_fault_lower+0x278 uvm_fault(fffffd806b1c0028,200000000000,0,2) at uvm_fault+0x272 upageflttrap(ffff80003c43ab20,2000000000c0) at upageflttrap+0xa9 usertrap(ffff80003c43ab20) at usertrap+0x2d8 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7eb1714d8c30, count: -13 ddb{0}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c43a4c0 rbx 0xffffffff83804dcf cpu_info_full_primary+0x2dcf rdx 0 rcx 0xffff8000fffeb9c8 rax 0xffffffff83803ff0 cpu_info_full_primary+0x1ff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x98bb6675fcdc20b7 r11 0xeb487cc2207eb9f2 r12 0xffffffff83804bd0 cpu_info_full_primary+0x2bd0 r13 0 r14 0 r15 0x1 rip 0xffffffff816ee895 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c43a4b0 ss 0 db_enter+0x25: addq $0x8,%rsp ddb{0}> show proc PROC (syz-executor) tid=42929 pid=67513 tcnt=3 stat=onproc flags process=10 proc=0 runpri=50, usrpri=61, slppri=17, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000fffebc58,0xffff8000ffff14b0 process=0xffff8000fffe4e18 user=0xffff80003c435000, vmspace=0xfffffd806b1c0028 estcpu=11, cpticks=0, pctcpu=0.1, user=1, sys=0, intr=0 ddb{0}> ps PID TID PPID UID S FLAGS WAIT COMMAND 6247 72836 91695 32767 2 0x10 syz-executor 6247 76993 91695 32767 3 0x4000090 fsleep syz-executor 6247 285355 91695 32767 3 0x4000090 fsleep syz-executor 6247 56787 91695 32767 3 0x4000090 fsleep syz-executor *67513 42929 20969 32767 7 0x10 syz-executor 67513 321028 20969 32767 3 0x4000010 biowait syz-executor 67513 478858 20969 32767 3 0x4000090 fsleep syz-executor 52611 264617 86936 32767 2 0x10 syz-executor 52611 403448 86936 32767 3 0x4000090 sbwait syz-executor 52611 273334 86936 32767 3 0x4000090 msgwait syz-executor 52611 359047 86936 32767 3 0x4000090 fsleep syz-executor 52201 29667 68990 32767 2 0x10 syz-executor 52201 113859 68990 32767 7 0x4000010 syz-executor 91246 274834 79576 32767 2 0x482010 syz-executor 91246 372894 79576 32767 4 0x4482010 syz-executor 91246 332467 79576 32767 3 0x4402010 suspend syz-executor 91246 305300 79576 32767 4 0x4482010 syz-executor 33973 36132 10861 32767 2 0x10 syz-executor 33973 500548 10861 32767 3 0x4000090 fsleep syz-executor 24055 434092 61857 32767 3 0x90 nanoslp syz-executor 24055 30376 61857 32767 3 0x4000090 sbwait syz-executor 24055 437390 61857 32767 3 0x4000090 fsleep syz-executor 48847 397482 0 0 3 0x14200 bored sosplice 10861 685 86065 32767 3 0x90 nanoslp syz-executor 79576 411532 60813 32767 3 0x90 nanoslp syz-executor 91695 274228 49797 32767 3 0x90 nanoslp syz-executor 20969 176547 88358 32767 3 0x90 nanoslp syz-executor 61857 265427 31439 32767 3 0x90 nanoslp syz-executor 68990 349477 67537 32767 3 0x90 nanoslp syz-executor 38203 243052 22224 32767 3 0x10 getblk syz-executor 86936 94235 40456 32767 3 0x90 nanoslp syz-executor 86065 365545 49643 0 3 0x82 wait syz-executor 22224 135362 49643 0 3 0x82 wait syz-executor 49797 225099 49643 0 3 0x82 wait syz-executor 40456 54452 49643 0 3 0x82 wait syz-executor 67537 277138 49643 0 3 0x82 wait syz-executor 88358 326942 49643 0 3 0x82 wait syz-executor 31439 205410 49643 0 3 0x82 wait syz-executor 60813 36806 49643 0 3 0x82 wait syz-executor 49643 15432 30420 0 3 0x82 kqread syz-executor 30420 456620 25669 0 3 0x10008a sigsusp ksh 25669 404824 25176 0 3 0x98 kqread sshd-session 25176 354077 45587 0 3 0x92 kqread sshd-session 86369 168125 1 0 3 0x100083 ttyin getty 45587 449080 1 0 3 0x88 kqread sshd 17016 