last executing test programs: 545.272939ms ago: executing program 4 (id=5): setitimer(0x2, &(0x7f0000000000)={{0x6}, {0x0, 0x3}}, 0x0) (async) poll(&(0x7f0000000ac0)=[{0xffffffffffffff9c}], 0x20000000000000d7, 0x887e) poll(&(0x7f0000001880)=[{}, {}], 0x2, 0xd641) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/100, 0x64}, 0x1003f8d}, 0x10, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000000080)={0x0}, 0x6a, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2, 0x12, r1, 0x0) (async) mknod(&(0x7f0000000000)='./file0\x00', 0x1ffa, 0x0) (async) symlink(&(0x7f0000000780)='./file0\x00', &(0x7f0000000740)='./bus\x00') open(&(0x7f0000000000)='./bus/\x00', 0x200, 0x0) (async) ftruncate(r1, 0x25b3) (async) execve(0x0, 0x0, 0x0) (async) select(0x0, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x4, 0x0, &(0x7f00000028c0)) (async) writev(0xffffffffffffffff, 0x0, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) (async) fcntl$getown(0xffffffffffffffff, 0x5) (async) execve(0x0, 0x0, 0x0) (async) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20, 0x0) dup(r2) 543.669928ms ago: executing program 0 (id=1): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x80000000002) connect$unix(0xffffffffffffffff, 0x0, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000100)=ANY=[@ANYBLOB="ff02", @ANYRES8=r0, @ANYRES16=r0]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000000), 0x10) r2 = dup2(r1, r1) shutdown(r2, 0x1) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x2010, r3, 0x0) recvfrom$inet(r2, &(0x7f0000000040)=""/113, 0x71, 0x40, 0x0, 0x0) sysctl$vm(&(0x7f0000001f80)={0x2, 0x9}, 0x2, &(0x7f00000006c0), 0x0, 0x0, 0x0) mprotect(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x2) munlock(&(0x7f0000ff5000/0x8000)=nil, 0x8000) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4e}, 0x2, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x1, 0x0) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4) connect$unix(r4, &(0x7f0000000000), 0x10) r5 = dup2(r4, r4) setsockopt$sock_int(r5, 0xffff, 0x1, &(0x7f0000000240)=0x5, 0x4) shutdown(r5, 0x1) 517.371919ms ago: executing program 6 (id=7): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x2, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000), 0x10) r3 = dup2(r2, r2) setsockopt$sock_int(r3, 0xffff, 0x1008, &(0x7f0000000a00)=0x6, 0x4) recvfrom$inet(r3, &(0x7f0000000040)=""/113, 0x71, 0x40, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x1a8) writev(r4, &(0x7f0000000880)=[{&(0x7f0000000100)="cc601b7a", 0x4}], 0x1) r5 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0x0) munmap(&(0x7f000000e000/0x400000)=nil, 0x400000) truncate(&(0x7f0000000040)='./file0\x00', 0x30001) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000100)=""/254, 0xfe}, {&(0x7f0000000940)=""/164, 0xa4}, {&(0x7f00000002c0)=""/243, 0xf3}], 0x3, 0x0) minherit(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3) ioctl$WSDISPLAYIO_LDFONT(r3, 0x8058574d, &(0x7f00000001c0)={'./file0\x00', 0xfffffffe, 0x0, 0xff, 0x1, 0x7, 0xf, 0x8a9a, 0x2, 0x1, 0x1, 0x6}) r7 = dup2(r1, r1) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4, 0x4}, 0x840) lstat(0x0, 0x0) r8 = syz_open_pts() ioctl$TIOCGWINSZ(r8, 0x40087468, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000001600)={0x0}, 0x10, 0x0) preadv(r1, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/229, 0xe5}, {&(0x7f0000000500)=""/126, 0x7e}, {&(0x7f0000000580)=""/68, 0x44}, {&(0x7f0000000600)=""/230, 0xe6}, {&(0x7f0000000700)=""/249, 0xf9}, {&(0x7f0000000800)=""/81, 0x51}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f0000000880)}], 0x8, 0x4) sysctl$kern(&(0x7f00000000c0)={0x1, 0x4f}, 0x2, &(0x7f0000000000)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000100)=0x65, 0x0, 0x0) socket$inet6(0x18, 0x3, 0x80) r9 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r9, 0xffff, 0x1004, &(0x7f0000001840), &(0x7f0000001880)=0xc) msgget$private(0x0, 0x22a) r10 = semget(0x0, 0x1, 0x281) semop(r10, &(0x7f0000000000)=[{0x0, 0x8, 0x800}], 0x1) 502.336858ms ago: executing program 2 (id=3): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0xd570d0466b6018f, './file0\x00'}, 0xa) listen(r0, 0x1) r1 = accept$unix(r0, 0x0, 0x0) close(r0) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[@ANYBLOB="ff02"]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x1, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0/file0\x00'}, 0x10) r3 = dup2(r2, r2) write(r2, &(0x7f00000000c0)="df8de5c0efb952", 0x7) recvfrom$inet(r3, &(0x7f0000000040)=""/112, 0xffffff7a, 0x40, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) setrlimit(0x8, &(0x7f0000000000)={0x7, 0x51}) r5 = socket$inet(0x2, 0x1, 0x0) getsockopt(r5, 0x0, 0x5, 0x0, 0x0) poll(&(0x7f0000000240)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x40}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x40}], 0x8, 0x5) ioctl$FIOASYNC(r0, 0x8004667d, &(0x7f0000000040)=0xffffffff) connect$unix(r4, &(0x7f0000000000)=@file={0xd1653077bafa0114, './file0\x00'}, 0xa) r6 = socket$unix(0x1, 0x1, 0x0) r7 = open(&(0x7f0000000040)='./file0\x00', 0x70e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r7, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000000)=@abs={0x7da2f17cbc8e019a, 0x0, 0x3}, 0x8) pledge(0x0, &(0x7f0000000040)='\x00') r9 = socket(0x18, 0x2, 0x0) getsockopt(r9, 0x29, 0x2b, 0x0, 0x0) bind$unix(r6, &(0x7f0000000240)=@file={0x1, './file2\x00'}, 0xa) 388.309959ms ago: executing program 0 (id=9): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) (async, rerun: 32) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x101}}) (rerun: 32) r1 = socket(0x18, 0x1, 0x0) (async) r2 = socket(0x2, 0x1, 0x0) setsockopt(r2, 0x1000000029, 0x37, &(0x7f0000000040)="03000000", 0x4) (async) dup2(r2, r1) ioctl$FIONBIO(r2, 0x8004667e, &(0x7f0000000080)=0x8001) (async) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)="23b30925c0da23211e7bf4abd439a5476c02", 0x12}], 0x1}, 0x0) (async) ioctl$BIOCSETIF(0xffffffffffffff9c, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) (async, rerun: 32) r3 = socket(0x2, 0x2, 0x0) (rerun: 32) ioctl$FIONREAD(r3, 0xc0206921, &(0x7f00000001c0)) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) (async) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x1810, r4, 0x0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2, 0x11, r5, 0x0) (async) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc) (async) r8 = semget$private(0x0, 0x3, 0x0) (async) r9 = getgid() semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000780)={{0x2, 0x0, r7, r6, r9, 0x80, 0x13c}, 0xffffffff, 0x4, 0x937691}) (async) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, r6, r7, 0x0, 0x140}, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) shmctl$IPC_RMID(r0, 0x0) (async) r10 = syz_open_pts() close(r10) syz_open_pts() (async) writev(r10, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) kqueue() 387.859815ms ago: executing program 3 (id=4): ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "000000000000dac93c760000808000"}) r0 = socket(0x18, 0x1, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1, &(0x7f0000000080)=0x2f, 0x4) r1 = open(&(0x7f0000000080)='.\x00', 0x10, 0x0) mkdirat(r1, &(0x7f00000000c0)='./file0/file0\x00', 0xd4) mkdirat(r1, &(0x7f0000000100)='./file1\x00', 0x9f) renameat(r1, &(0x7f0000000040)='./file1\x00', r1, &(0x7f0000000200)='./file0/file0\x00') connect$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x0}, 0x8) sysctl$vfs_nfs(&(0x7f00000000c0)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) sendto$unix(r2, &(0x7f0000000280)="b100050460000000000000000028000000000000cea10500fef900000000d3357ae320b37b673039d2d236073705ae04be38164991f7c8cf5f882b297be1aa5b236deb51e2f0ac7ebbc257699a5f139b672f4d335d223e7d026ba8af630037282102000000720fd38bfbb770c1f5bc72c881ea6e69e0bb7600000000000200361b1257aea8c5000020020000000000008abfba0900000008e371a3f8343712051eadb71d89e000040781e4b2c03a000000", 0xb1, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x33}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0x60, 0x0, 0x37) 386.436248ms ago: executing program 0 (id=10): r0 = getpid() fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xc6, r0}) syz_emit_ethernet(0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="fffd640000020000000000000a"]) sysctl$hw(&(0x7f0000000000)={0x6, 0xb}, 0x5, &(0x7f0000000040), 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000040)=[0x7ff]) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000000)={0x40001ff, 0x0, {0x0, 0x1}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket(0x18, 0x1, 0x0) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000040)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x138, &(0x7f0000000000)=ANY=[]) sysctl$hw(&(0x7f00000000c0)={0x6, 0xf}, 0x2, 0x0, &(0x7f0000000080)=0x64, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sysctl$hw(&(0x7f00000000c0), 0x2, &(0x7f0000000100), &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setrlimit(0x8, &(0x7f0000000980)={0x42, 0x62}) r2 = syz_open_pts() close(r2) syz_open_pts() ioctl$FIOASYNC(r2, 0x80047466, &(0x7f0000000200)=0x5) ioctl$FIOASYNC(r2, 0x80047470, &(0x7f0000000400)=0x5) setsockopt(r1, 0x1000000029, 0xc, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) close(r1) 384.673369ms ago: executing program 3 (id=11): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') chdir(&(0x7f0000000080)='./file0/file0/..\x00') mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = socket(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0xffff, 0x1001, &(0x7f0000000100)=0x20000, 0x4) sendmsg(r0, &(0x7f0000002340)={&(0x7f00000001c0)=@in6={0x18, 0x3, 0x1, 0x7}, 0xc, 0x0, 0x0, &(0x7f0000002300)=[{0x10, 0xfffe, 0x22593b4}], 0x10}, 0x0) ioctl$WSDISPLAYIO_SMODE(0xffffffffffffffff, 0x8004574c, &(0x7f0000000040)=0x1) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x2, 0x1ff}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0xf6) r2 = openat(r1, &(0x7f0000000140)='./file0/file0\x00', 0x100, 0x104) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x2, 0x1, 0x0) ioctl$KDMKTONE(r2, 0x20004b08, &(0x7f0000000180)=0x4) close(r3) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)='\x00\x00\x00\x00', 0x4) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) close(0xffffffffffffffff) r5 = syz_open_pts() readv(r5, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xeb, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0xdd, 0x0, 0x1}, @tcp={{0x2, 0x1, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x2, 0x0, 0x233}, {"d1c2f0bfe2d0786ca28e44289f59aba04d62ff16e6bb47f1cd981d0cf5f225560531db5a3a6c3cb3d5ac50e0eec7423f3ef5e3c4a13f81f14f843a32b529e4649b57d581159522ddf03a6cabf358af4e1ae7ab79a9aac6417859ae29d8de08ba3da1e6387381a61f166b78d7ae58ccd15a08555c8e7db3e261cbba4f565ff3567edfcacd1a43a2f80b44a3727c2f46723f3826d9842357f4d467cb2e24ed586547d107e74cfe46502dde741762fe8ad6742200cf5f"}}}}}}) syz_emit_ethernet(0x13a, &(0x7f0000000200)={@broadcast, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x12c, 0x0, 0x2000, 0x0, 0x0, 0x0, @rand_addr}, @tcp={{0x3, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x10, 