last executing test programs: 925.507877ms ago: executing program 3 (id=4): sysctl$kern(&(0x7f0000000040)={0x1, 0x15}, 0x4000000000000017, &(0x7f0000000240)="71f91e3471ac1b58bc5a91501d94a34b8eb1ca7073b80021dec9d18ad90072fb3422f3abd0edf1d0f28fdb3c1408004000000000dc4046ab037de86c5f3beb36c606ad639a91a29d79e21518420000000000000000bb2fb806edbda5495da2572a7408b0219a79a8a5c7d16736d3b3b2a94411f4dbfc583f367ee34bcf2fe174e69bae005e09f738b758829e341724f0f51f159f12bfd1b9cb1f99322c25db73300a4e0ac61abb529839934e2be4bbbde5c04ecd3eafe48216f522260f18c3a65693fd9aef42b9b1c610c23a4e45e345", &(0x7f0000000080)=0xd0, 0x0, 0x0) 837.35412ms ago: executing program 3 (id=9): ioctl$DIOCRCLRTABLES(0xffffffffffffff9c, 0xc450443c, &(0x7f0000000000)={{'./file0\x00', './file0\x00', 0x24, 0x6}, 0x0, 0x0, 0x0, 0x8, 0x9, 0xf, 0x80, 0x1c, 0x7}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$BIOCSETWF(r0, 0x80104277, &(0x7f0000000500)={0xa, &(0x7f0000000480)=[{0x3, 0x2, 0x7, 0x6}, {0x8, 0x5, 0x2, 0x1}, {0x6, 0x10, 0xa, 0xf35}, {0xa, 0xfb, 0xb}, {0x5, 0xf8, 0x5, 0x1}, {0x1f, 0x0, 0xfe, 0x3}, {0x2, 0x4, 0x3, 0x4}, {0x228a, 0x0, 0x10, 0x2}, {0xfffd, 0x1, 0x9, 0xbf}, {0x7, 0x0, 0x3, 0xbed}]}) r1 = msgget$private(0x0, 0x400) msgsnd(r1, &(0x7f0000000540)={0x3, "d8e3df020c6327bed38bacca3e43e063fd74a08e76eca8ce9bd8cc592dfb75d2c0bb72d7802c12d4dff3fc3ed043d171b2e86a8c6fbf5d71f1ce31a0c5c7950bf595594f84bd7cb300d2318fbd6c057e912f3306f75b60f9edf58c463a53cef8c966f91f39b8a806fab9fab95642823e7018669b8757305c9fe2cf511cd54a13a71062cd8f9dc694bb0d022bd6cb299003a5d5858f00d19a28f0607e43a0df0e9981bc3072896420e62a76cf5dfc68d594cefe72b07dc3b6c9f79097a3787dc83e82a292884cf98d4657c6902b50ca2861725acaf2df12dd25b9a330c36224d98a2399d4e235912b"}, 0xf0, 0x800) r2 = msgget(0x1, 0x0) msgsnd(r2, &(0x7f0000000640)={0x0, "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"}, 0x1008, 0x0) msgctl$IPC_RMID(r1, 0x0) r3 = msgget(0x2, 0x403) msgctl$IPC_RMID(r3, 0x0) msgctl$IPC_RMID(r2, 0x0) r4 = semget(0x0, 0x4, 0x1) semctl$GETALL(r4, 0x0, 0x6, &(0x7f0000001680)=""/172) r5 = msgget$private(0x0, 0x20) msgsnd(r5, &(0x7f0000001740)={0x3, "2beea83bd69a5c2941465e60d7d2fb2a39b934c6d52b947dc1cadc4cf2920de51a28580000ea1a1337f118d37a7bfece96c61b52e8692c2666cd581ae58b3c1c2114e74f043487f5724fcc9fd4945e7a7d07a0ab81d2bf2bc157058d6b15e6cee616bad19130ed1228f08e3e8c9379fb53b2365b6f1f2e886fff28b594508c39c54276e45321b77aef15eff665f2aa0f6b38a77c70659812f2edc54f2b1a1d84b9758adba6aef22ccd0c5c5d3647611a378a374e718b7f46383c2cb3defc27980d0d59766cea7c7fb42c03c790499cf036e47bf197ecbf64115cb873fb887a7c8ad7da89580da5d5a308e5c2"}, 0xf4, 0x800) r6 = msgget(0x1, 0x120) msgrcv(r6, &(0x7f0000001840)={0x0, ""/254}, 0x106, 0x1, 0x1000) fstat(r0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getuid() r10 = getegid() r11 = getsid(0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000001a00)={{r7, 0x0, r9, r10, 0x8, 0x4, 0x0, 0x0, 0xba}, 0x0, 0x0, 0x8, 0x2, 0x400, 0xffffffffffffffff, r11, 0xf, 0x0, 0x31, 0x0, 0x800}) msgctl$IPC_SET(r3, 0x1, &(0x7f0000001ac0)={{r7, r10, r9, r8, 0x23, 0x3, 0x0, 0x0, 0x7}, 0x0, 0x0, 0x5, 0x101, 0xd1b, r11, r11, 0x0, 0x0, 0x9, 0x0, 0x5}) msgsnd(r1, &(0x7f0000001b80)={0x2, "6cdb616fc1fe5a42009a1891d2e5148703dc46bac8443aa878"}, 0x21, 0x800) ioctl$WSKBDIO_GETKEYREPEAT(r0, 0x400c5708, &(0x7f0000001bc0)) r12 = getgid() msgctl$IPC_SET(r5, 0x1, &(0x7f0000001c00)={{r7, r10, r9, r12, 0x115, 0x5, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xfffffffffffffeff, 0x8, 0x2, r11, r11, 0x3, 0x0, 0x5, 0x0, 0x7}) fstatat(r0, &(0x7f0000001cc0)='./file0\x00', &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setegid(r13) msgrcv(r6, &(0x7f0000001d80)={0x0, ""/86}, 0x5e, 0x1, 0x800) 834.351792ms ago: executing program 4 (id=5): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) sysctl$hw(&(0x7f0000000040)={0x6, 0x2}, 0x2, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async) ioctl$BIOCGETIF(r0, 0x4020426b, &(0x7f0000000140)={""/16, @ifru_data=&(0x7f0000000040)="9dd51da1552768bcf2a0203bd59791ff07fe6ed8508a4d8627489e42d738aa198e0209a6fb5d588dfd3c6345ee16dfae9b2ebcdb2fafc6007e61906d3f23acf6e7de9a27697185451c35f39c0664dcac3fc334b1eb001119d5c443f14ef46f0962fae2aa103861505b5b8ec49e9695ebb42f10e128308c0c65c74212073b24bff30ecbc2e037890353d038519f108920c42d2aa03234636b4513c66e18f5cd6a39d43035e04e2e4dce477da2cd6bc114490e3fc9451bf3203c3d1f1aed4987c520957711d95727fe44"}) (async) syz_emit_ethernet(0x111, &(0x7f0000000780)=ANY=[]) 812.519587ms ago: executing program 0 (id=1): ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f00000000c0)={0x2000000000000000, 0x10}) (async) ioctl$BIOCSRTIMEOUT(0xffffffffffffffff, 0x8010426d, &(0x7f00000000c0)={0x2000000000000000, 0x10}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = openat$wsdisplay(0xffffffffffffff9c, &(0x7f0000000680), 0x40, 0x0) r1 = socket$inet6(0x18, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000040)={0x1c, 0x18, 0x1, 0x4, "00000000000000000000000000000001", 0x7}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x0, "fbbb87b3d23b171bf3a61470d6a19689", 0x8}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000000)={0x1c, 0x18, 0x0, 0x0, "fbbb87b3d23b171bf3a61470d6a19689", 0x8}, 0x1c) r2 = openat$vnd(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$VNDIOCSET(r2, 0xc0384600, &(0x7f0000000500)={0x0, 0x2, 0x0}) r3 = socket$inet(0x2, 0x3, 0x5) ioctl$FIONREAD(r3, 0x80206979, &(0x7f0000000100)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f00000006c0)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x7fff}) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01864c1, &(0x7f00000006c0)={0x0, 0x2, 0xffffffffffffffff, 0x0, 0x7fff}) r5 = socket(0x18, 0xc003, 0x3a) setsockopt(r5, 0x29, 0x6c, &(0x7f0000000040), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x0, 0x4a19, "759f5a5ad65ada386961a1e7a5446cfe", 0x106d}, {0x1c, 0x18, 0x3, 0x4, "7e908ea871810362ffeeb2b2c94fa87b", 0x4}, 0x0, [0x3efa, 0x9f78, 0x1, 0x4, 0x8, 0x5, 0x800, 0x4006]}, 0x5c) (async) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0x68, &(0x7f0000000080)={{0x1c, 0x18, 0x0, 0x4a19, "759f5a5ad65ada386961a1e7a5446cfe", 0x106d}, {0x1c, 0x18, 0x3, 0x4, "7e908ea871810362ffeeb2b2c94fa87b", 0x4}, 0x0, [0x3efa, 0x9f78, 0x1, 0x4, 0x8, 0x5, 0x800, 0x4006]}, 0x5c) r6 = open(&(0x7f0000000080)='./bus\x00', 0x100, 0x0) pread(r4, &(0x7f00000005c0)="56e8d51f939cfc01", 0x8, 0x8000000800000002) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffff9c, 0xc01864c6, &(0x7f0000000740)={&(0x7f0000000700)=[0x3], 0x1, 0x30000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) sysctl$vm_swapencrypt(&(0x7f0000000000)={0x6, 0xb, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0xffff, 0x1022, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0xffff, 0x1022, &(0x7f0000000800)={0x0, 0x0}, 0xc) r11 