204778 99092 73 3 0x1100090 kqread syslogd 99092 499517 1 0 3 0x100082 sbwait syslogd 78182 18817 1 0 3 0x100080 kqread resolvd 81017 454227 65100 77 3 0x100092 kqread dhcpleased 46499 178944 65100 77 3 0x100092 kqread dhcpleased 65100 523231 1 0 3 0x80 kqread dhcpleased 112 270914 0 0 3 0x14200 bored smr 57353 163821 0 0 2 0x14200 zerothread 24278 164385 0 0 3 0x14200 aiodoned aiodoned 36117 39220 0 0 3 0x14200 syncer update 7794 37435 0 0 3 0x14200 cleaner cleaner 75261 469260 0 0 3 0x14200 reaper reaper 93590 514668 0 0 3 0x14200 pgdaemon pagedaemon 34063 319538 0 0 3 0x14200 bored viomb 38059 115415 0 0 3 0x40014200 acpi0 acpi0 48313 492224 0 0 3 0x40014200 idle1 7106 233933 0 0 3 0x14200 bored softnet3 86552 360677 0 0 3 0x14200 bored softnet2 94670 46517 0 0 3 0x14200 bored softnet1 6551 339877 0 0 3 0x14200 bored softnet0 40970 183665 0 0 3 0x14200 bored systqmp 42072 368627 0 0 3 0x14200 bored systq 82685 384164 0 0 3 0x14200 tmoslp softclockmp 26912 256319 0 0 3 0x40014200 tmoslp softclock 62679 516983 0 0 3 0x40014200 idle0 1 306945 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{0}> show all locks CPU 0: exclusive mutex &uvm.pageqlock r = 0 (0xffffffff839bd858) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 uvn_get+0x679 #4 uvm_fault_lower_io+0x319 #5 uvm_fault_lower+0x278 #6 uvm_fault+0x272 #7 upageflttrap+0xa9 #8 usertrap+0x2d8 #9 recall_trap+0x8 Process 67513 (syz-executor) thread 0xffff8000fffeb9c8 (42929) exclusive rwlock uobjlk r = 0 (0xfffffd8060495a90) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 uvn_io+0x667 #3 uvn_get+0x31d #4 uvm_fault_lower_io+0x319 #5 uvm_fault_lower+0x278 #6 uvm_fault+0x272 #7 upageflttrap+0xa9 #8 usertrap+0x2d8 #9 recall_trap+0x8 exclusive mutex &uvm.pageqlock r = 0 (0xffffffff839bd858) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 uvn_get+0x679 #4 uvm_fault_lower_io+0x319 #5 uvm_fault_lower+0x278 #6 uvm_fault+0x272 #7 upageflttrap+0xa9 #8 usertrap+0x2d8 #9 recall_trap+0x8 Process 67513 (syz-executor) thread 0xffff8000fffe3c60 (321028) exclusive rrwlock inode r = 0 (0xfffffd806b8b0320) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 sys_ftruncate+0x1c4 #6 syscall+0xb08 #7 Xsyscall+0x128 Process 52201 (syz-executor) thread 0xffff8000fffea7d8 (113859) exclusive kernel_lock &kernel_lock r = 0 (0xffffffff83901700) #0 witness_lock+0x5bb #1 __mp_acquire_count+0x58 #2 mi_switch+0x4b7 #3 sleep_finish+0x24f #4 biowait+0xc1 #5 bwrite+0x2e5 #6 ffs_write+0x830 #7 VOP_WRITE+0x102 #8 vn_write+0x1d4 #9 dofilewritev+0x23c #10 sys_write+0xa2 #11 syscall+0xbc6 #12 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c8a3678) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vn_write+0x190 #6 dofilewritev+0x23c #7 sys_write+0xa2 #8 syscall+0xbc6 #9 Xsyscall+0x128 Process 38203 (syz-executor) thread 0xffff8000ffff0cf0 (243052) exclusive rrwlock inode r = 0 (0xfffffd806b8b0f80) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vget+0x2bd #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x19f8 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x8fa #11 namei+0x7aa #12 dounlinkat+0xc1 #13 syscall+0xb08 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806c8a3c18) #0 witness_lock+0x5bb #1 rw_do_enter_write+0x3ea #2 rrw_enter+0xc6 #3 VOP_LOCK+0xa6 #4 vn_lock+0xa4 #5 vfs_lookup+0x109 #6 namei+0x7aa #7 dounlinkat+0xc1 #8 syscall+0xb08 #9 Xsyscall+0x128 