0x7, 0x0, 0xf3, {[@sack={0x5, 0x16, [0x7752163, 0x71, 0x8, 0x7, 0xffffffff]}]}}, {"a30e76cb3f6121b2d66550f5fd227c6cec208240e1fd4b42301fbce20dca03b048c1f7d03ef0c1695badab700c5bd7ffafeab2cafc67e4ee6bc4b704da7f72bd92dc8ca145ab196319a64fba250c317ac4ce2c0e3c4e2afbc156f50f848b7e45e8133dbd035e7e2fc2847f9751d836de04e527c465878e8a8b70e5b2d3fdda4f72dfde1b0ee3f77ea5efa03015857225e13612f518c39feab00a51c323d2509829fb72b5af2e23bdbc4a22196a14a7a175e38b1aa5333e657ba7e7c770144b4250c7e92558d04f0c0939c2dfdfedc38c4d0f6a894342cbc97a116e106ae2be206b538d3dbc5ab23296712e22"}}}}}}) write(r3, 0x0, 0x0) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) munmap(&(0x7f00006ec000/0x3000)=nil, 0x3000) socket$inet(0x2, 0x1, 0x0) setsockopt(r4, 0x4, 0xff, &(0x7f0000000000)="8750e94d04e6c5686c4f94cb3bf51f96271aab9c012b1ca7f4ba7f851a8df2111ffe8c362ad1", 0x26) 384.097307ms ago: executing program 0 (id=12): r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0xc) recvmmsg(r0, &(0x7f0000000580)={&(0x7f0000000540)={&(0x7f0000000080)=@in, 0xc, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000180)=""/118, 0x76}, {&(0x7f0000000200)=""/139, 0x8b}, {&(0x7f00000002c0)=""/86, 0x56}, {&(0x7f0000000340)=""/158, 0x9e}], 0x6, &(0x7f0000000480)=""/171, 0xab}, 0xfffffff9}, 0x10, 0x801, &(0x7f00000005c0)={0x7bfcde45, 0x8}) r1 = accept(r0, &(0x7f0000000600)=@in6, &(0x7f0000000640)=0xc) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000680)=""/78, 0x4e}], 0x1, &(0x7f0000000740)=""/228, 0xe4}, 0x1) r2 = getppid() wait4(r2, &(0x7f0000000880), 0x1, &(0x7f00000008c0)) r3 = socket$inet(0x2, 0x1, 0xc) r4 = getpgid(r2) semget(0x3, 0x4, 0x580) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) recvfrom(r0, &(0x7f0000000980)=""/151, 0x97, 0x803, &(0x7f0000000a40)=@in6={0x18, 0x3, 0xf, 0x7}, 0xc) sendmmsg(0xffffffffffffff9c, &(0x7f00000010c0)={&(0x7f0000001080)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000a80)="d240e2b145660cb46e6915caa06b247aed59d0551660e3ae7b4244421de8178d2fcf205e469b4fda8af1776ef0642697015b67670ccdede66e156674599780f7444e9795b9", 0x45}, {&(0x7f0000000b00)="34f73ed9db0bfa0d1fc24aa94efc04bf5c8f4ef30c25d5c3b9bb6ad7b9f13aecf5cac445928c323c4edfbb3fbe8c0b2d467c18e5f770ad8185db0a0aa21a0191bed51339b4b9a186389016f7", 0x4c}, {&(0x7f0000000b80)="0835d515a473b8e4d4f18e76d2213d23df46bb61a761945432f89501ff1b0240d3a049b9b6f501bcf7fd80a832fd6b0117292d4753554d54124ed12fa29afd74db33e95ea4890dcd4c8e5a64e9a3544f558d500747137e0f25bea5ea07ffa1fafae4120bd38e1ec294a01e9cdbcababf", 0x70}, {&(0x7f0000000c00)="c16018ff586bd493fa4048955dea0d42e03ce4465504abcbbc8bed9f188b47d7a50e7d9a93e64e26044ff25d05b31a71157560e49d", 0x35}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="23cea4cf3e1eaf588faf9afe5893c36833d4a0257329a1aa0fc75d83db248e7edd54ce9d81719a4cf71e358b441c99fd307faa0026de0692a86a83f50efecb59806985c298cbeb5a38bef56cd40479971811061c2df96ade2d5746d5e3d113468a3ddd1c2446f77d630f22fa0169a8f5eecaaeabdc53407a023b46470ef08f69ea60d9e984bcdfc4d5de836094ce3c7ee2a53ffe2d0da2a7ad98c28df74f87c5e9008b", 0xa3}, {&(0x7f0000000d40)="9d8af83a5b8bbb8fb24ef80f3a0f232af6c0137691eb43def6d4979881ab972897a5ab2b2920def362c422183fc11eeeea3942054118c676438d680d2bee3e1bc4e29c09edf50fea1a2fe09e37d4699dac615e5ea20ec9181791cd059fdbb781549be7255ff85544f62c91870ce2159bc7992ed482dae009", 0x78}, {&(0x7f0000000dc0)="e842093b3eca0cce8ab4b754313aef618cd011e1c38f8363844e04aba362344c0b099b7794ce6bb9406bdf5c750a984766d79b290d2483da2f0344046abd0add6446fe5b07d475d83a77081f8c1f104b4a9a6c6a17531c5326c8dd64d9229930dabf796f22e5cdac3f8a25034eae1c7417a7550269", 0x75}, {&(0x7f0000000e40)="56645e6b9e7056807364151266c25b4933d052a4ee15f335f236614b5bec566fcd2cea018db0ef72d856f671ca8c8a15456f27ed42faf9156a39cb644d1e9961a329a9c810f0cec63a416d087244378d55531248691141014441154ce3a4d2b0e998475af98e6e7f352b88dbb1b12a7084", 0x71}], 0x9, &(0x7f0000000f80)=[{0xf8, 0x799cd5d0fcbf783d, 0x2, "8a10735e7cc57d95310eb0eca3fe41a375b4c7f299a815d421516e875ff685e977221062d3358074e01eda07ecd3a7b6f0402a174ad37409fa95c03a00257bb1edf4b308f3574d4359182e66eb3616b9d866b433742d5bd7c8d3f1df7d8ab928fcb1e43d36be522cae0bfd6519e71cdd05634b3b88b10dfafed65318dadae65875b58d372f349924cea82e86fada4021eec3ec0f66c33862e43689678790910f7c44f0b38f08b423b8359f31120e5aa743d94f6591c72d53aa839eb921833349b2458ec65c8d7d177cabe45aef54be874411f377e403bd77048fd27406396e7baa19f1cf4fe24b"}], 0xf8}, 0x4}, 0x10, 0x2) getpid() connect$unix(r1, &(0x7f0000001100)=@abs={0x0, 0x0, 0x0}, 0x8) shmget(0x0, 0x2000, 0x401, &(0x7f0000ffd000/0x2000)=nil) fcntl$getown(r0, 0x5) getpeername$unix(0xffffffffffffffff, &(0x7f0000001140)=@abs, &(0x7f0000001180)=0x8) fcntl$lock(r0, 0x9, &(0x7f00000011c0)={0x2, 0x0, 0x8, 0x7, r4}) r5 = openat$wsmuxkbd(0xffffffffffffff9c, &(0x7f0000001200), 0x8, 0x0) unlinkat(r5, &(0x7f0000001240)='./file0\x00', 0x8) sendmmsg(r0, &(0x7f0000001b80)={&(0x7f0000001b40)={&(0x7f0000001280)=@un=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f00000015c0)=[{&(0x7f00000012c0)="8d5db05d33235e2275527a26e16ecda30f900e2f66ef945e96034d46729e1c12abc7a320ef13eeae86eb98e3f11d2a2a98284143c880eacc7f7972fb602c762e6f2c077643b379799af3552f7ff1cd508190cbc59820fc014457273b948349db436f5ce85b1046d81c4bd53e066325a0a2863a78c364ec78eec5537a40dd6a39f676e187fbba5fd5b0b6", 0x8a}, {&(0x7f0000001380)="870a10295da221e8bb198bd9d7cef918905fc83065b461c6bc6c0a996e8e74c43c4b2047fad89d59afffbdc89a1844810aa8b397233ff9fd8f35a4c89ceff68ec323a601506da4da182baf8cc4670e79e7599de581dea0eb714eb3b4", 