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000240)=@file={0x4, 0x0, './bus\x00'}, 0x8, &(0x7f0000000580)=[{&(0x7f0000000280)="748f78ddc6ad1a9136e5b361445d588acc8480fc5f5f2ebcf644ae6ba6f2f07dcc36f7fc19ff08906d3f1349ff22320313dd4a7fed8c3d4904f735d2d4ad45d7f5e4d06194e329ee1281fe3fa33ce48b7731c7c476fc2be4b6b5547c0bb8ef6c6825369fa3ed435052053eb9831d58f7849a566d343a3960072c34c3aec31e0dac821d21bbfab1035920898b9d2953c9a5d04213c97c94fc7bee9cd46061a14ab38ac1097630cd4d17247a19a6d5038a11f8fd203ca0fe3454ca3019e1f468c344ec93e6de30a575aad839d396f5ee4df234203d7b4236d2b0d10d", 0xdb}, {&(0x7f0000000380)="7048bd57e2a572e6d04047cbc34988f526f0e65c13e567fba868145cda5a86ed1c065f95aff78cad8b898287744f5487ca7ecba6ee4fb29a4d3d811499a89a4e3b449a7df93b9f246eaae9bdcbedb333bec083c157b3575ee944d3f40c24913d8256c44e8228f5b2f45f0fb0d092910e1dc67cf3c016cde6688fb9161f606ac42f1d21e333e2960e73f3", 0xfffffffffffffe6d}, {&(0x7f0000000440)="b2d535bde6f302a05cdc78dbe49fadc2c9c58591145547b5fb1fa57d500f9d114c2f98b3349130d07d742f37c6226cad12281a736fd37e902b839af4589e8d831addd2ea4c695ab65bd0d0bec81ded05499654cdba89d22aff88c54a5369a96b20ac53e4b916a2c21fc6be2777469bbef6c0e3b1bd0d69c3cacbd7a900c5574b9d", 0x81}, {&(0x7f0000000140)="a955a73c92d923b7a959592e265aabb7ca4e4bf0d4e87f2ba3d10508f5e35f7d1f72d634bf307c24f9a265c0c8fbb683c957b84a4d92f4477c36fb5cdf709de86fbc8870ce7637e897cc", 0x54}], 0x4, &(0x7f0000000940)=ANY=[@ANYRES16=r8, @ANYRESHEX=r11, @ANYRESOCT=r11, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r8, @ANYRES32=r0, @ANYRES32, @ANYRES8, @ANYRES32=r1, @ANYRES32=r3, @ANYRESDEC=0x0, @ANYRES32=0xffffffffffffff9c, @ANYRES32=r5, @ANYRES32=r6, @ANYRES64=r10, @ANYRES32=0xffffffffffffff9c, @ANYRES32, @ANYRES16=r9, @ANYBLOB="18000000ffff000000000000", @ANYRES32=r7, @ANYRES32=r10, @ANYRES32=r11], 0x98, 0x2}, 0x402) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1}, 0x0) (async) ppoll(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1}, 0x0) execve(0x0, 0x0, 0x0) (async) execve(0x0, 0x0, 0x0) accept$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10) (async) accept$inet(0xffffffffffffff9c, &(0x7f0000000000), &(0x7f0000000040)=0x10) accept4(0xffffffffffffffff, &(0x7f0000000080)=@in6, &(0x7f0000000100)=0x1c, 0xa000) r12 = socket$inet6(0x18, 0x1, 0x6) setsockopt$sock_int(r12, 0xffff, 0x4, &(0x7f0000000080)=0x4, 0x4) connect$inet6(r12, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0xe, "00000000000000000000000000000004", 0x80000000}, 0x1c) (async) connect$inet6(r12, &(0x7f0000000000)={0x1c, 0x18, 0x2, 0xe, "00000000000000000000000000000004", 0x80000000}, 0x1c) 806.771581ms ago: executing program 4 (id=10): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_pts() readv(r1, &(0x7f00000004c0)=[{0x0}], 0x1) pwrite(r0, &(0x7f0000000080)="703ea00a3d6167c581aa4843e5e509147e5d4a1f5581f492ff9bb0bee8deb40fffd5dd85a71786265bfefd076cd880b184fa6fb2d8b7cda08925192f1667f559e89aa6866c485bd7373d51f6d3d9cb796acf2f38ca200b31f609b3a444891efb0cc1df90bbf2c6732b2464a58d5dd7", 0x6f, 0x64fd86d6) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800455c00380066000000019078e0000002e000698837"]) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x8, 0x38, 0x180, 0x0, 0x1, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0xb, 0x3, [@remote={0xac, 0x14, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x7ff}, @noop]}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa7}}}}}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) syz_open_pts() (async) readv(r1, &(0x7f00000004c0)=[{0x0}], 0x1) (async) pwrite(r0, &(0x7f0000000080)="703ea00a3d6167c581aa4843e5e509147e5d4a1f5581f492ff9bb0bee8deb40fffd5dd85a71786265bfefd076cd880b184fa6fb2d8b7cda08925192f1667f559e89aa6866c485bd7373d51f6d3d9cb796acf2f38ca200b31f609b3a444891efb0cc1df90bbf2c6732b2464a58d5dd7", 0x6f, 0x64fd86d6) (async) syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800455c00380066000000019078e0000002e000698837"]) (async) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @empty, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x8, 0x38, 0x180, 0x0, 0x1, 0x6, 0x0, @remote={0xac, 0x14, 0x0}, @local={0xac, 0x14, 0x0}, {[@ssrr={0x89, 0xb, 0x3, [@remote={0xac, 0x14, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x7ff}, @noop]}}, @tcp={{0x1, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xa7}}}}}}) (async) 777.33607ms ago: executing program 4 (id=11): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) close(r0) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x24, 0xf, 0x6, 0x40005}]}) 777.129391ms ago: executing program 4 (id=12): r0 = socket(0x18, 0x2, 0x0) (async) r1 = socket(0x18, 0x2, 0x0) setsockopt(r1, 0x1000000000029, 0x27, &(0x7f0000000000), 0x14) sendmmsg(r0, &(0x7f0000000200)={{&(0x7f0000000000)=@in6={0x1c, 0x18, 0x3, 0x8, "ff010000000000000000000000000001", 0x5}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) 776.513233ms ago: executing program 4 (id=13): r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400, 0x20) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) (async) setrlimit(0x1, &(0x7f0000000000)={0xfffffffffffffffd, 0xffffffffffffffff}) r1 = openat$pf(0xffffffffffffff9c, 0x0, 0x8, 0x0) ioctl$DIOCRCLRADDRS(r1, 0xc1584460, &(0x7f0000000480)={{'./file0\x00', './file0\x00', 0x22, 0x5}, 0x0, 0x0, 0x0, 0xfff, 0x80000000, 0x8, 0x800, 0x48, 0x25}) (async) ioctl$DIOCRCLRADDRS(r1, 0xc1584460, &(0x7f0000000480)={{'./file0\x00', './file0\x00', 0x22, 0x5}, 0x0, 0x0, 0x0, 0xfff, 0x80000000, 0x8, 0x800, 0x48, 0x25}) ioctl$VMM_IOC_CREATE(0xffffffffffffffff, 0xc2585601, &(0x7f00000000c0)={0x10, 0xfffffffffffffffd, [{&(0x7f00000c7000/0x3000)=nil, &(0x7f0000ff6000/0x6000)=nil, 0x1}, {&(0x7f00004d7000/0x2000)=nil, &(0x7f0000698000/0x1000)=nil, 0x3}, {&(0x7f00005fd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x1}, {&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x80}, {&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0xc}, {&(0x7f00004f8000/0x2000)=nil, &(0x7f000068e000/0x12000)=nil, 0x2000000000000000}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff2000/0x2000)=nil, 0x7}, {&(0x7f0000636000/0x2000)=nil, &(0x7f0000696000/0x2000)=nil, 0xffffffffffffffff}, {&(0x7f0000696000/0x2000)=nil, &(0x7f0000377000/0x1000)=nil, 0x7}, {&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x8}, {&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000695000/0x1000)=nil, 0xffffffff}, {&(0x7f00007f8000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x43}, {&(0x7f00000c6000/0x2000)=nil, &(0x7f0000668000/0x4000)=nil}, {&(0x7f000051f000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x4}, {&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffa000/0x6000)=nil}, {&(0x7f0000ff1000/0x1000)=nil, &(0x7f0000010000/0x3000)=nil, 0x1}], './file0\x00', 0x0, 0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x44, 0x0, 0x0, 0x0, 