ddb{0}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10185 10954K 10965K 166960K 11262 0 pcb 17 12K 12K 166960K 17 0 rtable 234 6K 6K 166960K 352 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 sysctl 3 1K 1K 166960K 3 0 counters 64 36K 36K 166960K 64 0 ioctlops 0 0K 2K 166960K 29 0 iov 0 0K 8K 166960K 2 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1334 84K 84K 166960K 1350 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 5K 166960K 3 0 VM map 2 1K 1K 166960K 2 0 sem 5 0K 0K 166960K 6 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 25 93K 125K 166960K 162 0 proc 58 79K 115K 166960K 474 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 2 0K 0K 166960K 4 0 in_multi 99 7K 7K 166960K 99 0 ether_multi 1 0K 0K 166960K 1 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 67 307K 307K 166960K 67 0 exec 0 0K 1K 166960K 346 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 267 177K 187K 166960K 3062 0 UVM aobj 4 2K 2K 166960K 4 0 pinsyscall 46 92K 116K 166960K 1184 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 0 0K 0K 166960K 1 0 NDP 27 2K 2K 166960K 27 0 temp 37 8682K 8746K 166960K 3820 0 kqueue 14 22K 24K 166960K 24 0 SYN cache 2 16K 16K 166960K 2 0 ddb{0}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 39 0 35 1 0 1 1 0 8 0 rtentry 176 111 0 1 5 0 5 5 0 8 0 unpcb 144 39 0 21 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 19 0 11 1 0 1 1 0 8 0 arp 128 18 0 0 1 0 1 1 0 8 0 inpcb 384 81 0 65 2 0 2 2 0 8 0 nd6 144 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 0 29 0 29 29 0 8 0 art_table 32 454 0 0 4 0 4 4 0 8 0 art_node 16 110 0 10 1 0 1 1 0 8 0 sysvmsgpl 40 1 0 1 1 0 1 1 0 8 1 semapl 112 3 0 0 1 0 1 1 0 8 0 shmpl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1575 0 69 95 0 95 95 0 8 0 ffsino 288 1575 0 69 108 0 108 108 0 8 0 nchpl 144 1785 0 106 63 0 63 63 0 8 0 uvmvnodes 80 1656 0 0 34 0 34 34 0 8 0 vnodes 216 1656 0 0 92 0 92 92 0 8 0 namei 1024 5280 0 5280 2 0 2 2 0 8 2 percpumem 16 47 0 0 1 0 1 1 0 8 0 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 5974 0 5971 2 0 2 2 1 8 1 plimitpl 152 38 0 14 2 0 2 2 0 8 1 sigapl 424 442 0 386 9 1 8 8 0 8 1 futexpl 64 355 0 348 1 0 1 1 0 8 0 knotepl 120 60 0 0 2 0 2 2 0 8 0 kqueuepl 224 23 0 11 1 0 1 1 0 8 0 pipepl 336 98 0 71 3 0 3 3 0 8 0 fdescpl 520 423 0 386 4 0 4 4 0 8 0 filepl 160 1413 0 1187 10 0 10 10 0 8 0 lockfpl 104 13 0 10 1 0 1 1 0 8 0 lockfspl 48 8 0 5 1 0 1 1 0 8 0 sessionpl 144 21 0 5 1 0 1 1 0 8 0 pgrppl 48 29 0 5 1 0 1 1 0 8 0 ucredpl 104 117 0 98 1 0 1 1 0 8 0 zombiepl 144 386 0 386 1 0 1 1 0 8 1 processpl 1192 442 0 386 5 0 5 5 0 8 0 procpl 656 487 0 416 8 1 7 7 0 8 0 sosppl 168 1 0 1 1 0 1 1 0 8 1 sockpl 728 160 0 122 4 0 4 4 0 8 0 mcl64k 65536 2 0 0 1 0 1 1 0 8 0 mcl8k 8192 2 0 0 1 0 1 1 0 8 0 mcl4k 4096 123 0 0 16 0 16 16 0 8 0 mcl2k 2048 19 0 0 3 0 3 3 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 241 0 0 16 0 16 16 0 8 0 bufpl 280 2379 0 117 162 0 162 162 0 8 0 anonpl 32 7604 0 0 62 0 62 62 0 246 0 amapchunkpl 152 8706 0 8105 26 0 26 26 0 158 1 amappl16 200 2237 0 1964 15 0 15 15 0 8 0 amappl15 192 19 0 18 1 0 1 1 0 8 0 amappl14 184 132 0 122 1 0 1 1 0 8 0 amappl13 176 38 0 38 1 0 1 1 0 8 1 amappl12 168 1030 0 993 2 0 2 2 0 8 0 amappl11 160 48 0 38 1 0 1 1 0 8 0 amappl10 152 6 0 6 1 0 1 1 0 8 1 amappl9 144 249 0 249 1 0 1 1 0 8 1 amappl8 136 25 0 24 1 0 1 1 0 8 0 amappl7 128 98 0 87 1 0 1 1 0 8 0 amappl6 120 186 0 183 1 0 1 1 