0x5c}, {&(0x7f0000001400)="49652d31ca232fb61e79a8cfa6703d1a036c54a47262f3a340a55a5ddde2ba2097a011a3fe9657461d6e24839e273f6fd9e96125f152e9275dccdbca7450dcb3faa513496e82907611ce917967aee84ac82e53e97dc4d64c402e9ad2e85d7fd6469bb5283b69", 0x66}, {&(0x7f0000001480)="5c8d545ff3690abcb72102e9a55e73f41e1bd6416646eb27a4ea0d14a6539272c298d76a2bc7192eb9f22e54c63e6f18f577fbd396082cc9a56e31674a216426b5dbe308fa685fce22e3988d41da4e0642aa6d49601be0ec90756385a86944343bc3a5791418a866948b2e6ca9ca07989b3d79b5568486e18f171d076e30877f7c497af47b6e61bb2fc59406283f13522c279f31674396ca186ff6415679d4d1b49db3d0e4fe6f5c1699dfa1573bdd709a2df604471f98d91ebc1de9ddf003a2b9e51b9b23460cbf20", 0xc9}, {&(0x7f0000001580)="8bb8e3aae34800609b2dc84cb2514dd2838d6fd1133fa81526d14e48835a6258d33382bfeaef173e60a0f2cb362041fc012b74bac963c69bc7ca089e16264285", 0x40}], 0x5, &(0x7f0000001640)=[{0x90, 0x1, 0x2, "8a5b3093f8d5c563887db1da8facb88a43b695d5b7c642a660711ec3020fb93759e48b56950907ef02c1f6744691685940d4de5e6ec06417a02e76d65d29e8519c7265285906736f0244efc5719bb063356bb8d2e191c4547b13dff04e531f0b8c342eb5a6228d6c85142b3e08d0c4634bc80d94e9f52b41df"}, {0x100, 0x1, 0x3, "f1a94a28ce6cb80076ff605b272ae0a05bf6b840903ebf37215e59c2aba837e0d97af4958d7057f5901c8ba1a382d1534128d7ee92d75dadb88a1ad4d0e3c65bbaad2f92fcd693d4c4c7aaa6b0a65037ceb12378e020c7f319d68c1bb475b52586878951fc67ba96887c7aa35e1fdb93a3efa56c19142741a855e862a8b0ba24d9dc32e4cd25ab1d2be649f334daaf4c837c1f32913e53f101b643a65d9e8d2518652ed81037d9d9cdab4dd7e78b42614f2de249358ad4a954f41dd8040e6810488a4c89c1a5f48e694067e69f729e5c0b87cdfa918ad985550b5dc2554d43805f25740387ec527e0bb86881d9feba"}, {0x48, 0xffff, 0xd, "9a6ad27d2f58b54d1ce01dc259f4986e88edcd5dcd30cbf7506a79da026092e04deb9d8e6649c43aed7b53e3394b3a06c05737d7a3"}, {0x80, 0xffff, 0x8, "30ba9fd9c271b0566bdc51512827ebd5039577cd84fac082bf2375c43c075e74bf209c918e4885f52d7ed397d81746e9314d55567cc165faec295dbedea71454c11a3cc57194f24725fe2fc265ee62a783021afab091c0dcc815250bb858af96a5852882cf10ecf146d1e76918"}, {0xf8, 0xffff, 0x4, "eec3004f18396d9d180e08cc3e637ba19c13995070711efcbbef2a50eefc0fe94db13fa99b68838ae070faa23154e04c31830f3cb41401c3e8060ce3183725681b63f80b15801a719fdabd89101efdfb053d44daf62f53af8edb3eb0dc9e181a65bc0f9498b71e80bf2460328627373e6753af699f74fc43438357556048da898e688f33d4879f59124c8c668c49ac31ee1345f627151cd805b8f8c734c2b89cf136bcd68260e2f2d49b43856976ce228fee7724ecc49d63869fa0c0f78746881633ecb5f4f631daf192682e2ed17156f26a441eeedb6948b7d6936e7eee4883851f83abe84d7f"}, {0x70, 0x1, 0x4, "eae9d363ff603cf5bdf734f289cd110dc50140a5eeb901dedc866c819de3557d97d895b311fc37e99c702e08e7bbb13adaf8c65981a46ca94f29ca2ff4b7725c5dd482b276bebb204726ae7413de70d7003d6a57a820869331fb7d"}, {0x40, 0xffff, 0x5, "1d1ed93e0147308f11ed2fea4c2cb39c434ff966eba2db0bb19dfed81f042031c2bc3e0df531d0f22d34be"}, {0xf0, 0xffff, 0xfffffffa, "117bbb0d3e8cf020321106155a805fe7b3d3942eb86e4ab743d8362820e910d47d0ff816ca1ace6adfa1f911b5346e1f8d09c879847fa4ea4f232d060abcc234046a1625012ffdf231296a0bb8d253ff87bd53506a027dd77872766c30ef9e9fee6271d5d40f3855c6c80217e2cf6862e3e0282027f131d8be80d8864b3fbae7b64be5a59d18868e1f0756355948d27c890cb33c757faa08d31774ae0e0521500db9e0fd3fe7280104a786a3ffbb8b0bbccc9768162c31481b44e3a316369a665ab05740181170e2d1d8877929476454c17aa2560b465fe6ff61f75c81"}], 0x4f0}, 0x8}, 0x10, 0x0) setpgid(r2, r4) connect$unix(r1, &(0x7f0000001bc0)=@file={0x1, './file0\x00'}, 0xa) close(r3) connect$unix(r5, &(0x7f0000001c00)=@file={0x0, './file0/file0\x00'}, 0x10) r6 = getppid() ktrace(&(0x7f0000001c40)='./file0/file0\x00', 0x3, 0x4000080c, r6) r7 = openat$vmm(0xffffffffffffff9c, &(0x7f0000001c80), 0x10000, 0x0) ioctl$VMM_IOC_CREATE(r7, 0xc2585601, &(0x7f0000001cc0)={0x10, 0x7, [{&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x3}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0xa000)=nil, 0x400000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, 0x8000000000000000}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x200}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x7}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x8}, {&(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x401}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x5}, {&(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x3}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4}, {&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x2}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x7}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x3}, {&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff6000/0x2000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x3d6b}], './file0\x00', 0xd39}) connect$inet(r1, &(0x7f0000001ec0)={0x2, 0x3}, 0xc) 383.338539ms ago: executing program 3 (id=13): ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0x8020560a, &(0x7f00000002c0)={0x10, 0x0, [{&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fef000/0x4000)=nil}, {&(0x7f0000165000/0x2000)=nil, &(0x7f0000ff6000/0x4000)=nil}, {&(0x7f0000638000/0x3000)=nil, &(0x7f000011c000/0x3000)=nil}, {&(0x7f00005bd000/0x4000)=nil, &(0x7f0000fee000/0x3000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil}, {&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff2000/0x4000)=nil}, {&(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff9000/0x1000)=nil}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fef000/0x1000)=nil}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil}, {&(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff6000/0x1000)=nil}, {&(0x7f0000ff8000/0x2000)=nil, &(0x7f0000fef000/0x3000)=nil}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil}], './file0\x00'}) r0 = socket(0x11, 