0x94fd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6, 0xffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffd, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59e01a04, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff]}) r2 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) mknod(0x0, 0x2000, 0x203) (async) mknod(0x0, 0x2000, 0x203) open(&(0x7f0000000000)='./file0\x00', 0x611, 0x0) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) syz_open_pts() (async) syz_open_pts() ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000080)}], 0x1) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000ac0)={0xf, 0x2, {[0x7fffffffffffffff, 0xe21d, 0x10000, 0x5, 0x8000000000000001, 0x8000000000000001, 0x23b, 0x0, 0x8, 0x81, 0x7, 0xfffffffffffffffe, 0xfffffffffffffff4, 0x0, 0x100, 0x8001, 0x7, 0x7], [0x0, 0x1, 0x8d31, 0x5, 0x2, 0x9, 0x9, 0x6, 0x8000000000000000, 0x10000], [0x400, 0x0, 0xc59a, 0x9, 0x3, 0xe, 0xd], [0x40000b, 0x2, 0x8000000000000000, 0xa8d, 0x9eadd9f, 0xa], [{0x4, 0x7, 0x9, 0x1}, {0x8, 0x6, 0xffffffff, 0x1760}, {0x400, 0x6, 0x5, 0x4}, {0x5, 0x8001, 0x3, 0x28}, {0x2, 0x6, 0x7}, {0xaba, 0x9740, 0xfffffffe, 0x400}, {0x9, 0x7, 0x6, 0x2}, {0x0, 0xa6, 0x0, 0xfff}], {0x3, 0x80000000, 0x1, 0x2}, {0xbfe, 0x6, 0x2f4, 0x46}}}) ioctl$TIOCSETA(r2, 0xcd604404, &(0x7f0000000080)={0x1, 0x2, 0x87a, 0x2f, "2000030000000000000000000068a95a010400", 0x6, 0x2}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$TIOCSETA(r3, 0xc088444f, &(0x7f00000001c0)={0x10000800, 0x4, 0x878, 0x8, "280018cd690200029700", 0x6, 0x5}) ftruncate(r0, 0x40000000008) truncate(&(0x7f00000000c0)='./file0\x00', 0x6000000000) truncate(&(0x7f00000000c0)='./file0\x00', 0x30000) fchdir(r0) 769.374672ms ago: executing program 3 (id=14): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) r0 = socket(0x18, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x9cab835cfdc52675, 0x0) ktrace(&(0x7f0000000200)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) fsync(r1) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0xc0) ioctl$WSMOUSEIO_SCALIBCOORDS(r2, 0x81205724, &(0x7f0000000100)={0x807ff, 0xa4, 0x9, 0x0, 0x80000001, 0xa1b0, 0x40010002, 0x10, [{0x0, 0x2890, 0x5, 0x71002}, {0x6, 0xe, 0x8, 0xfffffff9}, {0x101, 0x81, 0xb, 0x9}, {0x4, 0x10001, 0x8012, 0x7}, {0x401, 0xffff, 0x2800, 0x1ff}, {0x1, 0x650, 0x3, 0x9b}, {0xce1, 0xffffffff, 0x4d4, 0x6}, {0x1000006, 0xc, 0x14, 0x5910}, {0x6000001, 0x82, 0x6, 0x6}, {0x3, 0x8009, 0xffd, 0x4}, {0x1ce, 0x800, 0xdaa1, 0x3}, {0xc, 0xa, 0x8, 0x8}, {0x4, 0x7, 0x4, 0x8}, {0x29a71717, 0xfffffffa, 0x60, 0x7}, {0x6, 0x5, 0x5, 0x4}, {0xf26, 0x1, 0x0, 0x30003}]}) ioctl$VMM_IOC_CREATE(r2, 0xca605601, &(0x7f0000000200)={0x10, 0x8, [{&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffffc}, {&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0xa}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x9}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000800000/0x800000)=nil, 0xff}, {&(0x7f0000843000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1}, {&(0x7f0000994000/0x3000)=nil, &(0x7f00009aa000/0x1000)=nil, 0x10001}, {&(0x7f0000e6c000/0x1000)=nil, &(0x7f0000f44000/0x3000)=nil, 0x5}, {&(0x7f0000f48000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x202}, {&(0x7f0000890000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x6e}, {&(0x7f0000d3a000/0x2000)=nil, &(0x7f0000eda000/0x2000)=nil, 0x1}, {&(0x7f0000a4f000/0x2000)=nil, &(0x7f0000bd9000/0x3000)=nil, 0x9}, {&(0x7f0000845000/0xa000)=nil, &(0x7f0000bd2000/0x3000)=nil, 0x9}, {&(0x7f0000fb2000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x8}, {&(0x7f0000b11000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x7}, {&(0x7f0000cd1000/0x4000)=nil, &(0x7f0000a9b000/0x2000)=nil, 0xd6}, {&(0x7f00008c3000/0x2000)=nil, &(0x7f0000eb7000/0x4000)=nil, 0xffffffff}], './file0\x00', 0x6, 0xfffff801, 0x1, 0x9, [0x3, 0x2, 0x1dc, 0x4, 0x5, 0xfffffff9, 0x1ea, 0x68a7, 0x4, 0xe, 0xfffffff9, 0x3, 0x1, 0x101, 0x1, 0xf69, 0x82, 0x4, 0x64a1, 0x2, 0x5, 0x1ff, 0x2, 0xff, 0x3, 0x3, 0x6, 0x6, 0x7f, 0x2, 0xd9, 0x2, 0x1, 0x9, 0x0, 0x5, 0x3, 0x9, 0x4, 0x2, 0x6, 0x77e, 0x7, 0x8, 0x4, 0x8, 0x5, 0x6, 0x9, 0x8, 0x1, 0x4, 0xffffffff, 0x6, 0x9, 0x9, 0xffffbcb4, 0x7, 0x2, 0x6, 0x9, 0x80000000, 0x401, 0xffffffff, 0xfffffffa, 0xfa, 0x8000, 0x8a, 0xb, 0xfff, 0x9, 0x4, 0x7fffffff, 0xc, 0x4, 0x1d, 0x5, 0x8, 0x4, 0x1, 0x10000007, 0x4, 0x100, 0x4, 0x4, 0x10000, 0xf5d4, 0xd, 0x6, 0x0, 0xf90, 0xffffff45, 0x7ff, 0x0, 0x20000000, 0x7, 0xc, 0x100, 0x10000, 0x6000000, 0x3, 0x7, 0x6, 0x4b4, 0x7, 0x7, 0x8001, 0xfffffff0, 0xfffffffc, 0x2, 0x101, 0x5, 0x8, 0x5, 0x40, 0xfffffff7, 0x9057, 0xe, 0x0, 0x81, 0x10, 0x9, 0x0, 0x40, 0x1, 0x40, 0x0, 0x617, 0x0, 0x3, 0x0, 0x2d, 0x100, 0x8000, 0x7, 0x69a0b10a, 0xe, 0x0, 0x9, 0x9, 0xed, 0x8000, 0x5, 0xffffd800, 0xd533, 0x7, 0x81, 0x2, 0x2, 0x78, 0x5, 0x9, 0x1, 0xf, 0x3, 0x1, 0x2, 0x1, 0x7690, 0x7fffffff, 0x3715, 0xb85, 0xffff, 0x8, 0x6, 0x8, 0x40000000, 0x7fc, 0x8, 0x8, 0x3, 0x3, 0x9, 0x3, 0x5, 0x7, 0x2, 0x7, 0x8ff9, 0x7, 0xffffffff, 0xffff8001, 0x6, 0xf7, 0x1, 0x6, 0x6, 0x8000002, 0x1, 0xffffff60, 0x2, 0xe5, 0x0, 0x81, 0x3d9, 0xfffffff2, 0x99c, 0x7, 0x6, 0x2, 0x4, 0x7, 0x4, 0xc, 0x0, 0x0, 0x1000, 0x9, 0x7, 0x80, 0x4, 0x8, 0x9, 0x8, 0x9, 0x7fff, 0x9, 0x0, 0x7fffffff, 0x7, 0xa, 0x80000001, 0x8, 0x3, 0x0, 0xd, 0x0, 0x9, 0x2, 0xa, 0xb, 0x400, 0x5, 0x0, 0x2, 0xff7, 0x4, 0x20000000, 0x6, 0xfffffffe, 0x21, 0x0, 0x10, 0x7, 0x588, 0x2, 0xe, 0x7fffffff, 0x2, 0x9, 0x577, 0x3, 0x6, 0x3, 0x7, 0xfffffffd, 0x1, 0x1, 0xee, 0x4, 0x8, 0xfffffffc, 0x3, 0x7, 0x6, 0x8, 0xe33, 0x1c, 0x6, 0x1000, 0x2, 0x401, 0x0, 0xf39, 0xf, 0x401, 0x1, 0x6, 0x6e5259a6, 0x8, 0x4, 0xffff, 0x2, 0x6, 0x1, 0x5, 0xac, 0x2, 0xac, 0x5, 0x6, 0x0, 0x10000, 0x6, 0x8, 0xa, 0x4, 0x0, 0x30f, 0x5, 0x1, 0x8, 0xd, 0x74c, 0x7fffffff, 0xd8, 0xfffffb27, 0x0, 0x1ff, 0x5, 0x8b, 0x9, 0xa53, 0x9, 0x4a, 0x7, 0x8, 0x4, 0x0, 0x5, 0x6, 0x7, 0x8, 0x8000, 0x9, 0x41, 0x1, 0x4, 0x2d0, 0x0, 0xc, 0x2, 0x7, 0x6, 0x1, 0x7fff, 0x800, 0x2, 0x2, 0x7f, 0x7b8954cf, 0x9, 0x2, 0x6, 0x6, 0x2, 0x100, 0x1a, 0x8, 0x9, 0x3, 0x1001, 0xffffffaf, 0x9, 0x3, 0x0, 0x4, 0x8, 0x4, 0x280000, 0xa3, 0x4, 0x2, 0x7, 0x10000, 0x8, 0x0, 0x7, 0xf, 0x8, 0xffffffff, 0x2, 0x8001, 0x101, 0x0, 0x5, 0x8000, 0xffffffaa, 0x8, 0x3, 0xc, 0x7, 0xfffffff7, 0x3, 0xff, 0x2, 0xb, 0x9, 0x7, 0x5, 0x4, 0x1c0000, 0x7, 0x1fc0, 0x0, 0x5, 0x80, 0x37, 0x5, 0x9, 0x2a60, 0x2e, 0x8, 0x2000200, 0x7, 0xccdd, 0x4, 0x967d, 0xe, 0x10001, 0x5, 0x101, 0x725, 0x2, 0x2b3, 0x96, 0x9, 0x7b6, 0x6, 0x7, 0x100, 0x1, 0x5, 0x78, 0x2, 0x9, 0x7fff, 0x3ff, 0xffffffff, 0x6, 0x2, 0x5, 0x5, 0xb, 0x1, 0x2, 0xde3c, 0xffff, 0x7, 0x8e, 0x7, 0x4c2, 0x9, 0x6, 0x8, 0x3, 0x3, 0x4, 0x1, 0x0, 0x7, 0x1000, 0x8, 0x4, 0x1c400, 0xe, 0x61b6, 0x2, 0x1000, 0x6, 0x3c9, 0x1, 0xb9, 0x7, 0x4, 0x0, 0x3, 0x5, 0x8, 0x8, 0x2, 0x0, 0x5, 0xfffffffc, 0x1, 0x100000, 