0 8 0 amappl5 112 117 0 111 1 0 1 1 0 8 0 amappl4 104 293 0 279 1 0 1 1 0 8 0 amappl3 96 1373 0 1238 4 0 4 4 0 8 0 amappl2 88 602 0 550 2 0 2 2 0 8 0 amappl1 80 7918 0 7348 14 0 14 14 0 8 0 amappl 88 2415 0 2215 5 0 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 3 0 0 1 0 1 1 0 8 0 uaddrrnd 24 423 0 386 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 423 0 386 1 0 1 1 0 8 0 vmmpekpl 168 4985 0 4955 2 0 2 2 0 8 0 vmmpepl 168 34070 0 31704 106 0 106 106 0 357 0 vmsppl 480 422 0 386 6 0 6 6 0 8 0 rwobjpl 72 14129 0 11369 51 0 51 51 0 8 0 pdppl 4096 854 0 772 114 16 98 98 0 8 16 pvpl 32 14149 0 0 116 1 115 115 0 265 0 pmappl 256 422 0 386 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 400 0 18 11 0 11 11 0 8 0 ddb{0}> machine ddbcpu 0 Invalid cpu 0 ddb{0}> trace db_enter() at db_enter+0x25 panic(ffffffff833dc0d5) at panic+0x1e5 mtx_enter_try(ffffffff839bd848) at mtx_enter_try+0x1bf mtx_enter(ffffffff839bd848) at mtx_enter+0x60 uvm_pageclean(fffffd8008249ec0) at uvm_pageclean+0x290 uvm_pagefree(fffffd8008249ec0) at uvm_pagefree+0x26 uvn_get(fffffd806b8d6850,0,ffff80003c43a778,ffff80003c43a754,0,2,a05b4659155fa827,ffff80003c43a9d0) at uvn_get+0x68b uvm_fault_lower_io(ffff80003c43a998,ffff80003c43a9d0,ffff80003c43a800,ffff80003c43a808) at uvm_fault_lower_io+0x319 uvm_fault_lower(ffff80003c43a998,ffff80003c43a9d0,ffff80003c43a910) at uvm_fault_lower+0x278 uvm_fault(fffffd806b1c0028,200000000000,0,2) at uvm_fault+0x272 upageflttrap(ffff80003c43ab20,2000000000c0) at upageflttrap+0xa9 usertrap(ffff80003c43ab20) at usertrap+0x2d8 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7eb1714d8c30, count: -13 ddb{0}> machine ddbcpu 1 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 __mp_lock(ffffffff839014f8) at __mp_lock+0x1c __mp_acquire_count(ffffffff839014f8,1) at __mp_acquire_count+0x58 tsleep(fffffd80605a5d40,11,ffffffff833ea2dd,0) at tsleep+0x211 biowait(fffffd80605a5d40) at biowait+0xc1 bwrite(fffffd80605a5d40) at bwrite+0x2e5 ffs2_balloc(fffffd806c8a35d8,dc000,4000,fffffd807f7d3410,2,ffff80003c442938) at ffs2_balloc+0x18d0 ffs_write(ffff80003c4429c0) at ffs_write+0x4f9 VOP_WRITE(fffffd806230e288,ffff80003c442b68,7,fffffd807f7d3410) at VOP_WRITE+0x102 vn_write(fffffd8062212688,ffff80003c442b68,0) at vn_write+0x1d4 dofilewritev(ffff8000fffea7d8,4,ffff80003c442b68,0,ffff80003c442c20) at dofilewritev+0x23c end trace frame: 0xffff80003c442bf0, count: 0 ddb{1}> trace x86_ipi_db(ffff8000299edff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __sanitizer_cov_trace_pc() at __sanitizer_cov_trace_pc+0x33 __mp_lock(ffffffff839014f8) at __mp_lock+0x1c __mp_acquire_count(ffffffff839014f8,1) at __mp_acquire_count+0x58 tsleep(fffffd80605a5d40,11,ffffffff833ea2dd,0) at tsleep+0x211 biowait(fffffd80605a5d40) at biowait+0xc1 bwrite(fffffd80605a5d40) at bwrite+0x2e5 ffs2_balloc(fffffd806c8a35d8,dc000,4000,fffffd807f7d3410,2,ffff80003c442938) at ffs2_balloc+0x18d0 ffs_write(ffff80003c4429c0) at ffs_write+0x4f9 VOP_WRITE(fffffd806230e288,ffff80003c442b68,7,fffffd807f7d3410) at VOP_WRITE+0x102 vn_write(fffffd8062212688,ffff80003c442b68,0) at vn_write+0x1d4 dofilewritev(ffff8000fffea7d8,4,ffff80003c442b68,0,ffff80003c442c20) at dofilewritev+0x23c sys_write(ffff8000fffea7d8,ffff80003c442cd0,ffff80003c442c20) at sys_write+0xa2 syscall(ffff80003c442cd0) at syscall+0xbc6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x8a4b8dd1790, count: -17