0x3, 0x0) sendto$unix(r0, &(0x7f0000000040)="b100050400000000000008000101000000000000cea1fea7fef96ecfc73fd335ca087ae27caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebb4257699a1f132e27acbdd602000d7d026ba8af63ff37282902e4fd007f720fd3873babfbb770a2f5a872c881ff7cc53c8943310b404f36a00f90006ee01bc43eaea8c500000002000000000000020208a371a3f8000400000000000000010000000000000010", 0xb1, 0x8, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd605d34520030000000000000000000000000000000000000000000009f0500040000000000000001010090780000000060397772"]) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) unveil(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='W\x00') 360.004736ms ago: executing program 1 (id=2): sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/212, 0xd4}, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/236, 0xec}, 0x0) sendmsg(r2, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/236, 0xec}, 0x0) sendmsg(r4, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/236, 0xec}, 0x0) sendmsg(r6, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) r8 = socket$inet(0x2, 0x5, 0xc) recvfrom$inet(r8, &(0x7f00000002c0)=""/67, 0x43, 0x3, &(0x7f0000000340)={0x2, 0x3}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/212, 0xd4}, 0x0) sendmsg(r9, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0xf) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/236, 0xec}, 0x0) sendmsg(r11, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r14, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/236, 0xec}, 0x0) sendmsg(r13, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) 235.476409ms ago: executing program 3 (id=14): open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) open$dir(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) open$dir(&(0x7f0000000740)='./file1\x00', 0x0, 0x0) 234.265279ms ago: executing program 0 (id=15): openat$tty(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/230, 0xe6}, 0x803) sendmsg(r1, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/236, 0xfffffffffffffc99}, 0x0) (async) recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/236, 0xfffffffffffffc99}, 0x0) sendmsg(r3, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) sendmsg(r3, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/236, 0xec}, 0x0) sendmsg(r5, &(0x7f0000000380)={0x0, 0x29, 0x0, 0xfffffffffffffe77}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/212, 0xd4}, 0x0) sendmsg(r6, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/225, 0x11e}, 0x0) (async) recvmsg(r11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/225, 0x11e}, 0x0) sendmsg(r10, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) sendmsg(r10, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r13, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000024c0)=""/236, 0xec}, 0x0) sendmsg(r12, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) (async) sendmsg(r12, &(0x7f0000000380)={0x0, 0x32c, 0x0, 0x0, &(0x7f0000000000), 0x90}, 0x0) close(r8) (async) close(r8) socket(0x18, 0x1, 0x0) setsockopt(r13, 0x1000000029, 0x2a, &(0x7f0000000000), 0x0) (async) setsockopt(r13, 0x1000000029, 0x2a, &(0x7f0000000000), 0x0) fcntl$dupfd(r9, 0x0, r9) getsockopt$sock_cred(r8, 0xffff, 0x1022, &(0x7f00000005c0), &(0x7f0000000280)=0xc) r14 = syz_open_pts() ioctl$TIOCNXCL(r14, 0x2000740e) 233.733591ms ago: executing program 3 (id=16): semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x0, 0xffffffffffffffff}}) ioctl$WSMUXIO_INJECTEVENT(0xffffffffffffffff, 0x80185760, &(0x7f0000000040)={0x2e, 0x1, {0x2, 0x10000000000001}}) r0 = socket(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0xffff, 0x1003, &(0x7f0000000080), &(0x7f00000000c0)=0x77) r1 = socket$inet6(0x18, 0x8002, 0x0) getsockopt$sock_int(r1, 0xffff, 0x100, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7, 0x3}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket(0x1, 0x1, 0x0) r3 = kqueue() mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) r4 = kqueue() r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10242, 0x0) kevent(r4, &(0x7f00000000c0)=[{{r5}, 0xfffffffffffffffe, 0x9f}], 0x7, 0x0, 0x0, 0x0) kevent(r4, 0x0, 0x0, &(0x7f0000000140), 0x6, 0x0) kevent(r3, &(0x7f00000000c0), 0x1f, 0x0, 0xb76, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff}) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/62, 0x3e}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000029"], 0x3e}, 0x0) r6 = socket(0x18, 0x2, 0x0) connect$unix(r6, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYRES32=0x41424344, @ANYBLOB="fb000000000000000000000086dd60076e0300140000fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e224e20", @ANYBLOB="3e6801000000614c21b800e2", @ANYRES32=0x41424344]) getrusage(0xffffffffffffffff, &(0x7f0000000240)) close(r2) r7 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$WSMUXIO_INJECTEVENT(r7, 0x80185760, &(0x7f0000000200)={0x2, 0xb, {0x7fffffff, 0xec}}) r8 = socket(0x18, 0x2, 0x0) pread(r2, &(0x7f0000000300)="586eafb898cf2e6aad9cf39ce498fcd0218bf1fc0b8b69f1cd31", 0x1a, 0x7) setsockopt(r8, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) connect$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x7}, 0x1c) 233.401426ms ago: executing program 0 (id=17): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) writev(r0, &(0x7f0000001480), 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) (async) openat$wskbd(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) (async) munmap(&(0x7f0000000000/0x4000)=nil, 0x4000) 29.881859ms ago: executing