0x6, 0x1, 0x7, 0x400, 0x4, 0x9, 0xe8, 0x8, 0x7fff, 0x80, 0x80, 0x9da, 0x8, 0xe, 0x2, 0x7ffffffd, 0xffffcc1b, 0x69bf, 0x3, 0xffffb4b0, 0x8000, 0x3, 0x9, 0x3, 0x800, 0x7fffffff, 0x9, 0x1, 0x80000001, 0x5, 0x9, 0x1, 0xffff, 0x2, 0x0, 0x7]}) r3 = socket(0x18, 0x1, 0x0) sysctl$net_pipex(&(0x7f00000000c0)={0x4, 0x22, 0x1}, 0x3, 0x0, 0x0, 0x0, 0x0) sysctl$kern(&(0x7f00000000c0)={0x1, 0x50}, 0x3, &(0x7f0000000100)="71f91e3471ac0058bc5a91501d94a34b8e5f84cf71b59c7afec37082", &(0x7f0000000080)=0xce0c, 0x0, 0x37) r4 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BIOCSETIF(r4, 0x8020426c, &(0x7f00000000c0)={'tap', 0x0}) r5 = socket(0x2, 0x1, 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f00000000c0)={0xa, 0x8000148, {[0x3, 0x0, 0x8, 0x6, 0x3, 0x8000, 0x6, 0x40000000000, 0x7, 0x2, 0x9, 0x91c, 0x8, 0x2000180, 0x0, 0x100000000, 0x76, 0x4], [0x5438b950, 0x5, 0x1004, 0x7, 0x1, 0x1, 0x9, 0x2, 0xffffffffffffffff, 0x3], [0x6, 0x0, 0x8, 0x8000000008, 0x10000, 0x210, 0x1000002], [0x100000000, 0x10801, 0x0, 0x5, 0x909], [{0x0, 0x40000007, 0xfffffbfb, 0x5}, {0x2, 0x924, 0x3, 0x338}, {0x1000, 0x7fffffff, 0x0, 0x5}, {0xb, 0xfffffbff, 0x2, 0x1}, {0x1, 0x3, 0x2, 0x8}, {0x1f, 0x4, 0x0, 0x7}, {0xe4, 0xffffff81, 0x1ff, 0x1}, {0x3, 0x10000, 0x8001, 0x5}], {0x52b, 0x4, 0x401, 0x6}, {0xfffb, 0xffffbfc0, 0x8}}}) r6 = syz_open_pts() ioctl$TIOCSETA(r6, 0x802c7414, &(0x7f0000000140)={0x20040089, 0x3ff, 0xcd9c, 0x42, "00e40000ffff00120000000000000000000400", 0x96e, 0x1fffffc}) readv(r6, &(0x7f0000000300)=[{&(0x7f0000000540)=""/140, 0x8c}], 0x1) read(r6, &(0x7f0000000180)=""/66, 0x42) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, &(0x7f00000001c0)={'tap', 0x0}) ioctl$FIONREAD(r5, 0x8040691a, &(0x7f00000001c0)) ioctl$BIOCSETF(r4, 0x80104267, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x25, 0x1, 0x1, 0x5}, {0x1, 0x2, 0x7, 0x6}, {0x7, 0xff, 0x9, 0x80}, {0xfffe, 0x3, 0x8, 0x1000}]}) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="ffff4effffff00f6ffffff587f00a078e00000020000003cf6561b2200089078"]) ioctl$BIOCSETWF(r2, 0x80104277, &(0x7f0000000c40)={0x3, &(0x7f0000000c00)=[{0x7, 0x3, 0x4, 0x8}, {0x4, 0xc4, 0x5, 0x200}, {0x9, 0x6, 0x10, 0x2}]}) setsockopt(r3, 0x1000000000029, 0xa, &(0x7f0000000180), 0x0) futimens(0xffffffffffffffff, 0x0) r7 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r7, 0x81206919, &(0x7f0000000100)) 768.227605ms ago: executing program 4 (id=15): setrlimit(0x8, &(0x7f0000000980)={0xb, 0x54}) r0 = socket(0x2, 0x1, 0x0) setsockopt(r0, 0x0, 0x4, 0x0, 0x0) r1 = semget$private(0x0, 0x5, 0x501) mknod(&(0x7f00000000c0)='./file1\x00', 0x2000, 0x637f) setrlimit(0x6, &(0x7f00000001c0)={0x0, 0xffff}) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000040)={'tap', 0x0}) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x7, 0xf, 0x6, 0x40005}, {0x80, 0x9, 0x6, 0x2}]}) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) ktrace(&(0x7f0000000080)='./file0\x00', 0x4, 0xd27d43220c7df9f, 0x0) sysctl$net_inet_etherip(&(0x7f0000000340), 0x4, &(0x7f0000000540), 0x0, 0x0, 0x0) r4 = socket(0x18, 0x2, 0x0) setsockopt(r4, 0x1000000000029, 0x9, &(0x7f0000000040)="03000000", 0x4) sendmmsg(r4, &(0x7f0000000200)={{&(0x7f00000000c0)=@in6={0x1c, 0x18, 0x3, 0x7, "ff010000000000000000000000000001", 0x2}, 0x1c, 0x0, 0x0, 0x0}}, 0x38, 0x8) poll(&(0x7f0000000100)=[{r0, 0x1}, {r4, 0x40}, {r2, 0x8}, {r3, 0x1}, {r0, 0x40}, {r2, 0x8}, {r3, 0x100}], 0x7, 0x80000001) r5 = open(&(0x7f0000000180)='./file0\x00', 0x80000000000206, 0x0) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) mlockall(0x1) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x1, 0x10, r5, 0x0) ppoll(0x0, 0x0, &(0x7f0000000580)={0x0, 0x45}, 0x0) semop(r1, &(0x7f00000012c0)=[{0x3, 0x73c, 0x1800}, {0x1, 0xe, 0x800}, {0x2, 0x0, 0x1800}], 0x3) 226.214258ms ago: executing program 6 (id=7): ioctl$BIOCSETWF(0xffffffffffffffff, 0x80104277, &(0x7f00000001c0)={0x48, &(0x7f0000000100)}) syz_emit_ethernet(0x3e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaa8aaffffffffffff080045f00030006300000001907800000002ffffffff030790780000000045cf000500660003076cfff8ac1400aaac1400bb"]) fchflags(0xffffffffffffffff, 0x0) r0 = socket(0x18, 0x3, 0x0) ioctl$FIONREAD(r0, 0xc0106924, &(0x7f00000001c0)) r1 = socket(0x18, 0x3, 0x40) open(0x0, 0x1, 0x59) setitimer(0x0, &(0x7f0000000140)={{0xf32b473, 0x9}, {0x7ffefffbffffffff, 0xbe}}, 0x0) ioctl$FIONREAD(r1, 0x81206919, &(0x7f0000000100)) ioctl$FIONREAD(r1, 0x8080691a, &(0x7f0000000100)) 190.666624ms ago: executing program 1 (id=2): syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00f2039f6b5686dd6034d2b500103af9fe80000000000000000000000700000000000000000000000000000000f0"]) r0 = msgget$private(0x0, 0x214) open(&(0x7f0000000240)='./file0\x00', 0x205, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001ec0)=@file={0x9, 0x1, './file0\x00'}, 0xa) mknod(&(0x7f0000000180)='./bus\x00', 0x2000, 0xd01) r2 = semget(0x2, 0x3, 0x146) semop(r2, &(0x7f0000001140)=[{0x2, 0x80, 0x800}, {0x3, 0x1000, 0x800}, {0x2, 0x1200}, {0x4, 0x2, 0x1800}, {0x4, 0x1}, {0x0, 0x0, 0x1800}, {0x0, 0x3c}], 0x7) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r4 = openat$vmm(0xffffffffffffff9c, &(0x7f0000000000), 0x8, 0x0) ioctl$WSMUXIO_LIST_DEVICES(0xffffffffffffffff, 0xc1045763, &(0x7f0000000040)={0x0, [{}, {0x1}, {0x0, 0x300}, {0x2, 0x4}, {0x0, 0x4000}, {0x2, 0xe}, {}, {0x3, 0x1}, {}, {0x4, 0x77ee}, {}, {0x1}, {0x3, 0x6}, {0x2}, {0x3}, {}, {0x2}, {0x1, 0xb3}, {0x1}, {}, {0x3}, {0x0, 0x4}, {0x1}, {0x2}, {0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x0, 0x10000}, {0x1, 0x80000000}, {0x1, 0x6}, {0x0, 0x2}]}) setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1, &(0x7f0000000080)=0x2, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$VMM_IOC_CREATE(r4, 0xca605601, &(0x7f0000000080)={0x10, 0x9, [{&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x9}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0xffffffffffff822d}, {&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x73}, {&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xb}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0xffffffffffffff89}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x7}, {&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x6}, {&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x762c}, {&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x6}, {&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4}, {&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x2}, {&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x7fffffff}, {&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x8001}, {&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, 0xffffffff}], './file0\x00', 0x5, 0x9, 0x0, 0x8, [0x9, 0x7, 0x6, 0x4, 0x0, 0x3ff, 0x2, 0x8, 0xfff, 0x3, 0x7, 0x401, 0x1, 0x9, 0x4, 0x8, 0x298, 