program 6 (id=18): r0 = accept$unix(0xffffffffffffff9c, &(0x7f0000000180)=@file={0x0, ""/507}, &(0x7f0000000080)=0x1fd) fcntl$lock(r0, 0x9, &(0x7f00000000c0)={0x2, 0x0, 0x3, 0x100000000000002, 0xffffffffffffffff}) r1 = socket(0x18, 0x2, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) poll(&(0x7f0000000000)=[{r1, 0x1}, {r1, 0x10}], 0x2, 0x8) select(0x40, &(0x7f0000000040)={0x4, 0xff, 0x0, 0x6, 0x0, 0x8, 0x7fffffff, 0x2}, 0x0, &(0x7f0000000100)={0xf, 0x1d74359f, 0x101, 0x1, 0x9, 0xab, 0xffffffffffffffff, 0x3}, 0x0) sendmmsg(r1, &(0x7f0000000140)={0x0}, 0x10, 0x0) 28.935552ms ago: executing program 4 (id=19): r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40000400001803c1, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff}) r1 = kqueue() kevent(r1, &(0x7f0000000040)=[{{r0}, 0xffffffffffffffff, 0x4d, 0x40, 0x7, 0xff}], 0x139, 0x0, 0xffffffff, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 28.764563ms ago: executing program 7 (id=8): socket$unix(0x1, 0x2, 0x0) setitimer(0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x7fff}}, 0x0) syz_open_pts() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) r0 = kqueue() r1 = dup(r0) kevent(0xffffffffffffffff, &(0x7f0000000080)=[{{r1}, 0xfffffffffffffffa, 0xd5, 0x40000080}], 0x6, 0x0, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000080), 0xe4a, 0x0, 0xa9fa, 0x0) kevent(r2, 0x0, 0x0, &(0x7f00000001c0), 0x9, 0x0) sysctl$net_inet_etherip(&(0x7f0000000000), 0x4, 0x0, 0x0, 0x0, 0x0) 27.627427ms ago: executing program 4 (id=20): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x14) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x14) (async) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) 26.943928ms ago: executing program 5 (id=6): madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x2) r0 = syz_open_pts() poll(&(0x7f0000000000)=[{r0, 0x40}, {r0, 0x8}], 0x2, 0xffffffff) syz_open_pts() 21.01685ms ago: executing program 4 (id=21): r0 = open$dir(&(0x7f0000000200)='.\x00', 0x0, 0x0) unveil(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='c\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x1e1) symlinkat(&(0x7f0000000240)='./file0\x00', r0, &(0x7f0000000280)='./file0/file0\x00') r1 = socket(0x18, 0x2, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00') setsockopt(r1, 0x1000000000029, 0xb, &(0x7f0000000100)='\x00\x00\x00\x00', 0x4) r2 = dup(r1) getsockopt(r2, 0x29, 0x9, 0x0, 0x0) readlinkat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xfffffffffffffe6f) 0s ago: executing program 4 (id=22): setrlimit(0x8, &(0x7f0000000980)={0x9, 0x51}) r0 = syz_open_pts() setitimer(0x0, &(0x7f0000000140)={{0x3, 0x6}, {0x4, 0x9b66}}, 0x0) setitimer(0x0, 0x0, &(0x7f00000002c0)) open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000005c0)='\x00', r1, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open$dir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r1, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, 0x0) mkdirat(r1, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unveil(&(0x7f0000000440)='./file3\x00', &(0x7f0000000080)='c\x00') unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000d80)='./file0\x00', 0x0) setsockopt(0xffffffffffffffff, 0x5, 0x5, &(0x7f00000003c0)="697a4e98361a777fde563b5df97b8a9ea9c60b93ecab39c782a8db36a9df45d5343e60a448f22734bdfd883a44995c30a114b7a28858a438af82cb9641ea317beac973c6f56fdcb3ab05636f4d705eca5a1186787470c0b92927ff1cf02b446070d2b86c5bcbf6a64cfd7a78a435f618f4992f976ae65a85ad34207f26f97ee4e8781a798622bb3599bb3dce2c33c814c24ca807d2c0dd1c3de49fe029ae256ac18949f31846f3cdbb5cc852de8b9ad1f2448b5f2ffa6a04", 0xb8) close(r0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@broadcast, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast, {[@noop, @rr={0x7, 0x7, 0x4, [@broadcast]}]}}, @udp={{0x1, 0x3, 0x8}}}}}}) r2 = syz_open_pts() writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="34eb4cd59e8456ebc0881681c60e1cd9e0bf01b618b3cb934394c5951c1db0fd943a", 0xff99}], 0x1) write(r0, &(0x7f0000000300)="00db0791737467f2e23c7d5cb958e200174b370db3daff2b0cde54e34cfa38acac5402f653a60f59db3d8fbbafda3155ef7357b9ef32e8b920a5b84b1a97b9dc0286714ecbec46b9a70aa48acf720512723394979a9ed5cc022adfda713de33fb3dfd2ebf30b0e536bcdbe20245a9466000000", 0x2c) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="89000000ffff000001"], 0x9}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/225, 0x11e}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@local, @empty, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@timestamp={0x44, 0xc, 0x7f, 0x0, 0x0, [{}, {}]}]}}}}}}) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6073d47700042b000000000000010000000000000000fe8000000000000000000000000000aa33533600"]) sendmsg(r3, &(0x7f0000000380)={0x0, 0xffffffd3, 0x0, 0x33, &(0x7f00000000c0)}, 0x8) setrlimit(0x8, &(0x7f0000000980)) kqueue() readv(r2, &(0x7f0000000000)=[{&(0x7f0000000140)=""/220, 0xdc}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.148' (ED25519) to the list of known hosts. panic: mutex 0xfffffd806c0084b8 not held in mtx_leave Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 403954 57533 32767 0x10 0 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff83078e14) at panic+0x1e5 mtx_leave(fffffd806c0084b8) at mtx_leave+0x17c msleep(fffffd806c0083d0,fffffd806c0084b8,4,ffffffff832a21d0,0) at msleep+0x125 vm_map_lock_ln(fffffd806c0083a0,ffffffff830e8868,208) at vm_map_lock_ln+0xd4 sys_munmap(ffff8000327942b0,ffff800037221220,ffff800037221170) at sys_munmap+0x1cc