0x5, 0x100, 0x5, 0x8, 0x7, 0x5, 0xffff, 0x1, 0x8, 0x7, 0xd, 0x5e5, 0x6, 0x0, 0xb677, 0x7f, 0x8, 0xa094, 0x2, 0x100, 0xffffffff, 0x1, 0x4, 0x1, 0x9248, 0x100, 0xb, 0x10000, 0x51, 0x0, 0x81, 0xa, 0x6, 0xd19d, 0xf, 0x24, 0xabf4, 0x6, 0x3, 0x100, 0x4, 0x2, 0x2, 0xd1, 0xb, 0x4, 0xfffffffe, 0x5, 0x6, 0x7, 0x2, 0x7, 0x6, 0x7, 0xfffffff4, 0x4, 0xb370, 0x2, 0x0, 0x2, 0x3ff, 0xfba, 0x7, 0x0, 0x5, 0x7, 0x51, 0xfff, 0xb9, 0x7, 0x5, 0xf, 0x0, 0x1, 0xbe000000, 0x2, 0x1, 0x8, 0xfffffffb, 0x6, 0x7063, 0xa, 0x6, 0x7, 0xa23d, 0x80000001, 0x8, 0x8, 0x9, 0x2, 0x1, 0x6, 0xbc6, 0x5, 0x6, 0x2, 0x2, 0xfff, 0x2, 0x7fffffff, 0x4, 0xffff, 0x5, 0xfffffffc, 0xa000, 0x9, 0x3, 0x3ff, 0x1, 0xd7d9, 0x100, 0xb, 0x1, 0x9, 0x79, 0x2, 0x5, 0xa, 0xb, 0x2, 0x2, 0x5, 0x5, 0xd, 0x9, 0x8001, 0x80000000, 0x52f, 0x5, 0x2, 0x6, 0x5, 0x7a9f, 0xcf, 0x0, 0xea3c, 0x5, 0x8, 0x4, 0x0, 0x3, 0xffffffff, 0x2, 0x9, 0x4, 0x80, 0xf5a, 0x200, 0xfffffc8f, 0x2, 0x5, 0x5, 0x101, 0x0, 0xaf, 0x8, 0x4, 0x5, 0x2, 0x2, 0x6, 0x800, 0x7, 0x6, 0x7fff, 0x6, 0x800, 0x21, 0x9, 0x5, 0x8, 0x8, 0x64a, 0x5, 0x7c, 0x2204fbed, 0x0, 0x8, 0x1, 0x1, 0x800, 0x9, 0x75a1, 0x0, 0x0, 0x32, 0xe04d, 0x4, 0x2, 0x8, 0x100, 0x2, 0x8, 0x9, 0x9229, 0x0, 0xb0, 0xc, 0xe11, 0x891a74b, 0xd39, 0x2, 0x9, 0xe73, 0x6, 0x7, 0x9, 0x7fffffff, 0x5, 0x0, 0x1, 0xfffffff7, 0xc74c, 0xff, 0x8, 0x6, 0x4, 0x8a, 0x8, 0x2, 0x4774, 0x7, 0x3, 0x7, 0x81, 0x3, 0x8, 0x1, 0x2, 0xb, 0x8e6, 0x5, 0x6, 0x80, 0x2, 0x7f, 0xe, 0x80000000, 0x4, 0x4, 0x9, 0x1, 0x1, 0x9, 0x180, 0x401, 0x7, 0x8, 0x81, 0x4c1, 0x0, 0xb, 0x4, 0xffffffff, 0x12000, 0x10001, 0x99, 0xba8, 0x1, 0xfffffffb, 0xa, 0x1, 0x200, 0x6b73, 0x0, 0x80, 0x8, 0xef2f, 0x9, 0x0, 0x0, 0xffffffd6, 0x80, 0x1b, 0xe2, 0x0, 0x0, 0x1, 0x1, 0x7, 0xffff, 0x99, 0x8, 0x8, 0xe, 0xfff, 0x3, 0x8, 0x3, 0x8, 0xfffffe00, 0x8000, 0x8, 0xd, 0x1, 0x6, 0x5, 0x0, 0x2, 0x401, 0xbf73, 0x3, 0x7ff, 0x0, 0x5, 0xf, 0x0, 0x4, 0xfffffffc, 0x5, 0xa, 0x6, 0x2, 0x800, 0x2, 0x6, 0x80000000, 0xed, 0x2, 0x7, 0x8, 0x0, 0x6, 0xfffffff9, 0x7, 0x9, 0xffffffff, 0x0, 0x9, 0x1ff, 0xfa7, 0x6, 0x5, 0x9, 0x2c, 0x2, 0xffffffff, 0x7, 0x8, 0x80000000, 0x4ef69553, 0xf, 0xe80, 0x7fffffff, 0x5, 0x1, 0x1, 0x2, 0x61, 0xc, 0x9, 0x800, 0x2, 0x100, 0x3, 0x2, 0x1, 0x10000, 0x3, 0x51, 0x8, 0x0, 0x1, 0x5ed, 0x2, 0x9, 0x22, 0x2, 0x8001, 0xdf, 0x5, 0x6, 0x5, 0x4d7e, 0x5, 0x6, 0x62e4, 0x9, 0x7ff, 0x101, 0x5c, 0x93, 0x6, 0xe, 0xe14, 0x6, 0x8, 0x3, 0x101, 0x5, 0x8001, 0x81, 0x0, 0x1, 0x4, 0x1, 0x9, 0xfffffffa, 0x1000, 0xfff, 0x7fff, 0x75da, 0xd8e3, 0x1, 0xb1a, 0x827, 0x8, 0x81, 0x80000000, 0x9, 0x0, 0x4, 0xd, 0x7, 0xfffffffa, 0x1, 0x1, 0x3, 0x2, 0x50b, 0x10000, 0x5, 0xe, 0x4, 0xd92, 0x4, 0x40, 0x3, 0xd59, 0x2, 0x4, 0xa53d, 0x8, 0x7, 0xb63, 0xd, 0x4, 0x3, 0x1, 0x5, 0x10, 0x8001, 0x0, 0x8, 0x4, 0x2, 0x9, 0x8001, 0x7fffffff, 0x9, 0x4, 0x8, 0x4, 0x8, 0xffffffff, 0x7f, 0x7fffffff, 0x4, 0x3, 0x7, 0x7, 0x8, 0x10000, 0xb, 0xbb5c, 0x3, 0xa, 0x80000001, 0x7, 0x132, 0x80000001, 0x5, 0xa, 0x2, 0x0, 0x80000000, 0x200, 0xa, 0xa0d, 0xff, 0x4, 0xcf71, 0x1e46c000, 0x9, 0xe, 0xb, 0xfffffffd, 0xf2, 0x7, 0x1000, 0x9, 0x9, 0x1000, 0x5, 0x80000001]}) mknod(&(0x7f0000000280)='./file0\x00', 0x2000, 0x1e5f) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000001040)=ANY=[@ANYBLOB="0200000000000000f0ca80211461b6611a3dbc678968265d487d633f6128d507324359dac1fc94784479630516acc0de72bf32f3ffe886eb021ac17328c57ddc64946667fc9721e0fbe15b1fc111f5622bd32340cb1aeefd1efc204d52f5951270b867a73144c4c7977a18e610293da50f05fd742ce24cbd5f1bde43739843e7a3f66092a7204353a9926b4f8aa24c3b038aa567332030984fef8da2500819dcf5aecb3ed99a6ddc0e31c2136a492fc69650be002ebb389dd4160b71c7d5898180b05651cf6f1d12923fda9af559e697e61bfe741383f7ffff88a72600000000000000"], 0xe1, 0x800) msgrcv(r5, &(0x7f0000000100)={0x0, ""/219}, 0xe3, 0x0, 0x1000) r6 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000100)={0x20ad, 0x6, 0x2000007, 0x5f, 0x80000001, 0x6, 0x80, 0x10, [{0x1000000, 0x2, 0x0, 0x71003}, {0xd8, 0x5, 0x8, 0xfffffff9}, {0x0, 0xfffffff6, 0x8, 0x6}, {0x8, 0x800, 0x3, 0xfffffffd}, {0xf, 0xf2b, 0x9, 0x2}, {0x7a, 0x1, 0x4000008, 0x5}, {0x81, 0x800, 0x9d29, 0x4000071}, {0x3, 0x803, 0x14, 0x2}, {0xffffffff, 0x82, 0x4, 0xaf}, {0x5, 0x7ffffffe, 0xd1b, 0x88}, {0x1d0, 0xa, 0x2c, 0x4}, {0x7fc, 0x9, 0x8, 0x80000000}, {0x81f, 0x4, 0x4, 0x1001}, {0x29a71713, 0xfffffffa, 0x6, 0x3}, {0xc, 0x4000009, 0x6}, {0x0, 0x2, 0x2, 0x7fff}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$VNDIOCSET(r6, 0x80184404, &(0x7f00000001c0)={0x0, 0x0, 0x0}) connect$unix(r3, &(0x7f0000001180)=@file={0x4, 0x0, './bus\x00'}, 0x8) ioctl$VNDIOCSET(r6, 0x80044403, &(0x7f00000001c0)={0x0, 0x80000000100007, 0x0}) ioctl$DIOCGETRULE(r6, 0xcd604407, &(0x7f00000002c0)={0x4, 0x0, 0x2, './file0\x00', './file0\x00', 0x0, "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"}) ioctl$VNDIOCSET(r3, 0x40086475, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000004f00)={{0x0, 0x0, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x8, 0x7a8, 0x4, 0x0, 0x0, 0x6, 0x0, 0xb, 0x0, 0x288}) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0x7f) 14.294472ms ago: executing program 6 (id=16): r0 = openat$pf(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$DIOCXBEGIN(r0, 0xc0104451, &(0x7f0000000300)={0x5, 0x408, &(0x7f0000000c00)=[{0x1, './bus\x00', 0xe2b}, {0x1, './file0\x00', 0x80200000}, {0x0, './file1\x00', 0x40000001}, {0x0, './bus\x00', 0x5}, {0x3dd8e763ac2072e8, './bus\x00', 0x9}]}) fcntl$lock(0xffffffffffffffff, 0x9, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x300000003}) fcntl$lock(0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2, 0x0, 0x6, 0x100000006}) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x183) rename(&(0x7f00000003c0)='./file0/file0\x00', 0x0) ioctl$VMM_IOC_RESETCPU(0xffffffffffffffff, 0x82405605, &(0x7f0000000100)={0x1, 0x0, {[0xfffefbfffffffffb, 0x1, 0x1, 0x1, 0xfffffffffffffffe, 0x10000000000000, 0xdf5a, 0xffffffffffffffff, 0x0, 0x2eff, 0x5, 0x3, 0xffffffffffffffff, 0x0, 0x8000000, 0xa8, 0x100000001, 0xce7], [0xfffffffffffffffe, 0x5c, 0x7fffffffffffffff, 0x8000ffffffff, 0x100, 0x5800000000000000, 0x1fe, 0xb, 0x1, 0x8], [0x100100000001, 0xfffffffffffffffe, 0x40000000, 0x6, 0x1, 0x4, 0xfffffffffffffffd], [0x100, 0x2020000000000, 0x401, 0x100000000, 0xfffffffff7efffff, 0x6], [{0x8000, 0x2, 0x0, 0x8}, {0xfffc, 0x7, 0x5}, {0x10, 0x2001, 0x5bea, 0x814}, {0xf801, 0x5, 0x7, 0x8000000c}, {0x10, 0x2, 0x81, 0x809}, {0x2, 0x40, 0x40001, 0x4}, {0xa, 0x20000, 0x4, 0x4}, {0x0, 0x965, 0x3, 0x4}], {0x2000, 0x6, 0x10000}, {0x0, 0x0, 0x3, 0x2}}}) r1 = kqueue() kevent(r1, &(0x7f00000000c0), 0xf305, 0x0, 0x80, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$WSMOUSEIO_SCALIBCOORDS(0xffffffffffffffff, 0x81205724, &(0x7f0000000b40)={0x7ff, 0x17, 0x2000007, 0x20105, 0x80000001, 0x80000001, 0x10001, 0x10, [{0x0, 0x10a6d, 0x99ad, 0x1071000}, {0x7, 0x80, 0x8007, 