syscall(ffff800037221220) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x14e1ee5790, count: 7 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: mutex 0xfffffd806c0084b8 not held in mtx_leave ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83078e14) at panic+0x1e5 mtx_leave(fffffd806c0084b8) at mtx_leave+0x17c msleep(fffffd806c0083d0,fffffd806c0084b8,4,ffffffff832a21d0,0) at msleep+0x125 vm_map_lock_ln(fffffd806c0083a0,ffffffff830e8868,208) at vm_map_lock_ln+0xd4 sys_munmap(ffff8000327942b0,ffff800037221220,ffff800037221170) at sys_munmap+0x1cc syscall(ffff800037221220) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x14e1ee5790, count: -8 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff800037220ee0 rbx 0xffff800029b7cdbf rdx 0 rcx 0xffff8000327942b0 rax 0xffff800029b7bff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0xf9c1a500dfff8f6e r11 0x4df4313164960a93 r12 0xffff800029b7cbc0 r13 0 r14 0 r15 0x1 rip 0xffffffff816a99e5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff800037220ed0 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=161903 pid=50276 tcnt=3 stat=sleep flags process=10 proc=4000020 runpri=32, usrpri=63, slppri=4, nice=20 wchan=0x0, wmesg=, ps_single=0x0 scnt=0 ecnt=0 forw=0xffffffffffffffff, list=0xffff8000ffff6cc0,0xffffffff8359f3c8 process=0xffff800032790930 user=0xffff80003721c000, vmspace=0xfffffd806c0083a0 estcpu=13, cpticks=0, pctcpu=0.0, user=0, sys=0, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 98699 184153 66628 32767 2 0x10 syz-executor 98699 377752 66628 32767 2 0x4000010 syz-executor 57533 403954 68309 32767 7 0x10 syz-executor 57533 349926 68309 32767 3 0x4000090 fsleep syz-executor 57533 482705 68309 32767 3 0x4000090 fsleep syz-executor 30045 299313 14234 32767 2 0x10 syz-executor 30045 216167 14234 32767 3 0x4000090 fsleep syz-executor 33469 345648 63921 32767 3 0x90 nanoslp syz-executor 33469 50147 63921 32767 3 0x4000090 kqread syz-executor 33469 490514 63921 32767 3 0x4000090 fsleep syz-executor 50276 490187 6392 32767 2 0x10 syz-executor 50276 80409 6392 32767 3 0x4000090 fsleep syz-executor *50276 161903 6392 32767 3 0x4000030 syz-executor 23179 75165 393 32767 3 0x90 nanoslp syz-executor 23179 101252 393 32767 3 0x4000090 kqread syz-executor 23179 74623 393 32767 3 0x4000090 fsleep syz-executor 95894 403808 15999 32767 2 0x10 syz-executor 95894 470060 15999 32767 3 0x4000090 sbwait syz-executor 95894 344168 15999 32767 3 0x4000090 fsleep syz-executor 90718 277760 87089 32767 3 0x400090 nanoslp syz-executor 90718 453459 87089 32767 3 0x4400090 netacc syz-executor 90718 196347 87089 32767 3 0x4400090 fsleep syz-executor 68309 176770 16255 32767 3 0x90 nanoslp syz-executor 63921 104834 84347 32767 3 0x90 nanoslp syz-executor 14234 234694 86221 32767 3 0x90 nanoslp syz-executor 66628 141751 24847 32767 3 0x90 nanoslp syz-executor 87089 349417 89897 32767 3 0x90 nanoslp syz-executor 393 119418 26235 32767 3 0x90 nanoslp syz-executor 15999 210145 34518 32767 3 0x90 nanoslp syz-executor 6392 287102 19326 32767 3 0x90 nanoslp syz-executor 86221 220218 67369 0 3 0x82 wait syz-executor 84347 467298 67369 0 3 0x82 wait syz-executor 16255 150546 67369 0 3 0x82 wait syz-executor 24847 448143 67369 0 3 0x82 wait syz-executor 26235 509030 67369 0 3 0x82 wait syz-executor 89897 176084 67369 0 3 0x82 wait syz-executor 34518 323355 67369 0 3 0x82 wait syz-executor 19326 390582 67369 0 3 0x82 wait syz-executor 67369 301886 4711 0 3 0x82 kqread syz-executor 4711 478098 76989 0 3 0x10008a sigsusp ksh 76989 306878 42501 0 3 0x98 kqread sshd-session 42501 170573 89477 0 3 0x92 kqread sshd-session 98988 327016 1 0 3 0x100083 ttyin getty 89477 427895 1 0 3 0x88 kqread sshd 53785 361408 94947 73 3 0x1100090 kqread syslogd 94947 77429 1 0 3 0x100082 sbwait syslogd 39144 47821 1 0 3 0x100080 kqread resolvd 33569 375574 62106 77 3 0x100092 kqread dhcpleased 83325 489660 62106 77 3 0x100092 kqread dhcpleased 62106 16535 1 0 3 0x80 kqread dhcpleased 77913 101740 0 0 3 0x14200 bored smr 58734 523695 0 0 2 0x14200 zerothread 96212 8910 0 0 3 0x14200 aiodoned aiodoned 71599 411958 0 0 3 0x14200 syncer update 18413 242964 0 0 3 0x14200 cleaner cleaner 51925 1674 0 0 3 0x14200 reaper reaper 5109 479693 0 0 3 0x14200 pgdaemon pagedaemon 53207 395630 0 0 3 0x14200 bored viomb 61178 380301 0 0 3 0x40014200 acpi0 acpi0 32140 297044 0 0 3 0x40014200 idle1 481 10536 0 0 3 0x14200 bored softnet3 45057 342190 0 0 3 0x14200 bored softnet2 49557 232454 0 0 3 0x14200 bored softnet1 81912 46936 0 0 3 0x14200 bored softnet0 68286 123090 0 0 3 0x14200 bored systqmp 77558 279005 0 0 3 0x14200 bored systq 50267 362414 0 0 3 0x14200 tmoslp softclockmp 41756 83186 0 0 3 0x40014200 tmoslp softclock 51107 77957 0 0 3 0x40014200 idle0 1 257867 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks CPU 1: exclusive mutex &map->flags_lock r = 0 (0xfffffd806c0084f8) #0 witness_lock+0x5bb #1 mtx_enter_try+0x178 #2 mtx_enter+0x60 #3 vm_map_lock_ln+0x153 #4 sys_munmap+0x1cc #5 syscall+0xbb6 #6 Xsyscall+0x128 Process 50276 (syz-executor) thread 0xffff8000ffff7968 (80409) exclusive rwlock amaplk r = 0 (0xfffffd806b433780) #0 witness_lock+0x5bb #1 uvm_map_clean+0x411 #2 syscall+0xaf8 #3 Xsyscall+0x128 exclusive kernel_lock &kernel_lock r = 0 (0xffffffff835a2200) #0 witness_lock+0x5bb #1 syscall+0xad6 #2 Xsyscall+0x128 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 10178 11046K 11059K 166960K 11256 0 pcb 17 12K 12K 166960K 17 0 rtable 234 6K 6K 166960K 346 0 pf 31 16K 16K 166960K 31 0 ifaddr 42 7K 7K 166960K 44 0 ifgroup 50 2K 2K 166960K 50 0 counters 64 36K 36K 