0xfffffffb}, {0x8, 0x400005, 0x6, 0x9}, {0x2, 0x800, 0x6, 0xfffffffc}, {0x401, 0x200726, 0x2800, 0xc}, {0xffffffff, 0x6, 0x3, 0x99}, {0xce1, 0xffff8000, 0x4f8, 0x6d}, {0x202, 0x803, 0x14, 0x2d}, {0x2, 0xe, 0x285, 0xfffffff8}, {0xf, 0x95, 0xd1f, 0xc}, {0x1cf, 0x5, 0x5, 0x2}, {0x801, 0x9, 0x744c01d5, 0x4009}, {0xb89, 0x0, 0xc, 0x5}, {0x29a71717, 0xfffffffa, 0xfffffffe}, {0x3, 0x5, 0x5, 0x7}, {0x0, 0xb1a, 0xe7, 0x30004}]}) r3 = openat$pf(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b40)="825a4f47c21e6ed7eda0f58f10939603ad903abf65b18d01000000000000000000000000fafd02af776665d4cd12c63d34", 0x31}], 0x1, 0x0, 0x0, 0x2}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$TIOCSETA(r3, 0xc4504443, &(0x7f0000000740)={0x0, 0x2, 0x0, 0x0, "01d04b0a0047c1d100", 0x6, 0x6}) getsockopt(r2, 0x0, 0x9, 0x0, 0x0) syz_emit_ethernet(0xcd, &(0x7f0000000400)={@local, @empty, [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x5, 0xbf, 0x64, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x0}, @remote={0xac, 0x14, 0x0}, {[@noop, @noop, @ra={0x94, 0x4, 0x6}]}}, @generic="5d7cb83673fe6f7dff7f9e2fcd38a54886a1147f2b5b2eec289e40d7b3200e98bd8280e502df97a46726a3ef9d61046bd7bf662290ff09538d488538f486d2ec4312d37159b8bf2638e8b3d0fb8f9a49ede998d9437e301e9ec0dd5c2bd453121300daa82d1c95d2cb954b869b64a40cddc436eb68a35f84691a74952a27449b956d45cdd5d3a291a02012009ef6773c07efc643a974528bebfdfc85fbbf91a074e666"}}}}) 14.039442ms ago: executing program 2 (id=3): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) flock(r0, 0x5) closefrom(r0) 12.367853ms ago: executing program 7 (id=8): r0 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$BIOCSETIF(r0, 0x8020426c, &(0x7f0000000140)={'tap', 0x0}) (async) ioctl$BIOCSETF(r0, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0x5, 0xfc, 0x9}, {0x4, 0xf0, 0xfa, 0x49}, {0x6, 0x44, 0x52, 0xfffff804}]}) sysctl$vfs_nfs(&(0x7f0000000080)={0xa, 0x2, 0x3}, 0x3, 0x0, 0x0, 0x0, 0x0) (async) syz_emit_ethernet(0x1000e, &(0x7f0000000080)=ANY=[]) 7.466763ms ago: executing program 7 (id=17): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) access(&(0x7f0000000080)='./file1\x00', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) chmod(&(0x7f0000000000)='./file1\x00', 0x35e) 7.11597ms ago: executing program 6 (id=18): r0 = socket(0x18, 0x3, 0x1) mknod(&(0x7f0000000040)='./bus\x00', 0x2000, 0x205310) r1 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0) read(r1, &(0x7f0000000300)=""/227, 0xe3) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x25}], 0x1) rename(&(0x7f0000000100)='./file0\x00', 0x0) r2 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$BIOCSETIF(0xffffffffffffffff, 0x8020426c, 0x0) ioctl$BIOCSETIF(r2, 0x8020426c, &(0x7f0000000200)={'tap', 0x0}) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x7, 0x7e, 0x3, 0x48}, {0x48, 0xa, 0xff}, {0x6, 0x80, 0x4, 0xfffff805}]}) sysctl$vm(&(0x7f0000000000)={0x2, 0xd}, 0x2, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$BIOCSETF(r2, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000480)=ANY=[]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x5012, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000180)='./file0\x00') syz_open_pts() poll(&(0x7f00000000c0)=[{r1, 0x1}], 0x1, 0x0) getsockopt(r0, 0x29, 0x25, 0x0, 0x0) 0s ago: executing program 0 (id=19): sysctl$vm(&(0x7f0000000180)={0x2, 0x6}, 0x2, &(0x7f0000000380)="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", 0x0, 0x0, 0xffffffffffffffb2) mknod(&(0x7f0000000000)='./file0\x00', 0x2000, 0x6381) r0 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x2a) getsockname$unix(r0, &(0x7f0000000840)=@file={0x0, 0x0, ""/4105}, &(0x7f0000001880)=0x100b) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x303) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) ftruncate(r1, 0x8531) write(r1, &(0x7f0000000000)="0fb4", 0x2) mlock(&(0x7f0000000000/0x2000)=nil, 0x2000) msync(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2) r2 = open(&(0x7f0000000800)='./file1\x00', 0x800, 0xba) r3 = socket$inet6(0x18, 0x1, 0x6) getsockname$inet6(r3, 0x0, &(0x7f00000000c0)) mknod(&(0x7f00000001c0)='./bus\x00', 0x5113, 0x6383) setuid(0xee01) syz_emit_ethernet(0xe, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000001"]) syz_emit_ethernet(0x56, 0x0) mknod(&(0x7f0000000080)='./file0\x00', 0x2000, 0x5200) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) select(0x40, &(0x7f0000000000)={0x8, 0x3ff, 0x0, 0x0, 0x40000000, 0x0, 0x8000000000000000, 0x6}, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffff9c, 0xc01864c1, 0x0) ioctl$TIOCSETA(0xffffffffffffffff, 0x802c7414, 0x0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)="6dc100167f", 0x5}], 0x1) syz_emit_ethernet(0x138, &(0x7f0000000600)=ANY=[@ANYRES64=r2, @ANYRES64, @ANYRESDEC=0x0, @ANYRES8, @ANYBLOB="9648b01e3183da13ac9cb9e07bddc7aa73492b37efdf31dedc1bf2fce72da9eb59d4426cc47f6901514c19df22023a82b32f90868324c6c22f52335feb11a9848d16ced8e95d38b06b3ac5ed7ef6ed14782a5299a43af726b3b9761d0ed829bbedf0d883cf82db4dc6b4432628128edf1d0b7770d7dbfee23ef3fec83ed30805556abcaf7d15ad389d0c0410d39b2f361753ca3b35"]) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket(0x2, 0x2, 0x0) bind(r4, &(0x7f0000000140)=@un=@file={0x8, 0x1, './file1\x00'}, 0xa) open(&(0x7f0000000040)='./bus\x00', 0x80, 0x100) close(0x3) kernel console output (not intermixed with test programs): OpenBSD/amd64 (ci-openbsd-multicore-1.us-central1-b.c.syzkaller.internal) (tty00) Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. login: pmap_unwire: wiring for pmap 0xfffffd806b912100 va 0xbc1e58ef000 didn't change! panic: kernel diagnostic assertion "pg->wire_count != 0" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1250 Stopped at db_enter+0x25: addq $0x8,%rsp TID PID UID PRFLAGS PFLAGS CPU COMMAND 404476 2005 60929 0x10 0x4000000 0 syz-executor db_enter() at db_enter+0x25 panic(ffffffff834545a0) at panic+0x1e5 __assert(ffffffff8348ef27,ffffffff8347c4a1,4e2,ffffffff833ded2e) at __assert+0x29 uvm_pageunwire(fffffd8008d587e8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd806b9565d8,bc1e58ef000,bc1e58f0000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd806b9565d8,fffffd806b823ee8,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd806b9565d8) at uvm_map_teardown+0x117 exit1(ffff80002a251770,0,0,1) at exit1+0x6fc sys_exit(ffff80002a251770,ffff80003c3f3d40,ffff80003c3f3c90) at sys_exit+0x1a syscall(ffff80003c3f3d40) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x747a83c85290, count: 4 https://www.openbsd.org/ddb.html describes the minimum info required in bug reports. Insufficient info makes it difficult to find and fix bugs. ddb{1}> ddb{1}> set $lines = 0 ddb{1}> set $maxwidth = 0 ddb{1}> show panic *cpu1: kernel diagnostic assertion "pg->wire_count != 0" failed: file "/syzkaller/managers/multicore/kernel/sys/uvm/uvm_page.c", line 1250 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff834545a0) at panic+0x1e5 __assert(ffffffff8348ef27,ffffffff8347c4a1,4e2,ffffffff833ded2e) at __assert+0x29 uvm_pageunwire(fffffd8008d587e8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd806b9565d8,bc1e58ef000,bc1e58f0000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd806b9565d8,fffffd806b823ee8,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd806b9565d8) at uvm_map_teardown+0x117 exit1(ffff80002a251770,0,0,1) at exit1+0x6fc sys_exit(ffff80002a251770,ffff80003c3f3d40,ffff80003c3f3c90) at sys_exit+0x1a syscall(ffff80003c3f3d40) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x747a83c85290, count: -11 ddb{1}> show registers rdi 0 rsi 0x1 rbp 0xffff80003c3f3960 rbx 0xffff8000299aee07 rdx 0 rcx 0xffff80002a251770 rax 0xffff8000299adff0 r8 0x101010101010101 r9 0x8080808080808080 r10 0x90c5d89d86bbcb48 r11 0x6c6b2b28ab497e05 r12 0xffff8000299aec08 r13 0 r14 0 r15 0x1 rip 0xffffffff81790ca5 db_enter+0x25 cs 0x8 rflags 0x246 rsp 0xffff80003c3f3950 ss 0x10 db_enter+0x25: addq $0x8,%rsp ddb{1}> show proc PROC (syz-executor) tid=432892 pid=42395 tcnt=0 stat=onproc flags process=1008 proc=2000 runpri=32, usrpri=58, slppri=32, nice=20 wchan=0x0, wmesg=, ps_single=0xffff80002a251770 scnt=-1 ecnt=1 forw=0xffffffffffffffff, list=0xffff80002a251240,0xffff80002a251cb0 process=0xffff8000fffed358 user=0xffff80003c3ee000, vmspace=0xfffffd806b9565d8 estcpu=8, cpticks=58, pctcpu=0.54, user=0, sys=2, intr=0 ddb{1}> ps PID TID PPID UID S FLAGS WAIT COMMAND 19103 159885 24099 0 2 0 syz-executor 19103 180167 24099 0 3 0x4000080 fsleep syz-executor 2005 295618 40459 60929 2 0x10 syz-executor 2005 404476 40459 60929 7 0x4000010 syz-executor 15657 501297 22546 0 2 0 syz-executor 15657 439055 22546 0 3 0x4000080 fsleep syz-executor 62074 344830 63184 0 3 0x80 nanoslp syz-executor 62074 503674 63184 0 3 0x4000080 msgwait syz-executor 62074 474519 63184 0 3 0x4000080 fsleep syz-executor 74834 346474 48780 0 2 0x100002 ndp 81441 159642 60548 0 3 0x80 nanoslp syz-executor 81441 522616 60548 0 3 0x4000080 ttyin syz-executor 81441 192993 60548 0 3 0x4000080 ttyin syz-executor 81441 132917 60548 0 3 0x4000080 fsleep syz-executor 48780 454035 93408 0 3 0x10008a sigsusp sh 40459 164308 58503 0 3 0x82 nanoslp syz-executor 24099 406293 58503 0 3 0x82 nanoslp syz-executor 93408 172152 58503 0 3 0x82 wait syz-executor 51035 267247 58503 0 2 0xc82 syz-executor 60548 495117 58503 0 3 0x82 nanoslp syz-executor 22546 293098 58503 0 3 0x82 nanoslp syz-executor 63184 485622 58503 0 2 0xc82 syz-executor 51016 254101 58503 0 2 0x2 syz-executor 58503 97550 96952 0 3 0x82 kqread syz-executor 96952 405858 12654 0 3 0x10008a sigsusp ksh 12654 262876 16492 0 3 0x98 kqread sshd-session 16492 444883 25658 0 3 0x92 kqread sshd-session 74946 297054 1 0 3 0x100083 ttyin getty 25658 489873 1 0 3 0x88 kqread sshd 93880 11085 79327 74 3 0x1100092 bpf pflogd 79327 210972 1 0 3 0x80 sbwait pflogd 6399 2864 68477 73 3 0x1100090 kqread syslogd 68477 290768 1 0 3 0x100082 sbwait syslogd 68484 77597 1 0 3 0x100080 kqread resolvd 58021 14317 44505 77 3 0x100092 kqread dhcpleased 20939 398210 44505 77 3 0x100092 kqread dhcpleased 44505 190959 1 0 3 0x80 kqread dhcpleased 82281 207276 0 0 2 0x40014200 smr 70456 317784 0 0 2 0x14200 zerothread 77597 1419 0 0 3 0x14200 aiodoned aiodoned 4138 301602 0 0 3 0x14200 syncer update 34672 213116 0 0 3 0x14200 cleaner cleaner 81307 377199 0 0 3 0x14200 reaper reaper 58654 85101 0 0 3 0x14200 pgdaemon pagedaemon 54917 74538 0 0 3 0x14200 bored viomb 19992 282425 0 0 3 0x40014200 acpi0 acpi0 61844 203581 0 0 3 0x40014200 idle1 78830 404106 0 0 3 0x14200 bored softnet1 42223 406791 0 0 2 0x14200 softnet0 77570 461626 0 0 3 0x14200 smrbar systqmp 72312 100218 0 0 3 0x14200 bored systq 84314 272283 0 0 3 0x14200 tmoslp softclockmp 90527 51840 0 0 3 0x40014200 tmoslp softclock 58533 266382 0 0 3 0x40014200 idle0 1 435620 0 0 3 0x82 wait init 0 0 -1 0 3 0x10200 scheduler swapper ddb{1}> show all locks Process 2005 (syz-executor) thread 0xffff800036bb47e8 (404476) exclusive rrwlock inode r = 0 (0xfffffd806b8738e0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 ufs_ihashins+0x4f #5 ffs_vget+0x187 #6 ffs_inode_alloc+0x279 #7 ufs_makeinode+0xcd #8 ufs_create+0x4e #9 VOP_CREATE+0xfe #10 vn_open+0x50d #11 doopenat+0x35b #12 sys_openat+0x58 #13 syscall+0xbd4 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806b873c58) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 vn_open+0x22e #8 doopenat+0x35b #9 sys_openat+0x58 #10 syscall+0xbd4 #11 Xsyscall+0x128 Process 51016 (syz-executor) thread 0xffff8000ffffd230 (254101) exclusive rrwlock inode r = 0 (0xfffffd806ba9d0c0) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vget+0x2a2 #6 ufs_ihashget+0x185 #7 ffs_vget+0x8c #8 ufs_lookup+0x1a36 #9 VOP_LOOKUP+0x6e #10 vfs_lookup+0x98a #11 namei+0x7ca #12 dounlinkat+0xc1 #13 syscall+0xb17 #14 Xsyscall+0x128 exclusive rrwlock inode r = 0 (0xfffffd806d4ec300) #0 witness_lock+0x5f1 #1 rw_do_enter_write+0x419 #2 rrw_enter+0xc6 #3 VOP_LOCK+0xbd #4 vn_lock+0xa4 #5 vfs_lookup+0x11c #6 namei+0x7ca #7 dounlinkat+0xc1 #8 syscall+0xb17 #9 Xsyscall+0x128 Process 77570 (systqmp) thread 0xffff8000ffffe000 (461626) shared rwlock systqmp r = 0 (0xffffffff83890ec8) #0 witness_lock+0x5f1 #1 taskq_thread+0x12a #2 proc_trampoline+0x10 ddb{1}> show malloc Type InUse MemUse HighUse Limit Requests Type Lim devbuf 11068 12278K 12278K 166960K 12162 0 pcb 20 12K 12K 166960K 27 0 rtable 223 6K 6K 166960K 361 0 pf 34 17K 24K 166960K 67 0 ifaddr 44 7K 7K 166960K 47 0 ifgroup 55 2K 2K 166960K 55 0 sysctl 1 1K 9K 166960K 5 0 counters 70 37K 37K 166960K 70 0 ioctlops 0 0K 4K 166960K 1491 0 mount 1 1K 1K 166960K 1 0 log 0 0K 0K 166960K 4 0 vnodes 1294 81K 81K 166960K 1368 0 UFS quota 1 32K 32K 166960K 1 0 UFS mount 5 36K 36K 166960K 5 0 shm 2 1K 1K 166960K 2 0 VM map 2 1K 1K 166960K 2 0 sem 3 0K 0K 166960K 3 0 dirhash 12 2K 2K 166960K 12 0 ACPI 1692 195K 286K 166960K 12470 0 file desc 17 61K 93K 166960K 147 0 proc 70 115K 164K 166960K 552 0 subproc 72 4K 4K 166960K 72 0 NFS srvsock 1 0K 0K 166960K 1 0 NFS daemon 1 16K 16K 166960K 1 0 ip_moptions 0 0K 0K 166960K 2 0 in_multi 99 7K 7K 166960K 102 0 ether_multi 1 0K 0K 166960K 1 0 mrt 0 0K 0K 166960K 2 0 ISOFS mount 1 32K 32K 166960K 1 0 MSDOSFS mount 1 16K 16K 166960K 1 0 ttys 37 175K 175K 166960K 37 0 exec 0 0K 1K 166960K 379 0 fusefs mount 1 32K 32K 166960K 1 0 tdb 3 0K 0K 166960K 3 0 VM swap 8 62K 64K 166960K 10 0 UVM amap 238 179K 183K 166960K 3109 0 UVM aobj 3 2K 2K 166960K 3 0 pinsyscall 43 86K 105K 166960K 1287 0 memdesc 1 4K 4K 166960K 1 0 crypto data 1 1K 1K 166960K 1 0 NDP 26 1K 2K 166960K 28 0 temp 42 9071K 9135K 166960K 5924 0 kqueue 13 20K 22K 166960K 24 0 SYN cache 2 16K 16K 166960K 2 0 ddb{1}> show all pools Name Size Requests Fail Releases Pgreq Pgrel Npage Hiwat Minpg Maxpg Idle plcache 128 26 0 0 1 0 1 1 0 8 0 rtpcb 120 33 0 29 1 0 1 1 0 8 0 rtentry 176 114 0 12 5 0 5 5 0 8 0 unpcb 144 38 0 19 1 0 1 1 0 8 0 syncache 336 3 0 3 1 0 1 1 0 8 1 tcpcb 736 11 0 5 1 0 1 1 0 8 0 arp 136 18 0 0 1 0 1 1 0 8 0 inpcb 328 79 0 67 2 0 2 2 0 8 0 nd6 152 24 0 0 1 0 1 1 0 8 0 kcovpl 48 8 0 0 1 0 1 1 0 8 0 pfosfp 40 1429 0 1005 5 0 5 5 0 8 0 pfosfpen 112 1429 0 714 21 0 21 21 0 8 0 pfrktable 1344 1 0 1 1 0 1 1 0 8 1 pfanchor 1288 5 0 1 1 0 1 1 0 8 0 pfstitem 24 18 0 0 1 0 1 1 0 8 0 pfstkey 128 18 0 0 1 0 1 1 0 8 0 pfstate 448 18 0 0 2 0 2 2 0 8 0 pfrule 1360 22 0 17 2 1 1 2 0 8 0 art_heap8 4096 1 0 0 1 0 1 1 0 8 0 art_heap4 256 490 0 0 31 0 31 31 0 8 0 art_table 40 491 0 0 5 0 5 5 0 8 0 art_node 32 114 0 10 1 0 1 1 0 8 0 sysvmsgpl 40 4 0 2 1 0 1 1 0 8 0 semapl 112 1 0 0 1 0 1 1 0 8 0 dirhash 1024 17 0 0 3 0 3 3 0 8 0 dino2pl 256 1580 0 108 92 0 92 92 0 8 0 ffsino 296 1580 0 108 114 0 114 114 0 8 0 nchpl 144 1791 0 81 64 0 64 64 0 8 0 vnodes 216 1675 0 0 94 0 94 94 0 8 0 namei 1024 5422 0 5421 1 0 1 1 0 8 0 percpumem 16 50 0 0 1 0 1 1 0 8 0 kstatmem 264 27 0 0 2 0 2 2 0 8 0 scxspl 216 6088 0 6088 4 1 3 3 1 8 3 plimitpl 152 31 0 13 1 0 1 1 0 8 0 sigapl 424 460 0 412 7 0 7 7 0 8 0 knotepl 120 51 0 0 2 0 2 2 0 8 0 kqueuepl 224 22 0 13 1 0 1 1 0 8 0 pipepl 344 122 0 95 3 0 3 3 0 8 0 fdescpl 528 444 0 413 3 0 3 3 0 8 0 filepl 160 1580 0 1354 10 0 10 10 0 8 0 lockfpl 104 11 0 8 1 0 1 1 0 8 0 lockfspl 48 7 0 4 1 0 1 1 0 8 0 sessionpl 144 22 0 13 1 0 1 1 0 8 0 pgrppl 48 30 0 13 1 0 1 1 0 8 0 ucredpl 104 84 0 70 1 0 1 1 0 8 0 zombiepl 144 413 0 412 1 0 1 1 0 8 0 processpl 1232 460 0 412 5 0 5 5 0 8 1 procpl 664 490 0 434 6 0 6 6 0 8 1 sockpl 752 150 0 115 5 0 5 5 0 8 0 mcl64k 65536 1 0 0 1 0 1 1 0 8 0 mcl8k 8192 3 0 0 1 0 1 1 0 8 0 mcl4k 4096 124 0 0 16 0 16 16 0 8 0 mcl2k 2048 21 0 0 3 0 3 3 0 8 0 mtagpl 96 3 0 0 1 0 1 1 0 8 0 mbufpl 256 126 0 0 8 0 8 8 0 8 0 bufpl 280 4831 0 105 338 0 338 338 0 8 0 anonpl 32 8129 0 0 66 0 66 66 0 246 0 amapchunkpl 152 8960 0 8226 30 0 30 30 0 158 0 amappl16 200 1808 0 1790 5 0 5 5 0 8 4 amappl15 192 3 0 3 1 0 1 1 0 8 1 amappl14 184 446 0 444 1 0 1 1 0 8 0 amappl13 176 117 0 104 1 0 1 1 0 8 0 amappl12 168 694 0 663 2 0 2 2 0 8 0 amappl11 160 33 0 33 1 0 1 1 0 8 1 amappl10 152 65 0 51 1 0 1 1 0 8 0 amappl9 144 268 0 268 1 0 1 1 0 8 1 amappl8 136 106 0 103 1 0 1 1 0 8 0 amappl7 128 144 0 130 1 0 1 1 0 8 0 amappl6 120 167 0 165 1 0 1 1 0 8 0 amappl5 112 107 0 97 1 0 1 1 0 8 0 amappl4 104 291 0 271 1 0 1 1 0 8 0 amappl3 96 1494 0 1379 3 0 3 3 0 8 0 amappl2 88 513 0 451 2 0 2 2 0 8 0 amappl1 80 9455 0 8818 15 0 15 15 0 8 1 amappl 88 2396 0 2237 4 0 4 4 0 92 0 uvmvnodes 80 101 0 0 3 0 3 3 0 8 0 dma4096 4096 1 0 1 1 1 0 1 0 8 0 dma1024 1024 1 0 0 1 0 1 1 0 8 0 dma256 256 7 0 7 2 1 1 1 0 8 1 dma128 128 253 0 253 1 1 0 1 0 8 0 dma64 64 6 0 6 1 1 0 1 0 8 0 dma32 32 7 0 7 1 1 0 1 0 8 0 dma16 16 18 0 17 1 0 1 1 0 8 0 aobjpl 72 2 0 0 1 0 1 1 0 8 0 uaddrrnd 24 444 0 412 1 0 1 1 0 8 0 uaddrbest 32 2 0 0 1 0 1 1 0 8 0 uaddr 24 444 0 412 1 0 1 1 0 8 0 vmmpekpl 168 5464 0 5432 2 0 2 2 0 8 0 vmmpepl 168 36657 0 34731 87 0 87 87 0 357 0 vmsppl 488 443 0 412 5 0 5 5 0 8 0 rwobjpl 80 13739 0 12673 24 0 24 24 0 8 0 pdppl 4096 895 0 824 97 12 85 85 0 8 14 pvpl 32 28977 0 0 234 0 234 234 0 265 0 pmappl 256 443 0 412 3 0 3 3 0 8 0 extentpl 40 45 0 27 1 0 1 1 0 8 0 phpool 112 267 0 15 8 0 8 8 0 8 0 ddb{1}> machine ddbcpu 0 Stopped at x86_ipi_db+0x27: addq $0x8,%rsp x86_ipi_db(ffffffff838b7ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a8bd00) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83a8bd00) at __mp_lock+0x192 __mp_acquire_count(ffffffff83a8bd00,1) at __mp_acquire_count+0x58 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 biowait(fffffd806d540478) at biowait+0xc6 bwrite(fffffd806d540478) at bwrite+0x2e7 ffs_update(fffffd806b873840,1) at ffs_update+0x2fe ufs_makeinode(8000,fffffd806b838a28,ffff800036babd98,ffff800036babdc8) at ufs_makeinode+0x4b0 end trace frame: 0xffff800036babb00, count: 0 ddb{0}> trace x86_ipi_db(ffffffff838b7ff0) at x86_ipi_db+0x27 x86_ipi_handler() at x86_ipi_handler+0xd9 Xresume_lapic_ipi() at Xresume_lapic_ipi+0x27 __mp_lock(ffffffff83a8bd00) at __mp_lock+0x199 softintr_dispatch(0) at softintr_dispatch+0x125 dosoftint(0) at dosoftint+0x54 Xsoftclock() at Xsoftclock+0x27 __mp_lock(ffffffff83a8bd00) at __mp_lock+0x192 __mp_acquire_count(ffffffff83a8bd00,1) at __mp_acquire_count+0x58 sleep_finish(ffffffffffffffff,1) at sleep_finish+0x2d8 biowait(fffffd806d540478) at biowait+0xc6 bwrite(fffffd806d540478) at bwrite+0x2e7 ffs_update(fffffd806b873840,1) at ffs_update+0x2fe ufs_makeinode(8000,fffffd806b838a28,ffff800036babd98,ffff800036babdc8) at ufs_makeinode+0x4b0 ufs_create(ffff800036babb10) at ufs_create+0x4e VOP_CREATE(fffffd806b838a28,ffff800036babd98,ffff800036babdc8,ffff800036babb90) at VOP_CREATE+0xfe vn_open(ffff800036babd68,201,0) at vn_open+0x50d doopenat(ffff800036bb47e8,ffffff9c,200000000040,200,0,0,9753098545654fa6) at doopenat+0x35b sys_openat(ffff800036bb47e8,ffff800036bac020,ffff800036babf70) at sys_openat+0x58 syscall(ffff800036bac020) at syscall+0xbd4 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x4d4912989a0, count: -21 ddb{0}> machine ddbcpu 1 Stopped at db_enter+0x25: addq $0x8,%rsp db_enter() at db_enter+0x25 panic(ffffffff834545a0) at panic+0x1e5 __assert(ffffffff8348ef27,ffffffff8347c4a1,4e2,ffffffff833ded2e) at __assert+0x29 uvm_pageunwire(fffffd8008d587e8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd806b9565d8,bc1e58ef000,bc1e58f0000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd806b9565d8,fffffd806b823ee8,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd806b9565d8) at uvm_map_teardown+0x117 exit1(ffff80002a251770,0,0,1) at exit1+0x6fc sys_exit(ffff80002a251770,ffff80003c3f3d40,ffff80003c3f3c90) at sys_exit+0x1a syscall(ffff80003c3f3d40) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x747a83c85290, count: 4 ddb{1}> trace db_enter() at db_enter+0x25 panic(ffffffff834545a0) at panic+0x1e5 __assert(ffffffff8348ef27,ffffffff8347c4a1,4e2,ffffffff833ded2e) at __assert+0x29 uvm_pageunwire(fffffd8008d587e8) at uvm_pageunwire+0x17d uvm_fault_unwire_locked(fffffd806b9565d8,bc1e58ef000,bc1e58f0000) at uvm_fault_unwire_locked+0x33a uvm_unmap_kill_entry_withlock(fffffd806b9565d8,fffffd806b823ee8,0) at uvm_unmap_kill_entry_withlock+0x81 uvm_map_teardown(fffffd806b9565d8) at uvm_map_teardown+0x117 exit1(ffff80002a251770,0,0,1) at exit1+0x6fc sys_exit(ffff80002a251770,ffff80003c3f3d40,ffff80003c3f3c90) at sys_exit+0x1a syscall(ffff80003c3f3d40) at syscall+0xb17 Xsyscall() at Xsyscall+0x128 end of kernel end trace frame: 0x747a83c85290, count: -11