166960K 64 0 ioctlops 0 0K 2K 166960K 29 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1364 86K 86K 166960K 1380 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1690 195K 286K 166960K 12468 0 file desc 26 97K 125K 166960K 160 0 proc 58 79K 103K 166960K 474 0 subproc 104 6K 6K 166960K 104 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 5 0 in_multi 99 7K 7K 166960K 101 0 ether_multi 1 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 43 201K 201K 166960K 43 0 exec 0 0K 1K 166960K 332 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 271 74K 74K 166960K 2824 0 UVM aobj 36 2K 2K 166960K 36 0 pinsyscall 47 94K 113K 166960K 1143 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 ip6_options 2 0K 0K 166960K 2 0 NDP 27 2K 2K 166960K 27 0 temp 37 6814K 6880K 166960K 3679 0 kqueue 17 26K 26K 166960K 28 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 24 0 0 1 0 1 1 0 8 0 rtpcb 120 35 0 32 1 0 1 1 0 8 0 rtentry 112 111 0 1 4 0 4 4 0 8 0 unpcb 144 68 0 32 2 0 2 2 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 808 19 0 12 1 0 1 1 0 8 0 arp 120 18 0 0 1 0 1 1 0 8 0 inpcb 336 111 0 96 4 0 4 4 0 8 2 nd6 136 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 453 0 0 29 0 29 29 0 8 0 art_table 32 454 0 0 4 0 4 4 0 8 0 art_node 16 110 0 10 1 0 1 1 0 8 0 semapl 112 1 0 0 1 0 1 1 0 8 0 shmpl 112 33 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1564 0 63 94 0 94 94 0 8 0 ffsino 272 1564 0 63 101 0 101 101 0 8 0 nchpl 144 1776 0 99 63 0 63 63 0 8 0 uvmvnodes 80 1677 0 0 35 0 35 35 0 8 0 vnodes 216 1677 0 0 94 0 94 94 0 8 0 namei 1024 5135 0 5135 2 0 2 2 0 8 2 percpumem 16 46 0 0 1 0 1 1 0 8 0 kstatmem 264 22 0 0 2 0 2 2 0 8 0 scxspl 216 5143 0 5143 3 1 2 2 1 8 2 plimitpl 152 35 0 11 1 0 1 1 0 8 0 sigapl 424 430 0 374 8 0 8 8 0 8 0 futexpl 64 331 0 323 1 0 1 1 0 8 0 knotepl 120 269 0 0 9 0 9 9 0 8 0 kqueuepl 216 28 0 12 1 0 1 1 0 8 0 pipepl 320 98 0 71 3 0 3 3 0 8 0 fdescpl 496 412 0 374 7 1 6 6 0 8 0 filepl 152 1436 0 1162 11 0 11 11 0 8 0 lockfpl 104 13 0 10 1 0 1 1 0 8 0 lockfspl 48 8 0 5 1 0 1 1 0 8 0 sessionpl 144 21 0 5 1 0 1 1 0 8 0 pgrppl 48 30 0 6 1 0 1 1 0 8 0 ucredpl 104 90 0 71 1 0 1 1 0 8 0 zombiepl 144 374 0 374 1 0 1 1 0 8 1 processpl 1160 430 0 374 5 0 5 5 0 8 0 procpl 648 468 0 398 6 0 6 6 0 8 0 sockpl 664 215 0 161 6 0 6 6 0 8 1 mcl8k 8192 4 0 0 1 0 1 1 0 8 0 mcl4k 4096 133 0 0 17 0 17 17 0 8 0 mcl2k 2048 14 0 0 2 0 2 2 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 155 0 0 10 0 10 10 0 8 0 bufpl 280 2173 0 95 149 0 149 149 0 8 0 anonpl 24 131119 0 127687 24 0 24 24 0 185 3 amapchunkpl 152 8944 0 8320 24 0 24 24 0 158 0 amappl16 200 3431 0 3417 5 0 5 5 0 8 4 amappl15 192 6 0 6 1 0 1 1 0 8 1 amappl14 184 110 0 100 1 0 1 1 0 8 0 amappl13 176 7 0 7 1 0 1 1 0 8 1 amappl12 168 1022 0 984 2 0 2 2 0 8 0 amappl11 160 50 0 40 1 0 1 1 0 8 0 amappl10 152 12 0 12 1 1 0 1 0 8 0 amappl9 144 134 0 134 1 0 1 1 0 8 1 amappl8 136 16 0 15 1 0 1 1 0 8 0 amappl7 128 94 0 84 1 0 1 1 0 8 0 amappl6 120 158 0 157 1 0 1 1 0 8 0 amappl5 112 123 0 115 1 0 1 1 0 8 0 amappl4 104 276 0 261 1 0 1 1 0 8 0 amappl3 96 1747 0 1605 4 0 4 4 0 8 0 amappl2 88 630 0 571 2 0 2 2 0 8 0 amappl1 80 7193 0 6658 14 1 13 13 0 8 0 amappl 88 2496 0 2280 6 1 5 5 0 92 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 6 0 6 1 1 0 1 0 8 0 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 35 0 0 1 0 1 1 0 8 0 uaddrrnd 24 412 0 374 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 412 0 374 1 0 1 1 0 8 0 vmmpekpl 168 4697 0 4657 2 0 2 2 0 8 0 vmmpepl 168 33501 0 31467 89 0 89 89 0 357 0 vmsppl 448 411 0 374 5 0 5 5 0 8 0 rwobjpl 56 15314 0 12749 37 0 37 37 0 8 0 pdppl 4096 831 0 748 111 14 97 97 0 8 14 pvpl 32 10198 0 0 84 1 83 83 0 265 0 pmappl 248 411 0 374 4 1 3 3 0 8 0 extentpl 40 55 0 38 1 0 1 1 0 8 0 phpool 112 385 0 16 11 0 11 11 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff834adff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff835a1ff8) at __mp_lock+0x192 uvm_fault(fffffd806c9f38d0,a55a0db9000,0,1) at uvm_fault+0x1ed upageflttrap(ffff8000371d3bd0,a55a0db9000) at upageflttrap+0xa9 usertrap(ffff8000371d3bd0) at usertrap+0x2d8 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7c8c885f2f60, count: 7 ddb{0}> trace x86_ipi_db(ffffffff834adff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff835a1ff8) at __mp_lock+0x192 uvm_fault(fffffd806c9f38d0,a55a0db9000,0,1) at uvm_fault+0x1ed upageflttrap(ffff8000371d3bd0,a55a0db9000) at upageflttrap+0xa9 usertrap(ffff8000371d3bd0) at usertrap+0x2d8 recall_trap() at recall_trap+0x8 end of kernel end trace frame: 0x7c8c885f2f60, count: -8 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff83078e14) at panic+0x1e5 mtx_leave(fffffd806c0084b8) at mtx_leave+0x17c msleep(fffffd806c0083d0,fffffd806c0084b8,4,ffffffff832a21d0,0) at msleep+0x125 vm_map_lock_ln(fffffd806c0083a0,ffffffff830e8868,208) at vm_map_lock_ln+0xd4 sys_munmap(ffff8000327942b0,ffff800037221220,ffff800037221170) at sys_munmap+0x1cc syscall(ffff800037221220) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x14e1ee5790, count: 7 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff83078e14) at panic+0x1e5 mtx_leave(fffffd806c0084b8) at mtx_leave+0x17c msleep(fffffd806c0083d0,fffffd806c0084b8,4,ffffffff832a21d0,0) at msleep+0x125 vm_map_lock_ln(fffffd806c0083a0,ffffffff830e8868,208) at vm_map_lock_ln+0xd4 sys_munmap(ffff8000327942b0,ffff800037221220,ffff800037221170) at sys_munmap+0x1cc syscall(ffff800037221220) at syscall+0xbb6 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x14e1ee5790, count: -8